diff --git a/CVE-2024/CVE-2024-411xx/CVE-2024-41153.json b/CVE-2024/CVE-2024-411xx/CVE-2024-41153.json index 19559686619..10afc271145 100644 --- a/CVE-2024/CVE-2024-411xx/CVE-2024-41153.json +++ b/CVE-2024/CVE-2024-411xx/CVE-2024-41153.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41153", "sourceIdentifier": "cybersecurity@hitachienergy.com", "published": "2024-10-29T13:15:04.600", - "lastModified": "2024-10-31T14:37:48.533", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-24T09:15:39.647", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -62,17 +62,17 @@ "weaknesses": [ { "source": "cybersecurity@hitachienergy.com", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", - "value": "CWE-77" + "value": "CWE-78" } ] }, { "source": "nvd@nist.gov", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10701.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10701.json new file mode 100644 index 00000000000..ebf85fa3e69 --- /dev/null +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10701.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-10701", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:41.073", + "lastModified": "2025-10-24T09:15:41.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Time Clock \u2013 A WordPress Employee & Volunteer Time Clock Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.3.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with Time Clock user credentials to inject arbitrary web scripts in pages that will execute whenever a user accesses an affected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/time-clock/tags/1.3/includes/actions.php#L387", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/time-clock/tags/1.3/includes/admin/activity.php#L149", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3382912%40time-clock&new=3382912%40time-clock&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3710f219-545f-421d-a654-f49169ff7808?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10740.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10740.json new file mode 100644 index 00000000000..9c75b8341e9 --- /dev/null +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10740.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-10740", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:41.303", + "lastModified": "2025-10-24T09:15:41.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify links." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/exact-links/trunk/app/Http/Routes/api.php", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/exact-links/trunk/app/Models/LinkAnalytics.php?rev=3210852", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/29cc5016-005e-48e8-b929-5064798f24da?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10748.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10748.json new file mode 100644 index 00000000000..84eb11c5ebe --- /dev/null +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10748.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-10748", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:41.487", + "lastModified": "2025-10-24T09:15:41.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level permissions and above to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/rapidresult/tags/1.2/rapidresult.php#L112", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e5d7d04-f73a-48ea-81e3-36a514c76cc6?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10749.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10749.json new file mode 100644 index 00000000000..30380e4213f --- /dev/null +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10749.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-10749", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:41.670", + "lastModified": "2025-10-24T09:15:41.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Microsoft Azure Storage for WordPress plugin for WordPress is vulnerable to Unauthorized Arbitrary Media Deletion in all versions up to, and including, 4.5.1. This is due to missing capability checks on the 'azure-storage-media-replace' AJAX action. This makes it possible for authenticated attackers with subscriber-level access and above to delete arbitrary media files from the WordPress Media Library via the replace_attachment parameter granted they can access the nonce which is exposed to all authenticated users." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/windows-azure-storage/tags/4.5.1/includes/class-windows-azure-replace-media.php#L152", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/windows-azure-storage/tags/4.5.1/includes/class-windows-azure-replace-media.php#L346", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e1b80852-a221-4c2c-b76d-8bdcd1e0f1ad?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10901.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10901.json new file mode 100644 index 00000000000..e1f45a455ad --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10901.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-10901", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:41.873", + "lastModified": "2025-10-24T09:15:41.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ai_get_table' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used, and other data." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/originality-ai/trunk/OriginalityAILogger.php#L202", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9bf94803-1ddf-4b9b-9624-497db455aab2?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10902.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10902.json new file mode 100644 index 00000000000..d2899bdd98b --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10902.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-10902", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:42.080", + "lastModified": "2025-10-24T09:15:42.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ai_scan_result_remove' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used, and other data." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/originality-ai/trunk/OriginalityAI.php#L532", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/80dd4f6a-20dd-4532-913b-ab08f89db836?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-111xx/CVE-2025-11172.json b/CVE-2025/CVE-2025-111xx/CVE-2025-11172.json new file mode 100644 index 00000000000..79b9a9037a4 --- /dev/null +++ b/CVE-2025/CVE-2025-111xx/CVE-2025-11172.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11172", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:42.270", + "lastModified": "2025-10-24T09:15:42.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Check Plagiarism plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the chk_plag_mine_plugin_wpse10500_admin_action() function in all versions up to, and including, 2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the API key." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/check-plagiarism/trunk/index.php#L760", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ade64c1d-65e6-4424-b2da-dc63b49f08aa?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11253.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11253.json new file mode 100644 index 00000000000..75c7ab8c07b --- /dev/null +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11253.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-11253", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-10-24T09:15:42.467", + "lastModified": "2025-10-24T09:15:42.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0359", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11257.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11257.json new file mode 100644 index 00000000000..5fabfcc3348 --- /dev/null +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11257.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11257", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:42.680", + "lastModified": "2025-10-24T09:15:42.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_save_blogs' AJAX endpoint in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger an import of all Hubspot data." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/llm-hubspot-blog-import/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/682ec57a-f67c-40a9-91cd-2a11159ff695?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-115xx/CVE-2025-11504.json b/CVE-2025/CVE-2025-115xx/CVE-2025-11504.json new file mode 100644 index 00000000000..0ea6a543158 --- /dev/null +++ b/CVE-2025/CVE-2025-115xx/CVE-2025-11504.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11504", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:42.853", + "lastModified": "2025-10-24T09:15:42.853", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Quickcreator \u2013 AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently use that to perform actions on the site like creating new posts and injecting XSS payloads." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-532" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/quickcreator/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/561f171e-f13e-408b-a63e-bf6a512d4463?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11887.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11887.json new file mode 100644 index 00000000000..b7e3e6daa89 --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11887.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11887", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:43.080", + "lastModified": "2025-10-24T09:15:43.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update various plugin settings." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3383178%40supervisor&new=3383178%40supervisor&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d3e2880-bb86-4263-9ed4-25a9769890e4?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11889.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11889.json new file mode 100644 index 00000000000..45dfaeeaa71 --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11889.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11889", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:43.353", + "lastModified": "2025-10-24T09:15:43.353", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The AIO Forms \u2013 Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 1.3.15. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/all-in-one-forms/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc69491-0f40-4bab-9215-b25f72110e26?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11992.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11992.json new file mode 100644 index 00000000000..f7e963bfdd5 --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11992.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11992", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:43.547", + "lastModified": "2025-10-24T09:15:43.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'mioptions.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.svn.wordpress.org/mislider/trunk/mioptions.php", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/14c24bff-91a1-402a-a9d1-a1a7800db62f?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12014.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12014.json new file mode 100644 index 00000000000..d0eb562eb4a --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12014.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12014", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:43.757", + "lastModified": "2025-10-24T09:15:43.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The NGINX Cache Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nginxcacheoptimizer-blacklist-update' AJAX action in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add URLs to the Exclude URLs From Dynamic Caching setting." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/nginx-cache-optimizer/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7dd18e4e-9aa6-403e-aec3-21f33d739066?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12016.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12016.json new file mode 100644 index 00000000000..4445ddf9fc4 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12016.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12016", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:43.987", + "lastModified": "2025-10-24T09:15:43.987", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The qnotsquiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qnotsquiz_custom_start_text' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/qnotsquiz/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/07043be9-c81e-4021-90af-976ae57c0bec?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12017.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12017.json new file mode 100644 index 00000000000..3b6992de128 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12017.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12017", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:44.183", + "lastModified": "2025-10-24T09:15:44.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The VNPAY Payment gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.svn.wordpress.org/vnpay-for-woocommerce/trunk/src/shortcodes/Thankyou.php", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b901f593-3691-4ea1-8ab6-1ddd68fa2e36?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12028.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12028.json new file mode 100644 index 00000000000..4be02b4cec2 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12028.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-12028", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:44.367", + "lastModified": "2025-10-24T09:15:44.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The IndieAuth plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4. This is due to missing nonce verification on the `login_form_indieauth()` function and the authorization endpoint at wp-login.php?action=indieauth. This makes it possible for unauthenticated attackers to force authenticated users to approve OAuth authorization requests for attacker-controlled applications via a forged request granted they can trick a user into performing an action such as clicking on a link or visiting a malicious page while logged in. The attacker can then exchange the stolen authorization code for an access token, effectively taking over the victim's account with the granted scopes (create, update, delete)." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/indieauth/tags/4.5.4/includes/class-indieauth-authorization-endpoint.php#L411", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/indieauth/tags/4.5.4/includes/class-indieauth-authorization-endpoint.php#L418", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/indieauth/tags/4.5.4/includes/class-indieauth-authorization-endpoint.php#L476", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/42b373da-d5a6-4e3b-90f4-059da3641841?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12072.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12072.json new file mode 100644 index 00000000000..25cac5963b8 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12072.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12072", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:44.733", + "lastModified": "2025-10-24T09:15:44.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Disable Content Editor For Specific Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing nonce validation on template configuration updates. This makes it possible for unauthenticated attackers to add or delete template configurations via a forged request granted they can trick an administrator into performing an action such as clicking on a link." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/disable-contect-editor-for-specific-template/tags/2.0/disable-editor-specific-template.php#L57", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/243200f4-5a5d-4275-bf2b-f4cb6099d145?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12096.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12096.json new file mode 100644 index 00000000000..5428d686064 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12096.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12096", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T09:15:44.917", + "lastModified": "2025-10-24T09:15:44.917", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/simple-excel-pricelist-for-woocommerce/trunk/classes/sepwWorker.php#L176", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5e7fa38f-26ef-4011-af18-c18883159425?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-628xx/CVE-2025-62868.json b/CVE-2025/CVE-2025-628xx/CVE-2025-62868.json new file mode 100644 index 00000000000..97287dbd284 --- /dev/null +++ b/CVE-2025/CVE-2025-628xx/CVE-2025-62868.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62868", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-24T08:15:34.430", + "lastModified": "2025-10-24T08:15:34.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/wordpress/plugin/edge-cpt/security-policy/vdp/vulnerability/wordpress-edge-cpt-plugin-1-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-64xx/CVE-2025-6440.json b/CVE-2025/CVE-2025-64xx/CVE-2025-6440.json new file mode 100644 index 00000000000..fb60d06bab1 --- /dev/null +++ b/CVE-2025/CVE-2025-64xx/CVE-2025-6440.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-6440", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-24T08:15:34.750", + "lastModified": "2025-10-24T08:15:34.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://codecanyon.net/item/woocommerce-designer-pro-cmyk-card-flyer/22027731", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cc2f8da1-7503-45e3-8a7d-0031ce264edf?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 73491fefd6a..8cfc070eec3 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-24T08:00:12.118657+00:00 +2025-10-24T10:00:11.240017+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-24T06:15:36.233000+00:00 +2025-10-24T09:15:44.917000+00:00 ``` ### Last Data Feed Release @@ -33,25 +33,41 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -315433 +315454 ``` ### CVEs added in the last Commit -Recently added CVEs: `6` +Recently added CVEs: `21` -- [CVE-2025-10723](CVE-2025/CVE-2025-107xx/CVE-2025-10723.json) (`2025-10-24T06:15:34.670`) -- [CVE-2025-10874](CVE-2025/CVE-2025-108xx/CVE-2025-10874.json) (`2025-10-24T06:15:35.307`) -- [CVE-2025-58070](CVE-2025/CVE-2025-580xx/CVE-2025-58070.json) (`2025-10-24T06:15:35.467`) -- [CVE-2025-61931](CVE-2025/CVE-2025-619xx/CVE-2025-61931.json) (`2025-10-24T06:15:35.780`) -- [CVE-2025-9158](CVE-2025/CVE-2025-91xx/CVE-2025-9158.json) (`2025-10-24T06:15:35.983`) -- [CVE-2025-9978](CVE-2025/CVE-2025-99xx/CVE-2025-9978.json) (`2025-10-24T06:15:36.233`) +- [CVE-2025-10701](CVE-2025/CVE-2025-107xx/CVE-2025-10701.json) (`2025-10-24T09:15:41.073`) +- [CVE-2025-10740](CVE-2025/CVE-2025-107xx/CVE-2025-10740.json) (`2025-10-24T09:15:41.303`) +- [CVE-2025-10748](CVE-2025/CVE-2025-107xx/CVE-2025-10748.json) (`2025-10-24T09:15:41.487`) +- [CVE-2025-10749](CVE-2025/CVE-2025-107xx/CVE-2025-10749.json) (`2025-10-24T09:15:41.670`) +- [CVE-2025-10901](CVE-2025/CVE-2025-109xx/CVE-2025-10901.json) (`2025-10-24T09:15:41.873`) +- [CVE-2025-10902](CVE-2025/CVE-2025-109xx/CVE-2025-10902.json) (`2025-10-24T09:15:42.080`) +- [CVE-2025-11172](CVE-2025/CVE-2025-111xx/CVE-2025-11172.json) (`2025-10-24T09:15:42.270`) +- [CVE-2025-11253](CVE-2025/CVE-2025-112xx/CVE-2025-11253.json) (`2025-10-24T09:15:42.467`) +- [CVE-2025-11257](CVE-2025/CVE-2025-112xx/CVE-2025-11257.json) (`2025-10-24T09:15:42.680`) +- [CVE-2025-11504](CVE-2025/CVE-2025-115xx/CVE-2025-11504.json) (`2025-10-24T09:15:42.853`) +- [CVE-2025-11887](CVE-2025/CVE-2025-118xx/CVE-2025-11887.json) (`2025-10-24T09:15:43.080`) +- [CVE-2025-11889](CVE-2025/CVE-2025-118xx/CVE-2025-11889.json) (`2025-10-24T09:15:43.353`) +- [CVE-2025-11992](CVE-2025/CVE-2025-119xx/CVE-2025-11992.json) (`2025-10-24T09:15:43.547`) +- [CVE-2025-12014](CVE-2025/CVE-2025-120xx/CVE-2025-12014.json) (`2025-10-24T09:15:43.757`) +- [CVE-2025-12016](CVE-2025/CVE-2025-120xx/CVE-2025-12016.json) (`2025-10-24T09:15:43.987`) +- [CVE-2025-12017](CVE-2025/CVE-2025-120xx/CVE-2025-12017.json) (`2025-10-24T09:15:44.183`) +- [CVE-2025-12028](CVE-2025/CVE-2025-120xx/CVE-2025-12028.json) (`2025-10-24T09:15:44.367`) +- [CVE-2025-12072](CVE-2025/CVE-2025-120xx/CVE-2025-12072.json) (`2025-10-24T09:15:44.733`) +- [CVE-2025-12096](CVE-2025/CVE-2025-120xx/CVE-2025-12096.json) (`2025-10-24T09:15:44.917`) +- [CVE-2025-62868](CVE-2025/CVE-2025-628xx/CVE-2025-62868.json) (`2025-10-24T08:15:34.430`) +- [CVE-2025-6440](CVE-2025/CVE-2025-64xx/CVE-2025-6440.json) (`2025-10-24T08:15:34.750`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `1` +- [CVE-2024-41153](CVE-2024/CVE-2024-411xx/CVE-2024-41153.json) (`2025-10-24T09:15:39.647`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 21f8fedde7c..5e0bf79a736 100644 --- a/_state.csv +++ b/_state.csv @@ -268156,7 +268156,7 @@ CVE-2024-41149,0,0,f14663eb8350d9172f4375018c2663c330a658af7d5f7db78923311eba15b CVE-2024-4115,0,0,ffb5f36fbe2984a7256aff205f47c39ef178d82820690299ed15db732f03d6a7,2025-01-15T18:42:08.110000 CVE-2024-41150,0,0,b3fa487187a6e523624f7e09b49e1bcf30bc22e86ed50f81eb7ef85655bb3043,2024-08-27T14:35:09.013000 CVE-2024-41151,0,0,8fa7c83f8896840923a3528c997b3f68b737433a1522a1cdd30fbdca083c4f70,2025-06-24T16:29:09.163000 -CVE-2024-41153,0,0,c0ab6701dfb0e7935b555b1fa094f0ee4f1bf4a1c16645e01a3ec31537dc2a4e,2024-10-31T14:37:48.533000 +CVE-2024-41153,0,1,b9dcbb1c0b4e8cafee0a465287c9a21720313c605a9699978db85df22f4c8126,2025-10-24T09:15:39.647000 CVE-2024-41156,0,0,4e48f11d1fb4cd9de12eef64bee0a3ff2f5403553caa8e40519c489b9350c166,2024-12-05T15:29:31.730000 CVE-2024-41157,0,0,687c6bf6c1a2a644076449fb3f6cf8733831e4b295f95e907ece1f39dc641094,2024-09-04T16:30:40.737000 CVE-2024-41159,0,0,937cbf7f7360f21885e874bc2f4c1730528083668eaa66ab2a6136bcf7501a5c,2025-08-25T14:02:49.380000 @@ -285970,6 +285970,7 @@ CVE-2025-10696,0,0,64b312c2d4afda936d01ce9bbe0ae8bbebd107975418586010ce8345a5c27 CVE-2025-10699,0,0,0431f54d81894cc54e6b8414dd5225427bd632ceb12bcfab02ed306f4c745af6,2025-10-16T15:28:59.610000 CVE-2025-1070,0,0,63c9f6366f7886d6af04d22c614f55b0f42e20f4e6634878d1102f0014dfbfa1,2025-02-13T06:15:22.463000 CVE-2025-10700,0,0,289701006811395807ddacf3d32f4ccc99dc0658d0edcc7d0fc89c8d9a61f902,2025-10-16T15:28:59.610000 +CVE-2025-10701,1,1,1192aac750e2be4b1ee59540854679904cc14981f0451a8953534a2b8a13715c,2025-10-24T09:15:41.073000 CVE-2025-10705,0,0,43ebd94c94d2f6aa2fba59a65c27925408e563a2e22d824feead67e21d2b3af7,2025-10-23T13:15:38.353000 CVE-2025-10706,0,0,06a6c196328eeb593a51cf62a2a92a1600240d302bc11b8f2afc76d7beb317c3,2025-10-16T15:28:59.610000 CVE-2025-10707,0,0,fe31c0f51213aa4eeb4c9fb8571ba361ea2fc7ffaadb9cffbeeefeafeaa8a1ce,2025-10-02T19:40:17.363000 @@ -285988,7 +285989,7 @@ CVE-2025-1072,0,0,750813ceedfb7d92d875ecb99f21bf44014f112b560d1d1a3f685ed2bfe17c CVE-2025-10720,0,0,edf1f68fff2ecad71cb363e373dc661326609065215799423dbb4dcf77c73e06,2025-10-14T19:36:29.240000 CVE-2025-10721,0,0,5531e9dfa10cca95fb867dea200e8a3532d007d309f460ac287dc60a2859811a,2025-09-22T21:23:01.543000 CVE-2025-10722,0,0,6813f3053a14e77a913db307b2427d77139d69d712a057c66273caafa027b147,2025-09-22T21:23:01.543000 -CVE-2025-10723,1,1,e9cd6d6683e33f9c97b0ba5f08c293766f3ad2ef2a1c2769cef905a1eb09a884,2025-10-24T06:15:34.670000 +CVE-2025-10723,0,0,e9cd6d6683e33f9c97b0ba5f08c293766f3ad2ef2a1c2769cef905a1eb09a884,2025-10-24T06:15:34.670000 CVE-2025-10725,0,0,d19a2c34d8d869d980936e440ac656a9bcf010b1d24592311499052bec9ed8e3,2025-10-02T19:12:17.160000 CVE-2025-10726,0,0,7105f14f8a2cc7ef69d0ea67463b019fd3fa01120df8e46bfc01b8f5f4d84cd5,2025-10-06T14:56:47.823000 CVE-2025-10727,0,0,babf6633f10090ea708d1bd9bb52604c9809e61139bccba4767b47a9811e94a6,2025-10-23T08:15:29.400000 @@ -285999,6 +286000,7 @@ CVE-2025-10730,0,0,94dec0ae496fafc34020e0bf945280b3adb1ba09409cd25091a05efd77802 CVE-2025-10732,0,0,8ce6ccf9642d8deccc97676fbf1d95184e30e474baf1a242e15d8c4d474fd468,2025-10-14T19:36:29.240000 CVE-2025-10735,0,0,bc701f22fa65ab8b115c94b79515410836bbb47b07fdd127e75cae42cce81a49,2025-10-02T19:12:17.160000 CVE-2025-1074,0,0,fa27fa0c9cb977dbec9e01b7e0e09573d564049dce536c4e96cb4da4f04b16cb,2025-07-02T19:11:15.693000 +CVE-2025-10740,1,1,3e4a2c0ac7ec86c3afb799a62f614f2ca8dfda56954022460cc7a7c78b8e4ea9,2025-10-24T09:15:41.303000 CVE-2025-10741,0,0,ca1c3b179192a0c1b8d495bb3eb53e8d3d99bd577066cc2b815b2a762b16632d,2025-09-22T21:23:01.543000 CVE-2025-10742,0,0,14b00a8780d024a0e468adac0b0e87e79592baa08dfd6a31897aece8e2321113,2025-10-16T15:28:59.610000 CVE-2025-10743,0,0,29536eb5ebe23cb9492ddce7a2640b96ebaaecfa4d57e412bf94560a679d62c1,2025-10-16T15:28:59.610000 @@ -286006,6 +286008,8 @@ CVE-2025-10744,0,0,116ade987e443b8b187bf68e9aabb99a087c71e66dbf4f4aa290b9a235f1c CVE-2025-10745,0,0,fada0f1891657a31c489391c7dfad6c8bece78c088a643896b0581e2398ccd13,2025-09-26T14:32:19.853000 CVE-2025-10746,0,0,05991082e84c1c50c0478772cfca7f1ed0c1726893284a4dd16f475a26257461,2025-10-06T14:56:47.823000 CVE-2025-10747,0,0,4a6d5c51b56b465ae0326dcaf9685f9ed009dbe7afcfb0ec5e3fa3ee46f8ddba,2025-09-26T14:32:19.853000 +CVE-2025-10748,1,1,5183290b1f3ff7ce84858c9a23831f4ae2c3951ef9506a71f81e42ccfbc28388,2025-10-24T09:15:41.487000 +CVE-2025-10749,1,1,349ae3e4967b6e6b1cd8eb67c933b851e26d8cc9a81b557332da4a6e86b5306f,2025-10-24T09:15:41.670000 CVE-2025-1075,0,0,b9b628825d6acdb63fafe527af78e248efdaee0085e1a7e811a6a3f91cc89ff2,2025-08-25T01:19:09.287000 CVE-2025-10750,0,0,3b9c32f66e3b3d988f891b829dc5c6010fc2e282adea9c9700dd622dd7298984,2025-10-21T19:31:25.450000 CVE-2025-10751,0,0,c822cecf5fd0389c069f0188a960e75e566b27146da14b64e7cbb7497460be6a,2025-10-17T15:15:37.250000 @@ -286128,7 +286132,7 @@ CVE-2025-10868,0,0,2864676eeb767b983a4b9746eb3fb4f609044f4f35ad457d138a420c3c64c CVE-2025-10869,0,0,0dc8089c36780d070bbe72b1d640cb79559918510e493dd546f121690a0de9d2,2025-10-22T09:15:32.060000 CVE-2025-1087,0,0,7a894514c20a110199ea673471a9e60754864e20939d4cb049420f9571e29f70,2025-09-17T14:15:37.177000 CVE-2025-10871,0,0,bc6945a040030dc2e5b5003a204ce1dfd27a72c0d28fe7adcbb0c1b6f230b554,2025-09-29T13:09:51.657000 -CVE-2025-10874,1,1,761ef49a675daff6d3e16c2fa5057d11f4ecfd39f46c864f98be76606bbf1f46,2025-10-24T06:15:35.307000 +CVE-2025-10874,0,0,761ef49a675daff6d3e16c2fa5057d11f4ecfd39f46c864f98be76606bbf1f46,2025-10-24T06:15:35.307000 CVE-2025-10879,0,0,292ec6359b7893760a81fca85628c90e841d1f90a41eb1ac8c40fcea10b42915,2025-09-29T14:43:01.933000 CVE-2025-1088,0,0,f3787fa29b31267dc245c20fa41e949ee6e12bb796f28ebe55a044ba5017de27,2025-06-18T13:46:52.973000 CVE-2025-10880,0,0,2a362eccb1b6bd5d4bcfc66016b67c6c1db2fcb13185b92475f37d50a06914e3,2025-09-29T14:44:22.307000 @@ -286137,6 +286141,8 @@ CVE-2025-10891,0,0,ec65bca20daf6cf3a3667100ee8faba38038287356d613e29f0f2e3ec84c3 CVE-2025-10892,0,0,b321af08f7e176d608a0dc06066e258eba69478d13da7bfc23c4c4319c7e8e9c,2025-09-25T15:55:41.970000 CVE-2025-10894,0,0,07f0c4cb20f40d82cfb680e228c7edabfb0d95ea517a4bcf87454363272c0433,2025-09-26T14:32:53.583000 CVE-2025-10895,0,0,b495d5a710896977b3d9cc196f37c188b3ef8b95c1ca26e6ad721516d23ce84d,2025-10-02T23:15:30.930000 +CVE-2025-10901,1,1,200e92eb187f6e1476f5326848cb27906788e6afe4be5dc5b398bb97e9e982e0,2025-10-24T09:15:41.873000 +CVE-2025-10902,1,1,15bf4fdd7af8a02286b5f0e71f0abdbbdbea48e245f75072811b258eec6a4cc5,2025-10-24T09:15:42.080000 CVE-2025-10904,0,0,65b64b64139e33b37b60e72b7544ca001f4198afb7b58c6812f96cfbb9613d57,2025-10-07T23:15:32.930000 CVE-2025-10906,0,0,398f19602f87fe52de5ba52eac045ac633b4ff091d9f8d3bc4dfb35338e2a0fd,2025-09-24T18:11:24.520000 CVE-2025-10909,0,0,3cdfe05eed917ad7fe7b309a9322b47700adc4ba42dae6b861bcfd1f19722d04,2025-10-20T05:15:35.080000 @@ -286348,6 +286354,7 @@ CVE-2025-11166,0,0,bd5a86d8237fab9745089954e8769c6767d90c900808297d817a87b703326 CVE-2025-11167,0,0,7ed63fa0dad41e13c42a17034be3f1468d84271f3e4ad805f23d5552ef06d6ca,2025-10-14T19:36:59.730000 CVE-2025-1117,0,0,689febb6066d1fec82c60e215bad724ad5df8fa85c4636fc9e776b8da79fe4d3,2025-02-08T13:15:07.843000 CVE-2025-11171,0,0,5a8dda304bf781722b72fd35429db9347168d2b7c02e9d161fc0346f508f5fa5,2025-10-08T19:38:09.863000 +CVE-2025-11172,1,1,487278b1f4207fd68afa62a75b9ec16f9ea3a0d429a28e3f4c27a5f276edc479,2025-10-24T09:15:42.270000 CVE-2025-11176,0,0,53b46f98344eb524dcfc0a0ac35c1d2a21afef9bedb2cb8278c21171c5754500,2025-10-16T15:29:11.563000 CVE-2025-11177,0,0,de2f62c2fe5dcaf941dabf8a5351c48f7555698fcc07acf7428622450ec5dff9,2025-10-16T15:28:59.610000 CVE-2025-11178,0,0,e31468554530e42b769c33102b8d1f6d21d83a2dd24e1d987eb6ffa2b89adea6,2025-10-02T19:12:17.160000 @@ -286379,8 +286386,10 @@ CVE-2025-11239,0,0,e18a3b09cf1ff7a9d5f5bdc4125491e8151bf3f58b4e4bc710f1a06203823 CVE-2025-11240,0,0,d0559ccb3c02d2f9b3f122ba444a1667ef8495dd62be8f9f442b419b43df4d17,2025-10-08T17:17:13.523000 CVE-2025-11241,0,0,ac9ce4fdcbec5c1c564f31341fac4c3be0f33504bfbcb07d556b69eb0e1427c0,2025-10-06T14:57:05 CVE-2025-1125,0,0,64c060281199c9654f8fdd99085ba3139218ea7f460c1edb551cce591e2f94ce,2025-08-12T14:15:27.730000 +CVE-2025-11253,1,1,31ef1bb5c536cc804833875be2ad23367ae53ca19f7b4e42535255957946ca37,2025-10-24T09:15:42.467000 CVE-2025-11254,0,0,b760c9d3a14656c5ea2ead4e88fe1815ef0b37d8df1e6e85fa93aa6145be8f4d,2025-10-14T19:36:59.730000 CVE-2025-11256,0,0,77b7648fd0dded75aead154cd2028fdc8495d0af337e223a1563e3b3de167776,2025-10-21T19:31:25.450000 +CVE-2025-11257,1,1,42efe1d77adb88a35acd4eda2ca0174f72328f0e7b5a7e9e57f8db267ba58cc7,2025-10-24T09:15:42.680000 CVE-2025-1126,0,0,75a0af68b2de42873e4ee33ccd68bb162ec9dabf122dea8ebb0bf11a24b953a1,2025-02-11T17:15:23.537000 CVE-2025-1127,0,0,5cab03037829677b3ff4c77d268b6ebc0b526a062cfabc702392a7f88c64ffc1,2025-02-13T19:15:14.153000 CVE-2025-11270,0,0,840d2ce4a68fe5a37fedca5a66373e7e5898b8792bbc644efb264a4a4433db5e,2025-10-21T19:31:25.450000 @@ -286581,6 +286590,7 @@ CVE-2025-11498,0,0,ff373d4540720284ddf94685e3698e180dd2abfc4fd5d27b7c7e69d25bdfe CVE-2025-1150,0,0,ffb8572ccf12d9cddae4d61931487456e4318f6c507382ea2cc71d589e44e06e,2025-03-11T19:01:04.727000 CVE-2025-11501,0,0,a303588d6c43e79dd7ec6b88540e91a522ac0a0f42b2dbce0af72ebface5b4e9,2025-10-16T15:29:11.563000 CVE-2025-11503,0,0,6dd0dcc190d4bf74ad639f44f877e238eb3f8858b93597ade19788d0b1bbb154,2025-10-10T18:02:42.303000 +CVE-2025-11504,1,1,eab51eeae3ca27d0466f18c917c7ef9c682efe9f786630a82aee5e4b5cbdda83,2025-10-24T09:15:42.853000 CVE-2025-11505,0,0,d63f6a756ea486a6c0d35577009ba6e0fcf98da676cf8a51644a7906593dfbdc,2025-10-10T18:00:14.237000 CVE-2025-11506,0,0,67b18e1c7c0397b866e3cfe803606da8a6b6c66f134d528fc8177c0a516eb8a7,2025-10-14T15:16:02.387000 CVE-2025-11507,0,0,56171f645daf57cbd8723477e67110cd1064ffe392404e486b5c9b1890453444,2025-10-14T15:16:02.710000 @@ -286822,6 +286832,8 @@ CVE-2025-11878,0,0,e5db8057fa46c5dcdd7e9af3d4fb4b2722313f26a478639f14ed1e2b60fc7 CVE-2025-1188,0,0,5efc8e2f903ec9d16b255970209255d6aed04fea4527765fffe8565e5fe86ea3,2025-02-25T21:00:10.493000 CVE-2025-11880,0,0,656cdbc69a808a0d4e7f179110a1f1c8ebb709b27cf19b1f4f829b109e0d2e68,2025-10-22T21:12:48.953000 CVE-2025-11883,0,0,ea3cd4779224d287b12703963c8f6a33d1dd580a90bea29144bd4212437947f8,2025-10-22T21:12:48.953000 +CVE-2025-11887,1,1,61b682bdeafe7a1f8f847e9f243d6f7bf45a1dd6505d00641230416692c958ab,2025-10-24T09:15:43.080000 +CVE-2025-11889,1,1,597688b8481708924d2f41299409ba2c766045e6b71bbae9d116217ebbf09d22,2025-10-24T09:15:43.353000 CVE-2025-1189,0,0,e4eb678cba834278c817b0655cf1d1ccb0ebf3aac198cbef30b78dc9ecdd351e,2025-02-20T16:24:17.783000 CVE-2025-11895,0,0,f800a4d10e140c6a3c704b6d5cb3ad223b8b09ab2b3ec5f27c5ec1a955e6dde6,2025-10-21T19:31:50.020000 CVE-2025-11896,0,0,14db1743660abc8a7cf6d4be031fe627176ea0beff4f49faf0dac29498ae6400,2025-10-21T19:31:50.020000 @@ -286871,12 +286883,17 @@ CVE-2025-1197,0,0,1490ecac98705b37d8398fb14f505408a1f5aa5cf42798e369b1f28081806f CVE-2025-11979,0,0,9642b1a8afcffc4606674792f7aa0b7b7ce070d4ec9d99c0d148cfad9a62eabb,2025-10-21T19:31:25.450000 CVE-2025-1198,0,0,e25a71be0358dea86a15bfce077af266274efb8869baa5de76d22da5d493dc80,2025-08-06T18:50:00.933000 CVE-2025-1199,0,0,b293e1750426e162cd73c69f2470f66e74330c6db9c1208ddcbe2ec678b89d9d,2025-02-18T18:06:10.360000 +CVE-2025-11992,1,1,19bb6fde21ea5722168dca2fa49051b62263aa97ce7690685c66ef9b800e0a5c,2025-10-24T09:15:43.547000 CVE-2025-1200,0,0,e8b1d0bff74166355198550aba4b5a51b0c4408b2cdc99e80194cb9ee45638f7,2025-04-29T20:24:05.563000 CVE-2025-12001,0,0,1f34b443317c1dba08d68dce718bcc8ac04b22e529e6440c793618a9f6474470,2025-10-21T19:31:25.450000 CVE-2025-12004,0,0,89ecf85d1662ad5807cd1a3123c0c06d1c221d80e7374fc038958c88723b82ff,2025-10-21T19:31:25.450000 CVE-2025-1201,0,0,9013de96c060dac01f3dd28cb24bb7efd9ce2730a40f3d2bb427bc4ce086e7ef,2025-02-18T18:01:07.620000 +CVE-2025-12014,1,1,d97f78573ef9f2f933b46233916edd41462eba1d5a75c89e02850f78dd432961,2025-10-24T09:15:43.757000 +CVE-2025-12016,1,1,17b6cec7a1c1e75235bded59d7ee8bcaa9fc95570f50648992673ddfdc8705f2,2025-10-24T09:15:43.987000 +CVE-2025-12017,1,1,20014893cb47a2f5101b5aa8cc6c69d232ca3ec04fecc570c72f8a60adfffc5b,2025-10-24T09:15:44.183000 CVE-2025-1202,0,0,145e416d76817c96da29e1ee25f9dd444dc5ef4d95ddc6c06c93503cc4db41a1,2025-02-18T18:02:04.383000 CVE-2025-12024,0,0,f5c7af1856c6c6f3a1bce429d89a794051da9d7e3eb01ab0f4bc54fae02bf0ef,2025-10-21T16:15:37.283000 +CVE-2025-12028,1,1,10ea67d060a61e3968db6de5cf89b511654140f07d302fe8fd9f880a28d4e1ac,2025-10-24T09:15:44.367000 CVE-2025-1203,0,0,f2cbe4d9ffe40b5c9d21320d372187afdf27e726c0bb8950fba8244f09423775,2025-04-08T13:13:35.707000 CVE-2025-12031,0,0,b9a660b9ec2e3aa8fda31f5b6112bf5edff630a0bbed8c6b16791aa0efdcb3da,2025-10-21T19:31:25.450000 CVE-2025-12033,0,0,744c2804eba42707783cd0b9864a8fafdaefbcdb43c8af0cf0a16f5ab7743762,2025-10-22T21:12:48.953000 @@ -286884,8 +286901,10 @@ CVE-2025-1204,0,0,1a6a6d6d7e9c4d6739bac4886c5ffe95dd752abb1877293a1f41dffddd75c2 CVE-2025-12044,0,0,fea2d7b7f2fd250b72343c5ebc321bbdd2b64bb338396d1ccd13ff9440b67573,2025-10-23T20:15:37.607000 CVE-2025-1206,0,0,ea94e082f0fb2c3e9cbf9071800bfcaa07133d59e9c405a94dd3f8f199626042,2025-02-20T20:39:04.393000 CVE-2025-1207,0,0,7d124cbc886c8b13b8ddd3ab6b7b5525d0938d2d0afc4dcd7d8089b241a520f5,2025-02-12T16:15:44.393000 +CVE-2025-12072,1,1,55642eaeed5c01a17807c41a2b9dd0a39bbe68e6d8f105e7bfac7a68159067ec,2025-10-24T09:15:44.733000 CVE-2025-1208,0,0,7d439f27be25af068ee7a5bdbb340ddd01d136ca5376da5fb603abe97482c28a,2025-02-21T12:03:49.027000 CVE-2025-1209,0,0,73163c928794f026d7174c939dfacce9c8a62bab67c5de9237fcf3ce185d0ff4,2025-02-19T19:04:43.770000 +CVE-2025-12096,1,1,915e170d3c5125d943c5ea05169e3670f6b9a2c374770b7251865f9d47b3459c,2025-10-24T09:15:44.917000 CVE-2025-1210,0,0,51f4cbb43c759e53b163b7aede54aac4df773ce5b490d7dce07597fb52fb1a4c,2025-02-19T19:03:10.870000 CVE-2025-12100,0,0,5de77691149da6daf68d5a8827a349c244807297a60924101ffdb32218145cbb,2025-10-23T21:15:41.060000 CVE-2025-12104,0,0,242041a7d4a4ebf540a2bd3935353b26538638936d45032b2d26aec818286980,2025-10-23T04:15:52 @@ -309958,7 +309977,7 @@ CVE-2025-58067,0,0,3105421cc6633ee7d1ec91764c1cd1ca29475340b850b72ac52a98b020d30 CVE-2025-58068,0,0,44e1d109296cf2b955eef22f159ed9ac59a4afb449e53b91c4462653799878a5,2025-09-24T18:16:58.630000 CVE-2025-58069,0,0,a8c6e0e3fea7bd7f85d422e4728178122d99d09049b38e8ce4888421fe9b2f8a,2025-09-24T18:11:24.520000 CVE-2025-5807,0,0,384417ca98f2632e67cea0a8a9efb98a92af12b24d28c8fb1a227d83dcb6b23e,2025-07-10T13:17:30.017000 -CVE-2025-58070,1,1,b606dc424d4b919b928c4bf21f44f1ebd8367941143833ae146674e85585eeac,2025-10-24T06:15:35.467000 +CVE-2025-58070,0,0,b606dc424d4b919b928c4bf21f44f1ebd8367941143833ae146674e85585eeac,2025-10-24T06:15:35.467000 CVE-2025-58071,0,0,ca7340e60860be6d88fcb7ccdc5f49dacfa78e1569d4c7a630ffcb44a69eec8b,2025-10-21T19:17:54.400000 CVE-2025-58072,0,0,842d308154a003bf57cacabb070cd1feb737cd9f5b3ab344a3994fb58e4e623f,2025-08-29T16:24:09.860000 CVE-2025-58073,0,0,42ac832c76ee79bc3ec7ab0323af90eacce1ccba0fe3109e02d48eaad1f6a72a,2025-10-21T17:51:42.500000 @@ -311851,7 +311870,7 @@ CVE-2025-61928,0,0,89b8c834000cf307af3ff28ce346dec7f4856540131f3d5b510c8d730719e CVE-2025-61929,0,0,02baa0d28ecf85c8803b673d17585466be4896854516bd678208e3f71d478956,2025-10-14T19:36:59.730000 CVE-2025-6193,0,0,1b9eea71b477bf9c4e7b9bd5cc5d3e3853a840bafa78d229ba7a22652ff2fec9,2025-09-02T19:15:32.700000 CVE-2025-61930,0,0,d88736fd74733af41af39b7b9eed1514ed977c270ccd6edc17329e0e045a677d,2025-10-20T16:47:37.100000 -CVE-2025-61931,1,1,a0e076f430892ccd99a87d6fe0adac3163e9676ee33403e6e8bdb92cbed44265,2025-10-24T06:15:35.780000 +CVE-2025-61931,0,0,a0e076f430892ccd99a87d6fe0adac3163e9676ee33403e6e8bdb92cbed44265,2025-10-24T06:15:35.780000 CVE-2025-61932,0,0,a91eee96c8b423b6a2b6be01c085d343d0a12d7461370bdf34c1cc198ef52b86,2025-10-23T13:00:14.270000 CVE-2025-61933,0,0,ad093c23bf9a0cb48f5fef0190fdac07f283e0963345810a5f5390060dc8a428,2025-10-21T12:12:54.180000 CVE-2025-61934,0,0,de3675e379c294c83aa9903218007ddda3f2ab563700d13c2c78474707f505af,2025-10-23T22:15:48.710000 @@ -312249,6 +312268,7 @@ CVE-2025-62835,0,0,752e761d7016cd88625a28b49c2efbaf9f249a7f89d44a4db44e6e365db78 CVE-2025-6284,0,0,01c0a9b6c36fe98d11c601a672d683a0e8fb89235f309774f6bbaa34d1b90b9b,2025-06-26T21:36:59.597000 CVE-2025-6285,0,0,0f5e702030ae71dd658a22b122b4aed0ed12d1aae61fb46ec51e0841a0ec9087,2025-06-26T21:36:42.657000 CVE-2025-6286,0,0,b7219a51a324575d8724ff4298827d1d2120856c9a6df23d680f1ea8dbfc94c7,2025-06-26T21:33:36.923000 +CVE-2025-62868,1,1,1f9f225a7e21ca8a03c6be06e3c68d7e7e8899769764bb0f00e3a681855e671d,2025-10-24T08:15:34.430000 CVE-2025-6287,0,0,c97270e78c42232e6181a1fc6418c4993fc08485bae7bc11e103b2bd3b0836b8,2025-06-26T21:30:45.290000 CVE-2025-6288,0,0,fa5bb2cf674608fadad9e3141e14760d75f6db2208fe52ae1ce80a76abaa33b6,2025-06-26T21:19:24.540000 CVE-2025-6290,0,0,c2ed75c99fd22b3a767fa6ba8364d4a3c4bca918872facb4981c311910b82f9b,2025-07-08T11:32:32.773000 @@ -312393,6 +312413,7 @@ CVE-2025-6436,0,0,57ee55e93a89bf67fde39388e899131fc9c38ce16a39aa5da6afcb6e88926e CVE-2025-6437,0,0,76c42fa9baf77301080cf733d12c398f2bba551c741c5b4cfac9d81547ba7471,2025-07-08T14:10:13.767000 CVE-2025-6438,0,0,c5e44473a870f271dce6d5ce7e1b731503f0c603cfc2983e71ab3f3dbcee921d,2025-07-15T13:14:49.980000 CVE-2025-6439,0,0,2d0ea447d8853dd809e141043bf0a840de4b7c2379c975462c88f39d09ce818b,2025-10-14T19:36:59.730000 +CVE-2025-6440,1,1,9ef3a6aa58e2c24ea2fa54b00066501e8fac6605b376330e17f438584a5cc42a,2025-10-24T08:15:34.750000 CVE-2025-6441,0,0,5f4a27413c69d383060527884881b853295d4a7c7dc1a3a4886fa158fe5e2c24,2025-07-25T15:29:19.837000 CVE-2025-6442,0,0,f2a8efd197ba74ca2a1b2ff130838b4724ea1251750727f087a1eadb96ab9f14,2025-08-18T15:49:38.773000 CVE-2025-6443,0,0,febfa6bdb26020616171d91e3eef2bb96afa03cd76051b22022afd65700ef49d,2025-08-18T15:45:13.223000 @@ -314753,7 +314774,7 @@ CVE-2025-9154,0,0,703dc13623dd8400cf4f35ee65f44f32f2dda7752c2c579adfab25b0b86326 CVE-2025-9155,0,0,b4601bc115145d5641b9f31ba7b304d2402dbd59dda053cab13c7e783f4a8f8c,2025-08-21T18:40:22.153000 CVE-2025-9156,0,0,760775998ed14379dcfdd7a807186fda9051dd3ae1fbc6f46ed42d8efe8a3c11,2025-08-21T18:40:11.367000 CVE-2025-9157,0,0,2be6f65aca67b863c57b90804fb195a8b5b43283164014e0d6c21031693ec502,2025-08-20T14:40:17.713000 -CVE-2025-9158,1,1,ff0fd38e0aaaa1b75ceb78c308d769c7ecf34af4c1378edea1ab41aa7d3d0f66,2025-10-24T06:15:35.983000 +CVE-2025-9158,0,0,ff0fd38e0aaaa1b75ceb78c308d769c7ecf34af4c1378edea1ab41aa7d3d0f66,2025-10-24T06:15:35.983000 CVE-2025-9160,0,0,fa2c86315a6de9dbed1404a3b92f4c2a41e0ba71d0510cc40be8bd068917ffdf,2025-09-09T16:28:43.660000 CVE-2025-9161,0,0,4693703775247e02b4982b8af42e36ce20ee1eb7ad4dfec3905bfb292742cb24,2025-10-20T19:11:17.067000 CVE-2025-9162,0,0,632598e5f2f2ec02adac49169e241ff5254a6593e8ceace49283048e8c716c85,2025-09-22T16:15:46.420000 @@ -315416,7 +315437,7 @@ CVE-2025-9971,0,0,7f876bd170f14b1feb7ae560049c9f4e9a3be104d4d2460ee327aa5029e9d1 CVE-2025-9972,0,0,c858d5cb332fc085c390742c1d19341f53ba61aa3995abc9c9bd64c8b9d8717f,2025-09-23T05:15:36.150000 CVE-2025-9975,0,0,b1f23dc970eb535920ca99e49e12f4473521da278d051437f077b4e79f3f0443,2025-10-14T19:36:59.730000 CVE-2025-9976,0,0,14fdfb7ba123561cad60c181e0158605f0221d76e4a1abbbb2a316e8cc259230,2025-10-14T19:36:29.240000 -CVE-2025-9978,1,1,9ed47e92dc9b9ce62ee37d78f9695cc6d5d16ae7224a73e22e935393e2f599a0,2025-10-24T06:15:36.233000 +CVE-2025-9978,0,0,9ed47e92dc9b9ce62ee37d78f9695cc6d5d16ae7224a73e22e935393e2f599a0,2025-10-24T06:15:36.233000 CVE-2025-9979,0,0,1c484ce9f3590c3fac34599a605eebea346d1c16468e0dda6a414f42f9beac64,2025-09-11T17:14:10.147000 CVE-2025-9980,0,0,b4d7e4f4eb111cf053e4c67b5525c5af533da8f818cbaead30a9fe893c83ed28,2025-10-23T10:15:32.393000 CVE-2025-9981,0,0,01bb75e2e40d85ec93cfe0a6c4a1784724e136ae7072c4ee2204c5760af5c540,2025-10-23T10:15:32.743000