admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 05:00:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-10T07:00:11.829226+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-10 07:04:00 +00:00
1 parent 660e562d1f
commit 2e5e13a1f1
8 files changed
+787 -27
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2025/CVE-2025-126xx/CVE-2025-12613.json
+108
View File
@@ -0,0 +1,108 @@
{
"id": "CVE-2025-12613",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T05:15:42.900",
"lastModified": "2025-11-10T05:15:42.900",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing security checks, altering data, or manipulating the application's behavior.\r\r**Note:**\rFollowing our established security policy, we attempted to contact the maintainer regarding this vulnerability, but haven't received a response."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-88"
}
]
}
],
"references": [
{
"url": "https://github.com/cloudinary/cloudinary_npm/commit/ec4b65f2b3461365c569198ed6d2cfa61cca4050",
"source": "[email protected]"
},
{
"url": "https://github.com/cloudinary/cloudinary_npm/pull/709",
"source": "[email protected]"
},
{
"url": "https://security.snyk.io/vuln/SNYK-JS-CLOUDINARY-10495740",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12931.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12931",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T05:15:43.513",
"lastModified": "2025-11-10T05:15:43.513",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/puppytgyh/-CVE/issues/5",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.331651",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.331651",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.682234",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12932.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12932",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T05:15:43.897",
"lastModified": "2025-11-10T05:15:43.897",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.4,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/puppytgyh/-CVE/issues/7",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.331652",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.331652",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.682272",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12933.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12933",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T06:15:34.133",
"lastModified": "2025-11-10T06:15:34.133",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/puppytgyh/-CVE/issues/8",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.331653",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.331653",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.682276",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59777.json
+108
View File
@@ -0,0 +1,108 @@
{
"id": "CVE-2025-59777",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T05:15:44.117",
"lastModified": "2025-11-10T05:15:44.117",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b",
"source": "[email protected]"
},
{
"url": "https://jvn.jp/en/jp/JVN76719218/",
"source": "[email protected]"
},
{
"url": "https://www.gnu.org/software/libmicrohttpd/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-626xx/CVE-2025-62689.json
+108
View File
@@ -0,0 +1,108 @@
{
"id": "CVE-2025-62689",
"sourceIdentifier": "[email protected]",
"published": "2025-11-10T05:15:49.087",
"lastModified": "2025-11-10T05:15:49.087",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
}
],
"references": [
{
"url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b",
"source": "[email protected]"
},
{
"url": "https://jvn.jp/en/jp/JVN76719218/",
"source": "[email protected]"
},
{
"url": "https://www.gnu.org/software/libmicrohttpd/",
"source": "[email protected]"
}
]
}
README.md
+11 -16
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-10T05:00:11.397332+00:00
2025-11-10T07:00:11.829226+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-10T04:15:42.127000+00:00
2025-11-10T06:15:34.133000+00:00
```
### Last Data Feed Release
@@ -33,30 +33,25 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
317425
317431
```
### CVEs added in the last Commit
Recently added CVEs: `10`
Recently added CVEs: `6`
- [CVE-2025-12864](CVE-2025/CVE-2025-128xx/CVE-2025-12864.json) (`2025-11-10T03:15:42.017`)
- [CVE-2025-12865](CVE-2025/CVE-2025-128xx/CVE-2025-12865.json) (`2025-11-10T03:15:42.280`)
- [CVE-2025-12866](CVE-2025/CVE-2025-128xx/CVE-2025-12866.json) (`2025-11-10T03:15:42.467`)
- [CVE-2025-12867](CVE-2025/CVE-2025-128xx/CVE-2025-12867.json) (`2025-11-10T04:15:41.360`)
- [CVE-2025-12868](CVE-2025/CVE-2025-128xx/CVE-2025-12868.json) (`2025-11-10T04:15:41.563`)
- [CVE-2025-12926](CVE-2025/CVE-2025-129xx/CVE-2025-12926.json) (`2025-11-10T03:15:42.653`)
- [CVE-2025-12927](CVE-2025/CVE-2025-129xx/CVE-2025-12927.json) (`2025-11-10T03:15:42.853`)
- [CVE-2025-12928](CVE-2025/CVE-2025-129xx/CVE-2025-12928.json) (`2025-11-10T04:15:41.750`)
- [CVE-2025-12929](CVE-2025/CVE-2025-129xx/CVE-2025-12929.json) (`2025-11-10T04:15:41.943`)
- [CVE-2025-12930](CVE-2025/CVE-2025-129xx/CVE-2025-12930.json) (`2025-11-10T04:15:42.127`)
- [CVE-2025-12613](CVE-2025/CVE-2025-126xx/CVE-2025-12613.json) (`2025-11-10T05:15:42.900`)
- [CVE-2025-12931](CVE-2025/CVE-2025-129xx/CVE-2025-12931.json) (`2025-11-10T05:15:43.513`)
- [CVE-2025-12932](CVE-2025/CVE-2025-129xx/CVE-2025-12932.json) (`2025-11-10T05:15:43.897`)
- [CVE-2025-12933](CVE-2025/CVE-2025-129xx/CVE-2025-12933.json) (`2025-11-10T06:15:34.133`)
- [CVE-2025-59777](CVE-2025/CVE-2025-597xx/CVE-2025-59777.json) (`2025-11-10T05:15:44.117`)
- [CVE-2025-62689](CVE-2025/CVE-2025-626xx/CVE-2025-62689.json) (`2025-11-10T05:15:49.087`)
### CVEs modified in the last Commit
Recently modified CVEs: `1`
Recently modified CVEs: `0`
- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-10T03:15:43.220`)
## Download and Usage
_state.csv
+17 -11
View File
@@ -287540,6 +287540,7 @@ CVE-2025-1261,0,0,a33e974f0393407171b95a9c03d699424900964b702e13684f908e09f1dca3
CVE-2025-12610,0,0,7745a15a06c91781e33d98d76796e2bb7fa6be2ae8d4215c995cd59eb041081c,2025-11-06T16:24:24.470000
CVE-2025-12611,0,0,f4548fa3a78ddc32468bd96ac8e6fea64049a04ca37be10341b6c7e70fe13c71,2025-11-05T16:09:23.787000
CVE-2025-12612,0,0,135df214a7f60781b214b0ff26cce5a1500f04e8f741661365a57a3d6bd7903f,2025-11-05T18:57:38.893000
CVE-2025-12613,1,1,c852840a2f0a71673eb591aafbdec2ede6dc03a012f3f86ab857340eb37944f2,2025-11-10T05:15:42.900000
CVE-2025-12614,0,0,662e36210aa21a2e75ccb0b82b2edced430b2bf145cee426f03abd85fe084078,2025-11-05T18:55:21.850000
CVE-2025-12615,0,0,7ef008cf670eb5656f3e8753b12854a4ee0eba0c4570a1fee16d3bc1ad5b6504,2025-11-04T15:41:31.450000
CVE-2025-12616,0,0,1cd6f34873381fcf20ccf3e4269d07fa74a6083be3d2fc390c0418ca9ffd5445,2025-11-05T13:38:01.713000
@@ -287602,11 +287603,11 @@ CVE-2025-12860,0,0,fd2617f48bea5582401b351b26efcc8e816882d48909c8aa58c17563000dd
CVE-2025-12861,0,0,2a9d0d57e86d355ebe99e085a06e2ab0e9e5064b4d6a012cb4e34658dcae1858,2025-11-07T20:15:36.993000
CVE-2025-12862,0,0,6eae0f9cdb798ccf69001415f465480aec4ddc7a5e97de2685135c1e888e7739,2025-11-07T20:15:37.123000
CVE-2025-12863,0,0,8ebb46adf4566efdd111bbd59d7001ef2e736b9ab7c7da6b755706558e1abf99,2025-11-07T21:15:40.393000
CVE-2025-12864,1,1,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000
CVE-2025-12865,1,1,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000
CVE-2025-12866,1,1,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000
CVE-2025-12867,1,1,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000
CVE-2025-12868,1,1,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000
CVE-2025-12864,0,0,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000
CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000
CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000
CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000
CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000
CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000
CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36
CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000
@@ -287638,12 +287639,15 @@ CVE-2025-12922,0,0,dc961a5dd67922ac04ee9b5ec32e8eb531694bb84e301155e6cac3e18c498
CVE-2025-12923,0,0,7fefe359ccbe535d561149c79aa3926478ffb654927fba197f58b0cc91c509a3,2025-11-10T01:15:37.860000
CVE-2025-12924,0,0,928b36e3da95ec1da7b33148e08f7baaccd196e8265f9a136de3d19aa3d6cc35,2025-11-10T02:15:34.097000
CVE-2025-12925,0,0,47b8d74ccec35da5c4283a67168825af4778be99f427a7ead878949cefcb93ce,2025-11-10T02:15:34.917000
CVE-2025-12926,1,1,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000
CVE-2025-12927,1,1,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000
CVE-2025-12928,1,1,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000
CVE-2025-12929,1,1,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000
CVE-2025-12926,0,0,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000
CVE-2025-12927,0,0,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000
CVE-2025-12928,0,0,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000
CVE-2025-12929,0,0,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000
CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000
CVE-2025-12930,1,1,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000
CVE-2025-12930,0,0,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000
CVE-2025-12931,1,1,1684ab8feab3ae7d25a16ad397d52e399cc0f67b37b5073e4244ad47cb30ac58,2025-11-10T05:15:43.513000
CVE-2025-12932,1,1,7745e8178332b73b592e930acd6b336d89e0899cf250418069cada7a45c5d4f2,2025-11-10T05:15:43.897000
CVE-2025-12933,1,1,2761a2fb0363d391026d3fb9ef0510dd4dac51a4b8b45f8689d67f77ba2b0f74,2025-11-10T06:15:34.133000
CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000
CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000
CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000
@@ -312438,6 +312442,7 @@ CVE-2025-59772,0,0,ecfae725c6f61589e64988585d0e3e962987b17e18ae176a71d766628877d
CVE-2025-59773,0,0,d94cc3b9107c8aaf64febf6222f5fe0fb9f0a39a7f1e11d1ec32750d8214725e,2025-10-02T19:53:24.370000
CVE-2025-59774,0,0,a7d115445214c21e385718e252de8602354024490b494a6bc9c0ce97bade9f93,2025-10-02T19:53:32.130000
CVE-2025-59776,0,0,b9471fe9979b3455a32391a7ad2ede7b7f465470a309d45bbd8f046acb4057a5,2025-10-27T13:20:15.637000
CVE-2025-59777,1,1,5f5fadc95235d0d8f7004bf85cd86c02e40e63de8ec2c88013ba5603ba8bba9c,2025-11-10T05:15:44.117000
CVE-2025-59778,0,0,143056a144b6d86b85afdb749a2b845163f7f4c0cfe98dbcd072a123b501a6cb,2025-10-22T21:01:54.100000
CVE-2025-5978,0,0,597668148753ac208e7a61c78cb9eca20301049b4f8be17d052715cab71f0835,2025-06-20T14:47:11.770000
CVE-2025-59781,0,0,97533270bc627da3aa74294e8673345dffdbaeffb69ab7127bbba3ec8a7c34f3,2025-10-22T21:02:07.563000
@@ -313756,6 +313761,7 @@ CVE-2025-62682,0,0,c3805b38a8cea271d6b8ea1afec13b5d52873a7100cb65d579242cd7fd0c8
CVE-2025-62683,0,0,ca8fb7d8942b9dff63ec5bef5aa8e4403f3cd8140fae199ba948d5ec8fe3ce0e,2025-10-21T04:16:07.100000
CVE-2025-62684,0,0,94eae70b12bb1d30b19d9ff99ef5c0c0716c6ee4ff9add3ffe715bd0c489cf80,2025-10-21T04:16:07.170000
CVE-2025-62688,0,0,9dde7da0e47d368c7d45f32354cff640ebe80db06635fb0da62218cc05f0f9f4,2025-10-27T13:20:15.637000
CVE-2025-62689,1,1,dea5dc6a6fe42b9868c24d83783ab8c9e88a61ba9cb4896fdd721dc170ea8a1b,2025-11-10T05:15:49.087000
CVE-2025-6269,0,0,024eb914f10771a08084c9baf8010d041e3441c638e70a7c2c9e615bdaa7a700,2025-07-02T19:01:55.227000
CVE-2025-62693,0,0,8fae4d367c770ab57eae9a1fa7018d7216a2aa712d21d6a31505619674b10a26,2025-10-21T19:31:25.450000
CVE-2025-62694,0,0,571f756eb89f9dd30fe36de75ac99e9c0851cf1e33c93b8b4cf817b90f8b23de,2025-10-21T20:20:55.990000
@@ -317344,7 +317350,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd
CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000
CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000
CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000
CVE-2025-9900,0,1,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000
CVE-2025-9900,0,0,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000
CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000
CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000
CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000
Can't render this file because it is too large.