diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10040.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10040.json index 97a897876d0..fb4c48a0c38 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10040.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10040.json @@ -2,8 +2,8 @@ "id": "CVE-2011-10040", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:35.773", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T15:08:55.503", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,14 +91,83 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2009", + "matchCriteriaId": "F5A0F705-A92D-4A44-820E-AA95C185FD0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1:*:*:*:*:*:*", + "matchCriteriaId": "B2FB1221-7B2A-4C1F-877B-87A85C5F67F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "B8A58F77-B01F-43E5-8AB8-9BBC7AFB8EA6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "930BA0E1-526F-444D-B55C-0F3986B28204" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "12F74EFA-B2E0-4DC6-8ECE-8CBD474B5F30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.4:*:*:*:*:*:*", + "matchCriteriaId": "21AB904E-BE1B-420E-AA2E-BC45DF8BC745" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.5:*:*:*:*:*:*", + "matchCriteriaId": "4664377B-70C1-403A-9A61-F1CECCBC5CEF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.6:*:*:*:*:*:*", + "matchCriteriaId": "29011240-37E3-499A-AAF1-7B0F722F16A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.7:*:*:*:*:*:*", + "matchCriteriaId": "E0E3B832-C219-475D-A433-6914973DCA3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.8:*:*:*:*:*:*", + "matchCriteriaId": "5B5DD634-765B-44D0-A1D1-27DC326A3477" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-status-report-page-link-functions", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2012/CVE-2012-100xx/CVE-2012-10063.json b/CVE-2012/CVE-2012-100xx/CVE-2012-10063.json index 2feb9fea99d..0214c1a22ba 100644 --- a/CVE-2012/CVE-2012-100xx/CVE-2012-10063.json +++ b/CVE-2012/CVE-2012-100xx/CVE-2012-10063.json @@ -2,8 +2,8 @@ "id": "CVE-2012-10063", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:35.913", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T15:09:58.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2011", + "matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*", + "matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-authenticated-sqli-in-legacy-ccm", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2013/CVE-2013-100xx/CVE-2013-10071.json b/CVE-2013/CVE-2013-100xx/CVE-2013-10071.json index fcaaf23536e..578af65c94e 100644 --- a/CVE-2013/CVE-2013-100xx/CVE-2013-10071.json +++ b/CVE-2013/CVE-2013-100xx/CVE-2013-10071.json @@ -2,8 +2,8 @@ "id": "CVE-2013-10071", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:36.057", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T15:16:09.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,14 +91,68 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2011", + "matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*", + "matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*", + "matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*", + "matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-dashlet-ajax-load-functionality", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2013/CVE-2013-100xx/CVE-2013-10072.json b/CVE-2013/CVE-2013-100xx/CVE-2013-10072.json index 9ad0299905b..82f75ebc4dc 100644 --- a/CVE-2013/CVE-2013-100xx/CVE-2013-10072.json +++ b/CVE-2013/CVE-2013-100xx/CVE-2013-10072.json @@ -2,8 +2,8 @@ "id": "CVE-2013-10072", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:36.203", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T15:17:13.803", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,14 +91,68 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2011", + "matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*", + "matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*", + "matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*", + "matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-missing-authorization", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2013/CVE-2013-100xx/CVE-2013-10073.json b/CVE-2013/CVE-2013-100xx/CVE-2013-10073.json index c7ed33e1f18..64c07f65bbc 100644 --- a/CVE-2013/CVE-2013-100xx/CVE-2013-10073.json +++ b/CVE-2013/CVE-2013-100xx/CVE-2013-10073.json @@ -2,8 +2,8 @@ "id": "CVE-2013-10073", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:36.367", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:24:10.723", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,68 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2012", + "matchCriteriaId": "80AE04CF-7CBB-40D9-816E-A481096AA647" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*", + "matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*", + "matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*", + "matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-shell-command-injection", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2013/CVE-2013-100xx/CVE-2013-10074.json b/CVE-2013/CVE-2013-100xx/CVE-2013-10074.json index 2c8c12fc2be..296e1f046f8 100644 --- a/CVE-2013/CVE-2013-100xx/CVE-2013-10074.json +++ b/CVE-2013/CVE-2013-100xx/CVE-2013-10074.json @@ -2,8 +2,8 @@ "id": "CVE-2013-10074", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:36.507", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:23:26.760", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,14 +91,123 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2012", + "matchCriteriaId": "80AE04CF-7CBB-40D9-816E-A481096AA647" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*", + "matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*", + "matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*", + "matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.6:*:*:*:*:*:*:*", + "matchCriteriaId": "09685D17-FE3A-4572-BA07-3A223BE1E489" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.7:*:*:*:*:*:*:*", + "matchCriteriaId": "68187520-9D07-4F42-8FB9-DA8E5C939F58" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.8:*:*:*:*:*:*:*", + "matchCriteriaId": "CBDB6D28-F9D2-41FB-92B2-4FDC32A8BC88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.9:*:*:*:*:*:*:*", + "matchCriteriaId": "DA473BE3-4FA0-48F7-88BC-11B4F1AFBF0C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "D34178BE-D99F-4EFE-890E-19030F635D15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.1:*:*:*:*:*:*:*", + "matchCriteriaId": "AB7CAE8E-43FA-4762-B8C1-9A476F088655" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.2:*:*:*:*:*:*:*", + "matchCriteriaId": "910F1485-12D0-4A48-9AED-94CAA56D6FF4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.3:*:*:*:*:*:*:*", + "matchCriteriaId": "844CF55A-BBC5-4C31-85A3-5D5E7FEAF1A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.4:*:*:*:*:*:*:*", + "matchCriteriaId": "7868FC0F-A302-43D5-80D1-9EDD091057C2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.4:b:*:*:*:*:*:*", + "matchCriteriaId": "BEBFBA42-C832-4094-BF5A-9C196625443F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.5:*:*:*:*:*:*:*", + "matchCriteriaId": "E7424428-1FB1-49A7-9CFF-25843433660D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-tools-menu", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2018/CVE-2018-92xx/CVE-2018-9276.json b/CVE-2018/CVE-2018-92xx/CVE-2018-9276.json index e20818160ac..b6ceab6e77e 100644 --- a/CVE-2018/CVE-2018-92xx/CVE-2018-9276.json +++ b/CVE-2018/CVE-2018-92xx/CVE-2018-9276.json @@ -2,8 +2,8 @@ "id": "CVE-2018-9276", "sourceIdentifier": "cve@mitre.org", "published": "2018-07-02T16:29:00.600", - "lastModified": "2025-10-22T00:16:28.870", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:52.337", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -212,7 +212,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-9276", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-100xx/CVE-2019-10068.json b/CVE-2019/CVE-2019-100xx/CVE-2019-10068.json index b2863f73110..ae43829093f 100644 --- a/CVE-2019/CVE-2019-100xx/CVE-2019-10068.json +++ b/CVE-2019/CVE-2019-100xx/CVE-2019-10068.json @@ -2,8 +2,8 @@ "id": "CVE-2019-10068", "sourceIdentifier": "cve@mitre.org", "published": "2019-03-26T18:29:00.403", - "lastModified": "2025-10-22T00:16:32.503", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:41.367", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -187,7 +187,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10068", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-110xx/CVE-2019-11001.json b/CVE-2019/CVE-2019-110xx/CVE-2019-11001.json index 0b9ea4cadfe..270b0653114 100644 --- a/CVE-2019/CVE-2019-110xx/CVE-2019-11001.json +++ b/CVE-2019/CVE-2019-110xx/CVE-2019-11001.json @@ -2,8 +2,8 @@ "id": "CVE-2019-11001", "sourceIdentifier": "cve@mitre.org", "published": "2019-04-08T17:29:00.590", - "lastModified": "2025-10-22T00:16:32.957", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:36.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -289,7 +289,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11001", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-115xx/CVE-2019-11510.json b/CVE-2019/CVE-2019-115xx/CVE-2019-11510.json index 95c3e49b109..1a504e2e7cf 100644 --- a/CVE-2019/CVE-2019-115xx/CVE-2019-11510.json +++ b/CVE-2019/CVE-2019-115xx/CVE-2019-11510.json @@ -2,8 +2,8 @@ "id": "CVE-2019-11510", "sourceIdentifier": "cve@mitre.org", "published": "2019-05-08T17:29:00.630", - "lastModified": "2025-10-22T00:16:33.303", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:32.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -488,7 +488,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11510", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-115xx/CVE-2019-11539.json b/CVE-2019/CVE-2019-115xx/CVE-2019-11539.json index 35dcca47f39..9534f361272 100644 --- a/CVE-2019/CVE-2019-115xx/CVE-2019-11539.json +++ b/CVE-2019/CVE-2019-115xx/CVE-2019-11539.json @@ -2,8 +2,8 @@ "id": "CVE-2019-11539", "sourceIdentifier": "cve@mitre.org", "published": "2019-04-26T02:29:00.300", - "lastModified": "2025-10-22T00:16:33.470", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:27.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -963,7 +963,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-116xx/CVE-2019-11634.json b/CVE-2019/CVE-2019-116xx/CVE-2019-11634.json index 4144e8d3d39..91b46ff48c6 100644 --- a/CVE-2019/CVE-2019-116xx/CVE-2019-11634.json +++ b/CVE-2019/CVE-2019-116xx/CVE-2019-11634.json @@ -2,8 +2,8 @@ "id": "CVE-2019-11634", "sourceIdentifier": "cve@mitre.org", "published": "2019-05-22T17:29:00.227", - "lastModified": "2025-10-22T00:16:33.920", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:22.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -164,7 +164,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-129xx/CVE-2019-12989.json b/CVE-2019/CVE-2019-129xx/CVE-2019-12989.json index e19e5bbca6c..cc2a1e54cb1 100644 --- a/CVE-2019/CVE-2019-129xx/CVE-2019-12989.json +++ b/CVE-2019/CVE-2019-129xx/CVE-2019-12989.json @@ -2,8 +2,8 @@ "id": "CVE-2019-12989", "sourceIdentifier": "cve@mitre.org", "published": "2019-07-16T18:15:12.930", - "lastModified": "2025-10-22T00:16:34.427", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:18.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -205,7 +205,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12989", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-129xx/CVE-2019-12991.json b/CVE-2019/CVE-2019-129xx/CVE-2019-12991.json index 00b78af9cf2..7ad3816656e 100644 --- a/CVE-2019/CVE-2019-129xx/CVE-2019-12991.json +++ b/CVE-2019/CVE-2019-129xx/CVE-2019-12991.json @@ -2,8 +2,8 @@ "id": "CVE-2019-12991", "sourceIdentifier": "cve@mitre.org", "published": "2019-07-16T18:15:13.117", - "lastModified": "2025-10-22T00:16:34.603", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:13.703", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -205,7 +205,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12991", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-132xx/CVE-2019-13272.json b/CVE-2019/CVE-2019-132xx/CVE-2019-13272.json index a574e43af35..2e15affdc71 100644 --- a/CVE-2019/CVE-2019-132xx/CVE-2019-13272.json +++ b/CVE-2019/CVE-2019-132xx/CVE-2019-13272.json @@ -2,8 +2,8 @@ "id": "CVE-2019-13272", "sourceIdentifier": "cve@mitre.org", "published": "2019-07-17T13:15:10.687", - "lastModified": "2025-10-22T00:16:34.753", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:51:07.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -903,7 +903,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13272", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-136xx/CVE-2019-13608.json b/CVE-2019/CVE-2019-136xx/CVE-2019-13608.json index 5146319c5ee..3abd342e66c 100644 --- a/CVE-2019/CVE-2019-136xx/CVE-2019-13608.json +++ b/CVE-2019/CVE-2019-136xx/CVE-2019-13608.json @@ -2,8 +2,8 @@ "id": "CVE-2019-13608", "sourceIdentifier": "cve@mitre.org", "published": "2019-08-29T19:15:13.227", - "lastModified": "2025-10-22T00:16:35.063", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:02:33.673", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -120,8 +120,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:citrix:storefront_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1811", "versionEndExcluding": "1903", - "matchCriteriaId": "457E9FE5-5C77-4FDF-8411-EB64E59E3781" + "matchCriteriaId": "4374C2B7-DDD8-4246-99D0-9AEC5712604F" } ] } @@ -179,7 +180,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-151xx/CVE-2019-15107.json b/CVE-2019/CVE-2019-151xx/CVE-2019-15107.json index dd5f2a80b6f..fb735b475c7 100644 --- a/CVE-2019/CVE-2019-151xx/CVE-2019-15107.json +++ b/CVE-2019/CVE-2019-151xx/CVE-2019-15107.json @@ -2,8 +2,8 @@ "id": "CVE-2019-15107", "sourceIdentifier": "cve@mitre.org", "published": "2019-08-16T03:15:11.387", - "lastModified": "2025-10-22T00:16:35.370", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:50:47.130", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -263,7 +263,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15107", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-157xx/CVE-2019-15752.json b/CVE-2019/CVE-2019-157xx/CVE-2019-15752.json index 6deda8fc105..d1bf11b18f1 100644 --- a/CVE-2019/CVE-2019-157xx/CVE-2019-15752.json +++ b/CVE-2019/CVE-2019-157xx/CVE-2019-15752.json @@ -2,8 +2,8 @@ "id": "CVE-2019-15752", "sourceIdentifier": "cve@mitre.org", "published": "2019-08-28T21:15:10.880", - "lastModified": "2025-10-22T00:16:35.723", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:29:29.853", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -206,7 +206,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15752", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-159xx/CVE-2019-15949.json b/CVE-2019/CVE-2019-159xx/CVE-2019-15949.json index 8d0f8595af5..38a4b2cd012 100644 --- a/CVE-2019/CVE-2019-159xx/CVE-2019-15949.json +++ b/CVE-2019/CVE-2019-159xx/CVE-2019-15949.json @@ -2,8 +2,8 @@ "id": "CVE-2019-15949", "sourceIdentifier": "cve@mitre.org", "published": "2019-09-05T17:15:12.327", - "lastModified": "2025-10-22T00:16:35.887", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:27:50.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -183,7 +183,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15949", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-160xx/CVE-2019-16057.json b/CVE-2019/CVE-2019-160xx/CVE-2019-16057.json index a7f13c68042..4434569438b 100644 --- a/CVE-2019/CVE-2019-160xx/CVE-2019-16057.json +++ b/CVE-2019/CVE-2019-160xx/CVE-2019-16057.json @@ -2,8 +2,8 @@ "id": "CVE-2019-16057", "sourceIdentifier": "cve@mitre.org", "published": "2019-09-16T12:15:10.910", - "lastModified": "2025-10-22T00:16:36.043", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:18:38.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -175,7 +175,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16057", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-72xx/CVE-2019-7238.json b/CVE-2019/CVE-2019-72xx/CVE-2019-7238.json index e32a5f350fe..59b5dd769d5 100644 --- a/CVE-2019/CVE-2019-72xx/CVE-2019-7238.json +++ b/CVE-2019/CVE-2019-72xx/CVE-2019-7238.json @@ -2,8 +2,8 @@ "id": "CVE-2019-7238", "sourceIdentifier": "cve@mitre.org", "published": "2019-03-21T17:29:01.180", - "lastModified": "2025-10-22T00:16:45.503", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:57:54.323", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -109,9 +109,10 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sonatype:nexus:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:sonatype:nexus_repository_manager_3:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", "versionEndExcluding": "3.15.0", - "matchCriteriaId": "04D8C400-CE34-44E6-9DE4-7748D263FA39" + "matchCriteriaId": "BACB2CB2-2429-44B0-AAAD-B1E71BD22DC9" } ] } @@ -135,7 +136,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7238", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-72xx/CVE-2019-7256.json b/CVE-2019/CVE-2019-72xx/CVE-2019-7256.json index f0ffc427370..f10454f0c85 100644 --- a/CVE-2019/CVE-2019-72xx/CVE-2019-7256.json +++ b/CVE-2019/CVE-2019-72xx/CVE-2019-7256.json @@ -2,8 +2,8 @@ "id": "CVE-2019-7256", "sourceIdentifier": "cve@mitre.org", "published": "2019-07-02T19:15:11.147", - "lastModified": "2025-10-22T00:16:45.720", - "vulnStatus": "Modified", + "lastModified": "2025-11-06T16:52:01.123", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -271,7 +271,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-478xx/CVE-2022-47878.json b/CVE-2022/CVE-2022-478xx/CVE-2022-47878.json index 6af48e5e4d9..5c81ebb8c96 100644 --- a/CVE-2022/CVE-2022-478xx/CVE-2022-47878.json +++ b/CVE-2022/CVE-2022-478xx/CVE-2022-47878.json @@ -2,13 +2,13 @@ "id": "CVE-2022-47878", "sourceIdentifier": "cve@mitre.org", "published": "2023-05-02T20:15:10.647", - "lastModified": "2025-11-05T21:15:33.253", + "lastModified": "2025-11-06T15:15:44.323", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments." + "value": "Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that the vulnerability affects installations running version 22.2 or earlier. The issue was resolved with the version 22.3 and later versions are not affected. Additionally, the vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments." } ], "metrics": { diff --git a/CVE-2022/CVE-2022-478xx/CVE-2022-47879.json b/CVE-2022/CVE-2022-478xx/CVE-2022-47879.json index d7ca08706e7..27fc0cd4452 100644 --- a/CVE-2022/CVE-2022-478xx/CVE-2022-47879.json +++ b/CVE-2022/CVE-2022-478xx/CVE-2022-47879.json @@ -2,13 +2,13 @@ "id": "CVE-2022-47879", "sourceIdentifier": "cve@mitre.org", "published": "2023-05-12T14:15:09.567", - "lastModified": "2025-11-05T21:15:33.910", + "lastModified": "2025-11-06T15:15:45.500", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods." + "value": "A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected." } ], "metrics": { diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7316.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7316.json index 79987858789..19cf47732a4 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7316.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7316.json @@ -2,8 +2,8 @@ "id": "CVE-2023-7316", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:43.493", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:22:59.143", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-graph-explorer-2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7317.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7317.json index 5a10328dd7f..091ab0b6b4d 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7317.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7317.json @@ -2,8 +2,8 @@ "id": "CVE-2023-7317", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:43.630", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:22:37.800", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-web-ssh-terminal-missing-access-control", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7318.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7318.json index 69cb324e7f1..36c0ef4bed5 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7318.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7318.json @@ -2,8 +2,8 @@ "id": "CVE-2023-7318", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:43.773", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:21:11.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,55 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/2024r1-0-2/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-core-command-expansion", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7322.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7322.json index 80a09164215..1ac659c9b5d 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7322.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7322.json @@ -2,8 +2,8 @@ "id": "CVE-2023-7322", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:44.200", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:20:51.270", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-incorrect-authorization-granting-full-api-access", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7323.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7323.json index 4cd4d68ed1d..a7acdd69d4c 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7323.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7323.json @@ -2,8 +2,8 @@ "id": "CVE-2023-7323", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:44.340", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:20:27.460", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-xss-via-create-user-function", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13993.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13993.json index f3fba63d23a..34354229f20 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13993.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13993.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13993", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:44.623", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:18:50.893", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-login-page-on-older-browsers", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13994.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13994.json index dceb3859da1..4c27a611c87 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13994.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13994.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13994", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:44.767", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:18:33.013", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-allow-insecure-logins-missing-authorization", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13995.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13995.json index ec625c5943f..e457b1ce495 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13995.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13995.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13995", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:44.903", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:17:59.713", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13996.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13996.json index b50ebecf949..b3bbd947fc7 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13996.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13996.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13996", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.043", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:17:23.587", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-session-not-invalidated-after-password-change", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13997.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13997.json index 38d5c258056..51b94823180 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13997.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13997.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13997", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-03T22:16:39.910", - "lastModified": "2025-11-04T15:41:31.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:24:49.683", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-migrate-server-feature-to-root-on-host", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13998.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13998.json index 7f17fe244d0..e296cbbafc1 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13998.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13998.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13998", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-03T22:16:40.043", - "lastModified": "2025-11-04T15:41:31.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:25:49.750", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure-2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13999.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13999.json index a4e74ba375b..3fc8b4f5384 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13999.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13999.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13999", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.180", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:15:10.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-ad-ldap-token-authenticated-information-disclosure", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14000.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14000.json index a489ab23f21..d1caf7f8eec 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14000.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14000.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14000", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.330", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:12:35.853", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-capacity-planning-report", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14001.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14001.json index 9abafd0e488..b0de7964abc 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14001.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14001.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14001", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.463", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:10:43.787", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-executive-summary-report", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14002.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14002.json index 2a5bcb09674..68fdf4cc888 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14002.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14002.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14002", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.600", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:23:37.760", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,18 +91,80 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*", + "matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-authenticated-local-file-inclusion-via-nagvis", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14003.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14003.json index d348a07e08d..4212106bb3f 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14003.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14003.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14003", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.737", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:09:37.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,90 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*", + "matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*", + "matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*", + "matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-rce-via-nrdp-server-plugins", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14004.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14004.json index 3c8a5eaee3d..1b615226e6e 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14004.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14004.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14004", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:45.877", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:08:49.227", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,90 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*", + "matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*", + "matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*", + "matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-nagvis-configuration", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14005.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14005.json index 80aa1b6c310..5ad11ab7af0 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14005.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14005.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14005", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:46.013", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:36:47.133", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,90 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*", + "matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*", + "matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*", + "matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-command-injection-via-docker-wizard", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14006.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14006.json index 51592d3b9da..37d89529c02 100644 --- a/CVE-2024/CVE-2024-140xx/CVE-2024-14006.json +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14006.json @@ -2,8 +2,8 @@ "id": "CVE-2024-14006", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:46.153", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:35:11.600", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,100 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*", + "matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*", + "matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*", + "matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*", + "matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "1443759F-EBD7-4366-A5D3-9FB15CE15B40" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.2.1:*:*:*:*:*:*", + "matchCriteriaId": "F85D8CA4-F1AC-4538-925C-1AD00FF7B9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-xi/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-xi-host-header-injection", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-407xx/CVE-2024-40763.json b/CVE-2024/CVE-2024-407xx/CVE-2024-40763.json index 50957c5e5bf..f0c93c9c224 100644 --- a/CVE-2024/CVE-2024-407xx/CVE-2024-40763.json +++ b/CVE-2024/CVE-2024-407xx/CVE-2024-40763.json @@ -2,8 +2,8 @@ "id": "CVE-2024-40763", "sourceIdentifier": "PSIRT@sonicwall.com", "published": "2024-12-05T14:15:20.850", - "lastModified": "2024-12-05T17:15:11.720", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:43:04.740", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,155 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.1.14-75sv", + "matchCriteriaId": "7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0B190266-AD6F-401B-9B2E-061CDD539236" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.1.14-75sv", + "matchCriteriaId": "013150EC-D511-4219-8668-805B6E6EA43F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*", + "matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.1.14-75sv", + "matchCriteriaId": "E74E33FD-25F4-443D-B20E-E5BE67310365" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9D728332-10C9-4508-B720-569D44E99543" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.1.14-75sv", + "matchCriteriaId": "E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.1.14-75sv", + "matchCriteriaId": "5E49B94A-119E-4C1D-81CD-3792F62AFE00" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770" + } + ] + } + ] + } + ], "references": [ { "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018", - "source": "PSIRT@sonicwall.com" + "source": "PSIRT@sonicwall.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json b/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json index cf3135d356e..ee8f035f1ca 100644 --- a/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json +++ b/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58272", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:46.597", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:34:16.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server-2024R1", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-stored-xss-via-username", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-582xx/CVE-2024-58273.json b/CVE-2024/CVE-2024-582xx/CVE-2024-58273.json index 2a4aae5746a..d562857a9b1 100644 --- a/CVE-2024/CVE-2024-582xx/CVE-2024-58273.json +++ b/CVE-2024/CVE-2024-582xx/CVE-2024-58273.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58273", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:46.737", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:34:35.273", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,55 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server-2024R1", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-lpe-from-apache-backend-shell-user-to-root", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10955.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10955.json new file mode 100644 index 00000000000..46332bfb01a --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10955.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-10955", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-11-06T15:15:45.717", + "lastModified": "2025-11-06T15:15:45.717", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Software Inc. Netigma allows XSS Through HTTP Query Strings.This issue affects Netigma: through 28102025." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0378", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11956.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11956.json new file mode 100644 index 00000000000..badd8f30caf --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11956.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-11956", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-11-06T15:15:46.093", + "lastModified": "2025-11-06T15:15:46.093", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.This issue affects OBS (Student Affairs Information System): before 25.0401." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", + "baseScore": 8.9, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0379", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-125xx/CVE-2025-12556.json b/CVE-2025/CVE-2025-125xx/CVE-2025-12556.json new file mode 100644 index 00000000000..195f912bd68 --- /dev/null +++ b/CVE-2025/CVE-2025-125xx/CVE-2025-12556.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-12556", + "sourceIdentifier": "ics-cert@hq.dhs.gov", + "published": "2025-11-06T16:15:48.910", + "lastModified": "2025-11-06T16:15:48.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-88" + } + ] + } + ], + "references": [ + { + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-05", + "source": "ics-cert@hq.dhs.gov" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12610.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12610.json index b8f14ece125..f45f0893d90 100644 --- a/CVE-2025/CVE-2025-126xx/CVE-2025-12610.json +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12610.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12610", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-03T02:15:41.930", - "lastModified": "2025-11-04T15:41:31.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:24:24.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,74 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:codeastro:gym_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "4BDAFA95-39E9-4D93-9228-7D9B51DE6A3F" + } + ] + } + ] } ], "references": [ { "url": "https://codeastro.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/danz0424/loudong/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.330905", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.330905", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.678450", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-222xx/CVE-2025-22288.json b/CVE-2025/CVE-2025-222xx/CVE-2025-22288.json new file mode 100644 index 00000000000..a7d05e9edf9 --- /dev/null +++ b/CVE-2025/CVE-2025-222xx/CVE-2025-22288.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-22288", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:49.647", + "lastModified": "2025-11-06T16:15:49.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-35" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-smushit/vulnerability/wordpress-smush-image-compression-and-optimization-plugin-3-17-0-directory-traversal-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-231xx/CVE-2025-23149.json b/CVE-2025/CVE-2025-231xx/CVE-2025-23149.json index d83a660375b..90a20345066 100644 --- a/CVE-2025/CVE-2025-231xx/CVE-2025-23149.json +++ b/CVE-2025/CVE-2025-231xx/CVE-2025-23149.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23149", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T13:15:50.780", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:28:43.317", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,134 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tpm: no iniciar el chip mientras est\u00e1 suspendido. Comprobar TPM_CHIP_FLAG_SUSPENDED despu\u00e9s de la llamada a tpm_find_get_ops() puede provocar una llamada falsa a tpm_chip_start(): [35985.503771] i2c i2c-1: Transferencia mientras est\u00e1 suspendido [35985.503796] ADVERTENCIA: CPU: 0 PID: 74 en drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] M\u00f3dulos vinculados en: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: GW 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Contaminado: [W]=WARN [35985.503817] Nombre del hardware: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 26/10/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] C\u00f3digo: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Rastreo de llamadas: [35985.503859] [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80 No avance con tpm_chip_start() dentro de tpm_try_get_ops(), a menos que TPM_CHIP_FLAG_SUSPENDED no est\u00e9 configurado. tpm_find_get_ops() devolver\u00e1 NULL en tal caso de falla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.64", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "4CB536A1-1B8E-43D5-A165-2178BC9EF682" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11.8", + "versionEndExcluding": "6.12", + "matchCriteriaId": "C9D2BD2C-A19D-4E5F-828D-0CEED87118B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.1", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "6CEE36FD-E463-4E92-A4DA-4CCBCF31A19F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*", + "matchCriteriaId": "0E698080-7669-4132-8817-4C674EEBCE54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*", + "matchCriteriaId": "1EF8CD82-1EAE-4254-9545-F85AB94CF90F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1404dff1e11bf927b70ac25e1de97bed9742ede4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/17d253af4c2c8a2acf84bb55a0c2045f150b7dfd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e74e2394eed90aff5c3a08c1f51f476d4de71d02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1044e995b64d70ef90ef6f2b89955b127497702", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f3cb81cb96d587f9f235a11789d1ec0992643078", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-231xx/CVE-2025-23152.json b/CVE-2025/CVE-2025-231xx/CVE-2025-23152.json index caa6e6d02f8..7db5a172a61 100644 --- a/CVE-2025/CVE-2025-231xx/CVE-2025-23152.json +++ b/CVE-2025/CVE-2025-231xx/CVE-2025-23152.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23152", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T13:15:51.110", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:26:53.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64/crc-t10dif: se corrige el uso de una matriz fuera de alcance en crc_t10dif_arch() Se corrige un error tonto en el que se usaba una matriz fuera de su alcance." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/bd9e1a03e579a01dfa66dbaa53d0219c33cbc463", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d48b663f410f8b35b8ba9bd597bafaa00f53293b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-289xx/CVE-2025-28953.json b/CVE-2025/CVE-2025-289xx/CVE-2025-28953.json new file mode 100644 index 00000000000..f6b59915398 --- /dev/null +++ b/CVE-2025/CVE-2025-289xx/CVE-2025-28953.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-28953", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:49.830", + "lastModified": "2025-11-06T16:15:49.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/smartSEO/vulnerability/wordpress-smart-seo-4-0-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-306xx/CVE-2025-30663.json b/CVE-2025/CVE-2025-306xx/CVE-2025-30663.json index 85bdd283300..c204625e801 100644 --- a/CVE-2025/CVE-2025-306xx/CVE-2025-30663.json +++ b/CVE-2025/CVE-2025-306xx/CVE-2025-30663.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30663", "sourceIdentifier": "security@zoom.us", "published": "2025-05-14T18:15:30.030", - "lastModified": "2025-05-16T14:43:56.797", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-06T15:34:11.713", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.0, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 } ] }, @@ -51,10 +71,153 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "244E6149-E1D7-4ECF-8EC3-0CFB0BE4DEC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "977E2C51-6E2F-425F-A0E6-0422861DBC3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "87CD2A9F-6C3A-43DC-A8EE-B84C778E82C0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "7FC7DC88-93AB-42D8-8400-CF639E6BB496" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A3D5AD71-8BC5-4346-B8B2-1166AD0415FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "CBBCF724-FA51-4804-81C5-921FE0C1AB7E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "4A201362-6C04-49BB-B46A-1202269F52FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "908A4DA7-2E18-4966-A4A7-D7400A334D15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "16784ACE-52EB-4BC8-A3F8-329B76E3BB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "63C6EF40-B762-4FE8-83AA-D9D4600A5C92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.1.17", + "matchCriteriaId": "B4CF0315-8092-424B-9254-05FF6DDDA029" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "6.1.18", + "versionEndExcluding": "6.2.13", + "matchCriteriaId": "71A0CC0D-D415-46DB-B566-DB7C41A6E277" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "6.2.14", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "D2276405-3395-4252-A140-06C9A9BDBCDB" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25016", - "source": "security@zoom.us" + "source": "security@zoom.us", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-306xx/CVE-2025-30664.json b/CVE-2025/CVE-2025-306xx/CVE-2025-30664.json index 7e8ba413085..df53108d490 100644 --- a/CVE-2025/CVE-2025-306xx/CVE-2025-30664.json +++ b/CVE-2025/CVE-2025-306xx/CVE-2025-30664.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30664", "sourceIdentifier": "security@zoom.us", "published": "2025-05-14T18:15:30.180", - "lastModified": "2025-10-02T21:16:00.287", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-06T15:39:58.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.3, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.5, + "impactScore": 6.0 } ] }, @@ -51,10 +71,139 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "244E6149-E1D7-4ECF-8EC3-0CFB0BE4DEC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "977E2C51-6E2F-425F-A0E6-0422861DBC3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "87CD2A9F-6C3A-43DC-A8EE-B84C778E82C0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "7FC7DC88-93AB-42D8-8400-CF639E6BB496" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A3D5AD71-8BC5-4346-B8B2-1166AD0415FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "CBBCF724-FA51-4804-81C5-921FE0C1AB7E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "4A201362-6C04-49BB-B46A-1202269F52FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "908A4DA7-2E18-4966-A4A7-D7400A334D15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "16784ACE-52EB-4BC8-A3F8-329B76E3BB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "63C6EF40-B762-4FE8-83AA-D9D4600A5C92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "25FAE8C9-B54A-407E-8180-96889F37D684" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25017", - "source": "security@zoom.us" + "source": "security@zoom.us", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json new file mode 100644 index 00000000000..88cfc74d5db --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-31029", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:50.067", + "lastModified": "2025-11-06T16:15:50.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail replymail allows Stored XSS.This issue affects replyMail: from n/a through <= 1.2.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/replymail/vulnerability/wordpress-replymail-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json new file mode 100644 index 00000000000..b016bd62832 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-32222", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:50.237", + "lastModified": "2025-11-06T16:15:50.237", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through <= 6.0.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/widget-logic/vulnerability/wordpress-widget-logic-6-0-5-remote-code-execution-rce-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34249.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34249.json index b8fc64bd57f..ff4e6b10ee4 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34249.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34249.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34249", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.260", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:33:32.100", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,85 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.2.0", + "matchCriteriaId": "130FB889-F99F-472E-B49E-CAF86347E2D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "BBB1F2CB-5591-4633-B9B4-1C12A2AE109C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "99FA450B-2265-43D4-A709-86979F935375" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "2A1C29E4-ED0C-4C07-A6AC-714613C4C62C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.3:*:*:*:*:*:*", + "matchCriteriaId": "1E5E9BA5-5FCF-4A1D-BB71-67C4E591F5AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "1F53524F-35C4-42CE-8147-4D4E7FE7860A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "509CC76A-E968-41A1-B358-96481366CE5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "665DAD59-DB98-46D9-B7BF-64C812356108" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "A8543938-C567-42CA-B500-EB10D3BE92A5" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-fusion/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Product" + ] }, { "url": "https://www.nagios.com/products/security/#nagios-xi", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-fusion-2fa-brute-force-bypass", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34269.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34269.json index c403a00edf2..bbe5c6d4f96 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34269.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34269.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34269", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.393", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:33:22.433", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,18 +91,85 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.2.0", + "matchCriteriaId": "130FB889-F99F-472E-B49E-CAF86347E2D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "BBB1F2CB-5591-4633-B9B4-1C12A2AE109C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "99FA450B-2265-43D4-A709-86979F935375" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "2A1C29E4-ED0C-4C07-A6AC-714613C4C62C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.3:*:*:*:*:*:*", + "matchCriteriaId": "1E5E9BA5-5FCF-4A1D-BB71-67C4E591F5AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "1F53524F-35C4-42CE-8147-4D4E7FE7860A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1.1:*:*:*:*:*:*", + "matchCriteriaId": "509CC76A-E968-41A1-B358-96481366CE5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "665DAD59-DB98-46D9-B7BF-64C812356108" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:fusion:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "A8543938-C567-42CA-B500-EB10D3BE92A5" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-fusion/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Product" + ] }, { "url": "https://www.nagios.com/products/security/#fusion", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-fusion-2fa-lack-of-reauthentication-or-session-rotation", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34270.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34270.json index 708ec002f80..3f36925daac 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34270.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34270.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34270", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.533", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:31:27.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -73,22 +95,117 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*", + "matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*", + "matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*", + "matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*", + "matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*", + "matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5" + } + ] + } + ] + } + ], "references": [ { "url": "https://support.nagios.com/kb/article/authenticating-and-importing-users-with-ad-and-ldap-995.html", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Not Applicable" + ] }, { "url": "https://www.nagios.com/changelog/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server-2024R2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-ad-ldap-import-password-not-obfuscated", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34271.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34271.json index ece63b165ad..2065ef9051c 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34271.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34271.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34271", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.673", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:29:46.200", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,110 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*", + "matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*", + "matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*", + "matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*", + "matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*", + "matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server-2024R2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-cluster-manager-credential-requests-sent-over-plaintext", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34272.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34272.json index c49de024b66..f017cc4bf94 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34272.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34272.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34272", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.810", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:29:24.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,18 +91,115 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*", + "matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*", + "matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*", + "matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*", + "matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*", + "matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*", + "matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server-2024R2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34273.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34273.json index 93df33418bf..809de362f44 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34273.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34273.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34273", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:47.953", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:28:38.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,18 +91,115 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*", + "matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*", + "matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*", + "matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*", + "matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*", + "matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*", + "matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server-2024R2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-non-admin-dashboard-deletion", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34274.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34274.json index 0531f27ad11..3ac730a5000 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34274.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34274.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34274", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:48.090", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:27:58.503", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,115 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*", + "matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*", + "matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*", + "matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*", + "matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*", + "matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*", + "matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*", + "matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server-2024R2", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-logstash-process-root-privileges", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34277.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34277.json index 53f0151efe3..7ae3c15c8d3 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34277.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34277.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34277", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:48.227", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:27:31.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/#log-server-2024R1", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Product" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-rce-via-malformed-dashboard-id", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34298.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34298.json index 0bf8694a1cc..b7d0349557b 100644 --- a/CVE-2025/CVE-2025-342xx/CVE-2025-34298.json +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34298.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34298", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:49.257", - "lastModified": "2025-11-04T15:41:56.843", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:27:12.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,73 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-set-email-privilege-escalation", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-360xx/CVE-2025-36054.json b/CVE-2025/CVE-2025-360xx/CVE-2025-36054.json new file mode 100644 index 00000000000..7ab59e354db --- /dev/null +++ b/CVE-2025/CVE-2025-360xx/CVE-2025-36054.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36054", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-06T15:15:46.363", + "lastModified": "2025-11-06T15:15:46.363", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7250261", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-377xx/CVE-2025-37735.json b/CVE-2025/CVE-2025-377xx/CVE-2025-37735.json new file mode 100644 index 00000000000..e4e585b206c --- /dev/null +++ b/CVE-2025/CVE-2025-377xx/CVE-2025-37735.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-37735", + "sourceIdentifier": "bressers@elastic.co", + "published": "2025-11-06T15:15:46.640", + "lastModified": "2025-11-06T15:15:46.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "bressers@elastic.co", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "bressers@elastic.co", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-281" + } + ] + } + ], + "references": [ + { + "url": "https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272", + "source": "bressers@elastic.co" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38240.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38240.json index a3e8dd1a304..bf56de59518 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38240.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38240.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38240", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-18T07:15:43.510", - "lastModified": "2025-04-21T14:23:45.950", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:22:49.323", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/mediatek: dp: drm_err => dev_err en la ruta HPD para evitar un puntero nulo. La funci\u00f3n mtk_dp_wait_hpd_asserted() puede llamarse antes de asignar el puntero `mtk_dp->drm_dev` en mtk_dp_bridge_attach(). Espec\u00edficamente, se puede llamar a trav\u00e9s de esta ruta de llamada: - mtk_edp_wait_hpd_asserted - [panel probe] - dp_aux_ep_probe El uso de impresiones de nivel \"drm\" en cualquier parte de esta ruta de llamada provoca una desreferencia del puntero nulo. Cambie el mensaje de error directamente en mtk_dp_wait_hpd_asserted() a dev_err() para evitar esto. Cambie tambi\u00e9n los mensajes de error en mtk_dp_parse_capabilities(), que es llamado por mtk_dp_wait_hpd_asserted(). Al tocar estas impresiones, agregue tambi\u00e9n el c\u00f3digo de error para facilitar la depuraci\u00f3n futura." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.87", + "matchCriteriaId": "DF08B6FA-567C-416D-8919-C3B544FF0DFC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.23", + "matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.11", + "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/106a6de46cf4887d535018185ec528ce822d6d84", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13ec849fd2eab808ee8eba2625df7ebea3b85edf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/149a5c38436c229950cf1020992ce65c9549bc19", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fda391ef7a701748abd7fa32232981b522c1e07", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/57a9fb47551b33cde7b76d17c0072c3b394f4620", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-384xx/CVE-2025-38479.json b/CVE-2025/CVE-2025-384xx/CVE-2025-38479.json index a657d012810..0dc3d607c37 100644 --- a/CVE-2025/CVE-2025-384xx/CVE-2025-38479.json +++ b/CVE-2025/CVE-2025-384xx/CVE-2025-38479.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38479", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-18T07:15:43.613", - "lastModified": "2025-04-21T14:23:45.950", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:22:25.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: fsl-edma: libera irq correctamente en la ruta de eliminaci\u00f3n. Agrega la verificaci\u00f3n fsl_edma->txirq/errirq para evitar la siguiente advertencia porque no hay errirq en la plataforma i.MX9. De lo contrario, habr\u00e1 un volcado de kernel: ADVERTENCIA: CPU: 0 PID: 11 at kernel/irq/devres.c:144 devm_free_irq+0x74/0x80 Modules linked in: CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7#18 Hardware name: NXP i.MX93 11X11 EVK board (DT) Workqueue: events_unbound deferred_probe_work_func pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : devm_free_irq+0x74/0x80 lr : devm_free_irq+0x48/0x80 Call trace: devm_free_irq+0x74/0x80 (P) devm_free_irq+0x48/0x80 (L) fsl_edma_remove+0xc4/0xc8 platform_remove+0x28/0x44 device_remove+0x4c/0x80 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.23", + "matchCriteriaId": "36AF5265-52FA-43B1-996B-D05FDF2FCCDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.11", + "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/38ff8769074db27387cb2323aaa751e59d168e6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/55e2dbe2ba787d4fc2306f6bb2f43fb32176e184", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f3834d2d68749e4760c27325149765930ad876fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa70c4c3c580c239a0f9e83a14770ab026e8d820", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json new file mode 100644 index 00000000000..0b743538ab4 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39463", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:50.447", + "lastModified": "2025-11-06T16:15:50.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/dessau/vulnerability/wordpress-dessau-theme-1-9-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json new file mode 100644 index 00000000000..2fd0fb786cd --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39465", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:50.700", + "lastModified": "2025-11-06T16:15:50.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through <= 5.8.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-google-map-gold/vulnerability/wordpress-advanced-google-maps-plugin-5-8-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json new file mode 100644 index 00000000000..7662ed65e7f --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39466", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:50.903", + "lastModified": "2025-11-06T16:15:50.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes D\u00f8r dor allows PHP Local File Inclusion.This issue affects D\u00f8r: from n/a through <= 2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/dor/vulnerability/wordpress-doer-2-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json new file mode 100644 index 00000000000..885bec301e1 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39467", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.053", + "lastModified": "2025-11-06T16:15:51.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-35" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json new file mode 100644 index 00000000000..0dd575487a0 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39468", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.210", + "lastModified": "2025-11-06T16:15:51.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through <= 2.0.2.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/modal-survey/vulnerability/wordpress-modal-survey-plugin-2-0-2-0-1-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json index 98630002b3f..5563791d428 100644 --- a/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json @@ -2,8 +2,8 @@ "id": "CVE-2025-40599", "sourceIdentifier": "PSIRT@sonicwall.com", "published": "2025-07-23T14:15:33.090", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:41:11.763", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,99 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.1-90sv", + "matchCriteriaId": "786BB26D-B943-4564-B8CC-3260EF2AACED" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*", + "matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.1-90sv", + "matchCriteriaId": "057D8219-D4F0-49FB-8EE4-6BBBDAED49DB" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.1-90sv", + "matchCriteriaId": "3418E737-CB38-4736-9725-AD05A1AB29CF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770" + } + ] + } + ] + } + ], "references": [ { "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014", - "source": "PSIRT@sonicwall.com" + "source": "PSIRT@sonicwall.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-406xx/CVE-2025-40603.json b/CVE-2025/CVE-2025-406xx/CVE-2025-40603.json index 29c072b1efe..214bd995e33 100644 --- a/CVE-2025/CVE-2025-406xx/CVE-2025-40603.json +++ b/CVE-2025/CVE-2025-406xx/CVE-2025-40603.json @@ -2,8 +2,8 @@ "id": "CVE-2025-40603", "sourceIdentifier": "PSIRT@sonicwall.com", "published": "2025-10-31T11:15:34.757", - "lastModified": "2025-11-04T15:41:31.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:26:50.913", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,99 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.3", + "matchCriteriaId": "3CED8FE0-D00D-4919-968F-A7F4FDD8C812" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*", + "matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.3", + "matchCriteriaId": "C395F5EF-2A49-4D59-9DF4-69F3CC364595" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.2.2.3", + "matchCriteriaId": "6FAB4D54-F7B6-422F-9D4F-A78A982A249E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770" + } + ] + } + ] + } + ], "references": [ { "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017", - "source": "PSIRT@sonicwall.com" + "source": "PSIRT@sonicwall.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41673.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41673.json index 0d65cfbf4d3..b3f65043289 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41673.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41673.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41673", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:23.400", - "lastModified": "2025-11-03T20:18:48.620", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:45:33.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41674.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41674.json index dfd41255b3a..311af600f2a 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41674.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41674.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41674", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:24.363", - "lastModified": "2025-11-03T20:18:48.720", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:45:25.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41675.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41675.json index 16eb8198f00..a16f7bf5e8d 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41675.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41675.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41675", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:24.530", - "lastModified": "2025-11-03T20:18:48.820", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:45:17.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41676.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41676.json index a531a1e0ecd..213826e02c3 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41676.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41676.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41676", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:24.680", - "lastModified": "2025-11-03T20:18:48.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:45:10.670", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41677.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41677.json index 87a9ec18d5b..599283ae5cd 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41677.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41677.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41677", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:24.840", - "lastModified": "2025-11-03T20:18:49.010", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:45:01.420", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41678.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41678.json index bc4013eee0d..69f0420fea4 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41678.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41678.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41678", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:24.980", - "lastModified": "2025-11-03T20:18:49.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:44:52.220", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ] }, @@ -51,14 +71,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41679.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41679.json index 80d252c5964..020ec8317bb 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41679.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41679.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41679", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:25.133", - "lastModified": "2025-11-03T20:18:49.190", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:44:44.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,14 +71,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-416xx/CVE-2025-41681.json b/CVE-2025/CVE-2025-416xx/CVE-2025-41681.json index b7133093612..3012f6711e9 100644 --- a/CVE-2025/CVE-2025-416xx/CVE-2025-41681.json +++ b/CVE-2025/CVE-2025-416xx/CVE-2025-41681.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41681", "sourceIdentifier": "info@cert.vde.com", "published": "2025-07-21T10:15:25.293", - "lastModified": "2025-11-03T20:18:49.293", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:44:36.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.3", + "matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://certvde.com/de/advisories/VDE-2025-058", - "source": "info@cert.vde.com" + "source": "info@cert.vde.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/38", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44823.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44823.json index 3c3392a1df7..3c4523a3839 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44823.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44823.json @@ -2,8 +2,8 @@ "id": "CVE-2025-44823", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-07T20:15:35.070", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:41:01.823", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -47,18 +67,82 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.exploit-db.com/exploits/52177", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "VDB Entry" + ] }, { "url": "https://www.nagios.com/changelog/#log-server", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.exploit-db.com/exploits/52177", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44824.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44824.json index 95e143b8749..b77efba751a 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44824.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44824.json @@ -2,8 +2,8 @@ "id": "CVE-2025-44824", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-07T20:15:35.277", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:40:35.863", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -47,18 +67,82 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024", + "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*", + "matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*", + "matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*", + "matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*", + "matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*", + "matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*", + "matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/skraft9/nagios-log-server-dos", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.nagios.com/changelog/#log-server", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/skraft9/nagios-log-server-dos", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json new file mode 100644 index 00000000000..19c160202e0 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-47588", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.363", + "lastModified": "2025-11-06T16:15:51.363", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through <= 4.5.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/aco-woo-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-with-discount-rules-for-woocommerce-plugin-4-5-9-arbitrary-code-execution-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json new file mode 100644 index 00000000000..44bb7f9039a --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48077", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.513", + "lastModified": "2025-11-06T16:15:51.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows Stored XSS.This issue affects Block Country: from n/a through <= 1.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/block-country/vulnerability/wordpress-block-country-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json new file mode 100644 index 00000000000..1fbdd5ed255 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48078", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.670", + "lastModified": "2025-11-06T16:15:51.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issue affects Slick Google Map: from n/a through <= 0.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/slick-google-map/vulnerability/wordpress-slick-google-map-plugin-0-3-cross-site-request-forgery-csrf-to-stored-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json new file mode 100644 index 00000000000..d55219ca165 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48083", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.810", + "lastModified": "2025-11-06T16:15:51.810", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allows Stored XSS.This issue affects wpNamedUsers: from n/a through <= 0.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpnamedusers/vulnerability/wordpress-wpnamedusers-plugin-0-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json new file mode 100644 index 00000000000..f10568c8a58 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48085", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:51.970", + "lastModified": "2025-11-06T16:15:51.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through <= 0.9.17." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-stripe/vulnerability/wordpress-simple-stripe-plugin-0-9-17-cross-site-request-forgery-csrf-to-stored-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json new file mode 100644 index 00000000000..298c549a434 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48086", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.120", + "lastModified": "2025-11-06T16:15:52.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through <= 4.13.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/ajax-search-lite/vulnerability/wordpress-ajax-search-lite-plugin-4-13-3-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json new file mode 100644 index 00000000000..1fcf160e02b --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48089", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.270", + "lastModified": "2025-11-06T16:15:52.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/histudy/vulnerability/wordpress-education-wordpress-theme-histudy-theme-3-1-0-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48090.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48090.json new file mode 100644 index 00000000000..867f5ea8d3c --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48090.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48090", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.423", + "lastModified": "2025-11-06T16:15:52.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-35" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/blanka-wp/vulnerability/wordpress-blanka-one-page-wordpress-theme-theme-1-5-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json new file mode 100644 index 00000000000..b3691e0a244 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48290", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.627", + "lastModified": "2025-11-06T16:15:52.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through <= 3.4.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kinsley/vulnerability/wordpress-kinsley-theme-3-4-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json new file mode 100644 index 00000000000..36c6763db23 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48330", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.780", + "lastModified": "2025-11-06T16:15:52.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP Local File Inclusion.This issue affects Real Time Validation for Gravity Forms: from n/a through <= 1.7.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/real-time-validation-for-gravity-forms/vulnerability/wordpress-real-time-validation-for-gravity-forms-1-7-0-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49372.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49372.json new file mode 100644 index 00000000000..7914cc57065 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49372.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49372", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:52.940", + "lastModified": "2025-11-06T16:15:52.940", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through <= 1.0.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/happy-helpdesk-support-ticket-system/vulnerability/wordpress-happy-plugin-1-0-7-remote-code-execution-rce-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json new file mode 100644 index 00000000000..5ac31b4c46a --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49386", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:53.103", + "lastModified": "2025-11-06T16:15:53.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows Object Injection.This issue affects Preserve Code Formatting: from n/a through <= 4.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/preserve-code-formatting/vulnerability/wordpress-preserve-code-formatting-plugin-4-0-1-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json new file mode 100644 index 00000000000..3d7ba33b51b --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49390", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:53.260", + "lastModified": "2025-11-06T16:15:53.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in christophrado Cookie Notice & Consent cookie-notice-consent allows Stored XSS.This issue affects Cookie Notice & Consent: from n/a through <= 1.6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/cookie-notice-consent/vulnerability/wordpress-cookie-notice-consent-plugin-1-6-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json new file mode 100644 index 00000000000..a93d0a6714f --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49393", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:53.413", + "lastModified": "2025-11-06T16:15:53.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through <= 2.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sign-up-sheets/vulnerability/wordpress-sign-up-sheets-plugin-2-3-2-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json new file mode 100644 index 00000000000..664073c11c1 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49394", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:53.720", + "lastModified": "2025-11-06T16:15:53.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in bPlugins Image Gallery block \u2013 Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block \u2013 Create and display photo gallery/photo album.: from n/a through <= 1.0.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/3d-image-gallery/vulnerability/wordpress-image-gallery-block-create-and-display-photo-gallery-photo-album-plugin-1-0-7-broken-authentication-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json new file mode 100644 index 00000000000..40212c51303 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49398", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:53.890", + "lastModified": "2025-11-06T16:15:53.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy Appointments easy-appointments allows Code Injection.This issue affects Easy Appointments: from n/a through <= 3.12.14." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/easy-appointments/vulnerability/wordpress-easy-appointments-plugin-3-12-14-content-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json new file mode 100644 index 00000000000..256b18fd2ef --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49900", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.070", + "lastModified": "2025-11-06T16:15:54.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in bPlugins Advanced scrollbar advanced-scrollbar allows Privilege Escalation.This issue affects Advanced scrollbar: from n/a through <= 1.1.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/advanced-scrollbar/vulnerability/wordpress-advanced-scrollbar-plugin-1-1-8-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json new file mode 100644 index 00000000000..8deef7b49df --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49904", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.243", + "lastModified": "2025-11-06T16:15:54.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/booking-and-rental-manager-for-woocommerce/vulnerability/wordpress-booking-and-rental-manager-plugin-2-5-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json new file mode 100644 index 00000000000..f35c659f668 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49905", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.430", + "lastModified": "2025-11-06T16:15:54.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through <= 1.1.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/range-slider-addon-for-gravity-forms/vulnerability/wordpress-range-slider-addon-for-gravity-forms-plugin-1-1-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json new file mode 100644 index 00000000000..c17e045ab01 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49909", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.583", + "lastModified": "2025-11-06T16:15:54.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Bookmark & Follow penci-bookmark-follow allows Reflected XSS.This issue affects Penci Bookmark & Follow: from n/a through < 2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/penci-bookmark-follow/vulnerability/wordpress-penci-bookmark-follow-plugin-2-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json new file mode 100644 index 00000000000..b610db5cb2d --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52764", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.760", + "lastModified": "2025-11-06T16:15:54.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marielav flexoslider flexoslider allows Reflected XSS.This issue affects flexoslider: from n/a through <= 1.0004." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/flexoslider/vulnerability/wordpress-flexoslider-plugin-1-0004-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json new file mode 100644 index 00000000000..bb8d97d003d --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52773", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:54.933", + "lastModified": "2025-11-06T16:15:54.933", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hiecor HieCOR Payment Gateway Plugin hcv4-payment-gateway allows SQL Injection.This issue affects HieCOR Payment Gateway Plugin: from n/a through <= 1.5.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hcv4-payment-gateway/vulnerability/wordpress-hiecor-payment-gateway-plugin-plugin-1-5-11-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json new file mode 100644 index 00000000000..2bb62d37f1a --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53214", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:55.110", + "lastModified": "2025-11-06T16:15:55.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-certificates-open-badges allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sertifier Certificate & Badge Maker: from n/a through <= 1.21." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sertifier-certificates-open-badges/vulnerability/wordpress-sertifier-certificate-badge-maker-plugin-1-19-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json new file mode 100644 index 00000000000..a2691002906 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53239", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:55.300", + "lastModified": "2025-11-06T16:15:55.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bnovotny User Registration Aide user-registration-aide allows Reflected XSS.This issue affects User Registration Aide: from n/a through <= 1.5.3.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/user-registration-aide/vulnerability/wordpress-user-registration-aide-plugin-1-5-3-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json new file mode 100644 index 00000000000..14f18ef5176 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53242", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:55.473", + "lastModified": "2025-11-06T16:15:55.473", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.This issue affects Seil: from n/a through <= 1.7.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/seil/vulnerability/wordpress-seil-theme-1-7-1-deserialization-of-untrusted-data-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json new file mode 100644 index 00000000000..48d72ae090d --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53245", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:55.637", + "lastModified": "2025-11-06T16:15:55.637", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through <= 1.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/am-login-logo/vulnerability/wordpress-wp-logo-changer-plugin-1-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json new file mode 100644 index 00000000000..033f23ad1ed --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53246", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:55.833", + "lastModified": "2025-11-06T16:15:55.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through <= 0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/backup-and-move/vulnerability/wordpress-backup-and-move-plugin-0-1-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json new file mode 100644 index 00000000000..0d7c9ff2375 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53252", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.010", + "lastModified": "2025-11-06T16:15:56.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <= 1.1.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/zegen/vulnerability/wordpress-zegen-theme-1-1-9-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json new file mode 100644 index 00000000000..d19d9b89e7e --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53283", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.180", + "lastModified": "2025-11-06T16:15:56.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File Uploader Addon: from n/a through <= 2.4.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon/vulnerability/wordpress-drop-uploader-for-cf7-drag-drop-file-uploader-addon-plugin-2-4-1-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json new file mode 100644 index 00000000000..52a47186708 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53286", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.333", + "lastModified": "2025-11-06T16:15:56.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue affects Dropify: from n/a through <= 4.6.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wc-dropi-integration/vulnerability/wordpress-dropify-plugin-4-6-9-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json new file mode 100644 index 00000000000..e3e81af0f38 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53316", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.483", + "lastModified": "2025-11-06T16:15:56.483", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-cookie-consent allows Stored XSS.This issue affects WP GDPR Cookie Consent: from n/a through <= 1.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gdpr-cookie-consent/vulnerability/wordpress-wp-gdpr-cookie-consent-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json new file mode 100644 index 00000000000..1eb98328cbd --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53324", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.630", + "lastModified": "2025-11-06T16:15:56.630", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeYatri Gutenify gutenify allows Stored XSS.This issue affects Gutenify: from n/a through <= 1.5.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/gutenify/vulnerability/wordpress-gutenify-plugin-1-5-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json new file mode 100644 index 00000000000..de1efd6426a --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53349", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.780", + "lastModified": "2025-11-06T16:15:56.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-18-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53573.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53573.json new file mode 100644 index 00000000000..f69a2a7705e --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53573.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53573", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:56.930", + "lastModified": "2025-11-06T16:15:56.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme Epic Review epic-review allows Reflected XSS.This issue affects Epic Review: from n/a through <= 1.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/epic-review/vulnerability/wordpress-epic-review-plugin-1-0-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json new file mode 100644 index 00000000000..5d4d966a996 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53574", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.080", + "lastModified": "2025-11-06T16:15:57.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ptibogxiv Doliconnect doliconnect allows Reflected XSS.This issue affects Doliconnect: from n/a through <= 9.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/doliconnect/vulnerability/wordpress-doliconnect-plugin-9-3-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53585.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53585.json new file mode 100644 index 00000000000..58595f2f521 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53585.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53585", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.227", + "lastModified": "2025-11-06T16:15:57.227", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme WeMusic noo-wemusic allows Reflected XSS.This issue affects WeMusic: from n/a through <= 1.9.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noo-wemusic/vulnerability/wordpress-wemusic-theme-1-9-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json new file mode 100644 index 00000000000..cddd3645a0a --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53586", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.373", + "lastModified": "2025-11-06T16:15:57.373", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in NooTheme WeMusic noo-wemusic allows Object Injection.This issue affects WeMusic: from n/a through <= 1.9.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noo-wemusic/vulnerability/wordpress-wemusic-theme-1-9-1-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53964.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53964.json index 80aaf26aca6..a9c8505005d 100644 --- a/CVE-2025/CVE-2025-539xx/CVE-2025-53964.json +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53964.json @@ -2,8 +2,8 @@ "id": "CVE-2025-53964", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-17T20:15:30.803", - "lastModified": "2025-07-17T21:15:50.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:43:59.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,43 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:goldendict:goldendict:1.5.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FD03C9A2-D035-4B44-A0FC-CB96537F5FEC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:goldendict:goldendict:1.5.1:*:*:*:*:*:*:*", + "matchCriteriaId": "CE95C4FA-0B88-4E52-8883-812E4D37AE64" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/goldendict/goldendict/releases", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/tigr78/CVE-2025-53964", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54711.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54711.json new file mode 100644 index 00000000000..cc1a2cd4375 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54711.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54711", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.523", + "lastModified": "2025-11-06T16:15:57.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in bPlugins Info Cards info-cards allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Info Cards: from n/a through <= 1.0.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/info-cards/vulnerability/wordpress-info-cards-plugin-1-0-11-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54718.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54718.json new file mode 100644 index 00000000000..02c1a4e854c --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54718.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54718", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.677", + "lastModified": "2025-11-06T16:15:57.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Yogi - Health Beauty & Yoga noo-yogi allows Reflected XSS.This issue affects Yogi - Health Beauty & Yoga: from n/a through <= 2.9.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noo-yogi/vulnerability/wordpress-yogi-health-beauty-yoga-theme-2-9-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54719.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54719.json new file mode 100644 index 00000000000..14d6c12973c --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54719.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54719", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:57.837", + "lastModified": "2025-11-06T16:15:57.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in NooTheme Yogi - Health Beauty & Yoga noo-yogi allows Object Injection.This issue affects Yogi - Health Beauty & Yoga: from n/a through <= 2.9.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noo-yogi/vulnerability/wordpress-yogi-health-beauty-yoga-theme-2-9-2-deserialization-of-untrusted-data-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54721.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54721.json new file mode 100644 index 00000000000..f26b4297743 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54721.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54721", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:58.053", + "lastModified": "2025-11-06T16:15:58.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Resca resca allows Reflected XSS.This issue affects Resca: from n/a through <= 3.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/resca/vulnerability/wordpress-resca-theme-3-0-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54722.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54722.json new file mode 100644 index 00000000000..373700b82c3 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54722.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54722", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:58.277", + "lastModified": "2025-11-06T16:15:58.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issue affects WooTour: from n/a through <= 3.6.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woo-tour/vulnerability/wordpress-wootour-plugin-3-6-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54737.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54737.json new file mode 100644 index 00000000000..9487322c205 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54737.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-54737", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:58.427", + "lastModified": "2025-11-06T16:15:58.427", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.7.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noo-jobmonster/vulnerability/wordpress-jobmonster-theme-4-7-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-582xx/CVE-2025-58207.json b/CVE-2025/CVE-2025-582xx/CVE-2025-58207.json new file mode 100644 index 00000000000..cc6181f34da --- /dev/null +++ b/CVE-2025/CVE-2025-582xx/CVE-2025-58207.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58207", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:58.567", + "lastModified": "2025-11-06T16:15:58.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through <= 1.1.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/ai-image-alt-text-generator-for-wp/vulnerability/wordpress-ai-image-alt-text-generator-for-wp-plugin-1-1-5-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-582xx/CVE-2025-58243.json b/CVE-2025/CVE-2025-582xx/CVE-2025-58243.json new file mode 100644 index 00000000000..85622a2cb6a --- /dev/null +++ b/CVE-2025/CVE-2025-582xx/CVE-2025-58243.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58243", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:58.723", + "lastModified": "2025-11-06T16:15:58.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through <= 3.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/imevent/vulnerability/wordpress-imevent-theme-3-4-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json b/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json index 56155b67e89..212744dfd24 100644 --- a/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json +++ b/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58337", "sourceIdentifier": "security@apache.org", "published": "2025-11-05T10:15:36.483", - "lastModified": "2025-11-05T11:15:35.070", + "lastModified": "2025-11-06T16:15:58.870", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "An attacker with a valid read-only account can bypass Doris MCP Server\u2019s read-only mode due to improper access control, allowing modifications that should have been prevented by read-only restrictions.\n\n\nImpact:\n\nBypasses read-only mode; attackers with read-only access may perform unauthorized modifications.\n\n\n\n\nRecommended action for operators: Upgrade to version 0.6.0 as soon as possible (this release contains the fix)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, "weaknesses": [ { "source": "security@apache.org", diff --git a/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json b/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json new file mode 100644 index 00000000000..309137c1183 --- /dev/null +++ b/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58592", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.080", + "lastModified": "2025-11-06T16:15:59.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.10.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/translatepress-multilingual/vulnerability/wordpress-translatepress-plugin-2-10-2-deserialization-of-untrusted-data-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json b/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json new file mode 100644 index 00000000000..7c8592a518d --- /dev/null +++ b/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58595", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.233", + "lastModified": "2025-11-06T16:15:59.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through <= 2.0.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-290" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/change-wp-admin-login/vulnerability/wordpress-all-in-one-login-plugin-2-0-8-bypass-vulnerability-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json new file mode 100644 index 00000000000..f577c1666dc --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58619", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.400", + "lastModified": "2025-11-06T16:15:59.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through <= 1.3.65." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/falang/vulnerability/wordpress-falang-multilanguage-plugin-1-3-65-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json new file mode 100644 index 00000000000..40bfea276d3 --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58627", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.557", + "lastModified": "2025-11-06T16:15:59.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/miraculouscore/vulnerability/wordpress-miraculous-core-plugin-plugin-2-0-9-insecure-direct-object-references-idor-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json new file mode 100644 index 00000000000..96b982733aa --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58629", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.717", + "lastModified": "2025-11-06T16:15:59.717", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/miraculous/vulnerability/wordpress-miraculous-theme-2-0-9-arbitrary-content-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json new file mode 100644 index 00000000000..802c5a19023 --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58636", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:15:59.860", + "lastModified": "2025-11-06T16:15:59.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Object Injection.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through <= 1.2.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/gf-infusionsoft/vulnerability/wordpress-wp-gravity-forms-keap-infusionsoft-plugin-1-2-3-deserialization-of-untrusted-data-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json new file mode 100644 index 00000000000..ae8434e63b9 --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58638", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.003", + "lastModified": "2025-11-06T16:16:00.003", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory allows Reflected XSS.This issue affects Institutions Directory: from n/a through <= 1.3.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/institutions-directory/vulnerability/wordpress-institutions-directory-plugin-1-3-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58727.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58727.json index f65783d3bdc..263d11730aa 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58727.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58727.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58727", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:54.337", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-06T15:26:27.320", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,73 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58727", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58728.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58728.json index ef8e769384a..60b8d0c8db5 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58728.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58728.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58728", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:54.500", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-06T15:27:47.257", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58728", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58739.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58739.json index 1e4759c06a4..04ab6b5b9b5 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58739.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58739.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58739", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:56.480", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-06T15:46:17.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -45,12 +45,164 @@ "value": "CWE-200" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58739", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json new file mode 100644 index 00000000000..a9250a898f7 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58964", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.157", + "lastModified": "2025-11-06T16:16:00.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/enzy/vulnerability/wordpress-enzy-theme-1-6-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json new file mode 100644 index 00000000000..00ba59534ce --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58972", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.320", + "lastModified": "2025-11-06T16:16:00.320", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.10.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-35" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-10-4-path-traversal-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58986.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58986.json new file mode 100644 index 00000000000..13f7019b7cb --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58986.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58986", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.473", + "lastModified": "2025-11-06T16:16:00.473", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now (JOAN): from n/a through <= 6.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/joan/vulnerability/wordpress-jock-on-air-now-joan-plugin-6-0-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58994.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58994.json new file mode 100644 index 00000000000..7387d5d6a73 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58994.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58994", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.833", + "lastModified": "2025-11-06T16:16:00.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Greenify greenify allows PHP Local File Inclusion.This issue affects Greenify: from n/a through <= 2.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/greenify/vulnerability/wordpress-greenify-theme-2-2-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58995.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58995.json new file mode 100644 index 00000000000..7a456d85ab1 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58995.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58995", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:00.987", + "lastModified": "2025-11-06T16:16:00.987", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Leblix leblix allows PHP Local File Inclusion.This issue affects Leblix: from n/a through <= 2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/leblix/vulnerability/wordpress-leblix-theme-2-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58996.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58996.json new file mode 100644 index 00000000000..0c7d29a4f69 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58996.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58996", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:01.140", + "lastModified": "2025-11-06T16:16:01.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Upload a Web Shell to a Web Server.This issue affects Advanced Settings: from n/a through <= 3.1.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/advanced-settings/vulnerability/wordpress-advanced-settings-plugin-3-1-1-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58998.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58998.json new file mode 100644 index 00000000000..86ea4bbf63c --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58998.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58998", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:01.290", + "lastModified": "2025-11-06T16:16:01.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Cristi\u00e1n L\u00e1vaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/s2member/vulnerability/wordpress-s2member-plugin-250701-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json b/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json new file mode 100644 index 00000000000..14053b629f2 --- /dev/null +++ b/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-5803", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:02.763", + "lastModified": "2025-11-06T16:16:02.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.8.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/vikbooking/vulnerability/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-8-2-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-593xx/CVE-2025-59392.json b/CVE-2025/CVE-2025-593xx/CVE-2025-59392.json new file mode 100644 index 00000000000..39d570496dd --- /dev/null +++ b/CVE-2025/CVE-2025-593xx/CVE-2025-59392.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-59392", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-06T16:16:01.447", + "lastModified": "2025-11-06T16:16:01.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset string) into a USB port." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://www.elspec-ltd.com/metering-protection/g5-multi-functional-digital-fault-recorder/", + "source": "cve@mitre.org" + }, + { + "url": "https://www.elspec-ltd.com/support/security-advisories/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59556.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59556.json new file mode 100644 index 00000000000..f1a8a8e369b --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59556.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59556", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:01.613", + "lastModified": "2025-11-06T16:16:01.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/gostore/vulnerability/wordpress-gostore-theme-1-6-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-600xx/CVE-2025-60073.json b/CVE-2025/CVE-2025-600xx/CVE-2025-60073.json new file mode 100644 index 00000000000..da3941473cd --- /dev/null +++ b/CVE-2025/CVE-2025-600xx/CVE-2025-60073.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60073", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.093", + "lastModified": "2025-11-06T16:16:03.093", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Responsive Sidebar responsive-sidebar allows PHP Local File Inclusion.This issue affects Responsive Sidebar: from n/a through <= 1.2.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/responsive-sidebar/vulnerability/wordpress-responsive-sidebar-plugin-1-2-2-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-600xx/CVE-2025-60074.json b/CVE-2025/CVE-2025-600xx/CVE-2025-60074.json new file mode 100644 index 00000000000..4116caf81eb --- /dev/null +++ b/CVE-2025/CVE-2025-600xx/CVE-2025-60074.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60074", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.250", + "lastModified": "2025-11-06T16:16:03.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Lazy Load Optimizer lazy-load-optimizer allows PHP Local File Inclusion.This issue affects Lazy Load Optimizer: from n/a through <= 1.4.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/lazy-load-optimizer/vulnerability/wordpress-lazy-load-optimizer-plugin-1-4-7-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60187.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60187.json new file mode 100644 index 00000000000..afb3cabf5ff --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60187.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60187", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.400", + "lastModified": "2025-11-06T16:16:03.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Using Malicious Files.This issue affects Atarim: from n/a through <= 4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60188.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60188.json new file mode 100644 index 00000000000..5364bb7a785 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60188.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60188", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.560", + "lastModified": "2025-11-06T16:16:03.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-sensitive-data-exposure-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60189.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60189.json new file mode 100644 index 00000000000..bc3029d216e --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60189.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60189", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.717", + "lastModified": "2025-11-06T16:16:03.717", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PoloPag PoloPag – Pix Autom\u00e1tico para Woocommerce wc-polo-payments allows PHP Local File Inclusion.This issue affects PoloPag – Pix Autom\u00e1tico para Woocommerce: from n/a through <= 2.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wc-polo-payments/vulnerability/wordpress-polopag-pix-automatico-para-woocommerce-plugin-2-0-9-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60190.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60190.json new file mode 100644 index 00000000000..3809e379053 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60190.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60190", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:03.903", + "lastModified": "2025-11-06T16:16:03.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hinnerk Altenburg Immocaster WordPress Plugin immocaster allows PHP Local File Inclusion.This issue affects Immocaster WordPress Plugin: from n/a through <= 1.3.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/immocaster/vulnerability/wordpress-immocaster-wordpress-plugin-plugin-1-3-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60191.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60191.json new file mode 100644 index 00000000000..b2f0ea9a608 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60191.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60191", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.077", + "lastModified": "2025-11-06T16:16:04.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a through <= 1.1.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wishlist/vulnerability/wordpress-premmerce-wishlist-for-woocommerce-plugin-1-1-10-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60192.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60192.json new file mode 100644 index 00000000000..2d2bdf6a5c4 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60192.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60192", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.233", + "lastModified": "2025-11-06T16:16:04.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows PHP Local File Inclusion.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpress-premmerce-wholesale-pricing-for-woocommerce-plugin-1-1-10-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60193.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60193.json new file mode 100644 index 00000000000..6f53508c565 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60193.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60193", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.380", + "lastModified": "2025-11-06T16:16:04.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows PHP Local File Inclusion.This issue affects Premmerce User Roles: from n/a through <= 1.0.13." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60194.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60194.json new file mode 100644 index 00000000000..4423d714f44 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60194.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60194", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.510", + "lastModified": "2025-11-06T16:16:04.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60195.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60195.json new file mode 100644 index 00000000000..61bd85ed2ea --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60195.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60195", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.653", + "lastModified": "2025-11-06T16:16:04.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Privilege Escalation.This issue affects Atarim: from n/a through <= 4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60196.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60196.json new file mode 100644 index 00000000000..951a2c1ee3c --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60196.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60196", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.803", + "lastModified": "2025-11-06T16:16:04.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Clearblue Clearblue\u00ae Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue\u00ae Ovulation Calculator: from n/a through <= 1.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/clearblue-ovulation-calculator/vulnerability/wordpress-clearblue-ovulation-calculator-plugin-1-2-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60197.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60197.json new file mode 100644 index 00000000000..e4561e00821 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60197.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60197", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:04.953", + "lastModified": "2025-11-06T16:16:04.953", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through <= 1.6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-contact-forms/vulnerability/wordpress-simple-contact-forms-plugin-1-6-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60198.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60198.json new file mode 100644 index 00000000000..43481afc5e1 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60198.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60198", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.113", + "lastModified": "2025-11-06T16:16:05.113", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme saxon allows PHP Local File Inclusion.This issue affects Saxon - Viral Content Blog & Magazine Marketing WordPress Theme: from n/a through <= 1.9.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/saxon/vulnerability/wordpress-saxon-viral-content-blog-magazine-marketing-wordpress-theme-theme-1-9-3-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60199.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60199.json new file mode 100644 index 00000000000..16620eed6d1 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60199.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60199", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.267", + "lastModified": "2025-11-06T16:16:05.267", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx InHype - Blog & Magazine WordPress Theme inhype allows PHP Local File Inclusion.This issue affects InHype - Blog & Magazine WordPress Theme: from n/a through <= 1.5.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/inhype/vulnerability/wordpress-inhype-blog-magazine-wordpress-theme-theme-1-5-2-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60200.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60200.json new file mode 100644 index 00000000000..44ddad69a6f --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60200.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60200", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.423", + "lastModified": "2025-11-06T16:16:05.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress LearnPress Export Import learnpress-import-export allows PHP Local File Inclusion.This issue affects LearnPress Export Import: from n/a through <= 4.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/learnpress-import-export/vulnerability/wordpress-learnpress-export-import-plugin-4-0-9-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60201.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60201.json new file mode 100644 index 00000000000..e8cf1467f49 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60201.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60201", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.570", + "lastModified": "2025-11-06T16:16:05.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion.This issue affects WP Customer Area: from n/a through <= 8.2.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-7-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60202.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60202.json new file mode 100644 index 00000000000..2b2f5fbc6fd --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60202.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60202", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.713", + "lastModified": "2025-11-06T16:16:05.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through <= 2.3.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/favorites/vulnerability/wordpress-favorites-plugin-2-3-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60203.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60203.json new file mode 100644 index 00000000000..ee8ef6326bf --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60203.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60203", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:05.860", + "lastModified": "2025-11-06T16:16:05.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-exporter/vulnerability/wordpress-store-exporter-plugin-2-7-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60204.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60204.json new file mode 100644 index 00000000000..88850e5e2b8 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60204.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60204", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.010", + "lastModified": "2025-11-06T16:16:06.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through <= 2.4.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-store-toolkit/vulnerability/wordpress-woocommerce-store-toolkit-plugin-2-4-3-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60207.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60207.json new file mode 100644 index 00000000000..b4a7647584e --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60207.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60207", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.153", + "lastModified": "2025-11-06T16:16:06.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through <= 2.1.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/user-registration-plugin-for-woocommerce/vulnerability/wordpress-custom-user-registration-fields-for-woocommerce-plugin-2-1-2-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60235.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60235.json new file mode 100644 index 00000000000..1d786142883 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60235.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60235", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.310", + "lastModified": "2025-11-06T16:16:06.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Plugify Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Using Malicious Files.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/support-ticket-system-for-woocommerce/vulnerability/wordpress-helpdesk-support-ticket-system-for-woocommerce-plugin-2-0-7-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json new file mode 100644 index 00000000000..182ec74519a --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60239", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.463", + "lastModified": "2025-11-06T16:16:06.463", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL Injection.This issue affects CoSchool LMS: from n/a through <= 1.4.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/coschool/vulnerability/wordpress-coschool-lms-plugin-1-4-3-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json new file mode 100644 index 00000000000..2aeb313852f --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60240", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.613", + "lastModified": "2025-11-06T16:16:06.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/anycomment/vulnerability/wordpress-anycomment-plugin-0-3-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json new file mode 100644 index 00000000000..ff51a2b664d --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60241", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.767", + "lastModified": "2025-11-06T16:16:06.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce premmerce allows PHP Local File Inclusion.This issue affects Premmerce: from n/a through <= 1.3.19." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce/vulnerability/wordpress-premmerce-plugin-1-3-19-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60242.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60242.json new file mode 100644 index 00000000000..eb04f956f81 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60242.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60242", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:06.917", + "lastModified": "2025-11-06T16:16:06.917", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Anatoly Download Counter download-counter allows Path Traversal.This issue affects Download Counter: from n/a through <= 1.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/download-counter/vulnerability/wordpress-download-counter-plugin-1-4-arbitrary-file-download-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60243.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60243.json new file mode 100644 index 00000000000..abee017603a --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60243.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60243", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.070", + "lastModified": "2025-11-06T16:16:07.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through <= 1.2.46." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/selling-commander-connector/vulnerability/wordpress-selling-commander-for-woocommerce-plugin-1-2-46-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60244.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60244.json new file mode 100644 index 00000000000..39114a9ca1d --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60244.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60244", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.217", + "lastModified": "2025-11-06T16:16:07.217", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through <= 1.0.4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/posts-table-filterable/vulnerability/wordpress-tableon-plugin-1-0-4-2-content-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60245.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60245.json new file mode 100644 index 00000000000..c138df98e2b --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60245.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60245", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.360", + "lastModified": "2025-11-06T16:16:07.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through <= 2.9.12." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-user-manager/vulnerability/wordpress-wp-user-manager-plugin-2-9-12-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json new file mode 100644 index 00000000000..3856dc8ed0c --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60247", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.520", + "lastModified": "2025-11-06T16:16:07.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bux Woocommerce: from n/a through <= 1.2.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/bux-woocommerce/vulnerability/wordpress-bux-woocommerce-plugin-1-2-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json new file mode 100644 index 00000000000..a8ac4dd0515 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60248", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.667", + "lastModified": "2025-11-06T16:16:07.667", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for WooCommerce: from n/a through <= 1.8.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpc-product-options/vulnerability/wordpress-wpc-product-options-for-woocommerce-plugin-1-8-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json new file mode 100644 index 00000000000..6c4d6a88b4c --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62010", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.820", + "lastModified": "2025-11-06T16:16:07.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through <= 1.54." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/famita/vulnerability/wordpress-famita-theme-1-54-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json new file mode 100644 index 00000000000..f7eebc4aa3a --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62011", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:07.970", + "lastModified": "2025-11-06T16:16:07.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/thegem/vulnerability/wordpress-thegem-theme-5-10-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json new file mode 100644 index 00000000000..f2eb62b3af4 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62012", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.130", + "lastModified": "2025-11-06T16:16:08.130", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/thegem-elementor/vulnerability/wordpress-thegem-elementor-theme-5-10-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62014.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62014.json new file mode 100644 index 00000000000..bd242333e43 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62014.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62014", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.290", + "lastModified": "2025-11-06T16:16:08.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme ITok itok.This issue affects ITok: from n/a through <= 1.1.42." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/itok/vulnerability/wordpress-itok-theme-1-1-42-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62016.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62016.json new file mode 100644 index 00000000000..9b12a238071 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62016.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62016", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.420", + "lastModified": "2025-11-06T16:16:08.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62017.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62017.json new file mode 100644 index 00000000000..16499829632 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62017.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62017", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.567", + "lastModified": "2025-11-06T16:16:08.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62018.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62018.json new file mode 100644 index 00000000000..b71290120d5 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62018.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62018", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.713", + "lastModified": "2025-11-06T16:16:08.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-broken-access-control-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62028.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62028.json new file mode 100644 index 00000000000..41cf7212052 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62028.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62028", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:08.857", + "lastModified": "2025-11-06T16:16:08.857", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/salient/vulnerability/wordpress-salient-theme-17-4-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62030.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62030.json new file mode 100644 index 00000000000..25e686b6a38 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62030.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62030", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.007", + "lastModified": "2025-11-06T16:16:09.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62031.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62031.json new file mode 100644 index 00000000000..5df72e96198 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62031.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62031", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.160", + "lastModified": "2025-11-06T16:16:09.160", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-1-cross-site-scripting-xss-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62032.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62032.json new file mode 100644 index 00000000000..460591e8387 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62032.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62032", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.303", + "lastModified": "2025-11-06T16:16:09.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62033.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62033.json new file mode 100644 index 00000000000..f649318e16d --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62033.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62033", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.470", + "lastModified": "2025-11-06T16:16:09.470", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62034.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62034.json new file mode 100644 index 00000000000..b7d9c1da5e7 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62034.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62034", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.613", + "lastModified": "2025-11-06T16:16:09.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62035.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62035.json new file mode 100644 index 00000000000..3259e0b7c0c --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62035.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62035", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.780", + "lastModified": "2025-11-06T16:16:09.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62036.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62036.json new file mode 100644 index 00000000000..8eadce44ec0 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62036.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62036", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:09.920", + "lastModified": "2025-11-06T16:16:09.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62037.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62037.json new file mode 100644 index 00000000000..ef45c654a08 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62037.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62037", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.070", + "lastModified": "2025-11-06T16:16:10.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-broken-access-control-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62038.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62038.json new file mode 100644 index 00000000000..9f33cb5b58f --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62038.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62038", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.230", + "lastModified": "2025-11-06T16:16:10.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub allows Retrieve Embedded Sensitive Data.This issue affects MeetingHub: from n/a through <= 1.23.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/meetinghub/vulnerability/wordpress-meetinghub-plugin-1-23-9-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62039.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62039.json new file mode 100644 index 00000000000..a7f8f45a56b --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62039.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62039", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.387", + "lastModified": "2025-11-06T16:16:10.387", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-6-6-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62040.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62040.json new file mode 100644 index 00000000000..7b682c39289 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62040.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62040", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.543", + "lastModified": "2025-11-06T16:16:10.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through <= 6.5.37." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/yop-poll/vulnerability/wordpress-yop-poll-plugin-6-5-37-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62041.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62041.json new file mode 100644 index 00000000000..2934dbaeb20 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62041.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62041", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.690", + "lastModified": "2025-11-06T16:16:10.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/thegem-elementor/vulnerability/wordpress-thegem-elementor-theme-5-10-5-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62044.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62044.json new file mode 100644 index 00000000000..a91b557d154 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62044.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62044", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.837", + "lastModified": "2025-11-06T16:16:10.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62045.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62045.json new file mode 100644 index 00000000000..a1cf17e7942 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62045.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62045", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:10.980", + "lastModified": "2025-11-06T16:16:10.980", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62046.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62046.json new file mode 100644 index 00000000000..dfa663ad1b3 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62046.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62046", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.123", + "lastModified": "2025-11-06T16:16:11.123", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-importer/vulnerability/wordpress-thegem-demo-import-for-wpbakery-plugin-5-10-5-arbitrary-content-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62047.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62047.json new file mode 100644 index 00000000000..fee3c83f0fd --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62047.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62047", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.303", + "lastModified": "2025-11-06T16:16:11.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/case-addons/vulnerability/wordpress-case-addons-plugin-1-3-0-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62049.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62049.json new file mode 100644 index 00000000000..a69e4fa756b --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62049.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62049", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.440", + "lastModified": "2025-11-06T16:16:11.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.This issue affects Cost Calculator Builder: from n/a through <= 3.5.32." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/cost-calculator-builder/vulnerability/wordpress-cost-calculator-builder-plugin-3-5-32-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62051.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62051.json new file mode 100644 index 00000000000..0b8d6084584 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62051.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62051", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.587", + "lastModified": "2025-11-06T16:16:11.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through <= 4.14.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62053.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62053.json new file mode 100644 index 00000000000..91cd6a3e910 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62053.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62053", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.733", + "lastModified": "2025-11-06T16:16:11.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through < 4.2.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/houzez/vulnerability/wordpress-houzez-theme-4-2-0-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62055.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62055.json new file mode 100644 index 00000000000..5d9ff173e38 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62055.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62055", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:11.880", + "lastModified": "2025-11-06T16:16:11.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through < 1.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/academist/vulnerability/wordpress-academist-theme-1-3-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62057.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62057.json new file mode 100644 index 00000000000..b19d7c6e578 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62057.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62057", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.030", + "lastModified": "2025-11-06T16:16:12.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-2-0-cross-site-scripting-xss-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62059.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62059.json new file mode 100644 index 00000000000..5413592d199 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62059.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62059", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.177", + "lastModified": "2025-11-06T16:16:12.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureRank surerank.This issue affects SureRank: from n/a through <= 1.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/surerank/vulnerability/wordpress-surerank-plugin-1-3-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62064.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62064.json new file mode 100644 index 00000000000..e252c1d920a --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62064.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62064", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.327", + "lastModified": "2025-11-06T16:16:12.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through <= 2.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/search-and-go/vulnerability/wordpress-search-go-theme-2-7-broken-authentication-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62065.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62065.json new file mode 100644 index 00000000000..15b8db966ce --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62065.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62065", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.473", + "lastModified": "2025-11-06T16:16:12.473", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through <= 1.6.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-1-6-5-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62066.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62066.json new file mode 100644 index 00000000000..2b7fab2512c --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62066.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62066", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.617", + "lastModified": "2025-11-06T16:16:12.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/revolution/vulnerability/wordpress-revolution-theme-2-5-8-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62067.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62067.json new file mode 100644 index 00000000000..5809ec629cc --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62067.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62067", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.763", + "lastModified": "2025-11-06T16:16:12.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Savory savory.This issue affects Savory: from n/a through <= 2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/savory/vulnerability/wordpress-savory-theme-2-5-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62074.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62074.json new file mode 100644 index 00000000000..bec24836a0b --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62074.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62074", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:12.910", + "lastModified": "2025-11-06T16:16:12.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through <= 11.71." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpappninja/vulnerability/wordpress-wpmobile-app-plugin-11-71-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62075.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62075.json new file mode 100644 index 00000000000..1a9f9c73836 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62075.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62075", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.067", + "lastModified": "2025-11-06T16:16:13.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-4-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62076.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62076.json new file mode 100644 index 00000000000..c792ea603cc --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62076.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62076", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.243", + "lastModified": "2025-11-06T16:16:13.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-4-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-629xx/CVE-2025-62914.json b/CVE-2025/CVE-2025-629xx/CVE-2025-62914.json new file mode 100644 index 00000000000..81bdc4b4a29 --- /dev/null +++ b/CVE-2025/CVE-2025-629xx/CVE-2025-62914.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62914", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.390", + "lastModified": "2025-11-06T16:16:13.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in anibalwainstein Effect Maker effect-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Effect Maker: from n/a through <= 1.2.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/effect-maker/vulnerability/wordpress-effect-maker-plugin-1-2-1-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-629xx/CVE-2025-62950.json b/CVE-2025/CVE-2025-629xx/CVE-2025-62950.json new file mode 100644 index 00000000000..51af4233ccd --- /dev/null +++ b/CVE-2025/CVE-2025-629xx/CVE-2025-62950.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62950", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.540", + "lastModified": "2025-11-06T16:16:13.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/contest-gallery/vulnerability/wordpress-contest-gallery-plugin-28-0-0-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-633xx/CVE-2025-63307.json b/CVE-2025/CVE-2025-633xx/CVE-2025-63307.json new file mode 100644 index 00000000000..1fa6db80618 --- /dev/null +++ b/CVE-2025/CVE-2025-633xx/CVE-2025-63307.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63307", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-06T16:16:13.687", + "lastModified": "2025-11-06T16:16:13.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Theethat-Thamwasin/CVE-2025-63307", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/alexusmai/laravel-file-manager", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-63xx/CVE-2025-6325.json b/CVE-2025/CVE-2025-63xx/CVE-2025-6325.json new file mode 100644 index 00000000000..6f243970b1a --- /dev/null +++ b/CVE-2025/CVE-2025-63xx/CVE-2025-6325.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-6325", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:14.643", + "lastModified": "2025-11-06T16:16:14.643", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through <= 51.1.36." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-63xx/CVE-2025-6327.json b/CVE-2025/CVE-2025-63xx/CVE-2025-6327.json new file mode 100644 index 00000000000..19233ae95a6 --- /dev/null +++ b/CVE-2025/CVE-2025-63xx/CVE-2025-6327.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-6327", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:14.787", + "lastModified": "2025-11-06T16:16:14.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64196.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64196.json new file mode 100644 index 00000000000..a7a021e1767 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64196.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64196", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.837", + "lastModified": "2025-11-06T16:16:13.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-jetpack/vulnerability/wordpress-booster-for-woocommerce-plugin-7-2-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64198.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64198.json new file mode 100644 index 00000000000..23198c22520 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64198.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64198", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:13.990", + "lastModified": "2025-11-06T16:16:13.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through < 10.7.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/easy-social-share-buttons3/vulnerability/wordpress-easy-social-share-buttons-plugin-10-7-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64224.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64224.json new file mode 100644 index 00000000000..6cfd8ca637c --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64224.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64224", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:14.173", + "lastModified": "2025-11-06T16:16:14.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/grandconference-custom-post/vulnerability/wordpress-grand-conference-theme-custom-post-type-plugin-2-6-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64232.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64232.json new file mode 100644 index 00000000000..ec8174c7b16 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64232.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64232", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:14.333", + "lastModified": "2025-11-06T16:16:14.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Import from YML import-from-yml allows Reflected XSS.This issue affects Import from YML: from n/a through <= 3.1.17." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/import-from-yml/vulnerability/wordpress-import-from-yml-plugin-3-1-17-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64287.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64287.json new file mode 100644 index 00000000000..93ad0207c53 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64287.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64287", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-11-06T16:16:14.493", + "lastModified": "2025-11-06T16:16:14.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a through <= 1.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/alloggio/vulnerability/wordpress-alloggio-hotel-booking-theme-theme-1-8-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json index ab54b2b8d3c..3d479692591 100644 --- a/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7938", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-21T20:15:56.803", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:12:01.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -122,24 +122,67 @@ "value": "CWE-639" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jerryshensjf:jpacookieshop:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E2103314-C2E8-4D21-ADD1-18ED5B7C6256" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Bemcliu/cve-reports/blob/main/cve-02-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Privilege%20Escalation/readme.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.618985", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json index 9075487c6fb..1545dd85693 100644 --- a/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7939", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-21T21:15:27.380", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-06T16:01:03.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,67 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jerryshensjf:jpacookieshop:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E2103314-C2E8-4D21-ADD1-18ED5B7C6256" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Bemcliu/cve-reports/blob/main/cve-03-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Arbitrary%20File%20Upload/readme.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317076", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317076", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.618986", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/README.md b/README.md index c667f71bc11..dc324c887f1 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-06T15:00:12.616580+00:00 +2025-11-06T17:00:12.023817+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-06T14:57:37.237000+00:00 +2025-11-06T16:57:54.323000+00:00 ``` ### Last Data Feed Release @@ -33,44 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -113355 +113541 ``` ### CVEs added in the last Commit -Recently added CVEs: `0` +Recently added CVEs: `154` +- [CVE-2025-62046](CVE-2025/CVE-2025-620xx/CVE-2025-62046.json) (`2025-11-06T16:16:11.123`) +- [CVE-2025-62047](CVE-2025/CVE-2025-620xx/CVE-2025-62047.json) (`2025-11-06T16:16:11.303`) +- [CVE-2025-62049](CVE-2025/CVE-2025-620xx/CVE-2025-62049.json) (`2025-11-06T16:16:11.440`) +- [CVE-2025-62051](CVE-2025/CVE-2025-620xx/CVE-2025-62051.json) (`2025-11-06T16:16:11.587`) +- [CVE-2025-62053](CVE-2025/CVE-2025-620xx/CVE-2025-62053.json) (`2025-11-06T16:16:11.733`) +- [CVE-2025-62055](CVE-2025/CVE-2025-620xx/CVE-2025-62055.json) (`2025-11-06T16:16:11.880`) +- [CVE-2025-62057](CVE-2025/CVE-2025-620xx/CVE-2025-62057.json) (`2025-11-06T16:16:12.030`) +- [CVE-2025-62059](CVE-2025/CVE-2025-620xx/CVE-2025-62059.json) (`2025-11-06T16:16:12.177`) +- [CVE-2025-62064](CVE-2025/CVE-2025-620xx/CVE-2025-62064.json) (`2025-11-06T16:16:12.327`) +- [CVE-2025-62065](CVE-2025/CVE-2025-620xx/CVE-2025-62065.json) (`2025-11-06T16:16:12.473`) +- [CVE-2025-62066](CVE-2025/CVE-2025-620xx/CVE-2025-62066.json) (`2025-11-06T16:16:12.617`) +- [CVE-2025-62067](CVE-2025/CVE-2025-620xx/CVE-2025-62067.json) (`2025-11-06T16:16:12.763`) +- [CVE-2025-62074](CVE-2025/CVE-2025-620xx/CVE-2025-62074.json) (`2025-11-06T16:16:12.910`) +- [CVE-2025-62075](CVE-2025/CVE-2025-620xx/CVE-2025-62075.json) (`2025-11-06T16:16:13.067`) +- [CVE-2025-62076](CVE-2025/CVE-2025-620xx/CVE-2025-62076.json) (`2025-11-06T16:16:13.243`) +- [CVE-2025-62914](CVE-2025/CVE-2025-629xx/CVE-2025-62914.json) (`2025-11-06T16:16:13.390`) +- [CVE-2025-62950](CVE-2025/CVE-2025-629xx/CVE-2025-62950.json) (`2025-11-06T16:16:13.540`) +- [CVE-2025-6325](CVE-2025/CVE-2025-63xx/CVE-2025-6325.json) (`2025-11-06T16:16:14.643`) +- [CVE-2025-6327](CVE-2025/CVE-2025-63xx/CVE-2025-6327.json) (`2025-11-06T16:16:14.787`) +- [CVE-2025-63307](CVE-2025/CVE-2025-633xx/CVE-2025-63307.json) (`2025-11-06T16:16:13.687`) +- [CVE-2025-64196](CVE-2025/CVE-2025-641xx/CVE-2025-64196.json) (`2025-11-06T16:16:13.837`) +- [CVE-2025-64198](CVE-2025/CVE-2025-641xx/CVE-2025-64198.json) (`2025-11-06T16:16:13.990`) +- [CVE-2025-64224](CVE-2025/CVE-2025-642xx/CVE-2025-64224.json) (`2025-11-06T16:16:14.173`) +- [CVE-2025-64232](CVE-2025/CVE-2025-642xx/CVE-2025-64232.json) (`2025-11-06T16:16:14.333`) +- [CVE-2025-64287](CVE-2025/CVE-2025-642xx/CVE-2025-64287.json) (`2025-11-06T16:16:14.493`) ### CVEs modified in the last Commit -Recently modified CVEs: `30` +Recently modified CVEs: `81` -- [CVE-2019-10149](CVE-2019/CVE-2019-101xx/CVE-2019-10149.json) (`2025-11-06T14:49:48.047`) -- [CVE-2019-16278](CVE-2019/CVE-2019-162xx/CVE-2019-16278.json) (`2025-11-06T14:57:37.237`) -- [CVE-2019-8720](CVE-2019/CVE-2019-87xx/CVE-2019-8720.json) (`2025-11-06T14:50:11.463`) -- [CVE-2021-34527](CVE-2021/CVE-2021-345xx/CVE-2021-34527.json) (`2025-11-06T14:51:15.250`) -- [CVE-2021-3560](CVE-2021/CVE-2021-35xx/CVE-2021-3560.json) (`2025-11-06T14:50:43.827`) -- [CVE-2021-4034](CVE-2021/CVE-2021-40xx/CVE-2021-4034.json) (`2025-11-06T14:50:26.470`) -- [CVE-2022-0185](CVE-2022/CVE-2022-01xx/CVE-2022-0185.json) (`2025-11-06T14:50:32.650`) -- [CVE-2022-0847](CVE-2022/CVE-2022-08xx/CVE-2022-0847.json) (`2025-11-06T14:50:37.153`) -- [CVE-2023-41064](CVE-2023/CVE-2023-410xx/CVE-2023-41064.json) (`2025-11-06T14:53:37.513`) -- [CVE-2023-4911](CVE-2023/CVE-2023-49xx/CVE-2023-4911.json) (`2025-11-06T14:50:50.053`) -- [CVE-2024-57520](CVE-2024/CVE-2024-575xx/CVE-2024-57520.json) (`2025-11-06T13:15:35.177`) -- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-11-06T13:15:36.597`) -- [CVE-2025-20362](CVE-2025/CVE-2025-203xx/CVE-2025-20362.json) (`2025-11-06T14:51:19.950`) -- [CVE-2025-2746](CVE-2025/CVE-2025-27xx/CVE-2025-2746.json) (`2025-11-06T13:58:06.383`) -- [CVE-2025-2747](CVE-2025/CVE-2025-27xx/CVE-2025-2747.json) (`2025-11-06T13:58:01.850`) -- [CVE-2025-3248](CVE-2025/CVE-2025-32xx/CVE-2025-3248.json) (`2025-11-06T13:57:48.910`) -- [CVE-2025-34028](CVE-2025/CVE-2025-340xx/CVE-2025-34028.json) (`2025-11-06T13:57:56.350`) -- [CVE-2025-41244](CVE-2025/CVE-2025-412xx/CVE-2025-41244.json) (`2025-11-06T13:58:13.620`) -- [CVE-2025-43300](CVE-2025/CVE-2025-433xx/CVE-2025-43300.json) (`2025-11-06T14:52:56.203`) -- [CVE-2025-48384](CVE-2025/CVE-2025-483xx/CVE-2025-48384.json) (`2025-11-06T14:52:47.590`) -- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-11-06T14:15:44.150`) -- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-11-06T14:15:44.653`) -- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-11-06T14:15:44.797`) -- [CVE-2025-63298](CVE-2025/CVE-2025-632xx/CVE-2025-63298.json) (`2025-11-06T13:47:37.963`) -- [CVE-2025-6558](CVE-2025/CVE-2025-65xx/CVE-2025-6558.json) (`2025-11-06T14:52:01.530`) +- [CVE-2025-34273](CVE-2025/CVE-2025-342xx/CVE-2025-34273.json) (`2025-11-06T16:28:38.233`) +- [CVE-2025-34274](CVE-2025/CVE-2025-342xx/CVE-2025-34274.json) (`2025-11-06T16:27:58.503`) +- [CVE-2025-34277](CVE-2025/CVE-2025-342xx/CVE-2025-34277.json) (`2025-11-06T16:27:31.010`) +- [CVE-2025-34298](CVE-2025/CVE-2025-342xx/CVE-2025-34298.json) (`2025-11-06T16:27:12.660`) +- [CVE-2025-38240](CVE-2025/CVE-2025-382xx/CVE-2025-38240.json) (`2025-11-06T16:22:49.323`) +- [CVE-2025-38479](CVE-2025/CVE-2025-384xx/CVE-2025-38479.json) (`2025-11-06T16:22:25.180`) +- [CVE-2025-40599](CVE-2025/CVE-2025-405xx/CVE-2025-40599.json) (`2025-11-06T16:41:11.763`) +- [CVE-2025-40603](CVE-2025/CVE-2025-406xx/CVE-2025-40603.json) (`2025-11-06T16:26:50.913`) +- [CVE-2025-41673](CVE-2025/CVE-2025-416xx/CVE-2025-41673.json) (`2025-11-06T16:45:33.930`) +- [CVE-2025-41674](CVE-2025/CVE-2025-416xx/CVE-2025-41674.json) (`2025-11-06T16:45:25.293`) +- [CVE-2025-41675](CVE-2025/CVE-2025-416xx/CVE-2025-41675.json) (`2025-11-06T16:45:17.543`) +- [CVE-2025-41676](CVE-2025/CVE-2025-416xx/CVE-2025-41676.json) (`2025-11-06T16:45:10.670`) +- [CVE-2025-41677](CVE-2025/CVE-2025-416xx/CVE-2025-41677.json) (`2025-11-06T16:45:01.420`) +- [CVE-2025-41678](CVE-2025/CVE-2025-416xx/CVE-2025-41678.json) (`2025-11-06T16:44:52.220`) +- [CVE-2025-41679](CVE-2025/CVE-2025-416xx/CVE-2025-41679.json) (`2025-11-06T16:44:44.590`) +- [CVE-2025-41681](CVE-2025/CVE-2025-416xx/CVE-2025-41681.json) (`2025-11-06T16:44:36.567`) +- [CVE-2025-44823](CVE-2025/CVE-2025-448xx/CVE-2025-44823.json) (`2025-11-06T16:41:01.823`) +- [CVE-2025-44824](CVE-2025/CVE-2025-448xx/CVE-2025-44824.json) (`2025-11-06T16:40:35.863`) +- [CVE-2025-53964](CVE-2025/CVE-2025-539xx/CVE-2025-53964.json) (`2025-11-06T16:43:59.190`) +- [CVE-2025-58337](CVE-2025/CVE-2025-583xx/CVE-2025-58337.json) (`2025-11-06T16:15:58.870`) +- [CVE-2025-58727](CVE-2025/CVE-2025-587xx/CVE-2025-58727.json) (`2025-11-06T15:26:27.320`) +- [CVE-2025-58728](CVE-2025/CVE-2025-587xx/CVE-2025-58728.json) (`2025-11-06T15:27:47.257`) +- [CVE-2025-58739](CVE-2025/CVE-2025-587xx/CVE-2025-58739.json) (`2025-11-06T15:46:17.883`) +- [CVE-2025-7938](CVE-2025/CVE-2025-79xx/CVE-2025-7938.json) (`2025-11-06T16:12:01.390`) +- [CVE-2025-7939](CVE-2025/CVE-2025-79xx/CVE-2025-7939.json) (`2025-11-06T16:01:03.883`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 9a4d48a10bb..1bd13b20b53 100644 --- a/_state.csv +++ b/_state.csv @@ -47479,13 +47479,13 @@ CVE-2011-1000,0,0,3e01a320cc4f9ac85c4b2d7a050bfd4d723835926a8f5aaf9e175498ef4ca4 CVE-2011-1001,0,0,11839c7b8e84067f9cb7b0fb6341ae801683b41bcddc1fb61a0d4d9d0b6749f0,2025-04-11T00:51:21.963000 CVE-2011-1002,0,0,d33347c721e3b89d36f002b1fe6013c7e41d667ea328068299497443349dd1dd,2025-04-11T00:51:21.963000 CVE-2011-1003,0,0,d7e1f3fe9a186593ca7a3a72b1b932ddf10706cfcc913dbcaa45bff48d214fa4,2025-04-11T00:51:21.963000 -CVE-2011-10035,0,1,c3515e3c36a0d1e248b8e8151173bca6ea354bda279123063c1c77505d50319f,2025-11-06T14:13:16.653000 -CVE-2011-10036,0,1,4c66fb4a7edfe91b19e2d74c630527dccf52686aff7f437318c0d7c575f4c3ad,2025-11-06T14:32:23.067000 -CVE-2011-10037,0,1,41428a18e02b019325b2eeefd5519bfd9f06db69c1eac5dfa268c2042557cb03,2025-11-06T14:35:47.960000 -CVE-2011-10038,0,1,98d6c3fb552d3beafd5684ba6927bfc2bf578a4b430ba48937a760ab0186879d,2025-11-06T14:41:20.613000 -CVE-2011-10039,0,1,b0b1fa769b3e2891bc856de6305ab5ba6b514d853906ed7db48d62568cd38a23,2025-11-06T14:55:20.567000 +CVE-2011-10035,0,0,c3515e3c36a0d1e248b8e8151173bca6ea354bda279123063c1c77505d50319f,2025-11-06T14:13:16.653000 +CVE-2011-10036,0,0,4c66fb4a7edfe91b19e2d74c630527dccf52686aff7f437318c0d7c575f4c3ad,2025-11-06T14:32:23.067000 +CVE-2011-10037,0,0,41428a18e02b019325b2eeefd5519bfd9f06db69c1eac5dfa268c2042557cb03,2025-11-06T14:35:47.960000 +CVE-2011-10038,0,0,98d6c3fb552d3beafd5684ba6927bfc2bf578a4b430ba48937a760ab0186879d,2025-11-06T14:41:20.613000 +CVE-2011-10039,0,0,b0b1fa769b3e2891bc856de6305ab5ba6b514d853906ed7db48d62568cd38a23,2025-11-06T14:55:20.567000 CVE-2011-1004,0,0,a38b17200a4783a791b75f629337fa16d3282f2fffb6fa6a8bb0916d37953e64,2025-04-11T00:51:21.963000 -CVE-2011-10040,0,0,fd0cd8b29c263cbac5b22fe416aaebd39ba1baa104ba4da96e056236e4be5419,2025-11-04T15:41:56.843000 +CVE-2011-10040,0,1,b1f0e28c68a87b319b047e4d2a9a879787ff7e4f9c22952eca6a2a898da161bd,2025-11-06T15:08:55.503000 CVE-2011-1005,0,0,94c55b66c993a5537f11fde2d98c14315ccd2dc9c5965bcd3f59f0af0eea936e,2025-04-11T00:51:21.963000 CVE-2011-1006,0,0,c381b8885d54809d5ae482f3bc3535cdf4621a1d316d57568cc2b1630434b88e,2025-04-11T00:51:21.963000 CVE-2011-1007,0,0,c5a3e40391759f8c1e0785282e012905066ef3ba570433a3d5a799c6a4eac735,2025-04-11T00:51:21.963000 @@ -52130,7 +52130,7 @@ CVE-2012-1003,0,0,bf491b7c5a5b612ca1fd25d20f262f636acda527188e62d2bd767eea6c28d3 CVE-2012-1004,0,0,c77ea84ccac832dea2342e22b661529f32d2aeeab277d165eea2a90936518eb4,2025-04-11T00:51:21.963000 CVE-2012-1005,0,0,c7de87ab458dcaf1efc408cf74e453a6d457bde500d3a0cf5b0d856b2ad4a3d8,2025-04-11T00:51:21.963000 CVE-2012-1006,0,0,f6fde31dc23d7530eccdb2f48267f09c5e693dc3175954f575cb7538c9e1da47,2025-04-11T00:51:21.963000 -CVE-2012-10063,0,0,011f974f47c7ddce18638274a06a37df46ac534793aae6006684d29ce593b2ab,2025-11-04T15:41:56.843000 +CVE-2012-10063,0,1,4797e3db4c81d36994cbf230be4957b5dd9977aae70d19e5ee19ac457ca99108,2025-11-06T15:09:58.743000 CVE-2012-1007,0,0,d248a606d7cc461ea5697eec3916158e49bfa490dd3b0ea03124b71efb01ed35,2025-04-11T00:51:21.963000 CVE-2012-1008,0,0,7a7a42dbbb2da7961c4cdeffba3b232c068df949f75d8115baffdac2fe3c5f15,2025-04-11T00:51:21.963000 CVE-2012-1009,0,0,dd05ef6e0475ff4c6dad4bbc7b96d636f691c0f1a60b23ea77af268a2d8d9a15,2025-04-11T00:51:21.963000 @@ -57660,10 +57660,10 @@ CVE-2013-1004,0,0,2b9587fa03416ba452bd455a0de9a08b8ed5cccceb6dde7b2f86e5026f1148 CVE-2013-1005,0,0,ad80814c89e313355685f4af130df1b83085d39bec32f01366ed62fd8bd99745,2025-04-11T00:51:21.963000 CVE-2013-1006,0,0,3b8c64a4e7a761568f0b8e8cc36c10514624136aebc70e9bf5a3759142da0048,2025-04-11T00:51:21.963000 CVE-2013-1007,0,0,567a1ddc518a88bcd3ffa4d19ebe423641ee626e871d2505031417b5302c23b1,2025-04-11T00:51:21.963000 -CVE-2013-10071,0,0,63a69f41d2d97e6563522ba4c9146e8b13bc9cb5a9d9096793c799b26bc7bb8a,2025-11-04T15:41:56.843000 -CVE-2013-10072,0,0,3c2e569cf638572b27933dad09d3c6e5d3b79b4ba34a550ca4a6e3b777e3c364,2025-11-04T15:41:56.843000 -CVE-2013-10073,0,0,9c4d44020aa8acdc6a8a5e830d9e2bcc3d97cd9e2016cb745adc15eaecbaf5a9,2025-11-04T15:41:56.843000 -CVE-2013-10074,0,0,67c77582775436a2324a7d6ddaac422abdc1c4df0ef9b34046d66ac2bd8166c4,2025-11-04T15:41:56.843000 +CVE-2013-10071,0,1,36298358ca5c4d7db3e91253aaaad658fdf9ccf499a5d829a20cd461687936a4,2025-11-06T15:16:09.650000 +CVE-2013-10072,0,1,2ba472a445956c92ad86c35aefe87f7289fdbed8c91f6aafe537dbf2a5fcdd15,2025-11-06T15:17:13.803000 +CVE-2013-10073,0,1,8452f8b2843ccbc76b021903d3f70307f6e25c071a1c5169f3320abeac02d8ef,2025-11-06T16:24:10.723000 +CVE-2013-10074,0,1,14bf877db92df2a837b90fb21ae9c01a2ab922dac20e4e77c59f44fcfc1a0564,2025-11-06T16:23:26.760000 CVE-2013-1008,0,0,0cacc0b738ab3dfd13c0f307b0b6fb1b2d79a54ab54e4c13c72ed970c1be6d31,2025-04-11T00:51:21.963000 CVE-2013-1009,0,0,5f744f408c34812c2fb2261d603408eb7b97915fb51171ec3385d3b8874cda87,2025-04-11T00:51:21.963000 CVE-2013-1010,0,0,ca9ae3de2c9a112a40530f93f25c4bea16beb5badf4a37642b9f195bd97094d3,2025-04-11T00:51:21.963000 @@ -105983,6 +105983,7 @@ CVE-2018-9272,0,0,ac554883181ea7a8e6a7dc5aae78490d576013aafb81a6f499cfcb5caabdc3 CVE-2018-9273,0,0,87b88345c90ffaef935bcb7a09ce9476b02fca862f53f32581cc84e26fac9166,2024-11-21T04:15:16.210000 CVE-2018-9274,0,0,2eb92080af4fbf961f1e5f751288f455e1c66b2f5e2512eefdfab3ef55f08244,2024-11-21T04:15:16.370000 CVE-2018-9275,0,0,a8d6e5bdcca45958f73a4232e8f17755e94443388e2a9fc9a136fe387e6300a1,2024-11-21T04:15:16.520000 +CVE-2018-9276,0,1,6877e6b5861c13e3eaeaad105f87b7a685f0ade4fbc73a911f98511a4879d493,2025-11-06T16:51:52.337000 CVE-2018-9284,0,0,905a8f7356302d91993be47cb95aa261343a4303798daeceb8252d675d415e48,2024-11-21T04:15:17.563000 CVE-2018-9285,0,0,32ed8f52583a9c27f0bbdd3306e8029b7a64db61e70e754d7253c636a97e4f36,2024-11-21T04:15:17.713000 CVE-2018-9303,0,0,568a87f8d5b9ce780748570bf92421b327381fb913164f15546b1eeff238f176,2024-11-21T04:15:18.027000 @@ -106048,16 +106049,29 @@ CVE-2018-9993,0,0,3d91a09733cd4b6ae71d12f857b6705a1e1b217dad8f3d38cf871d12e2954e CVE-2018-9995,0,0,6ea26148dfc096fb70f100fde009c8d11d411af26ee97b913f64af2e5d681002,2024-11-21T04:16:00.300000 CVE-2018-9996,0,0,c328a9b4233caf367190ccf53fd663ba811e3eafeb588d7f1a14f74a156482b6,2024-11-21T04:16:00.480000 CVE-2018-9999,0,0,d2bbf59a3fccab263efa6baf5667e369b345f6c841bc08dedd3ccac44778e130,2024-11-21T04:16:00.963000 -CVE-2019-10149,0,1,70330365c0579d0e55c020b0eee1673f5331e495c828c50c5044c743a3367268,2025-11-06T14:49:48.047000 +CVE-2019-10068,0,1,75117f602affc5bbab31446f1d29a349bb34cc758ce14956687cb0b21490c13b,2025-11-06T16:51:41.367000 +CVE-2019-10149,0,0,70330365c0579d0e55c020b0eee1673f5331e495c828c50c5044c743a3367268,2025-11-06T14:49:48.047000 +CVE-2019-11001,0,1,9f2eed3c688ffd6515836e1ff1597e480e8536d09b0f22d142c2ce6b85ac7b7b,2025-11-06T16:51:36.630000 CVE-2019-11043,0,0,21baa99d99b26a064af3de4ee5b765123e0272e630baf744b0921e1382775e41,2025-11-03T19:23:46.417000 CVE-2019-11483,0,0,12b3022ec02855fc0cd7fddff6aa9bfe383db9d7887a6c3a1ee075957935576a,2025-11-03T20:15:42.080000 +CVE-2019-11510,0,1,5b198683afc8a10f930942e3eccc38949358e760ececdcadc98219e080de1d4a,2025-11-06T16:51:32.237000 +CVE-2019-11539,0,1,9a3f50e8d166d0f6402eb4dc23b36a6fd705019639fe7747644eb8686936e744,2025-11-06T16:51:27.347000 +CVE-2019-11634,0,1,00f1514e829d7f573d36c076d4a15f21c7647887c23fef9c0c1cae6e43ece07a,2025-11-06T16:51:22.557000 CVE-2019-12815,0,0,d0c1e10ac091df23e0b8018ca6f64b1619b98a0a3bc5e8dd0acaaa1172e50f71,2025-11-04T16:15:42.160000 +CVE-2019-12989,0,1,dbc774a7e6fe61011b4fec49af367212d4d09d903b045eb886d035e3a4a98afa,2025-11-06T16:51:18.340000 +CVE-2019-12991,0,1,75fc4f1c07bdebab00be1483f181cb7f97b9ed19d556620cd5fcd21d754cbd20,2025-11-06T16:51:13.703000 CVE-2019-13147,0,0,08b2a891000bea99d4d6dbe94a1b80321c177ef1b4d9add8869d4be95cdbf6ac,2025-11-03T20:15:42.290000 +CVE-2019-13272,0,1,e2b3213d57744d69d6cb1db650177cab793f030b1a4e2dfa39bfe96eb4d3f574,2025-11-06T16:51:07.910000 +CVE-2019-13608,0,1,6778ef6afe64b40bbb9a46725b87a9ad0e1f20f9219ab23e1f6d4e66d3e5647b,2025-11-06T16:02:33.673000 CVE-2019-1387,0,0,22e4ebedaa83233607626eb91010d192c5e6a7bd09ad2fe2c6081ccf9bb2fc76,2025-11-04T16:15:42.387000 CVE-2019-14196,0,0,745c220c47787acf28cddec75e9625924f2c29c6cae59331738f19c5821fd4da,2025-11-03T20:15:42.423000 +CVE-2019-15107,0,1,67096c2fc29b0db37c16ec2051033d8d43d819aa5287ecf943b55f8847a0b427,2025-11-06T16:50:47.130000 +CVE-2019-15752,0,1,240749a5763d9f8b94c599f3fdc7e3372202a99c556b0c26a73588f33fb14ec4,2025-11-06T16:29:29.853000 CVE-2019-1579,0,0,7bbe46cd590f73964152253a505def4422c6d2a86fed1d9975f908caf34e3ef9,2025-11-04T16:49:38.163000 CVE-2019-15790,0,0,1e855177f0f3bb3b90b46e39921e453cd9c6217b3a39c93663f9736466d11322,2025-11-03T20:15:42.550000 -CVE-2019-16278,0,1,73019e84a04344906d3f0dc74941393c75225dcb34ffad347d41f6db9cdad59b,2025-11-06T14:57:37.237000 +CVE-2019-15949,0,1,ed60469bc06a440971d52abcc9640f3219dbcb09bf547dbbbae5dc311d0380dd,2025-11-06T16:27:50.293000 +CVE-2019-16057,0,1,d335c630d1f8a36890268049c051156bea92854c0c0cb3b5bafc722fe15441f2,2025-11-06T16:18:38.843000 +CVE-2019-16278,0,0,73019e84a04344906d3f0dc74941393c75225dcb34ffad347d41f6db9cdad59b,2025-11-06T14:57:37.237000 CVE-2019-17026,0,0,558db2a9fc43fbc915199d66eb257f77cb121b0560d314240bd6fa21277a5652,2025-11-04T14:34:39.563000 CVE-2019-18860,0,0,59336d1de1b4164742f18ed0225334f7e30227c6056cc48337573b7cbb41765d,2025-11-05T17:15:33.743000 CVE-2019-19391,0,0,e2d5532bf21ebf878af58b99e26a49bb4f35bb2b0cfe73bf5935f72b0547c025,2025-11-03T19:15:39.210000 @@ -106073,7 +106087,9 @@ CVE-2019-25211,0,0,308b02def3fb5e4df1b84b4d584988a177643cd1707d2e99a3680deca3ac0 CVE-2019-3728,0,0,98a9ab5d4acabdb69352691110678bded60c4c1935c8d09f755558507422aa0a,2025-11-04T22:15:52.877000 CVE-2019-3929,0,0,67ec2fe60020400cf0c9b5203460d0514d446b444d9bd81aff506414d4456fea,2025-11-03T18:59:33.857000 CVE-2019-6285,0,0,0512c8b443254fb3a7e909a45d013ee7232c4c2cddb5a6e79b4c5b75d72a1487,2025-11-03T22:15:46.040000 -CVE-2019-8720,0,1,430c8da03baa36afc0581f0ccc64d44b79d4195ed6372070f96e00fee5a27b72,2025-11-06T14:50:11.463000 +CVE-2019-7238,0,1,a68b7b21baafbfb6d464236ba84ce59ed3d630bfb3398dcfca33dd453f2e67a0,2025-11-06T16:57:54.323000 +CVE-2019-7256,0,1,5c140e13ef480faa621c568961542af861547de8c79813dad9ebf5fc01632e39,2025-11-06T16:52:01.123000 +CVE-2019-8720,0,0,430c8da03baa36afc0581f0ccc64d44b79d4195ed6372070f96e00fee5a27b72,2025-11-06T14:50:11.463000 CVE-2019-9283,0,0,34785a30e909b38c2d49a2bc9c7e76ffaaeaf1289e60729377cb9d511e695de6,2025-11-04T22:15:53.017000 CVE-2019-9621,0,0,c19698f76cb77c8ef2e8cf24804f8e986f73b7edc8098a02af2408e4a7bafbd4,2025-11-04T16:46:00.360000 CVE-2019-9670,0,0,7a9078f8e66ea308ebaed077601f8ae127545044d784d49e18aa35007567cc08,2025-11-04T16:46:39.610000 @@ -106211,9 +106227,9 @@ CVE-2021-33646,0,0,7a0325bff5781c65fbcf577e9de1ea08886dc48abdfbc66ae90c09e1e5abc CVE-2021-3377,0,0,cfb13967aeae5e3e4969572f9102cb63bdb845ef255814e16310a1b29f4250d3,2025-11-03T22:15:50.327000 CVE-2021-34193,0,0,954f2114cc8a4a556fb2dec79d099ccf13e04468dd91f453c81fd68c6df876d0,2025-11-03T22:15:48.797000 CVE-2021-3426,0,0,4ef145a3e0b568381791c39796a89278f6cc028c7365197d2920e13409354dd3,2025-11-03T22:15:50.480000 -CVE-2021-34527,0,1,2a09c350bb9cd9e1e35f43ac53992420976a608a68914c7ccaff32521de93e55,2025-11-06T14:51:15.250000 +CVE-2021-34527,0,0,2a09c350bb9cd9e1e35f43ac53992420976a608a68914c7ccaff32521de93e55,2025-11-06T14:51:15.250000 CVE-2021-35464,0,0,09ece0b244e209e2cb3f3c859fb0a10226e94f44f6ddb5de0b2f4d1dc1153ec9,2025-11-05T19:11:31.307000 -CVE-2021-3560,0,1,4500a7cfb953fe964f163d0659eacf5feac5dee0f81235b4047ebf7da7665aa0,2025-11-06T14:50:43.827000 +CVE-2021-3560,0,0,4500a7cfb953fe964f163d0659eacf5feac5dee0f81235b4047ebf7da7665aa0,2025-11-06T14:50:43.827000 CVE-2021-3575,0,0,45681508a8077575a26519232366dfc27023cacaa082486d9266652b46e04561,2025-11-03T20:15:50.027000 CVE-2021-36045,0,0,89da207c85477e3db77d8241f6b945ecd76858f380fa2faaa52f95d04c8eeaf6,2025-11-03T20:15:47.743000 CVE-2021-36046,0,0,e164bff1ec183876cf863f8c32d32f4975d2a9beffb18738185478bdbbbfc947,2025-11-03T20:15:47.900000 @@ -106256,7 +106272,7 @@ CVE-2021-3935,0,0,4af63b2f48b16f26b645bf039600cf1c2b7a0390420ce64d9045598c9246c7 CVE-2021-3979,0,0,13fe304ac306e46bc146f09d6d1d2a4ac9af728119aba3e6a74e203d0640e1c9,2025-11-03T19:15:40.360000 CVE-2021-39847,0,0,d9cb5889d3ac0f5346335589d69b62b84f5c1c4bde17b998460399ca63df3bd5,2025-11-03T20:15:49.890000 CVE-2021-4019,0,0,56445097e5faaf70cdb8d05aae06568d08fd035d215948e60c5a8009b053a4fc,2025-11-03T21:15:47.557000 -CVE-2021-4034,0,1,68509ec48f5f06e896cf4de3917a75db9cb06307b161242fc0852ffccdcefc22,2025-11-06T14:50:26.470000 +CVE-2021-4034,0,0,68509ec48f5f06e896cf4de3917a75db9cb06307b161242fc0852ffccdcefc22,2025-11-06T14:50:26.470000 CVE-2021-40407,0,0,09c1e527d004192d2a5614f208715c96165a392f690d60f0de2228b3ca1a4066,2025-11-03T18:59:38.180000 CVE-2021-40524,0,0,cb91d420e58071a3c61e37a2a17caae7fac49c02bb277803129119692d69376b,2025-11-04T01:15:31.910000 CVE-2021-40539,0,0,4b02168b038c01f3486139bc19cb3793f8556c4ebe8aa511480a090db8a449a9,2025-11-05T19:13:20.713000 @@ -106359,7 +106375,7 @@ CVE-2021-47698,0,0,851f85cc700f09f659615cb5180e45a9e0508d03e937cd864394b2657772d CVE-2021-47699,0,0,96634484f21d0e6ce9ee69ba864a4f018cbf0d3430b6f3668c3e7ab8719f5daf,2025-11-05T18:22:32.013000 CVE-2021-47700,0,0,cb9b11982cd4388f19a514bcb3a2bdfd0d7b5628ebf038b29e3b4278d9e984db,2025-11-05T18:22:22.017000 CVE-2022-0028,0,0,bb347fa9e710d42adde25ac79b27c58d45a59e3f65de0139887b6c2a79793795,2025-11-04T16:49:41.863000 -CVE-2022-0185,0,1,7560bf5ff5b93fd53457ac7521afb69f81a652cee6a9e8ab31363e82fdee6a71,2025-11-06T14:50:32.650000 +CVE-2022-0185,0,0,7560bf5ff5b93fd53457ac7521afb69f81a652cee6a9e8ab31363e82fdee6a71,2025-11-06T14:50:32.650000 CVE-2022-0194,0,0,573678a2c965ac5b264d53fc1ee412f5f5aeefa4a8fca787653959d12adff072,2025-11-04T20:16:03.103000 CVE-2022-0204,0,0,a9dbd58f1d7a89813a4ff4741b7306e11d52f24f67bda6c8adb8d8b7789a1fb4,2025-11-04T16:15:46.130000 CVE-2022-0261,0,0,bf2db1d5e0d74355296c2b42063e1de0bbb51ad70f75680cac95ae6add9096c7,2025-11-03T21:15:48.270000 @@ -106378,7 +106394,7 @@ CVE-2022-0583,0,0,f86b7318a8fa77a636422e384cc54206624190968e52b7880565f35d2787f1 CVE-2022-0585,0,0,fac029dbf3f655edec68c078b816d74e6aefb3531f8edf911359594eeb0662d1,2025-11-03T22:15:54.990000 CVE-2022-0586,0,0,6f52e5acdf7d9ed6e910f5b36a85d1d95407e901dd2cff0e1950b1e14cedfdfc,2025-11-03T22:15:55.133000 CVE-2022-0839,0,0,95ac3db4f3865b7e5a471dadeca9f0ae398d99e7639a5e0cb78700ebef61dcbe,2025-11-03T20:15:52.180000 -CVE-2022-0847,0,1,cb005196664f3ab4636a3635d07e416d330611c287a8c139f5e102b18fc4ac60,2025-11-06T14:50:37.153000 +CVE-2022-0847,0,0,cb005196664f3ab4636a3635d07e416d330611c287a8c139f5e102b18fc4ac60,2025-11-06T14:50:37.153000 CVE-2022-0866,0,0,3fbc9ed5907671e6c3e3f53a6d1ae14cab52b1ea5a4b0b5cd4813442803851a7,2025-11-06T11:33:54.897000 CVE-2022-0918,0,0,da7c05336a3750b67b11057ffafd65790b005592f353122e7dcb9ac550fa9ba8,2025-11-03T21:15:50.207000 CVE-2022-0934,0,0,e7571a4b0ee4ef68c8c43ebed34c069019a1ed71c17c552b45643b114f81bddd,2025-11-03T22:15:55.280000 @@ -106642,8 +106658,8 @@ CVE-2022-47194,0,0,f80dde3f5c36c2cfd813989fa9956d5a5a351adfb38f7475d8b5d6aa44e84 CVE-2022-47195,0,0,7197deaab47783ea44ef1a312ef14092c0b33ef39b9851a362a9d6f619a5e4eb,2025-11-04T20:16:14.103000 CVE-2022-47196,0,0,066b9a04f6f1e0856cb9ca823eee6b60f5976d04b071a918c48e41202aa62ee7,2025-11-04T20:16:14.250000 CVE-2022-47197,0,0,9e799374b6c734e8659eb1684be58dd6d4b2f2987cd0db2a7ecd33baba3cc5ff,2025-11-04T20:16:14.560000 -CVE-2022-47878,0,0,fcc30a04ae750a4b4a0d50555de0fce1c7467459c7448ea1360d6e2e78e7e090,2025-11-05T21:15:33.253000 -CVE-2022-47879,0,0,ed01d8a1bfce875095d103968ef393b4e714207b4d63ce2f6005a4dcabf9bb8c,2025-11-05T21:15:33.910000 +CVE-2022-47878,0,1,602a14e109341b9cef54f031d7da0a275a862c6e26fc0e5636b3af2829ab4611,2025-11-06T15:15:44.323000 +CVE-2022-47879,0,1,6488b94273aadea1218408bd692a460243379b73b3f51407cc095701a906dc1c,2025-11-06T15:15:45.500000 CVE-2022-48174,0,0,cbb47754768e42ba84230d8e430ad925ac9a992990f5173fd3f8cfc82d0725b6,2025-11-03T21:15:54.600000 CVE-2022-48257,0,0,86c7bf5b10639e25aaf872b7c9d41d352c6f6c51e33fa2ac77cfbaf3802b0351,2025-11-04T18:15:39.697000 CVE-2022-48258,0,0,fcbf595ecc05eb3f7dfb616910f41b7fbb748f88f65e01e67fb281f27206f0ac,2025-11-04T18:15:39.897000 @@ -107160,7 +107176,7 @@ CVE-2023-40890,0,0,57b3d0b4044b926acbf06de275cedca56d5dc654b0d3c3a63312611738331 CVE-2023-41040,0,0,5718ce0cc04d03a1408cec86ec92fa63458b81a29a2923f1d35ca183c174b343,2025-11-03T22:16:26.430000 CVE-2023-41060,0,0,3a3437ad0d4e7eeddbb8d6e0c5abf883181d092482490c3e093237832af032a9,2025-11-04T20:16:43.633000 CVE-2023-41063,0,0,4e955065756e31cbf46bd64dfaf28e26dcce4c65ca2f6c90b01c4674354a0f7e,2025-11-04T20:16:43.800000 -CVE-2023-41064,0,1,560f09c6cebd271f815c4bc7a65d9c1b54008e2218952df4eb0dde3175ab2be5,2025-11-06T14:53:37.513000 +CVE-2023-41064,0,0,560f09c6cebd271f815c4bc7a65d9c1b54008e2218952df4eb0dde3175ab2be5,2025-11-06T14:53:37.513000 CVE-2023-41065,0,0,dfac142daaaeb4426579ec2b44fe8f611ff2a26a81a666105f1bb82417e10880,2025-11-04T20:16:44.187000 CVE-2023-41066,0,0,ea2c62e843bed262c83e8debae42ec334100b75d01ecba83b067575363f19a13,2025-11-04T20:16:44.337000 CVE-2023-41067,0,0,b1f0fa01237f14f57fc4a4825a4b7559a981ac5f12b3d5e6d9382eb80bc86fba,2025-11-04T20:16:44.457000 @@ -107472,7 +107488,7 @@ CVE-2023-49081,0,0,b443ef6fc945d7ad214b7d72fac0da2a30689781e2a7a46e4a46486f55cbf CVE-2023-49082,0,0,9375e66d03d429a4d0d189aec46910eb1d3675cd0e1147215634406ea9c84580,2025-11-04T19:16:08.680000 CVE-2023-49083,0,0,29080d134e49257df4c49a58995cb062b900264cd7908d2c16aa1f5423b156ab,2025-11-03T22:16:29.837000 CVE-2023-49086,0,0,4533d9a6ff92127fc67f4f1bad5bc092c37e5c0a844f3cea2d74c501d025cf6d,2025-11-04T19:16:08.820000 -CVE-2023-4911,0,1,43158e5779071be1f047a4a7346b06a85376d1ab4eab071cd488e59f26e86bfa,2025-11-06T14:50:50.053000 +CVE-2023-4911,0,0,43158e5779071be1f047a4a7346b06a85376d1ab4eab071cd488e59f26e86bfa,2025-11-06T14:50:50.053000 CVE-2023-49110,0,0,e600259445efcabbf76be5c24171a8f7ad2732c91543192f07314b85962863a3,2025-11-04T18:15:43.230000 CVE-2023-49111,0,0,3439f865e407636dc6d027aa48d7c275bd26898d7e29784e17ed8490bb306998,2025-11-04T18:15:43.390000 CVE-2023-49112,0,0,2effd5bb18cb2b47049fddd1d1d56cb9defcbca8af9162f4cde16ed555b07b63,2025-11-04T18:15:43.530000 @@ -107667,13 +107683,13 @@ CVE-2023-7312,0,0,9175c179906a68457cfab0125d142892c3290a4292ad0cbd584c1808797a5b CVE-2023-7313,0,0,2e5945420dc8d3b4ee271060838e6749a393e0776d8c4e5c1688a6079153df23,2025-11-05T18:21:31.103000 CVE-2023-7314,0,0,7b6116b4a0e46bef09fe1a1de6c2d48ae6402a35ac3eee160ef0acc8e9920492,2025-11-05T18:21:21.353000 CVE-2023-7315,0,0,739fe476b0c3d1e82cd8ce0b6bfefd7dfbdc4a4e09e77930d49087cc718ed120,2025-11-05T18:21:10.550000 -CVE-2023-7316,0,0,366c4a938135c4369374c8c2f287a217b821072a711cd072016d4ff23afd959a,2025-11-04T15:41:56.843000 -CVE-2023-7317,0,0,20c0e09fc5a14a5a04d409dded20621cbbc033616db229e21e063f3c4b8770e4,2025-11-04T15:41:56.843000 -CVE-2023-7318,0,0,672bebf1d6edb3cadc23d09dedb103f1ce87859128dc3335f9b4606ad2810ad3,2025-11-04T15:41:56.843000 +CVE-2023-7316,0,1,af250436966d5c8a960d1a0756e91e895fed2a144bc20e10c6bb16933dd4bd52,2025-11-06T16:22:59.143000 +CVE-2023-7317,0,1,25ca419c50ebcb115099eee703814e17d1c5d3a597fe2e5d37344400ded5e611,2025-11-06T16:22:37.800000 +CVE-2023-7318,0,1,5fcddf27314419344f6058b74360de237e7e8f4f112004cdbbac4f247fa393ce,2025-11-06T16:21:11.310000 CVE-2023-7319,0,0,f5820566d19306bba45b1837dd889b1d1f93808a942e7ff7ffe5c09ecb67f61a,2025-11-04T15:41:56.843000 CVE-2023-7321,0,0,20feedab2809891f3a9c263c909f833b31274a34933b4b7e19bbf583313f8f7e,2025-11-05T18:21:01.100000 -CVE-2023-7322,0,0,29a95f3ecf7d6558d45fba260ffd6973cc538d5b75ae8021ab67bfabb6839472,2025-11-04T15:41:56.843000 -CVE-2023-7323,0,0,e685c139cc031114cf0132e05ded4fe09a721b314932776ccc3f03be90288e44,2025-11-04T15:41:56.843000 +CVE-2023-7322,0,1,6238cdd5e89fcb9b49dceb580e5808773247738849cec627040bf9478e601d4d,2025-11-06T16:20:51.270000 +CVE-2023-7323,0,1,955ac2569cb0522ff2222d22da6c1eeb291a1122e8d89d7c59f65b429d35321c,2025-11-06T16:20:27.460000 CVE-2023-7325,0,0,feebf7a44b1b8e86f90bd0a4a4662f21827c6398dd1bc6b9458201a229d76368,2025-11-04T15:41:56.843000 CVE-2024-0012,0,0,137792967a441fe60ec02c4d8a9249f19179be6781056632d46d625c109e139c,2025-11-04T16:49:23.110000 CVE-2024-0071,0,0,52a14a6685bf088051f93c7df88e8925ec5b308b57a85c5d8b2d1e3e733996ff,2025-11-04T19:16:26.357000 @@ -107752,20 +107768,20 @@ CVE-2024-13978,0,0,cd9aa21e4367ecdd5376afd64bd838971c231e1f12d9593780edae94b33d0 CVE-2024-13986,0,0,9c21b5a3427884afd420e35ba3406834e96073f9785493d1e2caa7feba5e3d39,2025-11-04T23:15:33.787000 CVE-2024-13991,0,0,046a1074b7df1008eb67ba12e2319702404112be3b90df398b8cff78a90cd387,2025-11-03T16:15:32.180000 CVE-2024-13992,0,0,fe44c5d3ef7cdf31048b79d1295c350754cb5a967a2039bb684a0676ee67607a,2025-11-04T15:41:31.450000 -CVE-2024-13993,0,0,b270c3fc7cb765609563f9f9a4fa91d6bad9167d135d393c99b91ba58aa412f4,2025-11-04T15:41:56.843000 -CVE-2024-13994,0,0,968a5aa78382de9721b31680f42585d1b9f4b91d13363db4cd356c04b5dd1d01,2025-11-04T15:41:56.843000 -CVE-2024-13995,0,0,9a32cba9381639cd0823b32a7c0757d9951054706344f041ef3ca71b77ef9e12,2025-11-04T15:41:56.843000 -CVE-2024-13996,0,0,eab47bc4febbb5b8aa357755596e68a17482e376de99ecf6a687db592bef6c20,2025-11-04T15:41:56.843000 -CVE-2024-13997,0,0,4c9e41da5fd52c90bd7542a562c9ecaabde2fd928ba48aaebd9e3260d6299712,2025-11-04T15:41:31.450000 -CVE-2024-13998,0,0,4a83d0dab0d9c35bea8e10fc1cabccf342772be1d70aafb6193793174620d5b5,2025-11-04T15:41:31.450000 -CVE-2024-13999,0,0,82d317d15476cd552c17669480e184a9b9a066ba70084f112b92acc9e69ca637,2025-11-04T15:41:56.843000 -CVE-2024-14000,0,0,dc2c29632751f5e6ffbbe3137f2542ec2390bfa283bbd370d4432cfede4dbfd2,2025-11-04T15:41:56.843000 -CVE-2024-14001,0,0,577eee2d3ab17f362c85da53a7914c1d9deebdabad11419254261a74c6b63319,2025-11-04T15:41:56.843000 -CVE-2024-14002,0,0,224574f5b4cd439615ca6c7806ea5c88e1fb4be80b0ae02f3ad72e3192890489,2025-11-04T15:41:56.843000 -CVE-2024-14003,0,0,def0919a1e4e2119da7c30ae4b8cf9d77007a15a3210d7d46aeb65e0cb0d29ea,2025-11-04T15:41:56.843000 -CVE-2024-14004,0,0,bc92ccba75f17073d67779d650803777871e691f078ac9ca11bc78c230952a9b,2025-11-04T15:41:56.843000 -CVE-2024-14005,0,0,cf638aacd6d5500744241e23fe5a3d40e7a7d39b6212ffc39f97c52455c20562,2025-11-04T15:41:56.843000 -CVE-2024-14006,0,0,87b707ab5c85ee0dbbfe30f9b55533d628e4fb0278394b10868cdbe12a346c78,2025-11-04T15:41:56.843000 +CVE-2024-13993,0,1,6116b78bb69de7f5925602191cb917a9325faaf0a16392700138220cfd2c6e76,2025-11-06T16:18:50.893000 +CVE-2024-13994,0,1,ac25dfe35d34baae7e701c4c04f0a52c6b932dc5a2bd0c64223e0349d6e60c1e,2025-11-06T16:18:33.013000 +CVE-2024-13995,0,1,572df19afc9c8c43161f731b1c1c7d921d037c7a3652eebcb37e1f7be2d312d2,2025-11-06T16:17:59.713000 +CVE-2024-13996,0,1,8e17c8d58f7d25f6ca075f29b3340e74385fcab5204aca1ca459f0055c90c9bc,2025-11-06T16:17:23.587000 +CVE-2024-13997,0,1,ccf4a1ffc1a3078e5f3afd1808360074532f42ed3647b416e8a0f1063093353e,2025-11-06T16:24:49.683000 +CVE-2024-13998,0,1,f9626a45fea38a86744e2e7bb68d507e8e7327e4c611e1afee0d8c6970669740,2025-11-06T16:25:49.750000 +CVE-2024-13999,0,1,5eb0b72ba2698b9151631f0b5adcace3b1d4c92bdd67da49dd43a4fcd2f49ba3,2025-11-06T16:15:10.237000 +CVE-2024-14000,0,1,e6b1bbab92ef3e792422c7005b06e5ad3df09aed5eb12bd5fce50e450891220c,2025-11-06T16:12:35.853000 +CVE-2024-14001,0,1,c516990de9022eab3f1109278724a4940db0ded09662344086900c0eb9ea1834,2025-11-06T16:10:43.787000 +CVE-2024-14002,0,1,b28c687910c39e8dcf894abd294f062bacd008777254397568c20db64e723598,2025-11-06T16:23:37.760000 +CVE-2024-14003,0,1,cb5587e6de636547896bdb84385f2318055d92e94e4640741f9166bef141dbbe,2025-11-06T16:09:37.150000 +CVE-2024-14004,0,1,15d2742a7dc24d63a40374708aa5a2f7ef3a58f7d9e9808a4d7d88e46940c79f,2025-11-06T16:08:49.227000 +CVE-2024-14005,0,1,51eb9504ecbc7d80f6e04b857bea31933c3a2804824362abd6d0bd7006bda7ba,2025-11-06T16:36:47.133000 +CVE-2024-14006,0,1,1c55f20e12eb89b309b60b5a98d53a7408db2322f2ce8479ead003e396fc2d7c,2025-11-06T16:35:11.600000 CVE-2024-14008,0,0,1f77954b0ef62a6c96b2f995371e0b1b5e0b59e01a31f3203802812b93d85fb3,2025-11-04T15:41:56.843000 CVE-2024-14009,0,0,aa0a54bc34ec5c5f8622880c43ffdcc935350590aae14cf4369de778bd986b1c,2025-11-04T15:41:56.843000 CVE-2024-1454,0,0,480ff993a0bf7eebb183c1fb56600cff536dfd6b56679ad163fd30485a060393,2025-11-03T22:16:40.160000 @@ -108543,6 +108559,7 @@ CVE-2024-4040,0,0,6a1a37c3b81878de44631d895e6c1de5d67ee276a617199cd782f96b97eb9f CVE-2024-4058,0,0,5b7bdbd7c8034e5cd1121d1c22e2c515cb370fbbacf06acb417a2449dbda357e,2025-11-04T18:16:41.770000 CVE-2024-4059,0,0,aac1805af10350095438c7437bb13331de81e9979f1b9059ebe08efcc8303c8c,2025-11-04T18:16:41.993000 CVE-2024-4060,0,0,fce917d689234275f4f2bd263385d11e4ac662596b4a5fbd92b142265800efe0,2025-11-04T18:16:42.180000 +CVE-2024-40763,0,1,4774d6f734f000d397a9c03be063e9321870941f8485d48105c4d0467a1e83fc,2025-11-06T16:43:04.740000 CVE-2024-40767,0,0,48c6a2cb3ac42082aaf98645e8b189b0cef7c9bfb6b3f11fc778f2e1da1affbc,2025-11-04T17:15:55.573000 CVE-2024-40770,0,0,daf3147ae24c849766d37b42ff24d71674c65e001627b1d0caa857bf9c13d221,2025-11-04T17:15:55.760000 CVE-2024-40774,0,0,0e2cff60344afab3dc43113ce5c7c234bb0cdc8686666fa211d60eeb1eb529eb,2025-11-04T18:16:31.783000 @@ -110108,7 +110125,7 @@ CVE-2024-57256,0,0,5bbb0d48933911fa9f3630635d9117c0958f7e4c938de075b6fa996fe7ed8 CVE-2024-57257,0,0,c033747dfeacbd5f549cf7d1e9375008cb900b41e5cbb2c4ead0fa43deab5399,2025-11-03T20:16:55.067000 CVE-2024-57258,0,0,8f8d61c4dae649320216aa2fb32af3ca6173c331a3c860982d1393669940ac80,2025-11-03T20:16:55.197000 CVE-2024-57259,0,0,44fd9891cc7d8ebabc414b6d2fb288100be6dbe50cfcc0abe9a59d1445666161,2025-11-03T20:16:55.343000 -CVE-2024-57520,0,1,456152f59e1efa008aa96be4601dc4f7faf47173d02dd8f334a2be8ef4d5f1a2,2025-11-06T13:15:35.177000 +CVE-2024-57520,0,0,456152f59e1efa008aa96be4601dc4f7faf47173d02dd8f334a2be8ef4d5f1a2,2025-11-06T13:15:35.177000 CVE-2024-57727,0,0,8023f0582fc12ad26308d187533fcafc3127408cb8e6e096967dc4d172e82253,2025-11-04T16:37:57.757000 CVE-2024-57791,0,0,d351a6bdd5f56bec88335230f25e43a62d24eb4243feb274ce3f789e55902adb,2025-11-03T21:18:33.433000 CVE-2024-57792,0,0,13aa7ad3455242b8b001aacbaa0a416e81dac46e64750050c12ae4489e05b37f,2025-11-03T21:18:33.870000 @@ -110212,8 +110229,8 @@ CVE-2024-58090,0,0,aa74d18c9f150e73e3aaa0e6a6b5e80316cb057f1b93f932ad82800c2eeeb CVE-2024-58136,0,0,5ac73c0848336c7506387d6851bf384860075abc5a709e31da7ea4d67db6cc18,2025-11-05T19:28:54.540000 CVE-2024-58240,0,0,3373252f652bd5a69eb04d6ec2aa0def23dbe261d86c22f86717e72acbcaaf45,2025-11-03T18:15:45.837000 CVE-2024-58258,0,0,34c95d63ac1d744b5caf0bb7c56118375ead0960b50f4bced7b716665d667e48,2025-11-03T20:17:03.177000 -CVE-2024-58272,0,0,90981ed8d9d337c4c397b4fec1e7229b662fae0f50fce2a88323f522fe693a25,2025-11-04T15:41:56.843000 -CVE-2024-58273,0,0,fc3fa6dabbcf0b96206c0e218cda13478a93a5230d57fb29f764a09647c32260,2025-11-04T15:41:56.843000 +CVE-2024-58272,0,1,d2cd1b861b23096b5babf533134fa03a354e8bc72dccc1cdbdc50b72f8d68218,2025-11-06T16:34:16.403000 +CVE-2024-58273,0,1,9ce0fbf1239ef4727b2d7255116d5570a6bb417b4584ae4c57d7f234a6ce1871,2025-11-06T16:34:35.273000 CVE-2024-5910,0,0,af81c879eea15c5c45a7d8ae29b1ba5afc9272c6f06f231c7ad8169921a3ad64,2025-11-04T16:48:52.637000 CVE-2024-5953,0,0,551184c8ac8ef3e5bccd6f8da0d319c8d4bf70033ea8e600921797069a35488c,2025-11-03T21:18:47.793000 CVE-2024-6232,0,0,a47af0b9c0003f800d1dfe67e23410e2f627bae7ded791859f7342a04558d286,2025-11-03T23:17:30.710000 @@ -110358,6 +110375,7 @@ CVE-2025-10923,0,0,1bf340c7191985fd42f80a43e4a4777afd3d1337494e88b85d84a29d583d6 CVE-2025-10924,0,0,63d9b3ba5331937113bca99faf9e4c0a0d004a79f594c50a201697da6729c99e,2025-11-04T13:14:19.067000 CVE-2025-10925,0,0,b42d4c36874cb1f425be3ff0b2c073b801fbab5bb1ee5b870b5ace3c7b1179ed,2025-11-04T13:14:01.757000 CVE-2025-10934,0,0,4b019042e3c9bce43c9ad5c429cbb2d54039455926e6570e0a952388238e5823,2025-11-04T13:12:43.120000 +CVE-2025-10955,1,1,c2a7ca70b2448ba2aa6b0cb364fa5d1de69526b05f4f6827f34ddb8e66dc50d3,2025-11-06T15:15:45.717000 CVE-2025-1097,0,0,5680e85d18ec5605fb88a2924264a43c54978cedd997e744589d4016687bf829,2025-11-03T21:18:52.093000 CVE-2025-1098,0,0,0ecfae677f996d8c5821e8dbcd60de24300eac5289bd8151b98959d9aecc8269,2025-11-03T21:18:52.230000 CVE-2025-11007,0,0,1e4fb842967631b06527606b33454c6affa0e13f74a0c90a0c74c4e15b0e90ef,2025-11-04T15:40:45.533000 @@ -110399,7 +110417,7 @@ CVE-2025-11464,0,0,de15389d458e3699a0500286cf771aa3bce38fc2fc3ebfefeb55c86ea75a1 CVE-2025-11465,0,0,3b4f596ea344f0568cdedc510659d3ad44ebd73ba015b8042cc80bd9be598faf,2025-11-04T21:28:10.057000 CVE-2025-11499,0,0,e4301f5f62a23b10700fbfcc39bc0449d5fbba509885814daf5fec96bcf46ec0,2025-11-04T15:41:31.450000 CVE-2025-11502,0,0,0c1bf6fdeaedb839e63e4f755c0c7f9c5f045fa19e7ebda52d9b38b5d84b8141,2025-11-04T15:41:31.450000 -CVE-2025-11561,0,1,04970c38c3999d753606d3b6cf6e12e5c0e5937a8f006557b410df2fbb22b523,2025-11-06T13:15:36.597000 +CVE-2025-11561,0,0,04970c38c3999d753606d3b6cf6e12e5c0e5937a8f006557b410df2fbb22b523,2025-11-06T13:15:36.597000 CVE-2025-11602,0,0,2c42f316f064b71cf6747e3dc236c0bcf7b77a5d32ef983e37b6f635a94c50bd,2025-11-04T15:41:31.450000 CVE-2025-11665,0,0,361866b361822a39dbe13bf3d7e914dc04d7287cb60bcf8e8028854d72a79906,2025-11-03T16:32:20.470000 CVE-2025-11690,0,0,6d85abdcc001a9d3e3c3e994796fa34acfb88c41aa3aeaafeb5b642372c6e591,2025-11-04T15:40:45.533000 @@ -110436,6 +110454,7 @@ CVE-2025-11922,0,0,9cf1179cdcb382d5415c4cbb85461ef60856346634fb397c51a720c5b1473 CVE-2025-11927,0,0,be034a990a202e57b8e9ae521e7841f9161387c1536c502b67672de73542bed9,2025-11-04T15:41:31.450000 CVE-2025-11928,0,0,039850d5a9bc831f6682f232b969212d628a83fc99a6973f6f68f85e98ecf44d,2025-11-04T15:41:31.450000 CVE-2025-11953,0,0,33887f10e19c1b4c80cf06c1647be8ba0505c37ba88a836d4ed00fd835342b82,2025-11-04T15:41:31.450000 +CVE-2025-11956,1,1,ec05846c756766f95c77e55407a64ff9beb4717ca07c7f1c0f581e1e99af650e,2025-11-06T15:15:46.093000 CVE-2025-11975,0,0,f8baf4e03f21eb7011816c7fc780260c38e1f2294811f052de423c64ae07c8f7,2025-11-04T15:41:56.843000 CVE-2025-11983,0,0,bc7fb32e029694302396f8cd3f019a19b9640e3f29521eb8cdc75f2a72adc751,2025-11-04T15:41:31.450000 CVE-2025-11987,0,0,2407d205474337efb23784a91023257c7a6e9395b3f4e8a87e19686e7073d228,2025-11-05T10:15:34.637000 @@ -110554,6 +110573,7 @@ CVE-2025-12547,0,0,38f73ef1f1405b1798080bacaa2392c8902dcc049ae585e5275c5ec55a9a5 CVE-2025-12552,0,0,9c1567a304f060e476c0056c50115243dede90e2be20254100fb71c245848f91,2025-11-04T15:41:31.450000 CVE-2025-12553,0,0,8089dbf308f504dac47500958e97528b9651a6fc48494e371eddf2e2a364345b,2025-11-04T15:41:31.450000 CVE-2025-12554,0,0,f4fc78503fa29c7e6f60f7d7017c8d85157cd63163eeba872088fe59c3f84a28,2025-11-04T15:41:31.450000 +CVE-2025-12556,1,1,06659ab1573445b8f503a4bab3500b3f9d4b5a08b5770860ced0164e75c6f978,2025-11-06T16:15:48.910000 CVE-2025-12560,0,0,475bb8fe388c9119e35663054908f9b7b7ff6917c26f56fe53b2e51be80d8404,2025-11-06T06:15:44.340000 CVE-2025-12563,0,0,78359faf8e8cb1a8d014473522e2a9a9319474c90e662240fe1eb347d51c2efc,2025-11-06T05:16:05.130000 CVE-2025-12580,0,0,a268a42412ad9d2edacf746d45fa9199dc74c04ee67164dde4a5dba4440ead80,2025-11-05T04:15:33.040000 @@ -110575,7 +110595,7 @@ CVE-2025-12606,0,0,c9c223a67cb4a0f1b9847f0fcc69c9936528b3dc54c8f19193ac5dc024918 CVE-2025-12607,0,0,813d6e6229418d54a3dcd84f216feec41ecfe4aecb95bb9c430e8a38550dc438,2025-11-05T16:08:16.503000 CVE-2025-12608,0,0,84f4a5cdbfc311d80abd87f2d3fce3a59bca575d1c06ddeee0a2267c01c99b5e,2025-11-05T16:08:41.777000 CVE-2025-12609,0,0,0fd79e9d69518af5fc09495804d541b1d489376a8bb1705e3332faad17ba7403,2025-11-05T19:14:40.820000 -CVE-2025-12610,0,0,7061a99b3b1f477778ff6517baba6e13e831ffdc09db21653a8fc962295aa0ec,2025-11-04T15:41:31.450000 +CVE-2025-12610,0,1,7745a15a06c91781e33d98d76796e2bb7fa6be2ae8d4215c995cd59eb041081c,2025-11-06T16:24:24.470000 CVE-2025-12611,0,0,f4548fa3a78ddc32468bd96ac8e6fea64049a04ca37be10341b6c7e70fe13c71,2025-11-05T16:09:23.787000 CVE-2025-12612,0,0,135df214a7f60781b214b0ff26cce5a1500f04e8f741661365a57a3d6bd7903f,2025-11-05T18:57:38.893000 CVE-2025-12614,0,0,662e36210aa21a2e75ccb0b82b2edced430b2bf145cee426f03abd85fe084078,2025-11-05T18:55:21.850000 @@ -110639,7 +110659,7 @@ CVE-2025-20305,0,0,8371bfc32cb435c59f58b316d50999182dc6fba39074ea5b7eaba81cff724 CVE-2025-20343,0,0,79e817d7deba2173c4c6be81c21284d6aed91318d1dd2c75ed509c699469b1a4,2025-11-05T17:15:37.443000 CVE-2025-20354,0,0,9b49d471b2b605667902e1a48a171bdd07fc2bab69c69e6cd5c51b07206f0f35,2025-11-05T17:15:37.743000 CVE-2025-20358,0,0,53b44b2bc8be3804f72b2789e9c6b12af796ad854c8e5d0bfd142ddec264eda9,2025-11-05T17:15:38.120000 -CVE-2025-20362,0,1,06cf786ef72ebd5e6334ee4aa6bfb4e7ddc250c8983d0d4627a2fd93eea21209,2025-11-06T14:51:19.950000 +CVE-2025-20362,0,0,06cf786ef72ebd5e6334ee4aa6bfb4e7ddc250c8983d0d4627a2fd93eea21209,2025-11-06T14:51:19.950000 CVE-2025-20374,0,0,f954742b143d30f5ed841de21bbbfc6885f3598579e95955fa3deb3a84d42841,2025-11-05T17:15:38.457000 CVE-2025-20375,0,0,425fe60085e7421bdc7e61e1c3ad36198d3bbc89403f8788aeb0c5575efca3a8,2025-11-05T17:15:38.723000 CVE-2025-20376,0,0,49d3ee07a2947864334089b9cc0a45a2cfea3dba3b1c2591b7d291c2c51a7744,2025-11-05T17:15:38.953000 @@ -110984,6 +111004,7 @@ CVE-2025-22126,0,0,99e982f74912f5f8b17b3f7be195b10ce319746ed4a3542c0eb3db8171956 CVE-2025-22127,0,0,467d5cf1d21f15ce73206e7335f4e8c357b47628fc08e5254cd8691a0267030a,2025-11-03T18:25:48.783000 CVE-2025-22128,0,0,c5c9effa8dabb569afed9da57c3166bfe167d78efedc02fe7f56ed2fd0e2a394,2025-11-03T18:25:01.927000 CVE-2025-22247,0,0,0834fffb9d111933d9c41b50e0c91b417c8f12b78d74a038821139e95b33d291,2025-11-04T22:16:06.797000 +CVE-2025-22288,1,1,a22a00676248fe6dd9cd71aa7580c9497f56e97ef1456122463f1f8df5221217,2025-11-06T16:15:49.647000 CVE-2025-22476,0,0,5990c4cb551a97cd813b257a93c1ed17aab487c33d5b55a1f667cced24791fbd,2025-11-04T17:07:09.697000 CVE-2025-22604,0,0,780c17a8d255e5f65d8d0a2d82fe1b1d70de7b4aee9b31fa224ba481a37b37f1,2025-11-03T21:19:13.753000 CVE-2025-22839,0,0,43c0e8f2bcd605309c8b64b5542867e8887daab910838fae9999552cc94b4072,2025-11-03T18:15:49.963000 @@ -111016,8 +111037,10 @@ CVE-2025-23145,0,0,042a24e0353482db1c991d5aa6cd29002dc5b1a2366d8bd5ff33a5eb5d091 CVE-2025-23146,0,0,6e423e9c721cca7d82782f0bd9af98c882c4d236ba27900d4a979f72c2392e20,2025-11-05T18:05:02.860000 CVE-2025-23147,0,0,73bdd51de67f0e5302c9270e67b506b54887889d65cb1bac9fc44270f372a2b0,2025-11-05T18:04:44.053000 CVE-2025-23148,0,0,643f77854124cbd51fcaa6e4dcb1db1fc1b8d89802ce02f5529213766552ba4d,2025-11-05T18:04:14.740000 +CVE-2025-23149,0,1,5491b4909d2a71245ddee5b89e61ebca602d4df9772e5fc3ca7ded8344f5950a,2025-11-06T16:28:43.317000 CVE-2025-23150,0,0,7dbd6eaf6e76c1817a28c3804ba5f7505698623a8a5414c9cb87eee48ba5721b,2025-11-05T18:03:36.057000 CVE-2025-23151,0,0,25281a5fbf457fadbc827a959c7f0000e5bf6e1c99281e50533a9040aba0bc06,2025-11-05T17:58:11.293000 +CVE-2025-23152,0,1,6ad74f0d75fecc8936048ea4054a5c2d62786524a742af65e5938abf1c77af6f,2025-11-06T16:26:53.277000 CVE-2025-23153,0,0,44b1d25b597720f5691bb7aa5ef7a25e8e352ea6c68513158b3def3fe00fdd95,2025-11-05T15:25:35.153000 CVE-2025-23154,0,0,02b650d45549670fc32a359729bcf7b2479b3adc952828d7219e2f84819862eb,2025-11-05T15:26:29.830000 CVE-2025-23155,0,0,726cd2c602890c041472b22885a7bdefbf20e28196cf07ccacc813c3d3327208,2025-11-05T15:31:55.310000 @@ -111290,10 +111313,10 @@ CVE-2025-27222,0,0,c3a16103a1b68b3345060e3aa1e3e777b48c9a7589b0a5168c4fef1a1915a CVE-2025-27374,0,0,476577eced86fb836aa1324475961a846270221ade9b5f9e49931ec1c98099c2,2025-11-04T22:16:08.243000 CVE-2025-27407,0,0,f0a7f39635abdb57b1da8a3a93a995ceccb02a0f48836c10786c5a7df7c61f8a,2025-11-03T20:18:01.937000 CVE-2025-27446,0,0,a553d5dc14c57bf369c630038c09ceb34c2e38380835001e62161d6a27a15f62,2025-11-04T22:16:08.380000 -CVE-2025-2746,0,1,f36a303ac02ebd0f1e52ff5acb6d93b268fcc1af064f885d164e1d152260ad93,2025-11-06T13:58:06.383000 +CVE-2025-2746,0,0,f36a303ac02ebd0f1e52ff5acb6d93b268fcc1af064f885d164e1d152260ad93,2025-11-06T13:58:06.383000 CVE-2025-27465,0,0,9b5b6f8495a2ea985f78c99bd98d4e0c7a538ea6718cad740408daf00f2ef8fb,2025-11-04T22:16:08.543000 CVE-2025-27466,0,0,10eff188bed846202c0198cc07cb45398d323c6fb33495ae3c1c0150676e2300,2025-11-04T22:16:08.697000 -CVE-2025-2747,0,1,0fa3001e315a83ba7f1906d92d5e428406bcb088aa520c37009d147dd6a31c8b,2025-11-06T13:58:01.850000 +CVE-2025-2747,0,0,0fa3001e315a83ba7f1906d92d5e428406bcb088aa520c37009d147dd6a31c8b,2025-11-06T13:58:01.850000 CVE-2025-2749,0,0,e1f3c9c5f618cc9765cc2f027ef465050398f335746e010e9a97296b9ca104b8,2025-11-04T23:15:34.703000 CVE-2025-27516,0,0,6c43aa656d4eb29164be7198e6600de4178c58d683db63929d91e958125c6b43,2025-11-03T20:18:02.203000 CVE-2025-27533,0,0,97febbf64a4dbe887e73556e06d3cced079b0ff80925034a4eb0087acb8a2401,2025-11-03T20:18:02.323000 @@ -111354,6 +111377,7 @@ CVE-2025-27931,0,0,4b994770e0213d3ec47d0e9abfc4e4b4d23175ff16102a28fa0e128a29cfb CVE-2025-2794,0,0,19cf7f4282e9055bf05816c72268cd1da32f43fa151c881fef07b92932c27f93,2025-11-04T23:15:34.820000 CVE-2025-2817,0,0,98dc3ba37ec64ff7af46874df4144ecf6e542a253a0fe7af1c733bb92de0e963,2025-11-03T20:18:09.403000 CVE-2025-2866,0,0,5c62feadc48c017a3746b464fad78e8b4127437243199e8cdb3c9242bb5f22bc,2025-11-03T20:18:09.580000 +CVE-2025-28953,1,1,15dca16dc48a747485c46c815f7a346318b0e557f6c3e83d55852df5459eb903,2025-11-06T16:15:49.830000 CVE-2025-29270,0,0,07d250f6b0456523b8e1fd21bd4380f500c2092fa70dfabd23a2e37400019f8a,2025-11-04T15:41:31.450000 CVE-2025-29699,0,0,442706411d7497a0fe767a200dbb6e334c7323fa7784a6de4350c7926801a160,2025-11-05T18:18:43.340000 CVE-2025-2975,0,0,d908f1bcf8d468ddea22826a438fe4e8e5e66f83bdf6f3aac4d2b0e6177fad1e,2025-11-04T19:37:59.867000 @@ -111420,6 +111444,8 @@ CVE-2025-30470,0,0,726b6cc89a7b0689baab7eca577adc03676e7ea0ab4b972f53261da268f63 CVE-2025-30471,0,0,3cfb0b15eddee41956ee72cb270bd5e7703312e4f2b56c834e5439d5ca7653c0,2025-11-03T22:18:49.597000 CVE-2025-30472,0,0,038b4cb4cf2fb35bbaa568924dbb40616639d0e32322a31fd4a2cfd2a3f12a80,2025-11-03T19:15:49.987000 CVE-2025-30479,0,0,089b8137e2fec7b1fac743724668ef039d2e679986755a1acdd8649916323d8a,2025-11-05T17:15:39.607000 +CVE-2025-30663,0,1,377168cdeaecec1ff0a013d3547d5641335411d840260d9df45c47fbab8c4cb7,2025-11-06T15:34:11.713000 +CVE-2025-30664,0,1,ea9313882ad99784d4a12eba167885917119e5a2f40e15a880e0887a6638c6c8,2025-11-06T15:39:58.980000 CVE-2025-30667,0,0,10e449de902a5b5316efc54337331e1c50a473d458ea641d1e0b4a2a00481e90,2025-11-04T21:42:04.733000 CVE-2025-30668,0,0,123293e70aeb3990089658e5d24b3c14eef543287ddb096f2a3fb1857d61359c,2025-11-04T21:34:36.387000 CVE-2025-30681,0,0,11a74694622d6f3913fe12c59a017ca893cac949d7c22b10654cc64cc1f283c9,2025-11-03T20:18:13.057000 @@ -111445,6 +111471,7 @@ CVE-2025-30722,0,0,f36ab482b390f76e820c6c7128fd22f5fdfd7c4f1f32b209a8358ef2de293 CVE-2025-30749,0,0,8581a3da205ad9886469797c09c4d36c3c4038e5ba0721463ca591e21dcab26c,2025-11-03T20:18:15.370000 CVE-2025-30754,0,0,a86f8e7c2725d03c88ff035cfa65c05f6cb87b2462252d308275f671358b8b0a,2025-11-03T20:18:15.503000 CVE-2025-30761,0,0,59ddcabbabfab43f96a51bc195a798a9309773f1e09dbf89127f50b47f51ae0e,2025-11-04T22:16:09.683000 +CVE-2025-31029,1,1,2b70a9ee41f44644b6488cba3dbf40505623d058c148c6431b3260306da3fcdc,2025-11-06T16:15:50.067000 CVE-2025-31162,0,0,751284fac8aae96b2791ba9a6360a69b314fa9e3c89dd78978df9e06db7e9171,2025-11-03T20:18:15.733000 CVE-2025-31163,0,0,328c153351688839229123fb06167d0b4ecc392a85238f5c95662a19d53eb8d0,2025-11-03T20:18:15.843000 CVE-2025-31164,0,0,5e301568ffdeff82df6ca21b9a6a3d2648c95be1c39e1491ccc2be46836622df,2025-11-03T20:18:15.947000 @@ -111535,6 +111562,7 @@ CVE-2025-32072,0,0,7e016770692b49d5a52f12f262099855c60b992b804cdfa64b33efa5d9cd6 CVE-2025-32086,0,0,d0bade7264b46f83fe2a5d139b1b3223b79fc5dc67e85adcf5c6764965b156cc,2025-11-03T18:15:54.380000 CVE-2025-32102,0,0,1443877b2fae1886fd3ba6d4f412bb0b9edc52a55e3555ccfab0634e6f3b6d79,2025-11-03T20:18:26.620000 CVE-2025-32103,0,0,94a2e4ff7b7e5c187137202d84f3f0a55ca66c3f80241aa1548c49d9a6b64706,2025-11-03T20:18:26.743000 +CVE-2025-32222,1,1,9a56e621d25dc9c252048fc7825f4e699fb137e00bfea3da60b412eb56bb5859,2025-11-06T16:15:50.237000 CVE-2025-32364,0,0,b8434761f0f15cd6dea67d87d673ec739aa9448d63ee7ca3522653a21597ff47,2025-11-03T20:18:26.863000 CVE-2025-32365,0,0,955f507e91f11b76f112c1395ce8fcf2827e9a5798d0df6f819e9f184f3172c1,2025-11-03T20:18:26.977000 CVE-2025-32414,0,0,f5546590541f413a7010a663bc39f081961ab4ac11c9b1422691bc97fde3b749,2025-11-03T20:18:27.087000 @@ -111545,7 +111573,7 @@ CVE-2025-32461,0,0,ce69ef9a3c096c8bc803efcd13696c192a1a7eec0c9f15fbbebe4525edd35 CVE-2025-32462,0,0,6b3a33e2a95a9cc6bbfc5885cbb9f418c16884dcc22428c54ad41d4fbdca8573,2025-11-03T20:18:27.727000 CVE-2025-32463,0,0,4571f3140ae6766970c5e587a9649fd15c2a2a37ddd3681501826064ed8fad10,2025-11-05T19:26:48.393000 CVE-2025-32468,0,0,af4f1df9683a9549cb958dc4156b7ca8f0186626c8db894c13df42193d2461ee,2025-11-03T19:15:52.123000 -CVE-2025-3248,0,1,5d2c920fc4ac8af7542fb1b2f6120bf07301c6eab83cb547ce6ebd41853acff6,2025-11-06T13:57:48.910000 +CVE-2025-3248,0,0,5d2c920fc4ac8af7542fb1b2f6120bf07301c6eab83cb547ce6ebd41853acff6,2025-11-06T13:57:48.910000 CVE-2025-32696,0,0,0e8426f9347c85e940baa6a43731172e15d65551d9a22ab41b69f5faf5923de4,2025-11-03T20:18:27.870000 CVE-2025-32698,0,0,6d7241ce4f5159fafa1e4b232e45872ec5f6239e9885c175fb75d85fdd874ec5,2025-11-03T20:18:27.987000 CVE-2025-32699,0,0,df256fe8acee4f0a9828f68430cfd94f04d3070a421ccbf11cedf1cc9da651f2,2025-11-03T20:18:28.090000 @@ -111574,7 +111602,7 @@ CVE-2025-3317,0,0,84bed38c4aad4d99a9bce86e0f0e19796582a61c410c9b717a7aa8eff77aaf CVE-2025-33176,0,0,6f7ce9bebf112dbf49adee3a3b17f0a6e613c52fcf99075a06d04d46795f8d7d,2025-11-04T20:17:14.993000 CVE-2025-3355,0,0,8d54c7cc5139f3372e24e29d6839c93c1b839059a9a6756802e76e99b7a02ad3,2025-11-04T15:41:56.843000 CVE-2025-3356,0,0,e96f17ae11738af009c817d7f80979dc9b86bf348e5ae7471f7176c888e79955,2025-11-04T15:41:56.843000 -CVE-2025-34028,0,1,b66b691f86089add5ec2afb917e5d8ac35e49f9dc3e5996677296c686a3e2263,2025-11-06T13:57:56.350000 +CVE-2025-34028,0,0,b66b691f86089add5ec2afb917e5d8ac35e49f9dc3e5996677296c686a3e2263,2025-11-06T13:57:56.350000 CVE-2025-34080,0,0,17ba490e18b004b95ee3d38b0d0ed6d3d399e2f270a426e1d8642ae08454bdc0,2025-11-04T23:15:35.113000 CVE-2025-34081,0,0,53eb1969fd23d82ee2b7d3334e0655dfe346786a78311ebbb45af9806e53f880,2025-11-04T23:15:35.233000 CVE-2025-34134,0,0,63e16fd823bb421eee3334c19f7e8884c84559f501e9253d3eba176d5a3f40b9,2025-11-04T15:41:56.843000 @@ -111592,21 +111620,21 @@ CVE-2025-34152,0,0,3c1fb8438b5c806ee306c9becb08c7d64d1fff34ad3dc8f42f15c142d9f89 CVE-2025-34153,0,0,40924229da1d392ffe66579b5a64f1031c221beff55816622dcb2e1de4ed5a0d,2025-11-04T23:15:36.467000 CVE-2025-34154,0,0,3661b7286a41e29400bb413fcb66372efb38742067c723e75fd21776b32f488b,2025-11-04T23:15:36.580000 CVE-2025-34164,0,0,bc1043d174cd6dccb67d0c4549cc98aa460dbffb6a49dd0446711561a24663af,2025-11-03T16:15:34.277000 -CVE-2025-34249,0,0,ddea89913e0d4aea6d590ec9065cb57cde033636113908aba227e3d69035ba1f,2025-11-04T15:41:56.843000 -CVE-2025-34269,0,0,b55a440597539cffd16c42d07437f462c317b81afad72781cfe7b970c8f0e0a9,2025-11-04T15:41:56.843000 -CVE-2025-34270,0,0,20fb7de04a515afca9dfb7a8e0d9e100f5832e871e5b41fe87b59aa9585fee38,2025-11-04T15:41:56.843000 -CVE-2025-34271,0,0,6d35b57ecd8b03292bab0853f87c5bd3e5dabfde65000c35432b680aadab0ee9,2025-11-04T15:41:56.843000 -CVE-2025-34272,0,0,8e3bd7bbaa644f54d8360c26df0c4165c46b5da8165254b01501b3a30fb067cf,2025-11-04T15:41:56.843000 -CVE-2025-34273,0,0,8946573baae5e12814423a5b53472511f608db5895df1d5730e9b495b497b6f3,2025-11-04T15:41:56.843000 -CVE-2025-34274,0,0,308c0db7a69f38e89ef0686b18d9d3441a40e9fb93b61289e9d64957fb869f8e,2025-11-04T15:41:56.843000 -CVE-2025-34277,0,0,b05771795404ead45f6f0fe68878756ddb02fab1df2e9d40416a4bf38182eed4,2025-11-04T15:41:56.843000 +CVE-2025-34249,0,1,d93ab22f8a6fdb22665f73aba45b8e0283e77dbf62a36c2971abd6437976ff1a,2025-11-06T16:33:32.100000 +CVE-2025-34269,0,1,794412e3be932ed4bb243a2dfd606fd42d43fef865e08f88ba8285d8a27c5b59,2025-11-06T16:33:22.433000 +CVE-2025-34270,0,1,6f9bb560910809dcf307e058e5d3b3cb6f04a774d6fe9c2bb75409696b22434a,2025-11-06T16:31:27.530000 +CVE-2025-34271,0,1,946c16f825cc01dd25679d20c2af5fc652f0619c25745670c272acf2c52e70a6,2025-11-06T16:29:46.200000 +CVE-2025-34272,0,1,38b0760649c91c57af28fd3023dd9d59e46f73a85d1ea2ea89679eaead460de3,2025-11-06T16:29:24.517000 +CVE-2025-34273,0,1,8b741cf8d6154cc61f4c76d76a40aa0d8abd8cf3de4827c2643635038a6ae48a,2025-11-06T16:28:38.233000 +CVE-2025-34274,0,1,874c8f2905887a6ebbc8ebcd40eb43cd86fd27c20e8d574b018ed0e71e9c9602,2025-11-06T16:27:58.503000 +CVE-2025-34277,0,1,6894b616325997695b41792b907344b4c938cf877b9fd057727957a6410dc8d1,2025-11-06T16:27:31.010000 CVE-2025-34278,0,0,af35143b2d646de1b7af145bf4c4e812e0db5a56a22876e873145c0e824707dc,2025-11-04T15:41:56.843000 CVE-2025-34280,0,0,394d31a45a6b3c0545de4c16e10b66e84d74ef8e30b04e4287554f796b2b00ef,2025-11-04T15:41:56.843000 CVE-2025-34283,0,0,c3685df7c91d497139fb602545d6ad9ee704e03d14a5b9c65e5610e5eca12368,2025-11-04T15:41:56.843000 CVE-2025-34284,0,0,ca794f6c8c50bfaaf9edb51829ee9ffed376b4bdec73d716927bca7cd9adb513,2025-11-04T15:41:56.843000 CVE-2025-34286,0,0,15d27cadfff95ac9a302b961734de5c4bf73e590a848b9af464fc56ccef0f6a0,2025-11-04T15:41:56.843000 CVE-2025-34287,0,0,381d16a9f4513a6e5be784191a27577ee86c31e73e477d404e47372280c753a7,2025-11-04T15:41:56.843000 -CVE-2025-34298,0,0,dc3c3bff00e7a173d738edd8ca0622326ec0b3ca8cc6f3fb1230eb16670a7c0c,2025-11-04T15:41:56.843000 +CVE-2025-34298,0,1,7794cda8b7a546bc2c75cad122bc0c18f88ef91ff907c81fd0fd1d02cb6d7468,2025-11-06T16:27:12.660000 CVE-2025-34300,0,0,a24bf1473444b39e4b6828f88d14960f9ba21ad9ea1f1f0b04cd254200ed41a6,2025-11-04T23:15:36.700000 CVE-2025-34301,0,0,390abbe4498953c9fb66589e24271211093eff2c8d46c949366a235eb47782b0,2025-11-03T17:00:46.467000 CVE-2025-34302,0,0,a2c27aab91fed2b545f99fdf65cb493f7de937502408fd213f99ca54baa6738c,2025-11-03T17:01:01.010000 @@ -111637,6 +111665,7 @@ CVE-2025-35966,0,0,679ffbea9d3df91579e8c0fdfc52938e751101823ed56979613ff3282e764 CVE-2025-35984,0,0,9a68130f12512b2aa5c98ce80baa7e72bcc6e955465fb5834fab016286f59a9e,2025-11-03T19:15:52.450000 CVE-2025-36007,0,0,9305fa7f7638fdf8214c2fc3e0dbc5df34f51b2eb5708f132f8a838f870a2f42,2025-11-03T19:12:52.713000 CVE-2025-36047,0,0,609de60623e18ce89e69d866e9f38173576ef09b55460279ef149218a8e6ac26,2025-11-03T20:18:30.363000 +CVE-2025-36054,1,1,f1d1e6c71ea3f22e59c4a0ac27d963831f4293b6d52583a14c38c4b7286b806d,2025-11-06T15:15:46.363000 CVE-2025-36091,0,0,5149508a0c4c689f64a3faae7f6f53d89c2f59a2b634bf84d89efb3c50a030a2,2025-11-05T14:51:51.157000 CVE-2025-36092,0,0,a94a1c4acec39a4e84036e7e7f148225b0d4b7acc7a923bb8fd1bc898af6405f,2025-11-05T14:58:19.337000 CVE-2025-36093,0,0,1802c51ffee4089e585ac802f8eeacf4766a2c5aa180a6db857fac17a95216d2,2025-11-05T15:07:16.237000 @@ -111652,6 +111681,7 @@ CVE-2025-36512,0,0,ae564d43baf5494148125c0488224c43b09344fe6bab33c9f799b80e4e9e5 CVE-2025-36520,0,0,3f14fef780e721bcf8da1d9aec783330fe73afa56665cdfcc9f801cb299dade5,2025-11-03T20:18:30.607000 CVE-2025-36548,0,0,e0ed5f1c73ff4b093ae92ca0ecec648f183aecf632c777a700933739b02fa9c4,2025-11-03T20:18:30.717000 CVE-2025-36592,0,0,175735b187fd31bb19019a959d62031f9092d3e15319c64088bce559cdafeac8,2025-11-04T15:41:56.843000 +CVE-2025-37735,1,1,8433d64b5c4b518bbaa57fe49da54c55c8e0ac5aeabdd66dc16ee993e6e9d112,2025-11-06T15:15:46.640000 CVE-2025-37738,0,0,a3f58f2f9c9544276ee2ca8d44a33b33bf7f53f68470507ea9e792c7f9d7e516,2025-11-04T18:17:03.467000 CVE-2025-37739,0,0,f89863e42c6268e3d66072357f21719a3a2369c2621817bd84972aee8e09e630,2025-11-04T18:15:57.883000 CVE-2025-37740,0,0,b4abc2a5597cb7c7458448f9da6c81a646196fb7ed20816c5e9afef78d09d829,2025-11-04T18:11:19.577000 @@ -111912,6 +111942,7 @@ CVE-2025-38231,0,0,1fae169079dc8098a86dcc57f5bc80ec051436d611e509823ffe08959772b CVE-2025-38236,0,0,25812df848ed787092a2ce07c9c474b1e7b1b43f40ee4a82a1e8748fc47a7415,2025-11-03T18:16:10.503000 CVE-2025-38237,0,0,bca0a93d1f59e2cf08e7db8c87d4bff5b022a1cc56117b9f03ac7139032b8dc2,2025-11-03T18:16:10.620000 CVE-2025-38239,0,0,9e7316f3643b8acc4f4cbed4f6ee774e0f5bbf346237a18a060f106ed7702763,2025-11-03T18:16:10.727000 +CVE-2025-38240,0,1,c63d1778c2e47354c9d2e2a389a818a9e77160c56f3edc3f022b68720de6a65d,2025-11-06T16:22:49.323000 CVE-2025-38245,0,0,86372dd420de1d900f6624b3597b655c0780252507b73c03fe5eb28d7d870b24,2025-11-03T18:16:10.830000 CVE-2025-38249,0,0,946a6dd680eabe29cfb57854ee0f983e4bb248f986df63d382a4746cd6f35cef,2025-11-03T18:16:10.943000 CVE-2025-38251,0,0,9196e69584b2ea7545ec5023d729120e975fe1a8c8b7b0fcda6c3e34fbcf86e3,2025-11-03T18:16:11.057000 @@ -112022,6 +112053,7 @@ CVE-2025-38474,0,0,d8a987c09f677eeb1732a6858ae5246f53cafb9f2bd335e91a45afa4433b6 CVE-2025-38476,0,0,9dca9c18cbb28e06007afe39ff308a272662e1102de7d6c40024922ecf326565,2025-11-03T18:16:23.130000 CVE-2025-38477,0,0,294648b3e3ab041f1f79c7172622cc208f4e044079191f93d378f9e40eb354fd,2025-11-03T18:16:23.767000 CVE-2025-38478,0,0,04fea7dd7be3b800a2a4968a679e98e15069bf92baf154a3ba62b63f4216a93e,2025-11-03T18:16:23.967000 +CVE-2025-38479,0,1,4379abeb13008a0d8caaebf9799669553331a0ad106b3d47a53355ddc5409483,2025-11-06T16:22:25.180000 CVE-2025-38480,0,0,7ceceaae5d92cc7f2701d3709dc0a4626d3810187b294712f6a7311db21846d8,2025-11-03T18:16:24.297000 CVE-2025-38481,0,0,4b60943305d795e41609823782b0987befeaa50ecc341ed5dc439e6a2902b4ad,2025-11-03T18:16:24.437000 CVE-2025-38482,0,0,74218b66a432c5fe487d9460beecd9245e1fea468ab90148c65391aaa06c6daa,2025-11-03T18:16:24.573000 @@ -112152,6 +112184,11 @@ CVE-2025-38736,0,0,caa968288e0ed9cbe6af3d089d8fff6dcda752d787cb1f97f5c8ab8cf4153 CVE-2025-3875,0,0,346424fe19441c86076ccc51ab55d24c7843ce366558ddb8f757be7cbf5b7dba,2025-11-03T20:18:48.080000 CVE-2025-3909,0,0,f0941cf5a764c0d09f52517977eec200dd5d7cd56a2fbde747d6352ca3c0d1a6,2025-11-03T20:18:48.220000 CVE-2025-3932,0,0,3fad3d55fae350f4c63fdbe08143c72172710b48a2029c6ed6fb959bb45242f9,2025-11-03T20:18:48.360000 +CVE-2025-39463,1,1,9d2f1d73d0002217acd7201cfb079d8c1fb39c323650fe4bf9440259249d9bf1,2025-11-06T16:15:50.447000 +CVE-2025-39465,1,1,de51c7c85788653e55e3cdbcd39e6d12873fbb69f5875e34eeca8b7142af8991,2025-11-06T16:15:50.700000 +CVE-2025-39466,1,1,973691fa55b11b5655811b180ce779e2c16db1c157ace98163dd5a97077ec2f6,2025-11-06T16:15:50.903000 +CVE-2025-39467,1,1,dd69a624fa1482c02b2d36b30466edc756e1aea1ebb4946966b3b60246800056,2025-11-06T16:15:51.053000 +CVE-2025-39468,1,1,1b254c8937742d1d167e567ed7db2ba8448d6f87938afab850dfecff502d7ce9,2025-11-06T16:15:51.210000 CVE-2025-39664,0,0,2815cfee12ad981096034bfe2280fba4abfa5faad08f87b79c376feaa8625bc5,2025-11-03T18:16:38.477000 CVE-2025-39673,0,0,2dd14ea2cb39cd093cc685363959b4ce4b96eba4b242ed526f026e04af37b2a0,2025-11-03T18:16:38.580000 CVE-2025-39675,0,0,3ed8d0b88fe35fd7f9c18faeb6cc3933eb2a5d1cbc61429fde4cba1e8023613e,2025-11-03T18:16:38.677000 @@ -112271,7 +112308,8 @@ CVE-2025-40084,0,0,ea5adcd95291fab512ce6e9f7fc672eada434f773f1feae286235dd8069c6 CVE-2025-40106,0,0,c8419c50ab5c81d25c2ecff8d2d714afa5f9c7484c776c685e35d5f5d79c0774,2025-11-04T15:41:31.450000 CVE-2025-40107,0,0,a376336af6d1fc059aa0930721eb39cde68b88f90f764f3a5fc3825d73284273,2025-11-04T15:41:31.450000 CVE-2025-40300,0,0,cdc977eded0ef9c2668ffc2348bad7676d5055805032553e46120f6ba29572a3,2025-11-03T18:16:53.237000 -CVE-2025-40603,0,0,9bd2842b2ae460e7dc0aafe75894075bc7a3daac30153eae54a99216e410dd3b,2025-11-04T15:41:31.450000 +CVE-2025-40599,0,1,921a90b0f398efac4f5cba90f34db13818695f57fc9e8f6b06b31a69efc04a47,2025-11-06T16:41:11.763000 +CVE-2025-40603,0,1,39e629412d4f68c20b9cdaa52ebda3a5a4fc7a1fb40ca6e948c1de8e95e9f86b,2025-11-06T16:26:50.913000 CVE-2025-40640,0,0,cb894c650de1c0075679b72a3b0fe24f16a78c11898e8bb09e6fa83257788aab,2025-11-03T16:17:01.717000 CVE-2025-40646,0,0,85512878daff8668bbe95c058e71fe535cd5f9fe6965f5f0a3655350f1ba1150,2025-11-03T15:15:59.487000 CVE-2025-40777,0,0,9fd5dcbf07100aed7d2160cbb761cb922db3d851c13c26a7d43c521984c428a8,2025-11-04T22:16:11.553000 @@ -112295,7 +112333,7 @@ CVE-2025-41111,0,0,7db2fe9a17dafa58ea0bc4bac943e5d1f3ce7d71c075386dea0c2b3d8d7d2 CVE-2025-41112,0,0,bcf5731b7092b33d34d5e7b2ddb6584c6a54d52d8f51788d4852d5a3b1cedd22,2025-11-05T17:06:49.350000 CVE-2025-41113,0,0,57464a537bfd197423f074d4fd2c665dcb99c9827d1ffca698b670d31c334af7,2025-11-05T17:06:37.963000 CVE-2025-41114,0,0,9f423adb2d5c41c50a562bede0994e784cf75cdb523162ca9ec5ed0e2404aeac,2025-11-05T17:06:21.950000 -CVE-2025-41244,0,1,a5e50b0d242a5d5e697552c57bdfd35cca92b5bbf21cc0def5228425712b1fc2,2025-11-06T13:58:13.620000 +CVE-2025-41244,0,0,a5e50b0d242a5d5e697552c57bdfd35cca92b5bbf21cc0def5228425712b1fc2,2025-11-06T13:58:13.620000 CVE-2025-41335,0,0,77d2b9a6fc80e13db2fc106b397961b3b56242b4fb3732eec19b9c349ddd5e6f,2025-11-05T17:03:59.463000 CVE-2025-41336,0,0,4f0f2cbed74ea8e4f60ce2c7c3a86356b7832e2b5cb414434a732de46362c1c9,2025-11-05T17:03:43.240000 CVE-2025-41337,0,0,a963b77203b86202b34ea6ec044319e596f9d92b11956d79a251c0b94314e81b,2025-11-05T17:03:51.027000 @@ -112309,14 +112347,14 @@ CVE-2025-41344,0,0,6c4f8a2d88402ba09c0226fd9982cd6d9b410d9d0c3ecf9bae26a0d17f4be CVE-2025-41345,0,0,f6f71b792d6be9146fffd90c96f118cf4818fcbbceb69ee68cb0e434cc37cd39,2025-11-05T17:02:49.457000 CVE-2025-41390,0,0,f60e76371d33a8156797b4148255802befabb9698d46d8318da0c7e6f659f635,2025-11-03T18:16:53.343000 CVE-2025-41420,0,0,1aaa937a77091311a57653cf7b5fccdf8a40c0ce2b5d3f792ee64343f59ec15d,2025-11-03T20:18:48.500000 -CVE-2025-41673,0,0,e1a9db100813ddf38910d2b55d626974a47448c31660d2a8be08d9f3f217ebd2,2025-11-03T20:18:48.620000 -CVE-2025-41674,0,0,70bca18b7287bb448d650b2fde9b21c481c52f08976bd6d56a7426c033a20e55,2025-11-03T20:18:48.720000 -CVE-2025-41675,0,0,239d36bc2d67947d55de8f2add51f5d97e93a2329dfd24d736e297eabdccd702,2025-11-03T20:18:48.820000 -CVE-2025-41676,0,0,a95f772c03d441380b0d64c5e16f9f5420b2f0ff14c5417d10422742f4782f7e,2025-11-03T20:18:48.913000 -CVE-2025-41677,0,0,10f559e279135dc0cbaa0aadc7e236d959fb7589bb96158a19c515642f4cf260,2025-11-03T20:18:49.010000 -CVE-2025-41678,0,0,f00305097ddfcfd28ee05279b601d50be59186b9c6975c7747015d4a92acc7ca,2025-11-03T20:18:49.107000 -CVE-2025-41679,0,0,6d45cb77bcea3f0b15c033859d1b999119f4b7f9086ff4ecc714d6d82803394c,2025-11-03T20:18:49.190000 -CVE-2025-41681,0,0,3244ec020862fd5a4b140ab0eb9d4902f3d2acecf2bf04e0b09ad7e73d646f3a,2025-11-03T20:18:49.293000 +CVE-2025-41673,0,1,861182c19beb9f756194d2ec7ef3a9ad8812cffe012d0f9a9cecd3a45bf12221,2025-11-06T16:45:33.930000 +CVE-2025-41674,0,1,578b34ee4e51228c040bc9a297109e5673b38905a72e135c96fe65e9be5e4bd6,2025-11-06T16:45:25.293000 +CVE-2025-41675,0,1,40348ce324c2e21fbf3bc82ae8fae5f4470050c095dd542aa06a22860221af58,2025-11-06T16:45:17.543000 +CVE-2025-41676,0,1,c35f8a6508a8364fafd3bc01334938cd1ac1d0bf645aa29fee91ea7530f4756b,2025-11-06T16:45:10.670000 +CVE-2025-41677,0,1,dfe7cebf434d36b54ecdadfdca1272909500a4bbc5501f47932633da3c0df8e9,2025-11-06T16:45:01.420000 +CVE-2025-41678,0,1,b451a3bfd7daf47ca08c3b281248d1e6ecd907ab936b7cf24b26f7425f13538f,2025-11-06T16:44:52.220000 +CVE-2025-41679,0,1,d91f41e64fa0d016785387fd8a6e1a1ea580de2c01ab567436501bbc661ae943,2025-11-06T16:44:44.590000 +CVE-2025-41681,0,1,529c5174d5224a0a6a0e1110a525d1366e4d221a6fa74d48cb827e0072c51e4d,2025-11-06T16:44:36.567000 CVE-2025-41703,0,0,b69cdedc3406aa7619afe42d65a4f6126013cbf6086b1fef85828006764d9d39,2025-11-03T18:16:53.463000 CVE-2025-41704,0,0,b61bb2bd2e55399800f5187ed147bad7070f84bb777801280ac536fa7fe8418e,2025-11-03T18:16:53.573000 CVE-2025-41705,0,0,2e8583709980654c5da3910da3a09a2155425e380a42c0b1be1f667af44fb233,2025-11-03T18:16:53.680000 @@ -112418,7 +112456,7 @@ CVE-2025-43295,0,0,541b3e77657adb813428783ba12bc7c4fc86afbff99cfbe6726e5d12f1954 CVE-2025-43297,0,0,f055a30af5e63118ae246ed68c056afcb40a252b9f80440a075f2cb8fa4a0cd1,2025-11-03T19:15:57.527000 CVE-2025-43298,0,0,aefab6ee8427821fd8b257381be6fa1ac2801a37f5af90d9776f01b21e70006e,2025-11-04T02:15:36.457000 CVE-2025-43299,0,0,113d30684db51feec876374e4c6bba871fd56656cabcb50169d230086ad0a1d7,2025-11-04T02:15:36.613000 -CVE-2025-43300,0,1,495de789a81141b10840ad46f4ab7f095688c6c157f6a4dc83a8b01ee6a2e2fa,2025-11-06T14:52:56.203000 +CVE-2025-43300,0,0,495de789a81141b10840ad46f4ab7f095688c6c157f6a4dc83a8b01ee6a2e2fa,2025-11-06T14:52:56.203000 CVE-2025-43301,0,0,2ec7c66dd93d9b0252c6beba4efa8485183c85d7a231a798c5c701ef27058233,2025-11-04T02:15:36.770000 CVE-2025-43302,0,0,3db0bd5ee85342a90a745dd7edd9dbf8d3e9b33fcd9e938acb2ff034546261a3,2025-11-04T02:15:36.930000 CVE-2025-43303,0,0,037cff4e9ca9436fc379f25f7da9ba4455b316b96aabb4accad2bcc8b569a5d2,2025-11-04T02:15:37.107000 @@ -112591,6 +112629,8 @@ CVE-2025-43991,0,0,624e58f47802dea4ba2beb495ef345a311b51869ee35fb24bf052d4f25a8b CVE-2025-43994,0,0,2133a7869e660b5f276ad4b9ec6fec4b5722ffe792bd76bc9c99278bbe3b2677,2025-11-04T14:31:14.497000 CVE-2025-43995,0,0,ccbdd3dc05ef3b6db2d33e6f1a3ed6f942a4518562eac85ddda829029706450e,2025-11-04T14:43:05.420000 CVE-2025-4404,0,0,6212c0997de05a4cacb3f5613f66f3247025a6c34c2a021e1c13cd34bc7c17cc,2025-11-04T22:16:19.523000 +CVE-2025-44823,0,1,df8714ab72a0ff668d8e58864e5040381b1f1ec2d5c829fc9e26080a8f0d92bf,2025-11-06T16:41:01.823000 +CVE-2025-44824,0,1,18a68b66c1f3196a04518311719b0082fd7859aad753b492ae15310b1f86a31f,2025-11-06T16:40:35.863000 CVE-2025-44955,0,0,517230cf7435bd3e73dcc2fe5e4cdec16198880ab2bd5fa815402e2cc6103296,2025-11-03T20:19:02.943000 CVE-2025-44957,0,0,2a9bd04718aa10336c4a04ba837be8666b9987973458831c7c6830f8a6bd0398,2025-11-03T20:19:03.533000 CVE-2025-44958,0,0,3b7460cf76f48c0c9cbcb427609aa6740cefb83365afdd5b437abceb54fdc28c,2025-11-03T20:19:03.753000 @@ -112653,6 +112693,7 @@ CVE-2025-47367,0,0,55d35efcbed256a8005c50590917fefef3351219398fcfa8d0ef677e76d33 CVE-2025-47368,0,0,7ffa2aabaa0b08a1328e7c7edea1ab5ee0a4abc0548bd851bc9ef9fa03b04e82,2025-11-05T17:16:37.663000 CVE-2025-47370,0,0,46866082f29823a11a177b229b0588d76d9229c7fa67f8c932785e6e9be95191,2025-11-05T17:16:27.067000 CVE-2025-47410,0,0,10b6ff10793e7722a83e431f5b64124fbeb2d79fbb6a67d946f61e64204f7cb4,2025-11-04T22:16:16.040000 +CVE-2025-47588,1,1,788a67804f95afe3dd03e3dbee8265c52ee2b2ed9e5c22012cf4d61be93573f1,2025-11-06T16:15:51.363000 CVE-2025-47729,0,0,ac168f16e3d3db81f520a0f9daaea172771864b3d9b6a414da966e54f361f580,2025-11-05T19:26:39.130000 CVE-2025-47776,0,0,fa891f5080b3670f31ee475fb17e9d028337fb7c07a37ad7fc8911f901277bc5,2025-11-04T21:15:37.367000 CVE-2025-47779,0,0,e97afd4d2df5461ffa1a1c2caaf1b5d0a6c0598e8da7180920182298df1150a2,2025-11-03T20:19:05.613000 @@ -112667,10 +112708,19 @@ CVE-2025-48005,0,0,250fc7c919a197496803f5d651a09432519dabd2e341ffb7e6bd7da112085 CVE-2025-4802,0,0,948781c23b1bc6bac1fd2b7d365d25df3b310a8a08a292b534eb5384874bfbad,2025-11-03T20:19:11.153000 CVE-2025-48060,0,0,d757230eedd12d987706b15ce9c83f3782385d40dacad3903d66bc6053f48e02,2025-11-03T19:16:06.480000 CVE-2025-48076,0,0,24d109101f4c3072c4edb7b99bbd35d3966969e476e3dd07dc2e1c7d16a77e8b,2025-11-04T21:15:37.513000 +CVE-2025-48077,1,1,1b3b8c73172e2d63a21858caae81b46f30ef028463dd8aad2aad53e8bd1c1ba4,2025-11-06T16:15:51.513000 +CVE-2025-48078,1,1,bd514d1e2d28ab5cc626963c14a6b2e44316ac60d30f11a03283635a04a53896,2025-11-06T16:15:51.670000 +CVE-2025-48083,1,1,49bec11531331e1a9869469d59e75bc96fecde0040d030e0bf4fc58216701e92,2025-11-06T16:15:51.810000 +CVE-2025-48085,1,1,2dd3455c07dfc13fab60e04b1c35d34d7b22b2afaa710744610d35a19406e3b8,2025-11-06T16:15:51.970000 +CVE-2025-48086,1,1,c9afc10e125ded6d9878d5a5ab2c2adb90c8f6594daddbb83621c9e903e1446e,2025-11-06T16:15:52.120000 +CVE-2025-48089,1,1,2f79a2b14d53660bbbe4ee9d24aa3dff213dcd4cc25fa3c7d5b7d3f9dc25e4fb,2025-11-06T16:15:52.270000 +CVE-2025-48090,1,1,1f7b5bf769ba826a605f8fb8d61b8ed61294f0325244414eb62fb0507d96f604,2025-11-06T16:15:52.423000 CVE-2025-48174,0,0,4affb247f09b504ff85e8b4d707878b6e00aa654853d0d971260a80b0c2512ff,2025-11-03T20:19:05.993000 CVE-2025-48175,0,0,602d6fca3d364e0b14960bae120f0df455728bb8a2ff0f80f212cc6fcc2399b6,2025-11-03T20:19:06.153000 CVE-2025-48208,0,0,470c6baaa8323aeea766388109021599a9d182b6dd06cdeca1ab51a80bbb5305,2025-11-04T22:16:16.633000 -CVE-2025-48384,0,1,a7003488fb6f2e16f16be0d41e1cc97bcaa10f1dedf1bedb35191a0fb6fb19a2,2025-11-06T14:52:47.590000 +CVE-2025-48290,1,1,790cb68b7a3aa92995a7f5748c907bfb51637ad39b0c992b25d2da5d75bba8ee,2025-11-06T16:15:52.627000 +CVE-2025-48330,1,1,071cc37b889925cb89a4b365b01960e9aa6880f4e2b57342d1f52d8aeab04c4d,2025-11-06T16:15:52.780000 +CVE-2025-48384,0,0,a7003488fb6f2e16f16be0d41e1cc97bcaa10f1dedf1bedb35191a0fb6fb19a2,2025-11-06T14:52:47.590000 CVE-2025-48385,0,0,b249d244b89a94e909bed89a09c61b4fe3b746814aedc480b081b2cb24f04fe4,2025-11-04T22:16:16.913000 CVE-2025-48386,0,0,38f4a1a042a466b89eb9456ef67cb91b2b5db6e12b790768f2df70fee4275f29,2025-11-04T22:16:17.050000 CVE-2025-48387,0,0,ac0979fcbd9a32129342caa7b84654981a65d42e44d9b12bba68cba6efa944fd,2025-11-03T20:19:06.267000 @@ -112714,6 +112764,12 @@ CVE-2025-49179,0,0,3a5fda0ff398cabdae24b7681241f1b9fbf6c120931c066e60390515e15d1 CVE-2025-4918,0,0,b28490550cb4a18d803f839e43ee191e559d9d8aece39136417a22205506b1cd,2025-11-03T20:19:11.337000 CVE-2025-49180,0,0,91b5e85099c27f7bdcc9b1ddf7f6aaecf84920440a32d717f6477e70709ee453,2025-11-03T20:19:09.187000 CVE-2025-4919,0,0,471d9b3b625d81b393a9f48b292bc9cebebd9184831084bf3313b099d3b546c1,2025-11-03T20:19:11.547000 +CVE-2025-49372,1,1,3404f845bc0fe41ad176ba29997015f39b2c71aa5639829c4590d9cb873e1887,2025-11-06T16:15:52.940000 +CVE-2025-49386,1,1,d963ea2802bd728fe4dc36ad04236810293863aa819daa275f127faa93d445ff,2025-11-06T16:15:53.103000 +CVE-2025-49390,1,1,4f38c4632daacde65207dd59bc4edb116a857a57f7c2ddc9881374ae2da0fce0,2025-11-06T16:15:53.260000 +CVE-2025-49393,1,1,f4a05c17ec0fd28791c93f7fcb2cc266bd5eae631d52a5df8878e099239db71f,2025-11-06T16:15:53.413000 +CVE-2025-49394,1,1,0476072814ecbfd0795aa288bcd68611808ece1040d2f2cccd44825a4497c1db,2025-11-06T16:15:53.720000 +CVE-2025-49398,1,1,83094df3ab38176d9aa4dcc6696bdc16771dc77888e424c6a60040349d9e1fc9,2025-11-06T16:15:53.890000 CVE-2025-4945,0,0,c377e40f2042854d02316f04b28e49057edfbfe85f638c6bf0ba7cb8416a6c06,2025-11-04T20:17:16.103000 CVE-2025-49494,0,0,f14e74b94ad28e1247eaf600a9c70465e7dc08d91975fc538b5b1728ceee9c57,2025-11-05T21:15:35.357000 CVE-2025-4952,0,0,c14ffdbad9cd577b4ccde8103246cba43d0b5129a0837d62d27a7c03853564ec,2025-11-04T15:41:31.450000 @@ -112728,6 +112784,10 @@ CVE-2025-49829,0,0,9c4d8665d2ea8df5c9e0393b40f5d06c016b8fd0cb8523090019464faea6c CVE-2025-49830,0,0,31fabc448a8b6610d1d6ca09d595a24b31475e70245a401fe16aa4ca6c4f0d9e,2025-11-04T22:16:19.137000 CVE-2025-49831,0,0,46632a4ebb66d913ebb58306978065e37c43cf6a13fa49e2c447f37a6cfbea6f,2025-11-04T22:16:19.260000 CVE-2025-49844,0,0,8a8fcfe7d8b34ccae47865c663142649b60abb2a01036b54f149da3a824bdbfc,2025-11-04T22:16:19.383000 +CVE-2025-49900,1,1,2c507f19f20abc7969a0aa156ff61eae8433487111831fa63216798945f826a1,2025-11-06T16:15:54.070000 +CVE-2025-49904,1,1,51164c253342a5dd5d992b85d602990f4ef757825beb650d433d94004eb80af4,2025-11-06T16:15:54.243000 +CVE-2025-49905,1,1,52dee3542104938a2bdbd4c268d182590b90fcdce2f7782489eebb6eb13b21c0,2025-11-06T16:15:54.430000 +CVE-2025-49909,1,1,71cc73f02a25a4d71a85dc6cb560765d624e3990c8fed79ddc31ba0f4a671d6e,2025-11-06T16:15:54.583000 CVE-2025-50059,0,0,b49eb8694ee4fc7af87e672e933369038c46d8a1e0725c6e75fd02c8f8c2e969,2025-11-03T20:19:11.743000 CVE-2025-50106,0,0,0e5b05b92eb43ae0be84cf47fe2d1b2d6d6fe671ad5760bc0ebd592be0dc13e2,2025-11-03T20:19:11.870000 CVE-2025-50121,0,0,5ef67e26760314b3c042813a208d041a27cbb2815c93d450cdc74a8b80ef9c37,2025-11-03T20:19:11.977000 @@ -112770,6 +112830,8 @@ CVE-2025-52665,0,0,bd0e287f87e2085796d1e65a1006cd57b0ed6c340fd0fe9f5df0c88d40bad CVE-2025-5267,0,0,e23087e179cf44134836de7a812203898ef64aba608e835a2c99df1f209d68b6,2025-11-03T20:19:16.420000 CVE-2025-5268,0,0,4fb0b611433478e9ed53bf2511f1d56960e851188c13f16758c88f8de9dc4515,2025-11-03T20:19:16.580000 CVE-2025-5269,0,0,203e5e46c30c1f25d2e9caa4aed3444db43ba957ad29134a6683ec60cf4ab41f,2025-11-03T20:19:16.740000 +CVE-2025-52764,1,1,ad388eba86a36de7243855644394ee6cfe8ba216699b8122bf4ea49e9b545205,2025-11-06T16:15:54.760000 +CVE-2025-52773,1,1,90c5836869bc12e13f23b44af1009f4a88bff478b5866f33cd3e04d4bcf5d805,2025-11-06T16:15:54.933000 CVE-2025-5283,0,0,4445ee7db0ad281b38d8f2e047de0d8bac04ab05b7b7a19a55eb794127210018,2025-11-03T20:19:16.893000 CVE-2025-52885,0,0,c870ea8579a25e936f9212fb6d89507598277d3bd91b3554077e2ee555427695,2025-11-04T22:16:20.757000 CVE-2025-52886,0,0,a8573897070fe0ec1473ee87d4fd80a657b22fa663b711aba3e224c6a81f97c2,2025-11-04T22:16:20.887000 @@ -112786,6 +112848,17 @@ CVE-2025-53085,0,0,6d7984676d93d9ccdb0efb078c765e4db3ad9ad41d9ae33eb86df192abe3b CVE-2025-53101,0,0,4c63a28966220a9f7d4981aedad932218d7b64b7580892063abd995b8db76d51,2025-11-03T19:16:08.327000 CVE-2025-5318,0,0,c28e25719479d8d0db78cc09ad73e95309dd16c93015cda1a9cf5b2069182c7d,2025-11-05T20:15:35.953000 CVE-2025-53192,0,0,bccafee60ba3b059c832947ad02522087317499fe8a4b2f61cbbae9e53d65ffc,2025-11-04T22:16:21.433000 +CVE-2025-53214,1,1,85ccd89f6cf580e87ecdfe7321fc45e37ec0012a2f38ff82d36a3789c85b6334,2025-11-06T16:15:55.110000 +CVE-2025-53239,1,1,97eadc03f95823c619878fe7ba02556cdbbc1f2a6d6da1f2a09e7980f760b796,2025-11-06T16:15:55.300000 +CVE-2025-53242,1,1,2429247ef69b813b02fab7c0a5746e9f986649793e9e8464f6d36fde4e0e5f65,2025-11-06T16:15:55.473000 +CVE-2025-53245,1,1,d3016485ae74df9f09415c0f9541f90014c2119dd27f5253f4f5270ee40a0b0a,2025-11-06T16:15:55.637000 +CVE-2025-53246,1,1,a6e739914936072db21157af7482344a45250198852bbcab6b44c0cb7192c1e3,2025-11-06T16:15:55.833000 +CVE-2025-53252,1,1,af22dc9aafe5ff4bd9f81440fdd518597222d21c417af83cacca23d3d1fd0192,2025-11-06T16:15:56.010000 +CVE-2025-53283,1,1,af2aa407956661b2bace4123504f7db15bb3d1ff267ba99a5fbe94f380c6f88e,2025-11-06T16:15:56.180000 +CVE-2025-53286,1,1,9eb07f37a5f958cb9e818a38a32289c647d753413346a8d86f66ab65fbb5e545,2025-11-06T16:15:56.333000 +CVE-2025-53316,1,1,b6a41473b359ee37ff0e5198ba77b1e0fe365f5735191e69726db1bb87392555,2025-11-06T16:15:56.483000 +CVE-2025-53324,1,1,ed6a1b087d9566f39261eb0ae1ac358b25ea76330731e2698cdf22a0bada0751,2025-11-06T16:15:56.630000 +CVE-2025-53349,1,1,0d0675ff94750f9de03b58fe8fd198299ac64b55110fb5c06d1defe8b08aec6b,2025-11-06T16:15:56.780000 CVE-2025-53367,0,0,79579ffd3d7c5b9eb04fbb9c228da59a9687ed0511e0e2fce8a7ccd5268c2e84,2025-11-04T22:16:21.577000 CVE-2025-53399,0,0,833012ecd12be1ff0afb12b657a3be368f8693a3aefc9fd94acf976ab1554747,2025-11-04T22:16:21.687000 CVE-2025-5342,0,0,11f3981689da94b4ec83214237eadb872814de1a95da005ea2055115726e224d,2025-11-04T15:41:56.843000 @@ -112797,6 +112870,10 @@ CVE-2025-53510,0,0,b7729b683f0845869c076e0eb2c76162ec18d3162b196d6b9e2d1dc6d5431 CVE-2025-53511,0,0,4fc647940e5d1ce108f9845c600515f40d786467fc2cf921b603d69ab81229d6,2025-11-03T19:16:08.583000 CVE-2025-53518,0,0,52ddf2d841429d03fc0e20df5e2ac415924510f8d92d7a928d9dff0576fed053,2025-11-03T19:16:08.713000 CVE-2025-53557,0,0,e9ab3f67172f3eaf40813e29fd9a6cef6227f93d971ac9c8b8ad9349fd8b66ac,2025-11-03T19:16:08.830000 +CVE-2025-53573,1,1,6b347aaf17c3eeddaeed1e260ce986e7b6134c4588f2f56f89a26337a8d418da,2025-11-06T16:15:56.930000 +CVE-2025-53574,1,1,3eeea511dcc40aa6d10c84f19a58012110cf20dbd10bebb5a0b23187cac7e4af,2025-11-06T16:15:57.080000 +CVE-2025-53585,1,1,a209c3c76a8f3ab270e52ee8ba3a6c18501d3cd4f09bba5abcc2b6498b01d6ff,2025-11-06T16:15:57.227000 +CVE-2025-53586,1,1,379fe1d08b53bc682b46928690f98c61d25d1fbcc280fe0277d7c0e211a84c41,2025-11-06T16:15:57.373000 CVE-2025-53603,0,0,758b59783535fc343ba099c358d91d8b4072c7f703a603ee5cc7d1557a42c3b8,2025-11-04T22:16:21.920000 CVE-2025-53606,0,0,6817112a73f354325a39b2cefced72cb6bccc2a4b252136241afd7c142960340,2025-11-04T22:16:22.017000 CVE-2025-53650,0,0,5180e9c11ed3b6cb2124cda30a95c2f751801de898d77ea867d73a509dc81161,2025-11-04T22:16:22.147000 @@ -112841,6 +112918,7 @@ CVE-2025-53855,0,0,667e045dfd3d46ffe849802bec4f0bec0cd1d71c17538727a0e49eaf21700 CVE-2025-53859,0,0,b99ec0b7d16b22d7e32befb597fcf31fce5d328ca42ea627c47cad5b73b1774d,2025-11-04T22:16:27.033000 CVE-2025-53905,0,0,58f5af4d1336bab9d7753c911b1d2381e4a8245bc7fe9a345ea7396a405aeb70,2025-11-04T22:16:27.173000 CVE-2025-53906,0,0,7bc3175f421a09fe1ecf9daaca237f7baedd6d306197d55230caa0177ddfe46e,2025-11-04T22:16:27.293000 +CVE-2025-53964,0,1,60346e61dfb171a70ac76d0fc48344d27635a5bfea3feedf943b9a0193e0f1a4,2025-11-06T16:43:59.190000 CVE-2025-5397,0,0,304b49b755c43f83aa2978db7d2c964df0fca29d29763ce14fe05fc6d223fe0f,2025-11-04T15:41:56.843000 CVE-2025-54090,0,0,b10468a6f9ebfe3e54222f12bda9bcfd91a88ee576f681d67222d81be959e260,2025-11-04T22:16:27.417000 CVE-2025-54119,0,0,ae9d51ee91d29f55bf10923d55e008652f982b98901e3b2e533e9f4ad75aac8f,2025-11-03T18:16:58.843000 @@ -112895,7 +112973,13 @@ CVE-2025-54571,0,0,bcde77ab4ce095e2ed24f279b78d0be50f98c75cf3c546e412e91241d7a52 CVE-2025-54572,0,0,d8eed55a8193a9c083d38fb6881e7c365d03d0fe98c6636b8b803fc99ce2a9ba,2025-11-03T19:16:11.673000 CVE-2025-54574,0,0,87d9ee79ac41e503b5c77d8a9b135e6a737468cbcf2de55ce6a51b9b17b4ff52,2025-11-05T17:15:43.620000 CVE-2025-54656,0,0,94f1ada77914a32dc0858e83185b1adbab01cd91dcbe4d17058ce48cb5b85473,2025-11-04T22:16:29.117000 +CVE-2025-54711,1,1,264a2dfaf5cd9aa3c839cad95915e2b03e26192ef77d5f9a59842bb949b34105,2025-11-06T16:15:57.523000 +CVE-2025-54718,1,1,2e0ae8a9fed19029d0088eb61b2fec23dfdcca9d1a22d1e70287ae9cbaa9d8fc,2025-11-06T16:15:57.677000 +CVE-2025-54719,1,1,1b58cad813b5aba0d164293c5eafaef1e8c3227d4e5323c0d4bbb1b3b7bbdff2,2025-11-06T16:15:57.837000 +CVE-2025-54721,1,1,65d73dde89ad1f6efc7fcb504561540ee6631858e63f8ca3bfe2aba07ff90c71,2025-11-06T16:15:58.053000 +CVE-2025-54722,1,1,f726c0880e935795f4f7eacb702de34c8dd5224d7945ea7750dae19d8002e334,2025-11-06T16:15:58.277000 CVE-2025-5473,0,0,741bcf8aadf6afbb3b3c76265a396b34268ac7b8781375c90c7e44124fd79743,2025-11-03T18:17:01.407000 +CVE-2025-54737,1,1,e2daceb18be60ff2c433c826531e3eac261098e0cb4fd6f6f17e7e95fc89c4f4,2025-11-06T16:15:58.427000 CVE-2025-54763,0,0,1d9681f4505380a4df4338a2337dd81b53bbde61b69eb724236b7d8d4559e92f,2025-11-04T15:41:56.843000 CVE-2025-54765,0,0,e530ed841ae515943a52c085e4fbbb018fdd48d5749f42a44e3000e7b182ad84,2025-11-03T20:19:14.530000 CVE-2025-54766,0,0,b5788daf9c594c7fb9a31986b075150ad23b979e5eb87521d64a01370035f1f8,2025-11-03T20:19:14.670000 @@ -112952,6 +113036,7 @@ CVE-2025-57803,0,0,6a654dca0d98186f754aee1e1d4ca8eba38c0a1a9cf912e2b244479f285ab CVE-2025-57804,0,0,5c4e986888e63d8c2c6ac02ac29a5e754e455a65bbdb44a898736ed99cca980d,2025-11-03T19:16:12.777000 CVE-2025-57807,0,0,72b5a5cd18a6a92f959d148725f77531fbd5ad0d7226fcffcfcb34a0f44e81ae,2025-11-03T19:16:12.893000 CVE-2025-57833,0,0,ca0b8eb857895fea251cdd0f56e50a4677e72dcfde1a3baec0cd56e748657627,2025-11-04T22:16:31.930000 +CVE-2025-5803,1,1,6d06f370906819d67e7df3132efd7dba10ed15ea37ec188e26864911cda193fd,2025-11-06T16:16:02.763000 CVE-2025-58047,0,0,717169482b04e15936de61dddc435e056119f8da63739e30bc5ef88872066d17,2025-11-04T22:16:32.057000 CVE-2025-58060,0,0,3d53bd0a9165b48e98e3b1cbbd5285cf0f2408e128841ffbb85f0335ba3c5263,2025-11-04T22:16:32.160000 CVE-2025-58068,0,0,66e7b2857a088a5b753cbc8b9a441080ae29753a278e08666426000c7ac02358,2025-11-03T19:16:13.340000 @@ -112969,15 +113054,34 @@ CVE-2025-58186,0,0,66f91eca7419b275d606ab7bd9ec4846ab5addd132a073e636085fe46a43c CVE-2025-58187,0,0,432caffab1feb251779cc8d51b70d119e9975cb99ca82f6e7cf5538d6476ea99,2025-11-04T22:16:33.593000 CVE-2025-58188,0,0,3d50778dde8918d5d63cadfa2b34921a5a9df3314a5e646189b9710bff6b6cc6,2025-11-04T22:16:33.740000 CVE-2025-58189,0,0,b7b31dfd5f6a0c38020f90a11349b1d9404dd0074567c6572a52cd0e4e02fac3,2025-11-04T22:16:33.877000 -CVE-2025-58337,0,0,00aa85897d5dcbdbec12fee848075bd598881339725586f7a239f1efa6040a0f,2025-11-05T11:15:35.070000 +CVE-2025-58207,1,1,297f3c5e141146346c0963bcb100f7765fe644ae6ce7a305ba6368cf7c142df1,2025-11-06T16:15:58.567000 +CVE-2025-58243,1,1,f158d8cc4ee85eea671c2363de0a67730eaf695244e05c09338e58f4208086bd,2025-11-06T16:15:58.723000 +CVE-2025-58337,0,1,25b30d315819ab27ccb87511bb972ff7b06a68791de5a601fee528d083cfd981,2025-11-06T16:15:58.870000 CVE-2025-58364,0,0,fb144b87e40584e5e0120380d60198a2b456e69db599f0331e5ffa6089d809a6,2025-11-04T22:16:34.003000 CVE-2025-58438,0,0,4f70e2857129179345e235a9b918a01ff13e124f81996d12187c07edc207d5cc,2025-11-03T19:16:14.203000 CVE-2025-58457,0,0,c45c4ccccc70b6710e1cc7394d0f4f590a1e9a16d473495f50ad68d5b0239022,2025-11-04T22:16:34.103000 CVE-2025-58458,0,0,c84258aa71dc527b70d0427dd5490aed7f5dcdc9188c9cb840d5352bb43d9d86,2025-11-04T22:16:34.240000 CVE-2025-58459,0,0,04d58661879863aad31ef53eb4ac168f9adfb2fbdf761fff6df2ba0392b07fda,2025-11-04T22:16:34.370000 CVE-2025-58460,0,0,29a71523a5fd14b79b24bd36d2f7ab0c6d2daa0e5bad9c03cdb91a9c1de88402,2025-11-04T22:16:34.507000 +CVE-2025-58592,1,1,1207f70028125da9a6a6aad777678f5d17b2cd4d1dd08e3df4f1ce8268afdf29,2025-11-06T16:15:59.080000 +CVE-2025-58595,1,1,7e1298031b289c80c843dc48c2fa077d3be2bbd5902261dfcf1579fae47ebe41,2025-11-06T16:15:59.233000 +CVE-2025-58619,1,1,0b97f315724bdafc1a114ea2583fbadfa898d4b97193125754ab33ef5bce1eaa,2025-11-06T16:15:59.400000 +CVE-2025-58627,1,1,3d874058a1b555ed0a3cba15d05cd3170568714c61149176caf01f2e1e607767,2025-11-06T16:15:59.557000 +CVE-2025-58629,1,1,15e1db6ddd504f61fa8eeb2423bd587ecd8ad00c167efed401d7d3771a4c98cc,2025-11-06T16:15:59.717000 +CVE-2025-58636,1,1,6f96e4ef393eabb4d48e29a87a7f574bf32cd77ab15e8c778b9d681ee11bb1e6,2025-11-06T16:15:59.860000 +CVE-2025-58638,1,1,8587122f5335f46a94166b3e1c3f72a0b86cac83bb8ab00b233e539bd636a672,2025-11-06T16:16:00.003000 +CVE-2025-58727,0,1,c206ec393f72d494e8280cd3597e37f03be3da2c8b33f7e97b722548b815493d,2025-11-06T15:26:27.320000 +CVE-2025-58728,0,1,90618dbe70f2f22250786352daeaceff044a0dd61a91c91ce4e9a993b3225dec,2025-11-06T15:27:47.257000 +CVE-2025-58739,0,1,276bc0c8cdcfa4bb3a3d53bf3ef2eb16255a8fbe47d506ad57fd2c05aae1be28,2025-11-06T15:46:17.883000 CVE-2025-5878,0,0,55ec53fdafa64305c11782e6d81280c7d50ef0b71cb81ad86079833284308985,2025-11-03T20:19:17.043000 CVE-2025-58782,0,0,87884614bfcc7d3df424229dce7e510b7609627ca29a5cf6f0ea672b82c365ed,2025-11-04T22:16:34.640000 +CVE-2025-58964,1,1,da913fedadb8cf48a0f4e91382c8e6ab301cb64981d1f17154517014d7b121bd,2025-11-06T16:16:00.157000 +CVE-2025-58972,1,1,82d15427b36de5dd18d6ac62e33d9573cf5743f159942792f781fbc309e9259b,2025-11-06T16:16:00.320000 +CVE-2025-58986,1,1,337a0cf214fa5efdcf7883c3a9cb63a6e562a16709efd59e1e69d8e085d0977c,2025-11-06T16:16:00.473000 +CVE-2025-58994,1,1,ba6e2dadb3d304c7d58d0fa4cc66a9eba3569d4284c151f58c9c6ab696b7d54e,2025-11-06T16:16:00.833000 +CVE-2025-58995,1,1,7c7e6423c1ea35adccf470103ba7b7d5624ee3a45e9728a515838fb18d5af655,2025-11-06T16:16:00.987000 +CVE-2025-58996,1,1,bddbe73d724194df9c70e093885c09e1a4999df2884733d45248af5cda6ad3a7,2025-11-06T16:16:01.140000 +CVE-2025-58998,1,1,4d0fae147a3ec309a4fd76158fe27bd43e27bc0ec5677dbb8e216e8dcef4b193,2025-11-06T16:16:01.290000 CVE-2025-59185,0,0,09ba92af99d6a4068debdd6fa2a729901a650161c9755ee3d6a31b7abfc4849e,2025-11-05T21:15:35.803000 CVE-2025-59186,0,0,244d8166a5817cacf772ec7e41c0ff4911860683db55ecb23169c58a7992a597,2025-11-05T21:12:05.187000 CVE-2025-59187,0,0,34c577c78afe6982281806c09b4f10ddb16f4359b6a648d92e5646c8f7bc5252,2025-11-05T21:09:26.217000 @@ -112986,6 +113090,7 @@ CVE-2025-59189,0,0,7a6d3695b43fe3d7fd0c0d8fe9884f4104d0bcbea32ca84fd4b8a96aa2b21 CVE-2025-59328,0,0,b0977814c7beb6e5bd0aeb963c146171d9ccd45e32d703931e206a2571a31c93,2025-11-04T22:16:34.780000 CVE-2025-59343,0,0,1e3342723272218ef05a92ca5696c24a51e91b61611183f8fd04d0f8211aa612,2025-11-03T19:16:14.317000 CVE-2025-59375,0,0,8683928718e83a75d76ab27793c7857a5bcaf2ca1ec27ca46261d95b345f6308,2025-11-04T22:16:34.927000 +CVE-2025-59392,1,1,12517a53dfc576610bce6080f7e58521e4fa72678283d8ce6b6a6d7dee96f95f,2025-11-06T16:16:01.447000 CVE-2025-59397,0,0,b43c63789bdc165da79e61b73954c241435b8c1c1b068003c2f30af1d7375741,2025-11-03T18:17:00.883000 CVE-2025-59420,0,0,520e13fc9f59ef13d18b0e6ea454626b3e24e41138d27279a40d80b9eb0de4d7,2025-11-03T18:17:01.017000 CVE-2025-59459,0,0,8f0fbcb631d001f235e39b196a25849c24c88145c4ad451190d0894f71ffdaf8,2025-11-03T19:53:46.460000 @@ -112998,6 +113103,7 @@ CVE-2025-59475,0,0,837b8ba98f2a7d5776742bdfd1b4139f21f6258b4342d20b6cd365910aad0 CVE-2025-59476,0,0,a7f9ed105f0e7a8a735c474940c092385bac16c9a7b9e59f0ffbc007ea9676d8,2025-11-04T22:16:35.350000 CVE-2025-5949,0,0,baf872ca495f6546dac2e07e389f80fc0bcede7010ff971d3bfb7bf8d919e6c5,2025-11-04T15:41:31.450000 CVE-2025-59501,0,0,02321876ed7f1173c20a53f4ed52c28de94e10f26e460809f4fd3c6055732ae1,2025-11-05T18:17:55.247000 +CVE-2025-59556,1,1,6bbd57d8f626c8726a4a456d8c237aa6b5fbacc8aebf267b7d0c61b6dfcbe62a,2025-11-06T16:16:01.613000 CVE-2025-59595,0,0,1205e6ccfb5c79dbd66f8f703bb121b805daed31953243ef78a24c823391b05a,2025-11-04T23:15:43.773000 CVE-2025-59596,0,0,11785ea4e1a25168b0c5fb8f9cae5a23be869ef004b0d0d9cca9c4429fbd4a1d,2025-11-05T15:15:39.870000 CVE-2025-59681,0,0,a904dd98b7e1b865701500b40213373c57abdd436623022b6ff993d640861947,2025-11-04T22:16:35.547000 @@ -113009,9 +113115,40 @@ CVE-2025-59799,0,0,a79d12dd3075e075ce7225408898ef1e4bbb957143d81459caa8f2afc3aca CVE-2025-5986,0,0,b14648211705fc63ca14535c5828a5f2a205afb64bf7730a5592683edba97561,2025-11-03T20:19:17.297000 CVE-2025-59889,0,0,8846149106fade1e78af177d5d18b31c9c03e64aed4770c057601dcad7bfdd21,2025-11-03T10:15:33.210000 CVE-2025-5994,0,0,7be4c9a906357ac5cd979ffe3c528cf6d749a23374fe258004ce57b40d86b58b,2025-11-03T19:16:14.563000 +CVE-2025-60073,1,1,8076b76cdb5ca6c5645c5f26b9ca08aa407ebbf296c1b00bcd8636ceddd7a352,2025-11-06T16:16:03.093000 +CVE-2025-60074,1,1,50eb95647c18def1b9866543cc58b355c925f32d9550f0b1156948f72eac1157,2025-11-06T16:16:03.250000 CVE-2025-6018,0,0,e61f2d9e408be1d678ab8292eb136a53ac61528a2f6634d1c83fd64ebf44dc8c,2025-11-04T22:16:42.873000 +CVE-2025-60187,1,1,3bc05f3537d2f55603d88484d4448d55ca0f858bb7ea57dbbe272a9f522e943c,2025-11-06T16:16:03.400000 +CVE-2025-60188,1,1,b345ee143476a2e1a47277a8482f1c696f380322f273c0a48de72c2540e4ccf0,2025-11-06T16:16:03.560000 +CVE-2025-60189,1,1,8ddd354359aa157a4c20e615bfd869368ee7fcca55be582467f1102a738daa02,2025-11-06T16:16:03.717000 +CVE-2025-60190,1,1,e2902e79387e943331c0e22bf345445afbc729a0fb95d92d9331a7a8ef2a202c,2025-11-06T16:16:03.903000 +CVE-2025-60191,1,1,5902e64411f47881cc54e7b732d58ff59b4824fbde55b2bd69f0c7311f0906dd,2025-11-06T16:16:04.077000 +CVE-2025-60192,1,1,7abeda8a6124c8b5dc20be6d16a7683f9a2b7f520fb018b2999c6a889a691578,2025-11-06T16:16:04.233000 +CVE-2025-60193,1,1,3c2427099f5824d6c5943555036286fd521e75b04b6f8b7721ba476d7b6a9d66,2025-11-06T16:16:04.380000 +CVE-2025-60194,1,1,beb96eddc1753ba856e4487c5905f60366410b618b75cf6d8c0f2f74279b33e2,2025-11-06T16:16:04.510000 +CVE-2025-60195,1,1,76fc49163b1f835774dd5d1eda7870a7ee1dce357d826034225792e7cbe1caf2,2025-11-06T16:16:04.653000 +CVE-2025-60196,1,1,50f0f0e7c6f7282da88c52eb8b65042c146cf0b81521f07509b7f122ed63c168,2025-11-06T16:16:04.803000 +CVE-2025-60197,1,1,a011cd3997fd59d0d16d48eb3bba387de87add4428f48a37b0bcb3935b9234a3,2025-11-06T16:16:04.953000 +CVE-2025-60198,1,1,b6861667551b94d217ef00dc7d65bb0f8cf2829c7ba0541ce5fdcc8ea6648c5b,2025-11-06T16:16:05.113000 +CVE-2025-60199,1,1,6e267ee504085b68987746eb9ebfb887fe0d44cd395945dbbc71e21db8e13a81,2025-11-06T16:16:05.267000 CVE-2025-6020,0,0,fe95468a2c0720e5bf462a1384d50fb2f6cdad1e3ecd95d0ee8577ed67360320,2025-11-03T19:16:15.117000 +CVE-2025-60200,1,1,e1574ab8394d33c02c1ffcc1861226603766b4d3242360c4d732f8c21ea06115,2025-11-06T16:16:05.423000 +CVE-2025-60201,1,1,19099598f080b1c891cbbdd98a1b895b6ccab0fd1053d72f7160c77fd0cf8306,2025-11-06T16:16:05.570000 +CVE-2025-60202,1,1,f6ac31635a71d89980a91e55afc32eba2f581b9575c32bcd09b456de116e30dd,2025-11-06T16:16:05.713000 +CVE-2025-60203,1,1,09f07ab0dd19fb54c57c513279a258973012f2ec20c8d996447dfef671619498,2025-11-06T16:16:05.860000 +CVE-2025-60204,1,1,1d0a7cb6f79550b84389ea7a2add10bdcd1ecc81466c3b4c762e12cc614c51a0,2025-11-06T16:16:06.010000 +CVE-2025-60207,1,1,17909b94efa30070de8afc209f2f43d1169804b23f6b1e29e9bf495a77088dab,2025-11-06T16:16:06.153000 CVE-2025-6021,0,0,69f6756381abbbdae35f2a8cd749d3af3f78806538d929e49f3ff98102b99e68,2025-11-03T20:19:17.717000 +CVE-2025-60235,1,1,70fe577596e86ddb2966e900b11f097f70dba4f1d997f831ae5f1758e978fdda,2025-11-06T16:16:06.310000 +CVE-2025-60239,1,1,2e68317577eab0b3099c8ffb75d0879734d8e9509bf1351ff1d887ec46a4a71d,2025-11-06T16:16:06.463000 +CVE-2025-60240,1,1,fb7bed4b4c7155b9e07220ea84c5782193c0f3a989116d1debb5e3c9c7aa13c8,2025-11-06T16:16:06.613000 +CVE-2025-60241,1,1,71e0b64a5ccfe3b34d1e634ff668cd95807307c0951729552ef2c0022f7c711d,2025-11-06T16:16:06.767000 +CVE-2025-60242,1,1,667f4a3bddbe8a3233352c8e522e5ad8ee54505faf1be777a27f80ce08638d9e,2025-11-06T16:16:06.917000 +CVE-2025-60243,1,1,d785e70953d7757c0daa9d1496f054a5cccd1764c24abf1d647b3064fa483198,2025-11-06T16:16:07.070000 +CVE-2025-60244,1,1,a5fcf02f6bb1e354f01ebcdd3a90dfa58ac0ea8aa2a191d09cd930e8662915c4,2025-11-06T16:16:07.217000 +CVE-2025-60245,1,1,1795b54eaf4c83a8711296c9397051e4189578af35372e5e2e33ef189f9566f0,2025-11-06T16:16:07.360000 +CVE-2025-60247,1,1,ffccf0a6582961ddea8c8d969ad2ae40d4e2d6f8777d4b5d141f9b000508e716,2025-11-06T16:16:07.520000 +CVE-2025-60248,1,1,9a9f718a390c1c973a9e75a88015e44e509b39f209879715c0e580a0e45d4da1,2025-11-06T16:16:07.667000 CVE-2025-6027,0,0,6b1664070b5eb4c10f8e6949b1cfbb4fcedb272b7e208e28785bcd9c2d38cfa0,2025-11-05T19:16:04.800000 CVE-2025-60319,0,0,65af61ef6b0c707fdf80ae8c27fd804a17f2c78dd1322235f46b8ca47247c1df,2025-11-04T15:41:56.843000 CVE-2025-6035,0,0,97dbedb41fbf6e422e6140022ad5b7a6c84336e1bed78790ceee857a2d7d72b6,2025-11-03T18:17:02.127000 @@ -113072,14 +113209,51 @@ CVE-2025-61962,0,0,4b3a12daa2c37fbd6d050c193fdfe187c26cd5fa6ef297cedb17962ca4c2d CVE-2025-61984,0,0,a22fbf9a4e0776982c9ec483b295b32930bd5397020608dcac69f945ebf2d59b,2025-11-04T22:16:37.567000 CVE-2025-6199,0,0,4cfff2929d4191f0ea2e897ad77718f1879f8d62a9ee03b5298a6efca64faca7,2025-11-03T20:19:18.417000 CVE-2025-61994,0,0,d2adad3d3d01811a9c5e5b301a0106b492ef04daafbbeaa8c2bf83e118b628aa,2025-11-06T05:16:09.407000 +CVE-2025-62010,1,1,9613154ee1ffca7458eaf2baedf7e034647e8d387fe61caa8dc1bb666f4c6d3e,2025-11-06T16:16:07.820000 +CVE-2025-62011,1,1,36b41298c02e7cc9d546087a0041a1dda3e5695a906fe8968a15a92920978956,2025-11-06T16:16:07.970000 +CVE-2025-62012,1,1,10c57239c1afb4d1ac7773f9aad4b00c3c0e0a9c1bf73bfd6009bedd93a070d7,2025-11-06T16:16:08.130000 +CVE-2025-62014,1,1,b6ff6fd92ff4a6d6329f55e6fa34a273e6030a7a3f5e3f19b8541131879a285c,2025-11-06T16:16:08.290000 +CVE-2025-62016,1,1,e97a1038c17c80aae9fc1049f1d7e7679e27c27ebf8c6a34fd4781ada023d221,2025-11-06T16:16:08.420000 +CVE-2025-62017,1,1,db251617cb08eacfa123e5c6ed2955ca5a74c10057fd52bc051a9bc97f51d185,2025-11-06T16:16:08.567000 +CVE-2025-62018,1,1,5035eb0dc78a3b1010d0a9312fe833246cdc91c9e073bd68f1cb638a25c70b5d,2025-11-06T16:16:08.713000 +CVE-2025-62028,1,1,428663cb5e1f5800b6cc053bb372e8f2e71d298569b47ca62a93e315656bfeae,2025-11-06T16:16:08.857000 +CVE-2025-62030,1,1,4c06b2377a3a75826b79a45d502fb4cd0d3fe58fec08894b35a94e58559afe8b,2025-11-06T16:16:09.007000 +CVE-2025-62031,1,1,91bcea1ae766750335646fc8d38e80445535d6717827b69615f21d7048b16d6b,2025-11-06T16:16:09.160000 +CVE-2025-62032,1,1,dc82f94c70b009a6d6de01db0bd2355b24c6a15f7fdf40ec824a7be9d444a7c8,2025-11-06T16:16:09.303000 +CVE-2025-62033,1,1,202cdc5a821913706c56f8bd486571886fa55609a2a6271a6c78f7cfe6736957,2025-11-06T16:16:09.470000 +CVE-2025-62034,1,1,a0192b6f51fc167379f2fcd4a52ef388cb4a0af24c0b3a504408206ab40f1838,2025-11-06T16:16:09.613000 +CVE-2025-62035,1,1,b882b0af7d54ba31934b78b7b2d7631d69fda08f9798aa9ecf19f9180ef680c5,2025-11-06T16:16:09.780000 +CVE-2025-62036,1,1,21d6281180cb3aead4f01c5d5de58120798dc04f8d8ef4dce0f15d6c795f4246,2025-11-06T16:16:09.920000 +CVE-2025-62037,1,1,206e019a98ccc4d8e539def2f07fb64db0c12b253ff7f088a0f3e9718a469265,2025-11-06T16:16:10.070000 +CVE-2025-62038,1,1,bc3e5e0e34f2b2a7c33dc6b9bd0c572f4da070d2936a34b09314024d0eb213f1,2025-11-06T16:16:10.230000 +CVE-2025-62039,1,1,9d5631b74868fc1bf494411e1f389eb1b49d2597960f94aa3039bf9ee28098b3,2025-11-06T16:16:10.387000 +CVE-2025-62040,1,1,b94646683f07d5b0513ad68c8afb83fe3068eb164db525791c2a1c64d1b1d573,2025-11-06T16:16:10.543000 +CVE-2025-62041,1,1,8b3116faea08ad9f38b99b94731274dd8fef805ade51f72a290e58d922d58a1c,2025-11-06T16:16:10.690000 +CVE-2025-62044,1,1,36492866c94574bea648a0ee63f2215c7f80b77820c8ff584e3fd358a9f51343,2025-11-06T16:16:10.837000 +CVE-2025-62045,1,1,ee4f7dea4560da4feb6c50d3523f3e8e586691220cddf36052e69f8c678d03ec,2025-11-06T16:16:10.980000 +CVE-2025-62046,1,1,c34d9e59b8588c4776e1dc478c35abc646d2c3a51b947c4def71a4280beca942,2025-11-06T16:16:11.123000 +CVE-2025-62047,1,1,87ca4585346781bfec5e0a2ae9947f6d545e3410bd5f82b6ff34f9c078e3e52c,2025-11-06T16:16:11.303000 +CVE-2025-62049,1,1,cfb2246dfb2acce4c0df8ff4fc9215ae44426d614e32d0c409b9a4d18593ef02,2025-11-06T16:16:11.440000 +CVE-2025-62051,1,1,5c089c1a4cb9af42fe073774a64bed82e9add8f4ff636e4d1dfcc545b1168aa3,2025-11-06T16:16:11.587000 +CVE-2025-62053,1,1,7b95a137555f7e0394530d8afd45a4d6f06983107e0e468c89fdee732671c8a9,2025-11-06T16:16:11.733000 +CVE-2025-62055,1,1,b5182fd7e3d747877384dafa91ce534d3109cf923c3431459daa8aa8f434adcc,2025-11-06T16:16:11.880000 +CVE-2025-62057,1,1,426b3c3f502b916290a1a5ea1b77e7c74b6323c0f3c5207a901cde1ae2a4ba58,2025-11-06T16:16:12.030000 +CVE-2025-62059,1,1,dac116fdd51dca3edfb7094b607def09dcab831fe316ef00a47e7f8711246c49,2025-11-06T16:16:12.177000 +CVE-2025-62064,1,1,6640a969a15b043dce5a24d971ee46357ffe9355f4cd40f851826205b6ef0742,2025-11-06T16:16:12.327000 +CVE-2025-62065,1,1,7a75de6c1e2d32bca24c61395e55f97df4ab16c6903ad250b31ed8608b942c0c,2025-11-06T16:16:12.473000 +CVE-2025-62066,1,1,29a2f1508bced9cd1f0a4146ea254215ed1f14831a7c7f5756237274d8abac94,2025-11-06T16:16:12.617000 +CVE-2025-62067,1,1,9a7e4fa845a31ef1d38bf2ab4a68a850305cd1b80c5914e070cd76ee5ea3f495,2025-11-06T16:16:12.763000 +CVE-2025-62074,1,1,3e59706cbd9cce20929690c630d7833e9b6ceda9985314e41cbca6fc88e4635a,2025-11-06T16:16:12.910000 +CVE-2025-62075,1,1,31f044358cb34deeeabc5f0640b4c805f031bff0d728a8f7d70316c1f65c9e90,2025-11-06T16:16:13.067000 +CVE-2025-62076,1,1,81723d3df52b0169e6028ee11472b201b8c3d9322e9af887365b032d20fabc52,2025-11-06T16:16:13.243000 CVE-2025-62161,0,0,5f28d6256e7b2c4a584ad9881d3a023d5eeb722ff795f6d3833df30bfef6af43,2025-11-06T00:15:36.760000 CVE-2025-62168,0,0,de273ab07e32779d8a85f87ddcb41c950374503a978d982c364438cdcce98b9e,2025-11-05T17:15:45.087000 CVE-2025-62171,0,0,5d7361a44734f6c49e049a2fed86654723407abe93084acc32363c5302bf85a2,2025-11-03T18:17:01.650000 CVE-2025-62225,0,0,b1b1f497ce95827635168ee92e0a354747d4e21edbb0b35f08ff17435776d7af,2025-11-05T07:15:33.047000 CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000 -CVE-2025-62229,0,1,ea60085942d58f18785bacde56ec9f8c7ce5833386dd47af209423bcbff8c3a7,2025-11-06T14:15:44.150000 -CVE-2025-62230,0,1,b007676fd0fb3a97ca395d12e3e5183b6389fedc8aed708b845dab269eb9b2a0,2025-11-06T14:15:44.653000 -CVE-2025-62231,0,1,3fc4ab12ae398b27169e2a3e13ebe3c841c8ad60588a04729ec9b21eb0046b93,2025-11-06T14:15:44.797000 +CVE-2025-62229,0,0,ea60085942d58f18785bacde56ec9f8c7ce5833386dd47af209423bcbff8c3a7,2025-11-06T14:15:44.150000 +CVE-2025-62230,0,0,b007676fd0fb3a97ca395d12e3e5183b6389fedc8aed708b845dab269eb9b2a0,2025-11-06T14:15:44.653000 +CVE-2025-62231,0,0,3fc4ab12ae398b27169e2a3e13ebe3c841c8ad60588a04729ec9b21eb0046b93,2025-11-06T14:15:44.797000 CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000 CVE-2025-62264,0,0,e8072abff2578eb4db89e6adb80900d3e268aaa05c134402f6f777ad16e87e9f,2025-11-04T15:41:31.450000 CVE-2025-62265,0,0,79fb42623822a17cf97c2993c879d87c19db48df9c324683bf66597fdeb711a6,2025-11-04T15:41:56.843000 @@ -113127,10 +113301,15 @@ CVE-2025-62792,0,0,93bec74d534c0ba0e99376e1f1db4c2080429564a6165098e981d60505919 CVE-2025-62795,0,0,5f44c646a8c77e5a206849f2e12130569912d8667eb6ea8c57f0d9b5f5d36750,2025-11-04T15:41:56.843000 CVE-2025-62801,0,0,06a78bdf409452775b9944939c07f47481c2f31c90119ed4262249a10aac7222,2025-11-04T13:24:32.793000 CVE-2025-62802,0,0,c5adc70120e780b75c26f9a7452b5a951f50441f469b73f3055dbeff9515cb08,2025-11-03T19:38:00.530000 +CVE-2025-62914,1,1,a251d2665b4d0696b7efaaef4ebc7a92c5b2efc8fbb1889d68f3e21d2ea228b7,2025-11-06T16:16:13.390000 +CVE-2025-62950,1,1,5bd9e21e4797e52b638e80b5e3536ed8d68f66089b16abb0321206c34ed04e19,2025-11-06T16:16:13.540000 CVE-2025-63248,0,0,53023b81edc73f7ee0a7b966828a3d2bedca83972c6bbdd34e70cf4fad8ac737,2025-11-05T20:15:36.317000 +CVE-2025-6325,1,1,ea1b4a31d23fc09e8a8cbe676a6cdf5b3456625048e904a395c6fbe9e1ae8f22,2025-11-06T16:16:14.643000 +CVE-2025-6327,1,1,9aad954e36489137d8b05ad50750fa4a001c60879440aa0be7fd94ff4a8a6c55,2025-11-06T16:16:14.787000 CVE-2025-63293,0,0,724c690d70f53f02d2da601a7b432dad356c029359de5fef4cb54a0ca78b9356,2025-11-04T15:41:31.450000 CVE-2025-63294,0,0,9f5c1eca51a1e51cffb27cede83872838f07e3f55b29ffdc4b6e7e9a33f20a60,2025-11-04T16:16:01.090000 -CVE-2025-63298,0,1,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1548,2025-11-06T13:47:37.963000 +CVE-2025-63298,0,0,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1548,2025-11-06T13:47:37.963000 +CVE-2025-63307,1,1,73927a2384836539aec96d2f8a83fc0407dd3e1d6b8abeb17beeec6d7017ba4a,2025-11-06T16:16:13.687000 CVE-2025-63334,0,0,49ffc34b2e535be7f68858c67b3f5a90df8a5a21162eaa0001c62ac2ee352edb,2025-11-05T21:15:36.120000 CVE-2025-63416,0,0,a4519e0887cbfcc9b13aae32f0ec97ab9b7446cf6cf4d0756a6b23e12f5fc587,2025-11-05T19:16:02.677000 CVE-2025-63417,0,0,38da449c7d11f15d73c2ea7153069b89c1acb0e3a0ff7196c2b3ea480caccf4b,2025-11-05T19:16:04.407000 @@ -113212,8 +113391,13 @@ CVE-2025-64163,0,0,d0e0fe4373ae085f5f926879b75d8bcff67fe76526a36f00f0bd55c432b9d CVE-2025-64164,0,0,63029b7151d558804d1fe35eee4b27af4d22d19de8dd3da63be3e4885faaf3aa,2025-11-06T01:15:38.333000 CVE-2025-64168,0,0,7e6d90f563cbc72997293038a67d217af43f5ab0bcb30c8f024d048ef4250467,2025-11-04T15:41:31.450000 CVE-2025-64171,0,0,b42a8c1ba2587e9bfe2c5893d30997e9e27a3432687bb76cf73f421ef9b1db6e,2025-11-06T01:15:38.493000 +CVE-2025-64196,1,1,d42a176e76169a7ec76d82ef86ba3ce3a35ab2d3711ab52ae768b1ad171ba1b6,2025-11-06T16:16:13.837000 +CVE-2025-64198,1,1,e9b97c53f0eaeb61a355d38b429484f434ce0dece79c097c480a68f2139ef4f6,2025-11-06T16:16:13.990000 +CVE-2025-64224,1,1,2bdad59992ef303fb21b79fa74cbd52722cbba1d0b8aab9cb91eb5e5d1ba4bd0,2025-11-06T16:16:14.173000 +CVE-2025-64232,1,1,7772840fed6a1c80517fb324f1470276e2feb36a2a25a48c00a6982d5874289e,2025-11-06T16:16:14.333000 CVE-2025-6424,0,0,1344467fb40916515d612ddea1592afd947ee32323ec3c659a92d2b4f2b58a62,2025-11-03T20:19:18.803000 CVE-2025-6425,0,0,12c56ec523e169f4e1daf1c062095a42fd04636532731e19e2feed9f58f8df6c,2025-11-03T20:19:18.950000 +CVE-2025-64287,1,1,e71d40504651309e3ab6823e15ec43ab92596b6a4cef2b22da59d269c6a4ebf6,2025-11-06T16:16:14.493000 CVE-2025-6429,0,0,38ab84757dc30a8c8ed35af327fa7b6bdecec69e8db81991ed8d7c3c729c2e25,2025-11-03T20:19:19.097000 CVE-2025-64294,0,0,2820b53bf9e14c4896851642e299e8d318371761c17883e3c0f74f684a347deb,2025-11-04T15:41:31.450000 CVE-2025-6430,0,0,10cbe6c4190db6ebaa1fabf01bd0f086a9e24f5789745f2ffdc55462b1c89ab5,2025-11-03T20:19:19.233000 @@ -113269,7 +113453,7 @@ CVE-2025-64479,0,0,0e0374f47c472f2a07e1a48c6ec183e365554a3108344f20f1c8ece18fc43 CVE-2025-64480,0,0,2ad1395ea309fada3c74c312a96612a75d1b59df646706a36d7ec23f7e8d8106,2025-11-06T04:15:33.177000 CVE-2025-6491,0,0,d478ad430e8523ebb2c977da4d50a55ea8625f3e53f503b02d5398f70f7ef11c,2025-11-04T22:16:43.147000 CVE-2025-6520,0,0,5f95be5a41420632e4d754e993279f9c6b8516973e8f5b6d6ec1fd460150a2e3,2025-11-04T15:41:31.450000 -CVE-2025-6558,0,1,dbd891f740311d767c1818c10ca7d54202698c8de406166f20a82e173a578398,2025-11-06T14:52:01.530000 +CVE-2025-6558,0,0,dbd891f740311d767c1818c10ca7d54202698c8de406166f20a82e173a578398,2025-11-06T14:52:01.530000 CVE-2025-6574,0,0,d08f27e4c0cf91bd1cfcebfcda20e409ada6ae6a8abdfe064f4c7a83397354a8,2025-11-04T15:41:31.450000 CVE-2025-6926,0,0,bc7a9b6c73736552c263febe835543b28e5214a363f7ee17221eabf2ff646501,2025-11-03T20:19:19.773000 CVE-2025-6965,0,0,0b9dcb6b0975490b454f18c502e91e6204498c4f4d2adefd5d0bbba4cf024b74,2025-11-04T22:16:43.413000 @@ -113290,6 +113474,8 @@ CVE-2025-7709,0,0,8b247db6cbd1f1d53e950b2987b925252a4da7cd971db264081c7ca165875c CVE-2025-7746,0,0,fb367cec2ae5da330def2dd77b08ec6e63802be4084dd2194e72cb10f49fd6d5,2025-11-03T19:16:15.943000 CVE-2025-7783,0,0,6ecdc6c2136e3622be6cb89c41aebfab980c98da697a18fef17f92fe9fb48c83,2025-11-03T20:19:20.930000 CVE-2025-7846,0,0,2624d9548f6e867f65c6341142ed6b1e6cec2d423e16bdc09a286c94e806cab5,2025-11-04T15:41:31.450000 +CVE-2025-7938,0,1,9e1ec27c57ccca2a1ac4fa62cb66f49a928e8aef711c48d7c16492b625089879,2025-11-06T16:12:01.390000 +CVE-2025-7939,0,1,57d68cb1bca55a564ff744ecc478a97bb795f230353702f371bb8edd8c4cf520,2025-11-06T16:01:03.883000 CVE-2025-7954,0,0,8fe602c42c4f1ecff4782b13410ec8b8c9c1d842300833d3cf3d24ee905bd933,2025-11-03T20:19:21.047000 CVE-2025-7962,0,0,6a58ceca5729a2b17c76306c58b58a2de1b1fbf776794e5a95956900310d0cc8,2025-11-04T22:16:44.310000 CVE-2025-8027,0,0,22cde90659f05c34cb24597f0ff995210cb406267da8df337947868b04c611c0,2025-11-03T20:19:21.180000