Auto-Update: 2025-06-01T06:00:20.069198+00:00

This commit is contained in:
cad-safe-bot 2025-06-01 06:03:54 +00:00
parent 21660c0aea
commit 359a621e43
4 changed files with 523 additions and 546 deletions

View File

@ -2,13 +2,13 @@
"id": "CVE-2025-5320", "id": "CVE-2025-5320",
"sourceIdentifier": "cna@vuldb.com", "sourceIdentifier": "cna@vuldb.com",
"published": "2025-05-29T14:15:38.377", "published": "2025-05-29T14:15:38.377",
"lastModified": "2025-05-29T14:29:50.247", "lastModified": "2025-06-01T05:15:19.883",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
"value": "A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument localhost_aliases leads to origin validation error. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." "value": "A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument localhost_aliases leads to erweiterte Rechte. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}, },
{ {
"lang": "es", "lang": "es",
@ -63,7 +63,7 @@
"cvssMetricV31": [ "cvssMetricV31": [
{ {
"source": "cna@vuldb.com", "source": "cna@vuldb.com",
"type": "Primary", "type": "Secondary",
"cvssData": { "cvssData": {
"version": "3.1", "version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
@ -111,7 +111,7 @@
"weaknesses": [ "weaknesses": [
{ {
"source": "cna@vuldb.com", "source": "cna@vuldb.com",
"type": "Primary", "type": "Secondary",
"description": [ "description": [
{ {
"lang": "en", "lang": "en",

View File

@ -2,13 +2,13 @@
"id": "CVE-2025-5321", "id": "CVE-2025-5321",
"sourceIdentifier": "cna@vuldb.com", "sourceIdentifier": "cna@vuldb.com",
"published": "2025-05-29T15:15:34.417", "published": "2025-05-29T15:15:34.417",
"lastModified": "2025-05-30T16:31:03.107", "lastModified": "2025-06-01T05:15:20.947",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
"value": "A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Query leads to sandbox issue. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." "value": "A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}, },
{ {
"lang": "es", "lang": "es",
@ -63,7 +63,7 @@
"cvssMetricV31": [ "cvssMetricV31": [
{ {
"source": "cna@vuldb.com", "source": "cna@vuldb.com",
"type": "Primary", "type": "Secondary",
"cvssData": { "cvssData": {
"version": "3.1", "version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@ -111,7 +111,7 @@
"weaknesses": [ "weaknesses": [
{ {
"source": "cna@vuldb.com", "source": "cna@vuldb.com",
"type": "Primary", "type": "Secondary",
"description": [ "description": [
{ {
"lang": "en", "lang": "en",

View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update ### Last Repository Update
```plain ```plain
2025-06-01T02:00:19.210930+00:00 2025-06-01T06:00:20.069198+00:00
``` ```
### Most recent CVE Modification Timestamp synchronized with NVD ### Most recent CVE Modification Timestamp synchronized with NVD
```plain ```plain
2025-05-31T23:15:20.553000+00:00 2025-06-01T05:15:20.947000+00:00
``` ```
### Last Data Feed Release ### Last Data Feed Release
@ -44,33 +44,10 @@ Recently added CVEs: `0`
### CVEs modified in the last Commit ### CVEs modified in the last Commit
Recently modified CVEs: `509` Recently modified CVEs: `2`
- [CVE-2025-5177](CVE-2025/CVE-2025-51xx/CVE-2025-5177.json) (`2025-05-28T15:01:30.720`) - [CVE-2025-5320](CVE-2025/CVE-2025-53xx/CVE-2025-5320.json) (`2025-06-01T05:15:19.883`)
- [CVE-2025-5178](CVE-2025/CVE-2025-51xx/CVE-2025-5178.json) (`2025-05-28T15:01:30.720`) - [CVE-2025-5321](CVE-2025/CVE-2025-53xx/CVE-2025-5321.json) (`2025-06-01T05:15:20.947`)
- [CVE-2025-5179](CVE-2025/CVE-2025-51xx/CVE-2025-5179.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5180](CVE-2025/CVE-2025-51xx/CVE-2025-5180.json) (`2025-05-28T18:15:33.063`)
- [CVE-2025-5181](CVE-2025/CVE-2025-51xx/CVE-2025-5181.json) (`2025-05-28T18:15:33.180`)
- [CVE-2025-5182](CVE-2025/CVE-2025-51xx/CVE-2025-5182.json) (`2025-05-28T18:15:33.307`)
- [CVE-2025-5183](CVE-2025/CVE-2025-51xx/CVE-2025-5183.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5184](CVE-2025/CVE-2025-51xx/CVE-2025-5184.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5200](CVE-2025/CVE-2025-52xx/CVE-2025-5200.json) (`2025-05-28T18:15:33.800`)
- [CVE-2025-5201](CVE-2025/CVE-2025-52xx/CVE-2025-5201.json) (`2025-05-28T18:15:33.927`)
- [CVE-2025-5202](CVE-2025/CVE-2025-52xx/CVE-2025-5202.json) (`2025-05-28T18:15:34.063`)
- [CVE-2025-5203](CVE-2025/CVE-2025-52xx/CVE-2025-5203.json) (`2025-05-28T18:15:34.180`)
- [CVE-2025-5204](CVE-2025/CVE-2025-52xx/CVE-2025-5204.json) (`2025-05-28T18:15:34.300`)
- [CVE-2025-5249](CVE-2025/CVE-2025-52xx/CVE-2025-5249.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5256](CVE-2025/CVE-2025-52xx/CVE-2025-5256.json) (`2025-05-29T14:29:50.247`)
- [CVE-2025-5257](CVE-2025/CVE-2025-52xx/CVE-2025-5257.json) (`2025-05-29T14:29:50.247`)
- [CVE-2025-5273](CVE-2025/CVE-2025-52xx/CVE-2025-5273.json) (`2025-05-29T14:29:50.247`)
- [CVE-2025-5276](CVE-2025/CVE-2025-52xx/CVE-2025-5276.json) (`2025-05-29T14:29:50.247`)
- [CVE-2025-5277](CVE-2025/CVE-2025-52xx/CVE-2025-5277.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5286](CVE-2025/CVE-2025-52xx/CVE-2025-5286.json) (`2025-05-29T14:29:50.247`)
- [CVE-2025-5295](CVE-2025/CVE-2025-52xx/CVE-2025-5295.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5297](CVE-2025/CVE-2025-52xx/CVE-2025-5297.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5298](CVE-2025/CVE-2025-52xx/CVE-2025-5298.json) (`2025-05-28T20:37:48.440`)
- [CVE-2025-5299](CVE-2025/CVE-2025-52xx/CVE-2025-5299.json) (`2025-05-28T15:01:30.720`)
- [CVE-2025-5320](CVE-2025/CVE-2025-53xx/CVE-2025-5320.json) (`2025-05-29T14:29:50.247`)
## Download and Usage ## Download and Usage

1020
_state.csv

File diff suppressed because it is too large Load Diff