admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:10:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-08-11T20:00:11.775697+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-08-11 20:03:52 +00:00
1 parent 4be7827369
commit 2f72480601
229 files changed
+6152 -824
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2012/CVE-2012-100xx/CVE-2012-10037.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-10037",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T15:15:27.017",
"lastModified": "2025-08-11T15:15:27.017",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2012/CVE-2012-100xx/CVE-2012-10038.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-10038",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T15:15:27.223",
"lastModified": "2025-08-11T15:15:27.223",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2012/CVE-2012-100xx/CVE-2012-10039.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-10039",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T15:15:27.370",
"lastModified": "2025-08-11T15:15:27.370",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2012/CVE-2012-100xx/CVE-2012-10040.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-10040",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T15:15:27.517",
"lastModified": "2025-08-11T15:15:27.517",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2019/CVE-2019-252xx/CVE-2019-25224.json
+47 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-25224",
"sourceIdentifier": "[email protected]",
"published": "2025-07-25T03:15:32.690",
"lastModified": "2025-07-25T15:29:19.837",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:57:45.277",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,30 +51,69 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wpseeds:wp_database_backup:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "5.2",
"matchCriteriaId": "10FA7230-2BD1-4BDE-9471-AE60C71299D1"
}
]
}
]
}
],
"references": [
{
"url": "https://blog.sucuri.net/2019/06/os-command-injection-in-wp-database-backup.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://packetstormsecurity.com/files/153781/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/2078035/wp-database-backup",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_db_backup_rce.rb",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://www.wordfence.com/blog/2019/05/os-command-injection-vulnerability-patched-in-wp-database-backup-plugin/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d21cf285-9d75-43a2-9e81-67116f0bf896?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2022/CVE-2022-502xx/CVE-2022-50233.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2022-50233",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-09T15:15:27.723",
"lastModified": "2025-08-09T15:15:27.723",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}\n\nBoth dev_name and short_name are not guaranteed to be NULL terminated so\nthis instead use strnlen and then attempt to determine if the resulting\nstring needs to be truncated or not."
},
{
"lang": "es",
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: eir: Correcci\u00f3n del uso de strlen con hdev->{dev_name,short_name} No se garantiza que dev_name y short_name terminen en NULL, por lo que en su lugar se utiliza strnlen y luego se intenta determinar si la cadena resultante debe truncarse o no."
}
],
"metrics": {},
CVE-2023/CVE-2023-273xx/CVE-2023-27329.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27329",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:09.560",
"lastModified": "2024-11-21T07:52:39.983",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:43.167",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.10.37854",
"matchCriteriaId": "54410B2B-2CAE-494A-8179-0DAD2132C617"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.4.53774",
"matchCriteriaId": "A98798EA-1E19-496F-B392-D7369258B87C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "BD5A7FE8-03DB-4F11-ADC4-00D759655D7B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "E6891F33-3E67-4D0E-A058-3795611E34CA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-227/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-227/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-273xx/CVE-2023-27330.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27330",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:09.750",
"lastModified": "2024-11-21T07:52:40.127",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:30:06.503",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.10.37854",
"matchCriteriaId": "54410B2B-2CAE-494A-8179-0DAD2132C617"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.4.53774",
"matchCriteriaId": "A98798EA-1E19-496F-B392-D7369258B87C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "BD5A7FE8-03DB-4F11-ADC4-00D759655D7B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "E6891F33-3E67-4D0E-A058-3795611E34CA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-226/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-226/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-273xx/CVE-2023-27331.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27331",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:09.923",
"lastModified": "2024-11-21T07:52:40.263",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:30:13.220",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.10.37854",
"matchCriteriaId": "54410B2B-2CAE-494A-8179-0DAD2132C617"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.4.53774",
"matchCriteriaId": "A98798EA-1E19-496F-B392-D7369258B87C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "BD5A7FE8-03DB-4F11-ADC4-00D759655D7B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.0.15250",
"matchCriteriaId": "E6891F33-3E67-4D0E-A058-3795611E34CA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-225/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-225/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-273xx/CVE-2023-27363.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27363",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:14.530",
"lastModified": "2024-11-21T07:52:45.453",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:31:05.613",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.11.37866",
"matchCriteriaId": "89043BBE-91B1-489A-BA87-18BB6DB0ED8E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.5.53785",
"matchCriteriaId": "3781AC17-510F-4EDD-9952-14DE943A437E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "1402921F-15A0-4896-9182-4C6E82B0FFE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "58DD497A-7C5C-456B-9E6E-D102258B1FFD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-491/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-491/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-273xx/CVE-2023-27364.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27364",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:14.710",
"lastModified": "2024-11-21T07:52:45.573",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:31:12.833",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.11.37866",
"matchCriteriaId": "89043BBE-91B1-489A-BA87-18BB6DB0ED8E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.5.53785",
"matchCriteriaId": "3781AC17-510F-4EDD-9952-14DE943A437E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "1402921F-15A0-4896-9182-4C6E82B0FFE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "58DD497A-7C5C-456B-9E6E-D102258B1FFD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-492/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-492/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-273xx/CVE-2023-27365.json
+68 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-27365",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T02:15:14.880",
"lastModified": "2024-11-21T07:52:45.697",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:31:28.060",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,84 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.11.37866",
"matchCriteriaId": "89043BBE-91B1-489A-BA87-18BB6DB0ED8E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.5.53785",
"matchCriteriaId": "3781AC17-510F-4EDD-9952-14DE943A437E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "1402921F-15A0-4896-9182-4C6E82B0FFE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.1.1.15289",
"matchCriteriaId": "58DD497A-7C5C-456B-9E6E-D102258B1FFD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-493/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-493/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30323.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30323",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:56.103",
"lastModified": "2024-11-21T09:11:41.373",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:28:23.437",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-301/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-301/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30324.json
+137 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30324",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:56.293",
"lastModified": "2024-11-21T09:11:41.503",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:28:17.337",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,153 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "11.1.6.0109",
"matchCriteriaId": "60CA0513-4182-456F-B109-2818DD6AC876"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.0601",
"versionEndIncluding": "12.1.2.55366",
"matchCriteriaId": "51ED96D0-E083-4B53-B1B8-889F0546C7CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.61829",
"versionEndIncluding": "13.0.1.61866",
"matchCriteriaId": "18597BD9-4ABD-4C6C-8579-A58D655D2511"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.55583",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "1DFBBC48-751C-4576-BE65-E1E961F3BC0B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-302/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-302/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30325.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30325",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:56.480",
"lastModified": "2024-11-21T09:11:41.623",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:28:31.177",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-314/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-314/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30326.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30326",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:56.660",
"lastModified": "2024-11-21T09:11:41.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:28:36.860",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-313/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-313/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30327.json
+137 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30327",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:56.837",
"lastModified": "2024-11-21T09:11:41.887",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:28:59.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,153 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "11.1.6.0109",
"matchCriteriaId": "60CA0513-4182-456F-B109-2818DD6AC876"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.0601",
"versionEndIncluding": "12.1.2.55366",
"matchCriteriaId": "51ED96D0-E083-4B53-B1B8-889F0546C7CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.61829",
"versionEndIncluding": "13.0.1.61866",
"matchCriteriaId": "18597BD9-4ABD-4C6C-8579-A58D655D2511"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.55583",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "1DFBBC48-751C-4576-BE65-E1E961F3BC0B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-311/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-311/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30328.json
+137 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30328",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:57.023",
"lastModified": "2024-11-21T09:11:42.020",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:05.470",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,153 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "11.1.6.0109",
"matchCriteriaId": "60CA0513-4182-456F-B109-2818DD6AC876"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.0601",
"versionEndIncluding": "12.1.2.55366",
"matchCriteriaId": "51ED96D0-E083-4B53-B1B8-889F0546C7CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.61829",
"versionEndIncluding": "13.0.1.61866",
"matchCriteriaId": "18597BD9-4ABD-4C6C-8579-A58D655D2511"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.55583",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.63083",
"matchCriteriaId": "1DFBBC48-751C-4576-BE65-E1E961F3BC0B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.1.12.37872",
"matchCriteriaId": "5EAD23A5-0348-4C9A-B358-75547BC34187"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndIncluding": "11.2.8.53842",
"matchCriteriaId": "AF4F8DD3-700E-44F5-A30E-B8E5945669B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndIncluding": "12.1.4.15400",
"matchCriteriaId": "BC04B3FE-AE97-4898-8AF3-69D16C5591C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndIncluding": "13.0.1.21693",
"matchCriteriaId": "E4BA6F03-462B-46C5-B11D-6CEF031FC20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2023.3.0.23028",
"matchCriteriaId": "D7984224-C30D-44C9-9E7F-3033297B7F63"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-312/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-312/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30329.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30329",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:57.260",
"lastModified": "2024-11-21T09:11:42.160",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:09.610",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-310/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-310/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30331.json
+137 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30331",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:57.627",
"lastModified": "2024-11-21T09:11:42.450",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:14.800",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,153 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.1.6.0109",
"matchCriteriaId": "F98D0EC7-78B3-4B9C-BD74-B345C0069637"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.0601",
"versionEndExcluding": "12.1.2.55366",
"matchCriteriaId": "38714F43-DE76-4AF9-B996-34B3A9E4102D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.61829",
"versionEndExcluding": "13.0.1.61866",
"matchCriteriaId": "4E0AA332-E5A4-4307-A260-327FDA0B3B32"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.55583",
"versionEndExcluding": "2023.3.0.63083",
"matchCriteriaId": "000180E5-FE2D-4E7E-B99A-6D3CB73EAF14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.63083",
"matchCriteriaId": "80DDF988-343D-441B-9D24-86ABE480CE89"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-308/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-308/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30332.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30332",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:57.803",
"lastModified": "2024-11-21T09:11:42.597",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:19.790",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-305/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-305/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30333.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30333",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:57.990",
"lastModified": "2024-11-21T09:11:42.743",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:24.617",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-307/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-307/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30334.json
+82 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30334",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:58.190",
"lastModified": "2024-11-21T09:11:42.887",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:37.290",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,98 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-306/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-306/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-303xx/CVE-2024-30366.json
+137 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30366",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T17:15:58.383",
"lastModified": "2024-11-21T09:11:47.210",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:29:30.510",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,153 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.1.6.0109",
"matchCriteriaId": "F98D0EC7-78B3-4B9C-BD74-B345C0069637"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.0601",
"versionEndExcluding": "12.1.2.55366",
"matchCriteriaId": "38714F43-DE76-4AF9-B996-34B3A9E4102D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.61829",
"versionEndExcluding": "13.0.1.61866",
"matchCriteriaId": "4E0AA332-E5A4-4307-A260-327FDA0B3B32"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.55583",
"versionEndExcluding": "2023.3.0.63083",
"matchCriteriaId": "000180E5-FE2D-4E7E-B99A-6D3CB73EAF14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.63083",
"matchCriteriaId": "80DDF988-343D-441B-9D24-86ABE480CE89"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.1.12.37872",
"matchCriteriaId": "C9D011A1-EE2D-4D61-B5B5-E862EBD88F8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0.0.49893",
"versionEndExcluding": "11.2.8.53842",
"matchCriteriaId": "D1B66032-BFB5-46D6-B4BF-65AE34D9E514"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.0.0.12394",
"versionEndExcluding": "12.1.4.15400",
"matchCriteriaId": "C86F947F-FF45-40ED-A2E1-79DDF463944E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.0.0.21632",
"versionEndExcluding": "13.0.1.21693",
"matchCriteriaId": "FFA68E03-8F1A-4A52-80E2-4ECD173B03B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2023.1.0.15510",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "8EFD226E-D837-43CD-8FA3-501779AAB780"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.0.23028",
"matchCriteriaId": "3B8CFDB3-13D5-45AD-9780-A97779F2392D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-344/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-344/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58238.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2024-58238",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-09T15:15:27.893",
"lastModified": "2025-08-09T15:15:27.893",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btnxpuart: Resolve TX timeout error in power save stress test\n\nThis fixes the tx timeout issue seen while running a stress test on\nbtnxpuart for couple of hours, such that the interval between two HCI\ncommands coincide with the power save timeout value of 2 seconds.\n\nTest procedure using bash script:\n<load btnxpuart.ko>\nhciconfig hci0 up\n//Enable Power Save feature\nhcitool -i hci0 cmd 3f 23 02 00 00\nwhile (true)\ndo\n hciconfig hci0 leadv\n sleep 2\n hciconfig hci0 noleadv\n sleep 2\ndone\n\nError log, after adding few more debug prints:\nBluetooth: btnxpuart_queue_skb(): 01 0A 20 01 00\nBluetooth: hci0: Set UART break: on, status=0\nBluetooth: hci0: btnxpuart_tx_wakeup() tx_work scheduled\nBluetooth: hci0: btnxpuart_tx_work() dequeue: 01 0A 20 01 00\nCan't set advertise mode on hci0: Connection timed out (110)\nBluetooth: hci0: command 0x200a tx timeout\n\nWhen the power save mechanism turns on UART break, and btnxpuart_tx_work()\nis scheduled simultaneously, psdata->ps_state is read as PS_STATE_AWAKE,\nwhich prevents the psdata->work from being scheduled, which is responsible\nto turn OFF UART break.\n\nThis issue is fixed by adding a ps_lock mutex around UART break on/off as\nwell as around ps_state read/write.\nbtnxpuart_tx_wakeup() will now read updated ps_state value. If ps_state is\nPS_STATE_SLEEP, it will first schedule psdata->work, and then it will\nreschedule itself once UART break has been turned off and ps_state is\nPS_STATE_AWAKE.\n\nTested above script for 50,000 iterations and TX timeout error was not\nobserved anymore."
},
{
"lang": "es",
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: btnxpuart: resolver error de tiempo de espera de TX en la prueba de esfuerzo de ahorro de energ\u00eda Esto corrige el problema de tiempo de espera de TX observado al ejecutar una prueba de esfuerzo en btnxpuart durante un par de horas, de modo que el intervalo entre dos comandos HCI coincida con el valor de tiempo de espera de ahorro de energ\u00eda de 2 segundos. Procedimiento de prueba usando script bash: hciconfig hci0 up //Habilitar funci\u00f3n de ahorro de energ\u00eda hcitool -i hci0 cmd 3f 23 02 00 00 while (true) do hciconfig hci0 leadv sleep 2 hciconfig hci0 noleadv sleep 2 done Registro de errores, despu\u00e9s de agregar algunas impresiones de depuraci\u00f3n m\u00e1s: Bluetooth: btnxpuart_queue_skb(): 01 0A 20 01 00 Bluetooth: hci0: Establecer UART break: activado, estado=0 Bluetooth: hci0: btnxpuart_tx_wakeup() tx_work programado Bluetooth: hci0: btnxpuart_tx_work() dequeue: 01 0A 20 01 00 No se puede establecer el modo de anuncio en hci0: Se agot\u00f3 el tiempo de conexi\u00f3n (110) Bluetooth: hci0: comando 0x200a Tiempo de espera de TX: Cuando el mecanismo de ahorro de energ\u00eda activa la interrupci\u00f3n de UART y btnxpuart_tx_work() se programa simult\u00e1neamente, psdata-&gt;ps_state se lee como PS_STATE_AWAKE, lo que impide que se programe psdata-&gt;work, que es responsable de desactivar la interrupci\u00f3n de UART. Este problema se soluciona a\u00f1adiendo un mutex ps_lock alrededor de la activaci\u00f3n/desactivaci\u00f3n de la interrupci\u00f3n de UART, as\u00ed como alrededor de la lectura/escritura de ps_state. btnxpuart_tx_wakeup() ahora leer\u00e1 el valor actualizado de ps_state. Si ps_state es PS_STATE_SLEEP, primero programar\u00e1 psdata-&gt;work y luego se reprogramar\u00e1 a s\u00ed mismo una vez que la interrupci\u00f3n de UART se haya desactivado y ps_state sea PS_STATE_AWAKE. Prob\u00e9 el script anterior durante 50,000 iteraciones y el error de tiempo de espera de TX ya no se observ\u00f3."
}
],
"metrics": {},
CVE-2025/CVE-2025-14xx/CVE-2025-1411.json
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1411",
"sourceIdentifier": "[email protected]",
"published": "2025-06-15T13:15:32.027",
"lastModified": "2025-06-16T12:32:18.840",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-11T18:46:59.513",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:security_verify_directory:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndIncluding": "10.0.3.1",
"matchCriteriaId": "BA9173E4-B0E8-4BE5-9028-A3C23A09CCCE"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7236658",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-17xx/CVE-2025-1766.json
+32 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1766",
"sourceIdentifier": "[email protected]",
"published": "2025-03-20T06:15:22.740",
"lastModified": "2025-03-20T06:15:22.740",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-11T18:04:48.627",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:themewinter:eventin:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.0.25",
"matchCriteriaId": "83E51B23-6F8A-478C-AF23-391D5E7EC252"
}
]
}
]
}
],
"references": [
{
"url": "http://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.0.24/core/Order/PaymentController.php#L97",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3257023/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f2bcaff9-bf04-4d8e-9422-c433264067ff?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-202xx/CVE-2025-20234.json
+91 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20234",
"sourceIdentifier": "[email protected]",
"published": "2025-06-18T17:15:28.833",
"lastModified": "2025-06-23T20:16:59.783",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:24:39.183",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,14 +71,80 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.2.0",
"versionEndExcluding": "1.4.3",
"matchCriteriaId": "49480D41-EBD3-4541-8418-80DD6444C6DB"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "1.26.1",
"matchCriteriaId": "4F19C9AF-A336-4DF7-AB2A-778228F79A20"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "1.26.1",
"matchCriteriaId": "DFA01B75-3D43-4B20-B5A7-354854025F96"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "7.5.21",
"matchCriteriaId": "72687E9E-1CC5-44A2-B207-1E459FFECB56"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "8.0.1.21160",
"versionEndExcluding": "8.4.5",
"matchCriteriaId": "5389A975-75C0-47F7-9DE4-25FD91226785"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.2.2",
"matchCriteriaId": "A7D78AF2-E32D-4346-A7A8-6137B623F1B8"
}
]
}
]
}
],
"references": [
{
"url": "https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-udf-hmwd9nDy",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-202xx/CVE-2025-20260.json
+31 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20260",
"sourceIdentifier": "[email protected]",
"published": "2025-06-18T18:15:23.270",
"lastModified": "2025-06-23T20:16:59.783",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:19:32.533",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.0.9",
"matchCriteriaId": "C77D9953-0A74-4E83-8717-88DCA0D33720"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.2.0",
"versionEndExcluding": "1.4.3",
"matchCriteriaId": "49480D41-EBD3-4541-8418-80DD6444C6DB"
}
]
}
]
}
],
"references": [
{
"url": "https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-21xx/CVE-2025-2109.json
+36 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2109",
"sourceIdentifier": "[email protected]",
"published": "2025-03-25T11:15:36.333",
"lastModified": "2025-03-27T16:45:46.410",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:03:48.423",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wpcompress:wp_compress:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "6.30.16",
"matchCriteriaId": "07F29DE0-6E67-4BE3-96B2-DCAF51C9C755"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/6.30.15/wp-compress-core.php#L994",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3254259/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://wordpress.org/plugins/wp-compress-image-optimizer/#developers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/10b9d703-de9d-472a-bdfb-bc9a41bf375e?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-21xx/CVE-2025-2110.json
+36 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2110",
"sourceIdentifier": "[email protected]",
"published": "2025-03-26T12:15:15.827",
"lastModified": "2025-03-27T16:45:27.850",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:02:44.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wpcompress:wp_compress:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "6.30.16",
"matchCriteriaId": "07F29DE0-6E67-4BE3-96B2-DCAF51C9C755"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/6.30.15/classes/ajax.class.php",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3254259/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://wordpress.org/plugins/wp-compress-image-optimizer/#developers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2bb4ead4-b2ad-42b4-92a0-fb7293f6df06?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-242xx/CVE-2025-24298.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-24298",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:33.440",
"lastModified": "2025-08-11T04:15:33.440",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite a un atacante local la ejecuci\u00f3n de c\u00f3digo arbitrario en tcb mediante el use after free."
}
],
"metrics": {
CVE-2025/CVE-2025-248xx/CVE-2025-24844.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-24844",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:34.217",
"lastModified": "2025-08-11T04:15:34.217",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local cometa un ataque DOS mediante la falta de liberaci\u00f3n de memoria."
}
],
"metrics": {
CVE-2025/CVE-2025-249xx/CVE-2025-24925.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-24925",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:34.433",
"lastModified": "2025-08-11T04:15:34.433",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local cometa un ataque DOS mediante la falta de liberaci\u00f3n de memoria."
}
],
"metrics": {
CVE-2025/CVE-2025-252xx/CVE-2025-25212.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-25212",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:34.600",
"lastModified": "2025-08-11T04:15:34.600",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local cometa un ataque DOS mediante una entrada incorrecta."
}
],
"metrics": {
CVE-2025/CVE-2025-252xx/CVE-2025-25229.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-25229",
"sourceIdentifier": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
"published": "2025-08-11T19:15:26.550",
"lastModified": "2025-08-11T19:15:26.550",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.\u00a0A malicious actor with user privileges may be able to access restricted internal system information, potentially enabling enumeration of internal network resources."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://www.omnissa.com/omnissa-security-response/",
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
},
{
"url": "https://www.omnissa.com/omsa-2025-0004/",
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
}
]
}
CVE-2025/CVE-2025-252xx/CVE-2025-25231.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-25231",
"sourceIdentifier": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
"published": "2025-08-11T18:15:32.930",
"lastModified": "2025-08-11T19:15:27.343",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability.\u00a0A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://static.omnissa.com/sites/default/files/OMSA-2025-0004.pdf",
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
},
{
"url": "https://www.omnissa.com/omnissa-security-response/",
"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"
}
]
}
CVE-2025/CVE-2025-252xx/CVE-2025-25278.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-25278",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:34.920",
"lastModified": "2025-08-11T04:15:34.920",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite a un atacante local la ejecuci\u00f3n de c\u00f3digo arbitrario en tcb a trav\u00e9s de una condici\u00f3n de ejecuci\u00f3n."
}
],
"metrics": {
CVE-2025/CVE-2025-266xx/CVE-2025-26690.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-26690",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:35.670",
"lastModified": "2025-08-11T04:15:35.670",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local cometa un ataque DOS mediante la desreferencia de un puntero NULL."
}
],
"metrics": {
CVE-2025/CVE-2025-269xx/CVE-2025-26964.json
+44 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-26964",
"sourceIdentifier": "[email protected]",
"published": "2025-02-25T15:15:29.557",
"lastModified": "2025-02-25T15:15:29.557",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-11T18:01:36.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -51,10 +71,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:themewinter:eventin:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.0.21",
"matchCriteriaId": "33A17C89-2204-4BB6-A642-FC59C1535440"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-eventin-plugin-4-0-20-local-file-inclusion-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-271xx/CVE-2025-27128.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-27128",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:39.247",
"lastModified": "2025-08-11T04:15:39.247",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite a un atacante local la ejecuci\u00f3n de c\u00f3digo arbitrario en tcb mediante el use after free."
}
],
"metrics": {
CVE-2025/CVE-2025-275xx/CVE-2025-27536.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-27536",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:39.830",
"lastModified": "2025-08-11T04:15:39.830",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local provoque un DOS a trav\u00e9s de una confusi\u00f3n de tipos."
}
],
"metrics": {
CVE-2025/CVE-2025-275xx/CVE-2025-27562.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-27562",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:40.610",
"lastModified": "2025-08-11T04:15:40.610",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite que un atacante local cometa un ataque DOS mediante la falta de liberaci\u00f3n de memoria."
}
],
"metrics": {
CVE-2025/CVE-2025-275xx/CVE-2025-27577.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-27577",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T04:15:40.770",
"lastModified": "2025-08-11T04:15:40.770",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition."
},
{
"lang": "es",
"value": "En OpenHarmony v5.0.3 y versiones anteriores se permite a un atacante local la ejecuci\u00f3n de c\u00f3digo arbitrario en tcb a trav\u00e9s de una condici\u00f3n de ejecuci\u00f3n."
}
],
"metrics": {
CVE-2025/CVE-2025-327xx/CVE-2025-32797.json
+58 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-32797",
"sourceIdentifier": "[email protected]",
"published": "2025-06-16T19:15:33.510",
"lastModified": "2025-06-17T20:50:23.507",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:42:30.550",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -73,22 +95,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:anaconda:conda-build:*:*:*:*:*:*:*:*",
"versionEndExcluding": "25.3.1",
"matchCriteriaId": "CB06ECE3-3052-465B-88B2-B7BF8AC9249D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/conda/conda-build/blob/3f06913bba22c4e1ef1065df9e00d86ac97f087c/conda_build/build.py#L3054-L3084",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/conda/conda-build/commit/d246e49c8f45e8033915156ee3d77769926f3c2e",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/conda/conda-build/pull/5",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/conda/conda-build/security/advisories/GHSA-vfp6-3v8g-vcmm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-330xx/CVE-2025-33020.json
+54 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-33020",
"sourceIdentifier": "[email protected]",
"published": "2025-07-23T15:15:31.247",
"lastModified": "2025-07-25T15:29:44.523",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:56:26.707",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:engineering_systems_design_rhapsody:9.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "64C85F02-6144-4DCF-A6F8-712547BFB741"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:engineering_systems_design_rhapsody:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1CD01272-AA22-450C-9DB1-0237E228956B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:engineering_systems_design_rhapsody:10.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8BC9B2A1-D4AA-4739-AD52-6BA029A724EE"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7240374",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-331xx/CVE-2025-33109.json
+64 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-33109",
"sourceIdentifier": "[email protected]",
"published": "2025-07-24T15:15:25.927",
"lastModified": "2025-07-25T15:29:19.837",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-11T18:57:22.260",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -51,10 +71,50 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BD871157-2BB3-4641-B84E-3EA13D24D35A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9A49E8C5-7967-42AE-A787-C533D24A63D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "92D03306-B6C9-403E-99A2-CE9D8DC3B482"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F7CCB5BF-08EF-472F-A663-5DE270234F10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AFFF96C2-7E0F-4DF9-AF51-3EE357D51095"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7240410",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-35xx/CVE-2025-3515.json
+53 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-3515",
"sourceIdentifier": "[email protected]",
"published": "2025-06-17T10:15:23.507",
"lastModified": "2025-06-17T20:50:23.507",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:37:44.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -51,18 +71,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.3.9.0",
"matchCriteriaId": "F73D713A-0CDA-48B9-9B5C-8B247C1F8723"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags/1.3.8.8/inc/dnd-upload-cf7.php#L845",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3310153/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e1298242-61d2-495e-bae7-96b5e12bd03d?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-360xx/CVE-2025-36097.json
+32 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-36097",
"sourceIdentifier": "[email protected]",
"published": "2025-07-16T18:15:24.243",
"lastModified": "2025-07-17T21:15:50.197",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:17:55.357",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*",
"versionStartIncluding": "9.0.0.0",
"versionEndExcluding": "9.0.5.24",
"matchCriteriaId": "5BB4C824-DC51-4A57-8EEF-F4BC47FA924B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*",
"versionStartIncluding": "17.0.0.3",
"versionEndExcluding": "25.0.0.8",
"matchCriteriaId": "FA548155-0A36-4731-BDDB-92D06C4E375D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7239856",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-384xx/CVE-2025-38499.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38499",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-11T16:15:30.057",
"lastModified": "2025-08-11T16:15:30.057",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-43xx/CVE-2025-4370.json
+32 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4370",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T05:15:31.213",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:04:09.220",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:brizy:brizy:*:*:*:*:free:wordpress:*:*",
"versionEndExcluding": "2.6.21",
"matchCriteriaId": "EEC4D1D4-091C-4212-BD56-916B4FA5DCC6"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/brizy/tags/2.6.17/editor/asset/media-processor.php#L27",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/browser/brizy/tags/2.6.17/editor/asset/static-file-trait.php#L44",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/db18f6b4-600d-4c63-a9f2-4e3b8ab4fba3?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-440xx/CVE-2025-44001.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-44001",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.467",
"lastModified": "2025-08-11T19:15:27.467",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the Get Channel Subscriptions details endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-440xx/CVE-2025-44004.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-44004",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.623",
"lastModified": "2025-08-11T19:15:27.623",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-451xx/CVE-2025-45146.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-45146",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T16:15:30.200",
"lastModified": "2025-08-11T17:15:26.627",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-45xx/CVE-2025-4581.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-4581",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T05:15:29.060",
"lastModified": "2025-08-09T05:15:29.060",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation."
},
{
"lang": "es",
"value": "Liferay Portal 7.4.0 a 7.4.3.132 y Liferay DXP 2025.Q1.0 a 2025.Q1.4, 2024.Q4.0 a 2024.Q4.7, 2024.Q3.1 a 2024.Q3.13, 2024.Q2.0 a 2024.Q2.13, 2024.Q1.1 a 2024.Q1.15, 7.4 GA a la actualizaci\u00f3n 92, permiten una vulnerabilidad SSRF ciega de preautenticaci\u00f3n en portal-settings-authentication-opensso-web debido a la validaci\u00f3n incorrecta de las URL proporcionadas por el usuario. Un atacante puede explotar este problema para forzar al servidor a realizar solicitudes HTTP arbitrarias a sistemas internos, lo que podr\u00eda provocar la enumeraci\u00f3n de la red interna o una mayor explotaci\u00f3n."
}
],
"metrics": {
CVE-2025/CVE-2025-467xx/CVE-2025-46709.json
+30 -3
View File
@@ -2,16 +2,43 @@
"id": "CVE-2025-46709",
"sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"published": "2025-08-09T00:15:26.190",
"lastModified": "2025-08-09T00:15:26.190",
"vulnStatus": "Received",
"lastModified": "2025-08-11T19:15:27.763",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception."
},
{
"lang": "es",
"value": "Posible p\u00e9rdida de memoria o excepciones del kernel causadas por la lectura de datos del mont\u00f3n del kernel despu\u00e9s de una excepci\u00f3n del kernel de desreferencia del puntero libre o NULL."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
CVE-2025/CVE-2025-46xx/CVE-2025-4655.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-4655",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T05:15:29.330",
"lastModified": "2025-08-09T05:15:29.330",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs."
},
{
"lang": "es",
"value": "La vulnerabilidad SSRF en las plantillas FreeMarker en Liferay Portal versiones 7.4.0 a 7.4.3.132 y Liferay DXP versiones 2025.Q1.0 a 2025.Q1.5, versiones 2024.Q4.0 a 2024.Q4.7, versiones 2024.Q3.1 a 2024.Q3.13, versiones 2024.Q2.0 a 2024.Q2.13, versiones 2024.Q1.1 a 2024.Q1.15 y 7.4 GA hasta la actualizaci\u00f3n 92 permite a los editores de plantillas eludir las validaciones de acceso a trav\u00e9s de URL manipuladas."
}
],
"metrics": {
CVE-2025/CVE-2025-487xx/CVE-2025-48731.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-48731",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.953",
"lastModified": "2025-08-11T19:15:27.953",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have access for via edit subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-492xx/CVE-2025-49221.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-49221",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.100",
"lastModified": "2025-08-11T19:15:28.100",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-495xx/CVE-2025-49590.json
+55 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-49590",
"sourceIdentifier": "[email protected]",
"published": "2025-06-18T23:15:19.200",
"lastModified": "2025-06-23T20:16:59.783",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:18:19.470",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -73,18 +95,46 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:xwiki:cryptpad:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2025.3.0",
"matchCriteriaId": "EDA17543-97E7-4C3B-A05E-D79CF77564F0"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/cryptpad/cryptpad/blob/15c81aa8ccb737a9a1167481f4a699af331364bb/www/bounce/main.js#L64-L95",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/cryptpad/cryptpad/commit/d5e4830ba104a4a442cb23aab5378b8565a95607",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cryptpad/cryptpad/security/advisories/GHSA-vq9h-x3gr-v8rj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-495xx/CVE-2025-49591.json
+69 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-49591",
"sourceIdentifier": "[email protected]",
"published": "2025-06-18T23:15:19.403",
"lastModified": "2025-06-23T20:16:59.783",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:20:31.827",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
"weaknesses": [
@@ -75,24 +97,65 @@
"value": "CWE-287"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:xwiki:cryptpad:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2025.3.0",
"matchCriteriaId": "EDA17543-97E7-4C3B-A05E-D79CF77564F0"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/cryptpad/cryptpad/blob/15c81aa8ccb737a9a1167481f4a699af331364bb/lib/http-worker.js#L356-L364",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/cryptpad/cryptpad/commit/0c5d4bbf5e5206d53470ea86a664fa2b703fb611",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cryptpad/cryptpad/commit/f624f9d457d36040f57c7598d98a8b9461b79837",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cryptpad/cryptpad/security/advisories/GHSA-xq5x-wgcm-3p33",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-50xx/CVE-2025-5071.json
+33 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-5071",
"sourceIdentifier": "[email protected]",
"published": "2025-06-19T10:15:22.027",
"lastModified": "2025-06-23T20:16:59.783",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:11:51.800",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,46 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:meowapps:ai_engine:*:*:*:*:*:wordpress:*:*",
"versionStartIncluding": "2.8.0",
"versionEndExcluding": "2.8.4",
"matchCriteriaId": "55D3B320-631E-44E3-AC72-733028CFFBCC"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.8.1/labs/mcp.php#L43",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3313554/ai-engine#file21",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e7654a1-0020-4bf1-86be-bdb238a9fe0d?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-50xx/CVE-2025-5084.json
+36 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-5084",
"sourceIdentifier": "[email protected]",
"published": "2025-07-24T10:15:26.643",
"lastModified": "2025-07-25T15:29:19.837",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T18:57:06.507",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:addonmaster:post_grid_master:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "3.4.13",
"matchCriteriaId": "CBB0EEC6-CEDB-4057-92AA-4A6796029176"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Fr1t0viski/PoCs/blob/main/XSS_GridMaster",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://plugins.trac.wordpress.org/browser/ajax-filter-posts/tags/3.4.13/inc/functions.php",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://wordpress.org/plugins/ajax-filter-posts/#developers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/08137a9e-6e4d-4ca6-954e-e98a44b0c9be?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-518xx/CVE-2025-51823.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-51823",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.360",
"lastModified": "2025-08-11T19:15:28.360",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/libcsp/libcsp/issues/850",
"source": "[email protected]"
},
{
"url": "https://github.com/libcsp/libcsp/pull/852",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-518xx/CVE-2025-51824.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-51824",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.497",
"lastModified": "2025-08-11T19:15:28.497",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/libcsp/libcsp/issues/851",
"source": "[email protected]"
},
{
"url": "https://github.com/libcsp/libcsp/pull/853",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-520xx/CVE-2025-52080.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52080",
"sourceIdentifier": "[email protected]",
"published": "2025-07-15T16:15:37.253",
"lastModified": "2025-07-16T14:29:05.223",
"lastModified": "2025-08-11T18:49:28.643",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -61,8 +61,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:netgear:xr300_firmware:v1.0.3.38_10.3.30:*:*:*:*:*:*:*",
"matchCriteriaId": "E3128F9A-2160-476A-950F-9CE32F01DC6A"
"criteria": "cpe:2.3:o:netgear:xr300_firmware:1.0.3.38:*:*:*:*:*:*:*",
"matchCriteriaId": "0CBE7296-076A-43C5-B996-27EDD9CEDC45"
}
]
},
CVE-2025/CVE-2025-520xx/CVE-2025-52082.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52082",
"sourceIdentifier": "[email protected]",
"published": "2025-07-15T16:15:37.487",
"lastModified": "2025-07-16T14:28:44.173",
"lastModified": "2025-08-11T18:51:25.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -61,8 +61,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:netgear:xr300_firmware:v1.0.3.38_10.3.30:*:*:*:*:*:*:*",
"matchCriteriaId": "E3128F9A-2160-476A-950F-9CE32F01DC6A"
"criteria": "cpe:2.3:o:netgear:xr300_firmware:1.0.3.38:*:*:*:*:*:*:*",
"matchCriteriaId": "0CBE7296-076A-43C5-B996-27EDD9CEDC45"
}
]
},
CVE-2025/CVE-2025-521xx/CVE-2025-52136.json
+6 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-52136",
"sourceIdentifier": "[email protected]",
"published": "2025-08-10T04:15:33.913",
"lastModified": "2025-08-10T04:15:33.913",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
{
"lang": "en",
"value": "In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a defense-in-depth feature in which a plugin's acceptability (for later Dashboard installation) is set by the \"emqx ctl plugins allow\" CLI command."
},
{
"lang": "es",
"value": "En EMQX anterior a la versi\u00f3n 5.8.6, los administradores pod\u00edan instalar complementos nuevos a su elecci\u00f3n mediante la interfaz web del Dashboard. NOTA: El proveedor considera que este es el comportamiento previsto; sin embargo, la versi\u00f3n 5.8.6 a\u00f1ade una funci\u00f3n de defensa en profundidad que permite configurar la aceptabilidad de un complemento (para su posterior instalaci\u00f3n en el Dashboard) mediante el comando CLI \"emqx ctl plugins allow\"."
}
],
"metrics": {
CVE-2025/CVE-2025-529xx/CVE-2025-52931.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52931",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.637",
"lastModified": "2025-08-11T19:15:28.637",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53077.json
+51 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53077",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T05:15:31.640",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:05:41.957",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53078.json
+71 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53078",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T05:15:31.817",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:05:57.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.3,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -51,10 +71,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53079.json
+51 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53079",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T05:15:31.980",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:06:08.773",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53080.json
+71 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53080",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T05:15:32.150",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:07:11.447",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 5.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53081.json
+71 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53081",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T06:15:22.660",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:10:11.350",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
@@ -51,10 +71,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53082.json
+71 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53082",
"sourceIdentifier": "[email protected]",
"published": "2025-07-29T06:15:23.710",
"lastModified": "2025-07-29T14:14:29.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:11:12.310",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
@@ -51,10 +71,58 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.3.13.1",
"matchCriteriaId": "620C0889-6BB6-477F-BBB3-F23A81F81254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.0.17",
"versionEndExcluding": "2.6.14.1",
"matchCriteriaId": "E2362518-8040-4FFD-9567-DC22015DD7EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:data_management_server_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.7.0.15",
"versionEndExcluding": "2.9.3.6",
"matchCriteriaId": "51C84E33-C218-4A9A-B0F0-3B4DA1E90AA5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:data_management_server:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BFF4DB9B-396F-428D-BCDD-F2DE7AF45884"
}
]
}
]
}
],
"references": [
{
"url": "https://security.samsungda.com/securityUpdates.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-531xx/CVE-2025-53187.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-53187",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T18:15:33.737",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Generation of Code ('Code Injection') vulnerability in ABB ASPECT.This issue affects ASPECT: before <3.08.04-s01."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-531xx/CVE-2025-53188.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-53188",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.793",
"lastModified": "2025-08-11T19:15:28.793",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insufficiently Protected Credentials vulnerability in ABB Aspect.This issue affects Aspect: before <3.08.04-s01."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-522"
}
]
}
],
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-531xx/CVE-2025-53189.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-53189",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.963",
"lastModified": "2025-08-11T19:15:28.963",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Authorization Bypass Through User-Controlled Key vulnerability in ABB Aspect.This issue affects Aspect: from o before <3.08.04-s01."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-531xx/CVE-2025-53190.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-53190",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.123",
"lastModified": "2025-08-11T19:15:29.123",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in ABB Aspect.This issue affects Aspect: before <3.08.04-s01."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-286"
}
]
}
],
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-531xx/CVE-2025-53191.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-53191",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.293",
"lastModified": "2025-08-11T19:15:29.293",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authentication for Critical Function vulnerability in ABB Aspect.This issue affects Aspect: before <3.08.04-s01."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.5,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53514.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53514",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.473",
"lastModified": "2025-08-11T19:15:29.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53857.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53857",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.603",
"lastModified": "2025-08-11T19:15:29.603",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53861.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53861",
"sourceIdentifier": "[email protected]",
"published": "2025-07-11T13:15:59.160",
"lastModified": "2025-07-15T13:14:49.980",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:21:12.100",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7B4BE2D6-43C3-4065-A213-5DB1325DC78F"
}
]
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-53861",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379360",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53862.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53862",
"sourceIdentifier": "[email protected]",
"published": "2025-07-11T13:15:59.703",
"lastModified": "2025-07-15T13:14:49.980",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:20:55.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7B4BE2D6-43C3-4065-A213-5DB1325DC78F"
}
]
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-53862",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379359",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-539xx/CVE-2025-53910.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53910",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.747",
"lastModified": "2025-08-11T19:15:29.747",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54050.json
+44 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54050",
"sourceIdentifier": "[email protected]",
"published": "2025-07-16T11:15:32.410",
"lastModified": "2025-07-16T14:58:59.837",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-11T19:18:27.353",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -51,10 +71,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cyberchimps:responsive_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.7.4",
"matchCriteriaId": "899AD18F-2883-43C6-81B6-5AF8FD93921B"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/responsive-addons-for-elementor/vulnerability/wordpress-responsive-addons-for-elementor-plugin-1-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54063.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-54063",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T18:15:33.970",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on any website. If a victim clicks the exploit link in their browser, the app\u2019s custom URL handler is triggered, leading to remote code execution on the victim\u2019s machine. This issue has been patched in version 1.5.1."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.1,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/CherryHQ/cherry-studio/commit/ff72c007c03ff47de21a4d0bf52a1ff1fb35cd89",
"source": "[email protected]"
},
{
"url": "https://github.com/CherryHQ/cherry-studio/pull/8218",
"source": "[email protected]"
},
{
"url": "https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-p6vw-w3p8-4g72",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-544xx/CVE-2025-54417.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54417",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T02:15:37.550",
"lastModified": "2025-08-09T02:15:37.550",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: \"Craft CMS has a potential RCE with a compromised security key\". To exploit this vulnerability, the project must meet these requirements: have a compromised security key and create an arbitrary file in Craft's /storage/backups folder. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint and execute CLI commands remotely. This issue is fixed in versions 4.16.3 and 5.8.4."
},
{
"lang": "es",
"value": "Craft es una plataforma para crear experiencias digitales. Las versiones 4.13.8 a 4.16.2 y 5.5.8 a 5.8.3 contienen una vulnerabilidad que puede eludir la CVE-2025-23209: \"Craft CMS tiene un posible RCE con una clave de seguridad comprometida\". Para explotar esta vulnerabilidad, el proyecto debe cumplir estos requisitos: tener una clave de seguridad comprometida y crear un archivo arbitrario en la carpeta /storage/backups de Craft. Con estos criterios, los atacantes podr\u00edan crear una solicitud maliciosa espec\u00edfica al endpoint /updater/restore-db y ejecutar comandos CLI de forma remota. Este problema se ha corregido en las versiones 4.16.3 y 5.8.4."
}
],
"metrics": {
CVE-2025/CVE-2025-544xx/CVE-2025-54458.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54458",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.940",
"lastModified": "2025-08-11T19:15:29.940",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-544xx/CVE-2025-54463.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54463",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:30.080",
"lastModified": "2025-08-11T19:15:30.080",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-544xx/CVE-2025-54478.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54478",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:30.220",
"lastModified": "2025-08-11T19:15:30.220",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-545xx/CVE-2025-54525.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54525",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:30.353",
"lastModified": "2025-08-11T19:15:30.353",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1287"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54888.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54888",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T02:15:37.737",
"lastModified": "2025-08-09T02:15:37.737",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12, 1.5.0-dev.636 through 1.5.4, 1.6.0-dev.754 through 1.6.7, 1.7.0-pr.251.885 through 1.7.8 and 1.8.0-dev.909 through 1.8.4, an authentication bypass vulnerability allows any unauthenticated attacker to impersonate any ActivityPub actor by sending forged activities signed with their own keys. Activities are processed before verifying the signing key belongs to the claimed actor, enabling complete actor impersonation across all Fedify instances. This is fixed in versions 1.3.20, 1.4.13, 1.5.5, 1.6.8, 1.7.9 and 1.8.5."
},
{
"lang": "es",
"value": "Fedify es una librer\u00eda de TypeScript para crear aplicaciones de servidores federados con tecnolog\u00eda ActivityPub. En las versiones anteriores a la 1.3.20, 1.4.0-dev.585 a 1.4.12, 1.5.0-dev.636 a 1.5.4, 1.6.0-dev.754 a 1.6.7, 1.7.0-pr.251.885 a 1.7.8 y 1.8.0-dev.909 a 1.8.4, una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n permite a cualquier atacante no autenticado suplantar la identidad de cualquier actor de ActivityPub mediante el env\u00edo de actividades falsificadas firmadas con sus propias claves. Las actividades se procesan antes de verificar que la clave de firma pertenezca al actor declarado, lo que permite la suplantaci\u00f3n completa del actor en todas las instancias de Fedify. Esto se solucion\u00f3 en las versiones 1.3.20, 1.4.13, 1.5.5, 1.6.8, 1.7.9 y 1.8.5."
}
],
"metrics": {
CVE-2025/CVE-2025-549xx/CVE-2025-54996.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54996",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T02:15:37.887",
"lastModified": "2025-08-09T02:15:37.887",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were able to increase their scope directly to the root policy. While the identity system allowed adding arbitrary policies, which in turn could contain capability grants on arbitrary paths, the root policy was restricted to manual generation using unseal or recovery key shares. The global root policy was not accessible from child namespaces. This issue is fixed in version 2.3.2. To workaround this vulnerability, use of denied_parameters in any policy which has access to the affected identity endpoints (on identity entities) may be sufficient to prohibit this type of attack."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 2.3.1 y anteriores, las cuentas con acceso a sistemas de entidades de identidad con privilegios elevados en espacios de nombres ra\u00edz pod\u00edan ampliar su alcance directamente a la pol\u00edtica ra\u00edz. Si bien el sistema de identidad permit\u00eda a\u00f1adir pol\u00edticas arbitrarias, que a su vez pod\u00edan contener concesiones de capacidad en rutas arbitrarias, la pol\u00edtica ra\u00edz se limitaba a la generaci\u00f3n manual mediante recursos compartidos de claves de recuperaci\u00f3n o desbloqueo. La pol\u00edtica ra\u00edz global no era accesible desde los espacios de nombres secundarios. Este problema se solucion\u00f3 en la versi\u00f3n 2.3.2. Para solucionar esta vulnerabilidad, el uso de \"denegated_parameters\" en cualquier pol\u00edtica que tenga acceso a los endpoints de identidad afectados (en entidades de identidad) podr\u00eda ser suficiente para impedir este tipo de ataque."
}
],
"metrics": {
CVE-2025/CVE-2025-549xx/CVE-2025-54997.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54997",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T03:15:46.263",
"lastModified": "2025-08-09T03:15:46.263",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, some OpenBao deployments intentionally limit privileged API operators from executing system code or making network connections. However, these operators can bypass both restrictions through the audit subsystem by manipulating log prefixes. This allows unauthorized code execution and network access that violates the intended security model. This issue is fixed in version 2.3.2. To workaround, users can block access to sys/audit/* endpoints using explicit deny policies, but root operators cannot be restricted this way."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 2.3.1 y anteriores, algunas implementaciones de OpenBao limitan intencionalmente la ejecuci\u00f3n de c\u00f3digo del sistema o el establecimiento de conexiones de red por parte de operadores de API privilegiados. Sin embargo, estos operadores pueden eludir ambas restricciones a trav\u00e9s del subsistema de auditor\u00eda manipulando los prefijos de registro. Esto permite la ejecuci\u00f3n de c\u00f3digo no autorizado y el acceso a la red que infringe el modelo de seguridad previsto. Este problema se solucion\u00f3 en la versi\u00f3n 2.3.2. Como soluci\u00f3n alternativa, los usuarios pueden bloquear el acceso a los endpoints sys/audit/* mediante pol\u00edticas de denegaci\u00f3n expl\u00edcitas, pero los operadores ra\u00edz no pueden restringirse de esta forma."
}
],
"metrics": {
CVE-2025/CVE-2025-549xx/CVE-2025-54998.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54998",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T03:15:46.463",
"lastModified": "2025-08-09T03:15:46.463",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by different aliasing between pre-flight and full login request user entity alias attributions. This is fixed in version 2.3.2. To work around this issue, existing users may apply rate-limiting quotas on the authentication endpoints:, see https://openbao.org/api-docs/system/rate-limit-quotas/."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 0.1.0 a 2.3.1, los atacantes pod\u00edan eludir los mecanismos de bloqueo autom\u00e1tico de usuarios en los sistemas de autenticaci\u00f3n OpenBao Userpass o LDAP. Esto se deb\u00eda a una asignaci\u00f3n de alias diferente entre las atribuciones de alias de entidad de usuario de las solicitudes de inicio de sesi\u00f3n previas al vuelo y de inicio de sesi\u00f3n completo. Esto se solucion\u00f3 en la versi\u00f3n 2.3.2. Para solucionar este problema, los usuarios pueden aplicar cuotas de limitaci\u00f3n de velocidad en los endpoints de autenticaci\u00f3n (consulte https://openbao.org/api-docs/system/rate-limit-quotas/)."
}
],
"metrics": {
CVE-2025/CVE-2025-549xx/CVE-2025-54999.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-54999",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T03:15:46.597",
"lastModified": "2025-08-09T03:15:46.597",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users and users with stored credentials. This is independent of whether the supplied credentials were valid for the given user. This issue was fixed in version 2.3.2. To work around this issue, users may use another auth method or apply rate limiting quotas to limit the number of requests in a period of time: https://openbao.org/api-docs/system/rate-limit-quotas/."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 0.1.0 a 2.3.1, al usar el m\u00e9todo de autenticaci\u00f3n userpass de OpenBao, la enumeraci\u00f3n de usuarios era posible debido a la diferencia de tiempo entre usuarios inexistentes y usuarios con credenciales almacenadas. Esto es independiente de si las credenciales proporcionadas eran v\u00e1lidas para el usuario en cuesti\u00f3n. Este problema se solucion\u00f3 en la versi\u00f3n 2.3.2. Para solucionar este problema, los usuarios pueden usar otro m\u00e9todo de autenticaci\u00f3n o aplicar cuotas de limitaci\u00f3n de velocidad para limitar el n\u00famero de solicitudes en un per\u00edodo determinado: https://openbao.org/api-docs/system/rate-limit-quotas/."
}
],
"metrics": {
CVE-2025/CVE-2025-54xx/CVE-2025-5495.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-5495",
"sourceIdentifier": "[email protected]",
"published": "2025-06-03T13:15:21.123",
"lastModified": "2025-07-02T14:24:27.397",
"lastModified": "2025-08-11T18:48:40.963",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -150,8 +150,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:netgear:wnr614_firmware:1.1.0.28_1.0.1ww:*:*:*:*:*:*:*",
"matchCriteriaId": "F1C7A888-8180-491E-81D9-43FCB17B4480"
"criteria": "cpe:2.3:o:netgear:wnr614_firmware:1.1.0.28:*:*:*:*:*:*:*",
"matchCriteriaId": "6D0DF147-4336-4701-A0C1-4B7AB6748CAA"
}
]
},
CVE-2025/CVE-2025-550xx/CVE-2025-55000.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-55000",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T03:15:46.737",
"lastModified": "2025-08-09T03:15:46.737",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected normalization in the underlying TOTP library. To work around, ensure that all codes are first normalized before submitting to the OpenBao endpoint. TOTP code verification is a privileged action; only trusted systems should be verifying codes."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 0.1.0 a 2.3.1, el motor de secretos TOTP de OpenBao pod\u00eda aceptar c\u00f3digos v\u00e1lidos varias veces en lugar de solo una. Esto se deb\u00eda a una normalizaci\u00f3n inesperada en la librer\u00eda TOTP subyacente. Para solucionar este problema, aseg\u00farese de que todos los c\u00f3digos se normalicen antes de enviarlos al endpoint de OpenBao. La verificaci\u00f3n de c\u00f3digos TOTP es una acci\u00f3n privilegiada; solo los sistemas de confianza deben verificar los c\u00f3digos."
}
],
"metrics": {
CVE-2025/CVE-2025-550xx/CVE-2025-55001.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-55001",
"sourceIdentifier": "[email protected]",
"published": "2025-08-09T03:15:46.887",
"lastModified": "2025-08-09T03:15:46.887",
"vulnStatus": "Received",
"lastModified": "2025-08-11T18:32:48.867",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao allowed the assignment of policies and MFA attribution based upon entity aliases, chosen by the underlying auth method. When the username_as_alias=true parameter in the LDAP auth method was in use, the caller-supplied username was used verbatim without normalization, allowing an attacker to bypass alias-specific MFA requirements. This issue was fixed in version 2.3.2. To work around this, remove all usage of the username_as_alias=true parameter and update any entity aliases accordingly."
},
{
"lang": "es",
"value": "OpenBao existe para proporcionar una soluci\u00f3n de software que permite gestionar, almacenar y distribuir datos confidenciales, como secretos, certificados y claves. En las versiones 2.3.1 y anteriores, OpenBao permit\u00eda la asignaci\u00f3n de pol\u00edticas y la atribuci\u00f3n de MFA seg\u00fan alias de entidad, seleccionados mediante el m\u00e9todo de autenticaci\u00f3n subyacente. Cuando se utilizaba el par\u00e1metro username_as_alias=true en el m\u00e9todo de autenticaci\u00f3n LDAP, el nombre de usuario proporcionado por el usuario se utilizaba textualmente sin normalizaci\u00f3n, lo que permit\u00eda a un atacante eludir los requisitos de MFA espec\u00edficos del alias. Este problema se solucion\u00f3 en la versi\u00f3n 2.3.2. Para solucionarlo, elimine el uso del par\u00e1metro username_as_alias=true y actualice los alias de entidad seg\u00fan corresponda."
}
],
"metrics": {
Loaded 100 of 229 files, more files were not shown because too many files have changed in this diff. Show more