diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json new file mode 100644 index 00000000000..b8c970ebcaa --- /dev/null +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-12613", + "sourceIdentifier": "report@snyk.io", + "published": "2025-11-10T05:15:42.900", + "lastModified": "2025-11-10T05:15:42.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing security checks, altering data, or manipulating the application's behavior.\r\r**Note:**\rFollowing our established security policy, we attempted to contact the maintainer regarding this vulnerability, but haven't received a response." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-88" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cloudinary/cloudinary_npm/commit/ec4b65f2b3461365c569198ed6d2cfa61cca4050", + "source": "report@snyk.io" + }, + { + "url": "https://github.com/cloudinary/cloudinary_npm/pull/709", + "source": "report@snyk.io" + }, + { + "url": "https://security.snyk.io/vuln/SNYK-JS-CLOUDINARY-10495740", + "source": "report@snyk.io" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json new file mode 100644 index 00000000000..d731db30085 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12931", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T05:15:43.513", + "lastModified": "2025-11-10T05:15:43.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/5", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331651", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331651", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682234", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json new file mode 100644 index 00000000000..fba2c68322e --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12932", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T05:15:43.897", + "lastModified": "2025-11-10T05:15:43.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/7", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331652", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331652", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682272", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json new file mode 100644 index 00000000000..4381a44bffc --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12933", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T06:15:34.133", + "lastModified": "2025-11-10T06:15:34.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/8", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331653", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331653", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682276", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json new file mode 100644 index 00000000000..9ae051a5157 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-59777", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-11-10T05:15:44.117", + "lastModified": "2025-11-10T05:15:44.117", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://jvn.jp/en/jp/JVN76719218/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.gnu.org/software/libmicrohttpd/", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json b/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json new file mode 100644 index 00000000000..90cfc44d3f9 --- /dev/null +++ b/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-62689", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-11-10T05:15:49.087", + "lastModified": "2025-11-10T05:15:49.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://jvn.jp/en/jp/JVN76719218/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.gnu.org/software/libmicrohttpd/", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 5c188aa6d57..c1f8b553bbf 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T05:00:11.397332+00:00 +2025-11-10T07:00:11.829226+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T04:15:42.127000+00:00 +2025-11-10T06:15:34.133000+00:00 ``` ### Last Data Feed Release @@ -33,30 +33,25 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317425 +317431 ``` ### CVEs added in the last Commit -Recently added CVEs: `10` +Recently added CVEs: `6` -- [CVE-2025-12864](CVE-2025/CVE-2025-128xx/CVE-2025-12864.json) (`2025-11-10T03:15:42.017`) -- [CVE-2025-12865](CVE-2025/CVE-2025-128xx/CVE-2025-12865.json) (`2025-11-10T03:15:42.280`) -- [CVE-2025-12866](CVE-2025/CVE-2025-128xx/CVE-2025-12866.json) (`2025-11-10T03:15:42.467`) -- [CVE-2025-12867](CVE-2025/CVE-2025-128xx/CVE-2025-12867.json) (`2025-11-10T04:15:41.360`) -- [CVE-2025-12868](CVE-2025/CVE-2025-128xx/CVE-2025-12868.json) (`2025-11-10T04:15:41.563`) -- [CVE-2025-12926](CVE-2025/CVE-2025-129xx/CVE-2025-12926.json) (`2025-11-10T03:15:42.653`) -- [CVE-2025-12927](CVE-2025/CVE-2025-129xx/CVE-2025-12927.json) (`2025-11-10T03:15:42.853`) -- [CVE-2025-12928](CVE-2025/CVE-2025-129xx/CVE-2025-12928.json) (`2025-11-10T04:15:41.750`) -- [CVE-2025-12929](CVE-2025/CVE-2025-129xx/CVE-2025-12929.json) (`2025-11-10T04:15:41.943`) -- [CVE-2025-12930](CVE-2025/CVE-2025-129xx/CVE-2025-12930.json) (`2025-11-10T04:15:42.127`) +- [CVE-2025-12613](CVE-2025/CVE-2025-126xx/CVE-2025-12613.json) (`2025-11-10T05:15:42.900`) +- [CVE-2025-12931](CVE-2025/CVE-2025-129xx/CVE-2025-12931.json) (`2025-11-10T05:15:43.513`) +- [CVE-2025-12932](CVE-2025/CVE-2025-129xx/CVE-2025-12932.json) (`2025-11-10T05:15:43.897`) +- [CVE-2025-12933](CVE-2025/CVE-2025-129xx/CVE-2025-12933.json) (`2025-11-10T06:15:34.133`) +- [CVE-2025-59777](CVE-2025/CVE-2025-597xx/CVE-2025-59777.json) (`2025-11-10T05:15:44.117`) +- [CVE-2025-62689](CVE-2025/CVE-2025-626xx/CVE-2025-62689.json) (`2025-11-10T05:15:49.087`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `0` -- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-10T03:15:43.220`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 1b2629fde47..51d55344883 100644 --- a/_state.csv +++ b/_state.csv @@ -287540,6 +287540,7 @@ CVE-2025-1261,0,0,a33e974f0393407171b95a9c03d699424900964b702e13684f908e09f1dca3 CVE-2025-12610,0,0,7745a15a06c91781e33d98d76796e2bb7fa6be2ae8d4215c995cd59eb041081c,2025-11-06T16:24:24.470000 CVE-2025-12611,0,0,f4548fa3a78ddc32468bd96ac8e6fea64049a04ca37be10341b6c7e70fe13c71,2025-11-05T16:09:23.787000 CVE-2025-12612,0,0,135df214a7f60781b214b0ff26cce5a1500f04e8f741661365a57a3d6bd7903f,2025-11-05T18:57:38.893000 +CVE-2025-12613,1,1,c852840a2f0a71673eb591aafbdec2ede6dc03a012f3f86ab857340eb37944f2,2025-11-10T05:15:42.900000 CVE-2025-12614,0,0,662e36210aa21a2e75ccb0b82b2edced430b2bf145cee426f03abd85fe084078,2025-11-05T18:55:21.850000 CVE-2025-12615,0,0,7ef008cf670eb5656f3e8753b12854a4ee0eba0c4570a1fee16d3bc1ad5b6504,2025-11-04T15:41:31.450000 CVE-2025-12616,0,0,1cd6f34873381fcf20ccf3e4269d07fa74a6083be3d2fc390c0418ca9ffd5445,2025-11-05T13:38:01.713000 @@ -287602,11 +287603,11 @@ CVE-2025-12860,0,0,fd2617f48bea5582401b351b26efcc8e816882d48909c8aa58c17563000dd CVE-2025-12861,0,0,2a9d0d57e86d355ebe99e085a06e2ab0e9e5064b4d6a012cb4e34658dcae1858,2025-11-07T20:15:36.993000 CVE-2025-12862,0,0,6eae0f9cdb798ccf69001415f465480aec4ddc7a5e97de2685135c1e888e7739,2025-11-07T20:15:37.123000 CVE-2025-12863,0,0,8ebb46adf4566efdd111bbd59d7001ef2e736b9ab7c7da6b755706558e1abf99,2025-11-07T21:15:40.393000 -CVE-2025-12864,1,1,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000 -CVE-2025-12865,1,1,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000 -CVE-2025-12866,1,1,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 -CVE-2025-12867,1,1,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 -CVE-2025-12868,1,1,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 +CVE-2025-12864,0,0,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000 +CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000 +CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 +CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 +CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36 CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000 @@ -287638,12 +287639,15 @@ CVE-2025-12922,0,0,dc961a5dd67922ac04ee9b5ec32e8eb531694bb84e301155e6cac3e18c498 CVE-2025-12923,0,0,7fefe359ccbe535d561149c79aa3926478ffb654927fba197f58b0cc91c509a3,2025-11-10T01:15:37.860000 CVE-2025-12924,0,0,928b36e3da95ec1da7b33148e08f7baaccd196e8265f9a136de3d19aa3d6cc35,2025-11-10T02:15:34.097000 CVE-2025-12925,0,0,47b8d74ccec35da5c4283a67168825af4778be99f427a7ead878949cefcb93ce,2025-11-10T02:15:34.917000 -CVE-2025-12926,1,1,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000 -CVE-2025-12927,1,1,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000 -CVE-2025-12928,1,1,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 -CVE-2025-12929,1,1,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000 +CVE-2025-12926,0,0,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000 +CVE-2025-12927,0,0,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000 +CVE-2025-12928,0,0,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 +CVE-2025-12929,0,0,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 -CVE-2025-12930,1,1,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 +CVE-2025-12930,0,0,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 +CVE-2025-12931,1,1,1684ab8feab3ae7d25a16ad397d52e399cc0f67b37b5073e4244ad47cb30ac58,2025-11-10T05:15:43.513000 +CVE-2025-12932,1,1,7745e8178332b73b592e930acd6b336d89e0899cf250418069cada7a45c5d4f2,2025-11-10T05:15:43.897000 +CVE-2025-12933,1,1,2761a2fb0363d391026d3fb9ef0510dd4dac51a4b8b45f8689d67f77ba2b0f74,2025-11-10T06:15:34.133000 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 @@ -312438,6 +312442,7 @@ CVE-2025-59772,0,0,ecfae725c6f61589e64988585d0e3e962987b17e18ae176a71d766628877d CVE-2025-59773,0,0,d94cc3b9107c8aaf64febf6222f5fe0fb9f0a39a7f1e11d1ec32750d8214725e,2025-10-02T19:53:24.370000 CVE-2025-59774,0,0,a7d115445214c21e385718e252de8602354024490b494a6bc9c0ce97bade9f93,2025-10-02T19:53:32.130000 CVE-2025-59776,0,0,b9471fe9979b3455a32391a7ad2ede7b7f465470a309d45bbd8f046acb4057a5,2025-10-27T13:20:15.637000 +CVE-2025-59777,1,1,5f5fadc95235d0d8f7004bf85cd86c02e40e63de8ec2c88013ba5603ba8bba9c,2025-11-10T05:15:44.117000 CVE-2025-59778,0,0,143056a144b6d86b85afdb749a2b845163f7f4c0cfe98dbcd072a123b501a6cb,2025-10-22T21:01:54.100000 CVE-2025-5978,0,0,597668148753ac208e7a61c78cb9eca20301049b4f8be17d052715cab71f0835,2025-06-20T14:47:11.770000 CVE-2025-59781,0,0,97533270bc627da3aa74294e8673345dffdbaeffb69ab7127bbba3ec8a7c34f3,2025-10-22T21:02:07.563000 @@ -313756,6 +313761,7 @@ CVE-2025-62682,0,0,c3805b38a8cea271d6b8ea1afec13b5d52873a7100cb65d579242cd7fd0c8 CVE-2025-62683,0,0,ca8fb7d8942b9dff63ec5bef5aa8e4403f3cd8140fae199ba948d5ec8fe3ce0e,2025-10-21T04:16:07.100000 CVE-2025-62684,0,0,94eae70b12bb1d30b19d9ff99ef5c0c0716c6ee4ff9add3ffe715bd0c489cf80,2025-10-21T04:16:07.170000 CVE-2025-62688,0,0,9dde7da0e47d368c7d45f32354cff640ebe80db06635fb0da62218cc05f0f9f4,2025-10-27T13:20:15.637000 +CVE-2025-62689,1,1,dea5dc6a6fe42b9868c24d83783ab8c9e88a61ba9cb4896fdd721dc170ea8a1b,2025-11-10T05:15:49.087000 CVE-2025-6269,0,0,024eb914f10771a08084c9baf8010d041e3441c638e70a7c2c9e615bdaa7a700,2025-07-02T19:01:55.227000 CVE-2025-62693,0,0,8fae4d367c770ab57eae9a1fa7018d7216a2aa712d21d6a31505619674b10a26,2025-10-21T19:31:25.450000 CVE-2025-62694,0,0,571f756eb89f9dd30fe36de75ac99e9c0851cf1e33c93b8b4cf817b90f8b23de,2025-10-21T20:20:55.990000 @@ -317344,7 +317350,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,1,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000 +CVE-2025-9900,0,0,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000