From 2e5e13a1f10b25aa2f317cfad3341ea9eee45321 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 10 Nov 2025 07:04:00 +0000 Subject: [PATCH] Auto-Update: 2025-11-10T07:00:11.829226+00:00 --- CVE-2025/CVE-2025-126xx/CVE-2025-12613.json | 108 +++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12931.json | 145 ++++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12932.json | 145 ++++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12933.json | 145 ++++++++++++++++++++ CVE-2025/CVE-2025-597xx/CVE-2025-59777.json | 108 +++++++++++++++ CVE-2025/CVE-2025-626xx/CVE-2025-62689.json | 108 +++++++++++++++ README.md | 27 ++-- _state.csv | 28 ++-- 8 files changed, 787 insertions(+), 27 deletions(-) create mode 100644 CVE-2025/CVE-2025-126xx/CVE-2025-12613.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12931.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12932.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12933.json create mode 100644 CVE-2025/CVE-2025-597xx/CVE-2025-59777.json create mode 100644 CVE-2025/CVE-2025-626xx/CVE-2025-62689.json diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json new file mode 100644 index 00000000000..b8c970ebcaa --- /dev/null +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12613.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-12613", + "sourceIdentifier": "report@snyk.io", + "published": "2025-11-10T05:15:42.900", + "lastModified": "2025-11-10T05:15:42.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing security checks, altering data, or manipulating the application's behavior.\r\r**Note:**\rFollowing our established security policy, we attempted to contact the maintainer regarding this vulnerability, but haven't received a response." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "report@snyk.io", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-88" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cloudinary/cloudinary_npm/commit/ec4b65f2b3461365c569198ed6d2cfa61cca4050", + "source": "report@snyk.io" + }, + { + "url": "https://github.com/cloudinary/cloudinary_npm/pull/709", + "source": "report@snyk.io" + }, + { + "url": "https://security.snyk.io/vuln/SNYK-JS-CLOUDINARY-10495740", + "source": "report@snyk.io" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json new file mode 100644 index 00000000000..d731db30085 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12931", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T05:15:43.513", + "lastModified": "2025-11-10T05:15:43.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/5", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331651", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331651", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682234", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json new file mode 100644 index 00000000000..fba2c68322e --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12932", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T05:15:43.897", + "lastModified": "2025-11-10T05:15:43.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/7", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331652", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331652", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682272", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json new file mode 100644 index 00000000000..4381a44bffc --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12933", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T06:15:34.133", + "lastModified": "2025-11-10T06:15:34.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/8", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331653", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331653", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682276", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json new file mode 100644 index 00000000000..9ae051a5157 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59777.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-59777", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-11-10T05:15:44.117", + "lastModified": "2025-11-10T05:15:44.117", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://jvn.jp/en/jp/JVN76719218/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.gnu.org/software/libmicrohttpd/", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json b/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json new file mode 100644 index 00000000000..90cfc44d3f9 --- /dev/null +++ b/CVE-2025/CVE-2025-626xx/CVE-2025-62689.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-62689", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-11-10T05:15:49.087", + "lastModified": "2025-11-10T05:15:49.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://git.gnunet.org/libmicrohttpd.git/commit/?id=ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://jvn.jp/en/jp/JVN76719218/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.gnu.org/software/libmicrohttpd/", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 5c188aa6d57..c1f8b553bbf 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T05:00:11.397332+00:00 +2025-11-10T07:00:11.829226+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T04:15:42.127000+00:00 +2025-11-10T06:15:34.133000+00:00 ``` ### Last Data Feed Release @@ -33,30 +33,25 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317425 +317431 ``` ### CVEs added in the last Commit -Recently added CVEs: `10` +Recently added CVEs: `6` -- [CVE-2025-12864](CVE-2025/CVE-2025-128xx/CVE-2025-12864.json) (`2025-11-10T03:15:42.017`) -- [CVE-2025-12865](CVE-2025/CVE-2025-128xx/CVE-2025-12865.json) (`2025-11-10T03:15:42.280`) -- [CVE-2025-12866](CVE-2025/CVE-2025-128xx/CVE-2025-12866.json) (`2025-11-10T03:15:42.467`) -- [CVE-2025-12867](CVE-2025/CVE-2025-128xx/CVE-2025-12867.json) (`2025-11-10T04:15:41.360`) -- [CVE-2025-12868](CVE-2025/CVE-2025-128xx/CVE-2025-12868.json) (`2025-11-10T04:15:41.563`) -- [CVE-2025-12926](CVE-2025/CVE-2025-129xx/CVE-2025-12926.json) (`2025-11-10T03:15:42.653`) -- [CVE-2025-12927](CVE-2025/CVE-2025-129xx/CVE-2025-12927.json) (`2025-11-10T03:15:42.853`) -- [CVE-2025-12928](CVE-2025/CVE-2025-129xx/CVE-2025-12928.json) (`2025-11-10T04:15:41.750`) -- [CVE-2025-12929](CVE-2025/CVE-2025-129xx/CVE-2025-12929.json) (`2025-11-10T04:15:41.943`) -- [CVE-2025-12930](CVE-2025/CVE-2025-129xx/CVE-2025-12930.json) (`2025-11-10T04:15:42.127`) +- [CVE-2025-12613](CVE-2025/CVE-2025-126xx/CVE-2025-12613.json) (`2025-11-10T05:15:42.900`) +- [CVE-2025-12931](CVE-2025/CVE-2025-129xx/CVE-2025-12931.json) (`2025-11-10T05:15:43.513`) +- [CVE-2025-12932](CVE-2025/CVE-2025-129xx/CVE-2025-12932.json) (`2025-11-10T05:15:43.897`) +- [CVE-2025-12933](CVE-2025/CVE-2025-129xx/CVE-2025-12933.json) (`2025-11-10T06:15:34.133`) +- [CVE-2025-59777](CVE-2025/CVE-2025-597xx/CVE-2025-59777.json) (`2025-11-10T05:15:44.117`) +- [CVE-2025-62689](CVE-2025/CVE-2025-626xx/CVE-2025-62689.json) (`2025-11-10T05:15:49.087`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `0` -- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-10T03:15:43.220`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 1b2629fde47..51d55344883 100644 --- a/_state.csv +++ b/_state.csv @@ -287540,6 +287540,7 @@ CVE-2025-1261,0,0,a33e974f0393407171b95a9c03d699424900964b702e13684f908e09f1dca3 CVE-2025-12610,0,0,7745a15a06c91781e33d98d76796e2bb7fa6be2ae8d4215c995cd59eb041081c,2025-11-06T16:24:24.470000 CVE-2025-12611,0,0,f4548fa3a78ddc32468bd96ac8e6fea64049a04ca37be10341b6c7e70fe13c71,2025-11-05T16:09:23.787000 CVE-2025-12612,0,0,135df214a7f60781b214b0ff26cce5a1500f04e8f741661365a57a3d6bd7903f,2025-11-05T18:57:38.893000 +CVE-2025-12613,1,1,c852840a2f0a71673eb591aafbdec2ede6dc03a012f3f86ab857340eb37944f2,2025-11-10T05:15:42.900000 CVE-2025-12614,0,0,662e36210aa21a2e75ccb0b82b2edced430b2bf145cee426f03abd85fe084078,2025-11-05T18:55:21.850000 CVE-2025-12615,0,0,7ef008cf670eb5656f3e8753b12854a4ee0eba0c4570a1fee16d3bc1ad5b6504,2025-11-04T15:41:31.450000 CVE-2025-12616,0,0,1cd6f34873381fcf20ccf3e4269d07fa74a6083be3d2fc390c0418ca9ffd5445,2025-11-05T13:38:01.713000 @@ -287602,11 +287603,11 @@ CVE-2025-12860,0,0,fd2617f48bea5582401b351b26efcc8e816882d48909c8aa58c17563000dd CVE-2025-12861,0,0,2a9d0d57e86d355ebe99e085a06e2ab0e9e5064b4d6a012cb4e34658dcae1858,2025-11-07T20:15:36.993000 CVE-2025-12862,0,0,6eae0f9cdb798ccf69001415f465480aec4ddc7a5e97de2685135c1e888e7739,2025-11-07T20:15:37.123000 CVE-2025-12863,0,0,8ebb46adf4566efdd111bbd59d7001ef2e736b9ab7c7da6b755706558e1abf99,2025-11-07T21:15:40.393000 -CVE-2025-12864,1,1,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000 -CVE-2025-12865,1,1,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000 -CVE-2025-12866,1,1,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 -CVE-2025-12867,1,1,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 -CVE-2025-12868,1,1,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 +CVE-2025-12864,0,0,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000 +CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000 +CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 +CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 +CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36 CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000 @@ -287638,12 +287639,15 @@ CVE-2025-12922,0,0,dc961a5dd67922ac04ee9b5ec32e8eb531694bb84e301155e6cac3e18c498 CVE-2025-12923,0,0,7fefe359ccbe535d561149c79aa3926478ffb654927fba197f58b0cc91c509a3,2025-11-10T01:15:37.860000 CVE-2025-12924,0,0,928b36e3da95ec1da7b33148e08f7baaccd196e8265f9a136de3d19aa3d6cc35,2025-11-10T02:15:34.097000 CVE-2025-12925,0,0,47b8d74ccec35da5c4283a67168825af4778be99f427a7ead878949cefcb93ce,2025-11-10T02:15:34.917000 -CVE-2025-12926,1,1,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000 -CVE-2025-12927,1,1,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000 -CVE-2025-12928,1,1,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 -CVE-2025-12929,1,1,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000 +CVE-2025-12926,0,0,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000 +CVE-2025-12927,0,0,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000 +CVE-2025-12928,0,0,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 +CVE-2025-12929,0,0,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 -CVE-2025-12930,1,1,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 +CVE-2025-12930,0,0,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 +CVE-2025-12931,1,1,1684ab8feab3ae7d25a16ad397d52e399cc0f67b37b5073e4244ad47cb30ac58,2025-11-10T05:15:43.513000 +CVE-2025-12932,1,1,7745e8178332b73b592e930acd6b336d89e0899cf250418069cada7a45c5d4f2,2025-11-10T05:15:43.897000 +CVE-2025-12933,1,1,2761a2fb0363d391026d3fb9ef0510dd4dac51a4b8b45f8689d67f77ba2b0f74,2025-11-10T06:15:34.133000 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 @@ -312438,6 +312442,7 @@ CVE-2025-59772,0,0,ecfae725c6f61589e64988585d0e3e962987b17e18ae176a71d766628877d CVE-2025-59773,0,0,d94cc3b9107c8aaf64febf6222f5fe0fb9f0a39a7f1e11d1ec32750d8214725e,2025-10-02T19:53:24.370000 CVE-2025-59774,0,0,a7d115445214c21e385718e252de8602354024490b494a6bc9c0ce97bade9f93,2025-10-02T19:53:32.130000 CVE-2025-59776,0,0,b9471fe9979b3455a32391a7ad2ede7b7f465470a309d45bbd8f046acb4057a5,2025-10-27T13:20:15.637000 +CVE-2025-59777,1,1,5f5fadc95235d0d8f7004bf85cd86c02e40e63de8ec2c88013ba5603ba8bba9c,2025-11-10T05:15:44.117000 CVE-2025-59778,0,0,143056a144b6d86b85afdb749a2b845163f7f4c0cfe98dbcd072a123b501a6cb,2025-10-22T21:01:54.100000 CVE-2025-5978,0,0,597668148753ac208e7a61c78cb9eca20301049b4f8be17d052715cab71f0835,2025-06-20T14:47:11.770000 CVE-2025-59781,0,0,97533270bc627da3aa74294e8673345dffdbaeffb69ab7127bbba3ec8a7c34f3,2025-10-22T21:02:07.563000 @@ -313756,6 +313761,7 @@ CVE-2025-62682,0,0,c3805b38a8cea271d6b8ea1afec13b5d52873a7100cb65d579242cd7fd0c8 CVE-2025-62683,0,0,ca8fb7d8942b9dff63ec5bef5aa8e4403f3cd8140fae199ba948d5ec8fe3ce0e,2025-10-21T04:16:07.100000 CVE-2025-62684,0,0,94eae70b12bb1d30b19d9ff99ef5c0c0716c6ee4ff9add3ffe715bd0c489cf80,2025-10-21T04:16:07.170000 CVE-2025-62688,0,0,9dde7da0e47d368c7d45f32354cff640ebe80db06635fb0da62218cc05f0f9f4,2025-10-27T13:20:15.637000 +CVE-2025-62689,1,1,dea5dc6a6fe42b9868c24d83783ab8c9e88a61ba9cb4896fdd721dc170ea8a1b,2025-11-10T05:15:49.087000 CVE-2025-6269,0,0,024eb914f10771a08084c9baf8010d041e3441c638e70a7c2c9e615bdaa7a700,2025-07-02T19:01:55.227000 CVE-2025-62693,0,0,8fae4d367c770ab57eae9a1fa7018d7216a2aa712d21d6a31505619674b10a26,2025-10-21T19:31:25.450000 CVE-2025-62694,0,0,571f756eb89f9dd30fe36de75ac99e9c0851cf1e33c93b8b4cf817b90f8b23de,2025-10-21T20:20:55.990000 @@ -317344,7 +317350,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,1,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000 +CVE-2025-9900,0,0,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000