diff --git a/CVE-2023/CVE-2023-287xx/CVE-2023-28760.json b/CVE-2023/CVE-2023-287xx/CVE-2023-28760.json new file mode 100644 index 00000000000..5dc3437a9fb --- /dev/null +++ b/CVE-2023/CVE-2023-287xx/CVE-2023-28760.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2023-28760", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T14:15:41.870", + "lastModified": "2025-10-02T14:15:41.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in minidlna-1.1.2/upnpsoap.c. Exploitation requires that a USB flash drive is connected to the router (customers often do this to make a \\\\192.168.0.1 share available on their local network)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/stevenseeley/0822b66e375cd44ecaee3f047962db62", + "source": "cve@mitre.org" + }, + { + "url": "https://www.tecsecurity.io/blog/tp-link_ax1800", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-109xx/CVE-2024-10934.json b/CVE-2024/CVE-2024-109xx/CVE-2024-10934.json index 5c2718da7dd..925a752d3dc 100644 --- a/CVE-2024/CVE-2024-109xx/CVE-2024-10934.json +++ b/CVE-2024/CVE-2024-109xx/CVE-2024-10934.json @@ -2,8 +2,8 @@ "id": "CVE-2024-10934", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2024-11-15T20:15:17.620", - "lastModified": "2025-09-04T23:49:11.707", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-02T15:15:51.540", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -91,6 +91,10 @@ { "lang": "en", "value": "CWE-415" + }, + { + "lang": "en", + "value": "CWE-457" } ] } diff --git a/CVE-2024/CVE-2024-125xx/CVE-2024-12556.json b/CVE-2024/CVE-2024-125xx/CVE-2024-12556.json index 8293843808c..1bc9d51b7fb 100644 --- a/CVE-2024/CVE-2024-125xx/CVE-2024-12556.json +++ b/CVE-2024/CVE-2024-125xx/CVE-2024-12556.json @@ -2,8 +2,8 @@ "id": "CVE-2024-12556", "sourceIdentifier": "bressers@elastic.co", "published": "2025-04-08T20:15:19.420", - "lastModified": "2025-04-09T20:02:41.860", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:27:30.197", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -51,10 +71,40 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.16.1", + "versionEndExcluding": "8.16.4", + "matchCriteriaId": "0305A977-C151-4AF9-AEDB-26E056F60C49" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.17.0", + "versionEndExcluding": "8.17.2", + "matchCriteriaId": "1DCC576D-13B7-4128-86EB-D216C485BAE7" + } + ] + } + ] + } + ], "references": [ { "url": "https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918", - "source": "bressers@elastic.co" + "source": "bressers@elastic.co", + "tags": [ + "Patch", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2315.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2315.json index 2f73bef6ca8..382de192ad2 100644 --- a/CVE-2024/CVE-2024-23xx/CVE-2024-2315.json +++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2315.json @@ -2,8 +2,8 @@ "id": "CVE-2024-2315", "sourceIdentifier": "biossecurity@ami.com", "published": "2024-11-12T15:15:07.737", - "lastModified": "2024-11-21T17:15:12.817", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:28:05.957", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -73,10 +95,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.037", + "matchCriteriaId": "1AAA3A14-0934-4506-A200-E9B1844C83D6" + } + ] + } + ] + } + ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-290xx/CVE-2024-29039.json b/CVE-2024/CVE-2024-290xx/CVE-2024-29039.json index e7080b0b159..30e30dcca6a 100644 --- a/CVE-2024/CVE-2024-290xx/CVE-2024-29039.json +++ b/CVE-2024/CVE-2024-290xx/CVE-2024-29039.json @@ -2,8 +2,8 @@ "id": "CVE-2024-29039", "sourceIdentifier": "security-advisories@github.com", "published": "2024-06-28T16:15:03.777", - "lastModified": "2024-11-21T09:07:25.760", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:15:24.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 } ] }, @@ -51,22 +71,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tpm2-tools_project:tpm2-tools:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.7", + "matchCriteriaId": "1BA2B36F-A8BF-4645-93D1-8BE6152FC6CE" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-8rjm-5f5f-h4q6", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Mitigation", + "Vendor Advisory" + ] }, { "url": "https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-8rjm-5f5f-h4q6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Mitigation", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-30xx/CVE-2024-3049.json b/CVE-2024/CVE-2024-30xx/CVE-2024-3049.json index 5c5cde10208..d994f6aa7f8 100644 --- a/CVE-2024/CVE-2024-30xx/CVE-2024-3049.json +++ b/CVE-2024/CVE-2024-30xx/CVE-2024-3049.json @@ -2,7 +2,7 @@ "id": "CVE-2024-3049", "sourceIdentifier": "secalert@redhat.com", "published": "2024-06-06T06:15:09.550", - "lastModified": "2024-11-21T09:28:45.870", + "lastModified": "2025-10-02T14:15:42.810", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -257,6 +257,10 @@ "Issue Tracking" ] }, + { + "url": "https://github.com/ClusterLabs/booth/pull/142", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2024:3657", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2024/CVE-2024-336xx/CVE-2024-33658.json b/CVE-2024/CVE-2024-336xx/CVE-2024-33658.json index bcf690f7d42..d05f67859ae 100644 --- a/CVE-2024/CVE-2024-336xx/CVE-2024-33658.json +++ b/CVE-2024/CVE-2024-336xx/CVE-2024-33658.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33658", "sourceIdentifier": "biossecurity@ami.com", "published": "2024-11-12T15:15:08.610", - "lastModified": "2024-11-21T17:15:13.010", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:28:53.380", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,10 +95,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.037", + "matchCriteriaId": "1AAA3A14-0934-4506-A200-E9B1844C83D6" + } + ] + } + ] + } + ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-336xx/CVE-2024-33659.json b/CVE-2024/CVE-2024-336xx/CVE-2024-33659.json index de092f197f7..64665f01dec 100644 --- a/CVE-2024/CVE-2024-336xx/CVE-2024-33659.json +++ b/CVE-2024/CVE-2024-336xx/CVE-2024-33659.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33659", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-02-11T15:15:17.200", - "lastModified": "2025-02-11T15:15:17.200", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:35:03.623", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 6.0 + } ] }, "weaknesses": [ @@ -73,10 +95,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.038", + "matchCriteriaId": "66B5321D-288B-4FB3-95CD-F185660D96CF" + } + ] + } + ] + } + ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2025/AMI-SA-2025002.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-336xx/CVE-2024-33660.json b/CVE-2024/CVE-2024-336xx/CVE-2024-33660.json index fd10be0b5af..e33913b6a07 100644 --- a/CVE-2024/CVE-2024-336xx/CVE-2024-33660.json +++ b/CVE-2024/CVE-2024-336xx/CVE-2024-33660.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33660", "sourceIdentifier": "biossecurity@ami.com", "published": "2024-11-12T15:15:08.727", - "lastModified": "2024-11-12T16:35:09.330", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:32:14.733", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -95,10 +95,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.037", + "matchCriteriaId": "1AAA3A14-0934-4506-A200-E9B1844C83D6" + } + ] + } + ] + } + ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-424xx/CVE-2024-42442.json b/CVE-2024/CVE-2024-424xx/CVE-2024-42442.json index 8328e5c4f2f..5a82d4af9eb 100644 --- a/CVE-2024/CVE-2024-424xx/CVE-2024-42442.json +++ b/CVE-2024/CVE-2024-424xx/CVE-2024-42442.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42442", "sourceIdentifier": "biossecurity@ami.com", "published": "2024-11-12T15:15:09.780", - "lastModified": "2024-11-12T15:48:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:29:40.480", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.037", + "matchCriteriaId": "1AAA3A14-0934-4506-A200-E9B1844C83D6" + } + ] + } + ] + } + ], "references": [ { "url": "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-424xx/CVE-2024-42444.json b/CVE-2024/CVE-2024-424xx/CVE-2024-42444.json index b943f174d8a..875e8216057 100644 --- a/CVE-2024/CVE-2024-424xx/CVE-2024-42444.json +++ b/CVE-2024/CVE-2024-424xx/CVE-2024-42444.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42444", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-01-14T15:15:25.997", - "lastModified": "2025-01-14T15:15:25.997", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:33:37.707", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.038", + "matchCriteriaId": "66B5321D-288B-4FB3-95CD-F185660D96CF" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025001.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-424xx/CVE-2024-42446.json b/CVE-2024/CVE-2024-424xx/CVE-2024-42446.json index 975dfc8bdc4..3e6e77a94c1 100644 --- a/CVE-2024/CVE-2024-424xx/CVE-2024-42446.json +++ b/CVE-2024/CVE-2024-424xx/CVE-2024-42446.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42446", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-05-13T14:15:19.497", - "lastModified": "2025-05-13T19:35:18.080", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:22:05.427", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.039", + "matchCriteriaId": "9CB579F1-9C18-4F1A-8C70-0E4584190527" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025004.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-457xx/CVE-2024-45744.json b/CVE-2024/CVE-2024-457xx/CVE-2024-45744.json index 1f61efb3563..ea53d5ee384 100644 --- a/CVE-2024/CVE-2024-457xx/CVE-2024-45744.json +++ b/CVE-2024/CVE-2024-457xx/CVE-2024-45744.json @@ -2,8 +2,8 @@ "id": "CVE-2024-45744", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2024-09-27T16:15:04.940", - "lastModified": "2025-09-22T17:23:02.757", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-02T15:15:52.620", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -67,6 +67,10 @@ { "lang": "en", "value": "CWE-257" + }, + { + "lang": "en", + "value": "CWE-312" } ] }, diff --git a/CVE-2024/CVE-2024-523xx/CVE-2024-52331.json b/CVE-2024/CVE-2024-523xx/CVE-2024-52331.json index 579d1989c05..e12773240f3 100644 --- a/CVE-2024/CVE-2024-523xx/CVE-2024-52331.json +++ b/CVE-2024/CVE-2024-523xx/CVE-2024-52331.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52331", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-01-23T17:15:14.563", - "lastModified": "2025-09-23T17:46:12.860", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-02T15:15:52.810", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -88,6 +88,10 @@ "source": "9119a7d8-5eab-497f-8521-727c672e3725", "type": "Secondary", "description": [ + { + "lang": "en", + "value": "CWE-327" + }, { "lang": "en", "value": "CWE-494" diff --git a/CVE-2024/CVE-2024-529xx/CVE-2024-52981.json b/CVE-2024/CVE-2024-529xx/CVE-2024-52981.json index 8085b995e0c..039aa5600bd 100644 --- a/CVE-2024/CVE-2024-529xx/CVE-2024-52981.json +++ b/CVE-2024/CVE-2024-529xx/CVE-2024-52981.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52981", "sourceIdentifier": "bressers@elastic.co", "published": "2025-04-08T17:15:35.187", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:33:30.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,10 +71,40 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.17.0", + "versionEndExcluding": "7.17.24", + "matchCriteriaId": "66265248-C607-4AB4-8F31-5B01809D646F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.15.1", + "matchCriteriaId": "6B5B98CC-86D9-4ABF-9B2E-04753693F127" + } + ] + } + ] + } + ], "references": [ { "url": "https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924", - "source": "bressers@elastic.co" + "source": "bressers@elastic.co", + "tags": [ + "Patch", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-540xx/CVE-2024-54084.json b/CVE-2024/CVE-2024-540xx/CVE-2024-54084.json index b6dd1e1cf6d..25596a5b826 100644 --- a/CVE-2024/CVE-2024-540xx/CVE-2024-54084.json +++ b/CVE-2024/CVE-2024-540xx/CVE-2024-54084.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54084", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-03-11T14:15:22.730", - "lastModified": "2025-03-11T14:15:22.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:21:08.137", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.038", + "matchCriteriaId": "66B5321D-288B-4FB3-95CD-F185660D96CF" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-01xx/CVE-2025-0124.json b/CVE-2025/CVE-2025-01xx/CVE-2025-0124.json index d286e06385a..1a926b2b43d 100644 --- a/CVE-2025/CVE-2025-01xx/CVE-2025-0124.json +++ b/CVE-2025/CVE-2025-01xx/CVE-2025-0124.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0124", "sourceIdentifier": "psirt@paloaltonetworks.com", "published": "2025-04-11T02:15:18.663", - "lastModified": "2025-04-11T15:39:52.920", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:16:35.017", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "AMBER" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 3.8, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 2.5 + } ] }, "weaknesses": [ @@ -73,10 +95,115 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.1.0", + "versionEndExcluding": "10.1.14", + "matchCriteriaId": "19D52DC1-4441-4C88-B209-9B86FCC2162F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.2.0", + "versionEndExcluding": "10.2.10", + "matchCriteriaId": "ECC53672-829D-4995-A75A-CE8D3C38A3A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0", + "versionEndExcluding": "11.0.6", + "matchCriteriaId": "47CBEECE-EA41-4A58-8AE9-D695C76D4019" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.1.0", + "versionEndExcluding": "11.1.5", + "matchCriteriaId": "413284AC-F55E-4037-90D4-D63A5FFC20C3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.2.0", + "versionEndExcluding": "11.2.1", + "matchCriteriaId": "68053EEE-7CCC-4345-9700-F5FA6F606EDB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*", + "matchCriteriaId": "B41A7115-A370-49E1-B162-24803E6DD2CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h1:*:*:*:*:*:*", + "matchCriteriaId": "28432442-DBAD-41CF-BAA8-DF025CBCB583" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h10:*:*:*:*:*:*", + "matchCriteriaId": "9081546E-2621-4425-8DC0-78AE5B8EF482" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*", + "matchCriteriaId": "65949A49-03A7-491C-B327-127F050AC4F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h3:*:*:*:*:*:*", + "matchCriteriaId": "A4181D7C-31D7-4DDF-A93C-88A71F6C16C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*", + "matchCriteriaId": "E8ACB147-B4C1-4964-B538-EAA117CC6DC1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h5:*:*:*:*:*:*", + "matchCriteriaId": "1721CDD4-C30A-4359-BF78-6702FC9DAFFB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*", + "matchCriteriaId": "6643574D-C024-440C-9392-004B7FA4498F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h7:*:*:*:*:*:*", + "matchCriteriaId": "BF0657E0-E0D7-4F7C-AF4B-88530716E290" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h8:*:*:*:*:*:*", + "matchCriteriaId": "7422F37D-7ABA-4BEC-8448-45A8F585D6F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h9:*:*:*:*:*:*", + "matchCriteriaId": "9C855FDB-6224-4CE3-A76F-110D9E537BF4" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.paloaltonetworks.com/CVE-2025-0124", - "source": "psirt@paloaltonetworks.com" + "source": "psirt@paloaltonetworks.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10725.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10725.json index 5d538c47daf..7d41e054be4 100644 --- a/CVE-2025/CVE-2025-107xx/CVE-2025-10725.json +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10725.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10725", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-30T18:15:47.900", - "lastModified": "2025-10-01T09:15:36.517", + "lastModified": "2025-10-02T15:15:53.017", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -56,6 +56,18 @@ "url": "https://access.redhat.com/errata/RHBA-2025:16984", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16981", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16982", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16984", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-10725", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-218xx/CVE-2025-21861.json b/CVE-2025/CVE-2025-218xx/CVE-2025-21861.json index 20d22ff1fe9..cf076898021 100644 --- a/CVE-2025/CVE-2025-218xx/CVE-2025-21861.json +++ b/CVE-2025/CVE-2025-218xx/CVE-2025-21861.json @@ -2,7 +2,7 @@ "id": "CVE-2025-21861", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-12T10:15:19.117", - "lastModified": "2025-10-01T20:18:30.360", + "lastModified": "2025-10-02T14:15:43.133", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -130,6 +130,10 @@ "Patch" ] }, + { + "url": "https://git.kernel.org/stable/c/20fb6fc51863fbff7868de8b5f6d249d2094df1f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/3f9240d59e9a95d19f06120bfd1d0e681c6c0ac7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", @@ -143,6 +147,22 @@ "tags": [ "Patch" ] + }, + { + "url": "https://git.kernel.org/stable/c/4f52f7c50f5b6f5eeb06823e21fe546d90f9c595", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/61fa824e304ed162fe965f64999068e6fcff2059", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/64397b0cb7c09e3ef3f9f5c7c17299c4eebd3875", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/78f579cb7d825134e071a1714d8d0c4fd0ffe459", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-228xx/CVE-2025-22830.json b/CVE-2025/CVE-2025-228xx/CVE-2025-22830.json index 73d9b5fdf20..6aed25902b0 100644 --- a/CVE-2025/CVE-2025-228xx/CVE-2025-22830.json +++ b/CVE-2025/CVE-2025-228xx/CVE-2025-22830.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22830", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-08-12T14:15:27.907", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:11:07.867", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,10 +95,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.040", + "matchCriteriaId": "1FEEBEA0-360B-443E-9F66-9E0DB4B3360B" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025006.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-228xx/CVE-2025-22834.json b/CVE-2025/CVE-2025-228xx/CVE-2025-22834.json index 56d78f2cc14..f2b6259e253 100644 --- a/CVE-2025/CVE-2025-228xx/CVE-2025-22834.json +++ b/CVE-2025/CVE-2025-228xx/CVE-2025-22834.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22834", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-08-12T14:15:28.063", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:13:43.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.4 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.040", + "matchCriteriaId": "A3906693-E026-4920-B9B5-4B6CB22DFC51" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025006.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-231xx/CVE-2025-23143.json b/CVE-2025/CVE-2025-231xx/CVE-2025-23143.json index 4d017a60761..4eed2526cd3 100644 --- a/CVE-2025/CVE-2025-231xx/CVE-2025-23143.json +++ b/CVE-2025/CVE-2025-231xx/CVE-2025-23143.json @@ -2,7 +2,7 @@ "id": "CVE-2025-23143", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T13:15:50.127", - "lastModified": "2025-09-19T15:15:48.583", + "lastModified": "2025-10-02T14:15:43.407", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -29,14 +29,26 @@ "url": "https://git.kernel.org/stable/c/5f7f6abd92b6c8dc8f19625ef93c3a18549ede04", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/83083c5fc7cf9b0f136a42f26aba60da380f3601", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/905d43b8ad2436c240f844acb3ebcc7a99b8ebf1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/b7489b753667bc9245958a4896c9419743083c27", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/c11247a21aab4b50a23c8b696727d7483de2f1e1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/d51e47e2ab6ef10a317d576075cf625cdbf96426", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/feda73ad44a5cc80f6bf796bb1099a3fe71576d4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24839.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24839.json index b2e5b5b5684..5cbd3cd36e7 100644 --- a/CVE-2025/CVE-2025-248xx/CVE-2025-24839.json +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24839.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24839", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-04-16T08:15:13.987", - "lastModified": "2025-04-16T13:25:37.340", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:50:00.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -51,10 +71,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.11.0", + "versionEndExcluding": "9.11.10", + "matchCriteriaId": "73837B0A-0874-4B7D-8B09-D3CB7E249EA0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.4.0", + "versionEndExcluding": "10.4.4", + "matchCriteriaId": "192A27FF-9A0C-4123-BCC2-CB0EB2754986" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.5.0", + "versionEndExcluding": "10.5.2", + "matchCriteriaId": "681C7A3F-D251-499D-80D4-0D971FA79B2D" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-24xx/CVE-2025-2475.json b/CVE-2025/CVE-2025-24xx/CVE-2025-2475.json index af3e1588ec7..91b87d05353 100644 --- a/CVE-2025/CVE-2025-24xx/CVE-2025-2475.json +++ b/CVE-2025/CVE-2025-24xx/CVE-2025-2475.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2475", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-04-14T15:15:24.777", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:53:10.797", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.11.0", + "versionEndExcluding": "9.11.10", + "matchCriteriaId": "73837B0A-0874-4B7D-8B09-D3CB7E249EA0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.4.0", + "versionEndExcluding": "10.4.4", + "matchCriteriaId": "192A27FF-9A0C-4123-BCC2-CB0EB2754986" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.5.0", + "versionEndExcluding": "10.5.2", + "matchCriteriaId": "681C7A3F-D251-499D-80D4-0D971FA79B2D" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-262xx/CVE-2025-26260.json b/CVE-2025/CVE-2025-262xx/CVE-2025-26260.json index 09900c9ac90..2cac16cbc93 100644 --- a/CVE-2025/CVE-2025-262xx/CVE-2025-26260.json +++ b/CVE-2025/CVE-2025-262xx/CVE-2025-26260.json @@ -2,8 +2,8 @@ "id": "CVE-2025-26260", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-12T16:15:23.907", - "lastModified": "2025-03-19T19:15:46.987", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:55:48.873", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,26 +51,63 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:plenti:plenti:*:*:*:*:*:*:*:*", + "versionEndExcluding": "0.7.17", + "matchCriteriaId": "63AD5CB8-1A96-4ED3-B82A-D5E0347556C9" + } + ] + } + ] + } + ], "references": [ { "url": "https://ahmetakan.com/2025/02/14/cve-2025-26260/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/ahmetak4n/vulnerability-playground/tree/main/vulnerability-research/CVE-2025-26260", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/plentico/plenti/releases/tag/v0.7.17", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/plentico/plenti/security/advisories/GHSA-mj4v-hp69-27x5", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/plentico/plenti/security/advisories/GHSA-mj4v-hp69-27x5", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-299xx/CVE-2025-29904.json b/CVE-2025/CVE-2025-299xx/CVE-2025-29904.json index 2392a784a06..7c5c22470b1 100644 --- a/CVE-2025/CVE-2025-299xx/CVE-2025-29904.json +++ b/CVE-2025/CVE-2025-299xx/CVE-2025-29904.json @@ -2,8 +2,8 @@ "id": "CVE-2025-29904", "sourceIdentifier": "cve@jetbrains.com", "published": "2025-03-12T13:15:38.050", - "lastModified": "2025-03-12T13:15:38.050", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T15:49:13.827", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.1.1", + "matchCriteriaId": "C72AF4A6-6658-41EC-AB5E-F33D6D950F27" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", - "source": "cve@jetbrains.com" + "source": "cve@jetbrains.com", + "tags": [ + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-29xx/CVE-2025-2974.json b/CVE-2025/CVE-2025-29xx/CVE-2025-2974.json index 1cb52e3eb79..f7fdc31c321 100644 --- a/CVE-2025/CVE-2025-29xx/CVE-2025-2974.json +++ b/CVE-2025/CVE-2025-29xx/CVE-2025-2974.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2974", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-31T04:15:17.633", - "lastModified": "2025-04-01T20:26:30.593", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T15:36:16.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,24 +142,69 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:perfexcrm:perfex_crm:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.2.1", + "matchCriteriaId": "75E9D6C5-A921-4BA7-8B20-541ED9E9005D" + } + ] + } + ] } ], "references": [ { "url": "https://bytium.com/stored-xss-in-perfex-crm-3-2-1-contracts-module/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.302026", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.302026", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.522737", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry", + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32093.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32093.json index 6be82098c39..72c002a2932 100644 --- a/CVE-2025/CVE-2025-320xx/CVE-2025-32093.json +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32093.json @@ -2,8 +2,8 @@ "id": "CVE-2025-32093", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-04-14T07:15:14.700", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T15:02:34.290", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 } ] }, @@ -51,10 +71,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.11.0", + "versionEndExcluding": "9.11.10", + "matchCriteriaId": "73837B0A-0874-4B7D-8B09-D3CB7E249EA0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.4.0", + "versionEndExcluding": "10.4.4", + "matchCriteriaId": "192A27FF-9A0C-4123-BCC2-CB0EB2754986" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.5.0", + "versionEndExcluding": "10.5.2", + "matchCriteriaId": "681C7A3F-D251-499D-80D4-0D971FA79B2D" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-32xx/CVE-2025-3219.json b/CVE-2025/CVE-2025-32xx/CVE-2025-3219.json index 868cadb8252..669fc0a10d4 100644 --- a/CVE-2025/CVE-2025-32xx/CVE-2025-3219.json +++ b/CVE-2025/CVE-2025-32xx/CVE-2025-3219.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3219", "sourceIdentifier": "cna@vuldb.com", "published": "2025-04-04T08:15:14.543", - "lastModified": "2025-04-07T14:18:15.560", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T15:35:11.303", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:perfexcrm:perfex_crm:3.2.1:*:*:*:*:*:*:*", + "matchCriteriaId": "CEFC3091-97BF-4A0D-8771-0AF1D6372536" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/bytium/vulnerability-research/blob/main/stored-xss-perfex-crm-3.2.1.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.303180", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.303180", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.546171", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry", + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33043.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33043.json index 5d6d034afb0..b7cafb8d847 100644 --- a/CVE-2025/CVE-2025-330xx/CVE-2025-33043.json +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33043.json @@ -2,8 +2,8 @@ "id": "CVE-2025-33043", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-05-29T14:15:35.523", - "lastModified": "2025-05-29T14:29:50.247", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:23:44.580", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.6, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 4.2 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.011", + "matchCriteriaId": "30B9E9EB-45FB-47C9-955C-5BA910044A30" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025005.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33045.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33045.json index 7b1ba3e3bd0..fe6530ea22f 100644 --- a/CVE-2025/CVE-2025-330xx/CVE-2025-33045.json +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33045.json @@ -2,8 +2,8 @@ "id": "CVE-2025-33045", "sourceIdentifier": "biossecurity@ami.com", "published": "2025-09-09T14:15:44.270", - "lastModified": "2025-09-09T16:28:43.660", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:12:42.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.5, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 } ] }, @@ -51,10 +71,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.040", + "matchCriteriaId": "A3906693-E026-4920-B9B5-4B6CB22DFC51" + } + ] + } + ] + } + ], "references": [ { "url": "https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025007.pdf", - "source": "biossecurity@ami.com" + "source": "biossecurity@ami.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38236.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38236.json index a38ce65baaf..2c799bced6f 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38236.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38236.json @@ -2,7 +2,7 @@ "id": "CVE-2025-38236", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-08T08:15:20.960", - "lastModified": "2025-08-09T15:15:28.627", + "lastModified": "2025-10-02T14:15:43.583", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -21,6 +21,10 @@ "url": "https://git.kernel.org/stable/c/32ca245464e1479bfea8592b9db227fdc1641705", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/523edfed4f68b7794d85b9ac828c5f8f4442e4c5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/61a9ad7b69ce688697e5f63332f03e17725353bc", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json b/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json index 0bffbd8308c..ffc8e7bd388 100644 --- a/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json +++ b/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json @@ -2,7 +2,7 @@ "id": "CVE-2025-38709", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-04T16:15:39.997", - "lastModified": "2025-09-25T10:15:31.403", + "lastModified": "2025-10-02T14:15:43.713", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -17,6 +17,10 @@ "url": "https://git.kernel.org/stable/c/139a000d20f2f38ce34296feddd641d730fe1c08", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/457d2c5e112fd08dc1039b1ae39a83ec1782360d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/5d67b30aefeb7a949040bbb1b4e3b84c5d29a624", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39869.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39869.json index be59351b82e..bdb8639d767 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39869.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39869.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39869", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:46.097", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:43.823", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -21,14 +21,26 @@ "url": "https://git.kernel.org/stable/c/1baed10553fc8b388351d8fc803e3ae6f1a863bc", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/301a96cc4dc006c9a285913d301e681cfbf7edb6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/5e462fa0dfdb52b3983cf41532d3d4c7d63e2f93", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/7d4de60d6db02d9b01d5890d5156b04fad65d07a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/d5e82f3f2c918d446df46e8d65f8083fd97cdec5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/d722de80ce037dccf6931e778f4a46499d51bdf9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/e63419dbf2ceb083c1651852209c7f048089ac0f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39873.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39873.json index c6409785654..040105f6ad4 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39873.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39873.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39873", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:46.670", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:43.937", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -29,6 +29,10 @@ "url": "https://git.kernel.org/stable/c/94b050726288a56a6b8ff55aa641f2fedbd3b44c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/e202ffd9e54538ef67ec301ebd6d9da4823466c9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/ef79f00be72bd81d2e1e6f060d83cf7e425deee4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39876.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39876.json index e7696bb76d4..0d04536147c 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39876.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39876.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39876", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:47.087", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:44.043", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -17,6 +17,10 @@ "url": "https://git.kernel.org/stable/c/03e79de4608bdd48ad6eec272e196124cefaf798", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/20a3433d31c2d2bf70ab0abec75f3136b42ae66c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -25,6 +29,14 @@ "url": "https://git.kernel.org/stable/c/5f1bb554a131e59b28482abad21f691390651752", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/8c60d12bba14dc655d2d948b1dbf390b3ae39cb8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/eb148d85e126c47d65be34f2a465d69432ca5541", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39880.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39880.json index 5942bffe405..e6cfa6ca5fe 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39880.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39880.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39880", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:47.663", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:44.153", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -32,6 +32,10 @@ { "url": "https://git.kernel.org/stable/c/cdbc9836c7afadad68f374791738f118263c5371", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ea12ab684f8ae8a6da11a22c78d94a79e2163096", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39883.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39883.json index a54f43e6b7e..436ddbd6e30 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39883.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39883.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39883", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:48.087", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:44.260", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -25,6 +25,14 @@ "url": "https://git.kernel.org/stable/c/7618fd443aa4cfa553a64cacf5721581653ee7b0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/8e01ea186a52c90694c08a9ff57bea1b0e78256a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/99f7048957f5ae3cee1c01189147e73a9a96de02", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/d613f53c83ec47089c4e25859d5e8e0359f6f8da", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -32,6 +40,10 @@ { "url": "https://git.kernel.org/stable/c/e4ec6def5643a1c9511115b3884eb879572294c6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fb65803ccff37cf9123c50c1c02efd1ed73c4ed5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39885.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39885.json index e6147684f5e..fed054a7996 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39885.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39885.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39885", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-23T06:15:48.370", - "lastModified": "2025-09-24T18:11:24.520", + "lastModified": "2025-10-02T14:15:44.377", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -21,6 +21,10 @@ "url": "https://git.kernel.org/stable/c/0709bc11b942870fc0a7be150e42aea42321093a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/16e518ca84dfe860c20a62f3615e14e8af0ace57", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/1d3c96547ee2ddeaddf8f19a3ef99ea06cc8115e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -29,9 +33,17 @@ "url": "https://git.kernel.org/stable/c/36054554772f95d090eb45793faf6aa3c0254b02", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/7e1514bd44ef68007703c752c99ff7319f35bce6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/9efcb7a8b97310efed995397941a292cf89fa94f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ef30404980e4c832ef9bba1b10c08f67fa77a9ec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-399xx/CVE-2025-39907.json b/CVE-2025/CVE-2025-399xx/CVE-2025-39907.json index ef98325f62d..dbee900febd 100644 --- a/CVE-2025/CVE-2025-399xx/CVE-2025-39907.json +++ b/CVE-2025/CVE-2025-399xx/CVE-2025-39907.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39907", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-10-01T08:15:33.603", - "lastModified": "2025-10-01T08:15:33.603", + "lastModified": "2025-10-02T14:15:44.490", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -29,6 +29,18 @@ "url": "https://git.kernel.org/stable/c/75686c49574dd5f171ca682c18717787f1d8d55e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/dc1c6e60993b93b87604eb11266ac72e1a3be9e0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dfe2ac47a6ee0ab50393694517c54ef1e276dda3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e32a2ea52b51368774d014e5bcd9b86110a2b727", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/f6fd98d961fa6f97347cead4f08ed862cbbb91ff", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-399xx/CVE-2025-39911.json b/CVE-2025/CVE-2025-399xx/CVE-2025-39911.json index 293912f8dbb..4dd980cfdbb 100644 --- a/CVE-2025/CVE-2025-399xx/CVE-2025-39911.json +++ b/CVE-2025/CVE-2025-399xx/CVE-2025-39911.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39911", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-10-01T08:15:34.140", - "lastModified": "2025-10-01T08:15:34.140", + "lastModified": "2025-10-02T14:15:44.607", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -13,10 +13,18 @@ ], "metrics": {}, "references": [ + { + "url": "https://git.kernel.org/stable/c/13ab9adef3cd386511c930a9660ae06595007f89", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/23431998a37764c464737b855c71a81d50992e98", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/6e4016c0dca53afc71e3b99e24252b63417395df", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/915470e1b44e71d1dd07ee067276f003c3521ee3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -29,6 +37,10 @@ "url": "https://git.kernel.org/stable/c/b905b2acb3a0bbb08ad9be9984d8cdabdf827315", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/b9721a023df38cf44a88f2739b4cf51efd051f85", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/c62580674ce5feb1be4f90b5873ff3ce50e0a1db", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-399xx/CVE-2025-39913.json b/CVE-2025/CVE-2025-399xx/CVE-2025-39913.json index ed0c6610ef5..97e938c08f9 100644 --- a/CVE-2025/CVE-2025-399xx/CVE-2025-39913.json +++ b/CVE-2025/CVE-2025-399xx/CVE-2025-39913.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39913", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-10-01T08:15:34.390", - "lastModified": "2025-10-01T08:15:34.390", + "lastModified": "2025-10-02T14:15:44.723", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -13,6 +13,14 @@ ], "metrics": {}, "references": [ + { + "url": "https://git.kernel.org/stable/c/05366527f44cf4b884f3d9462ae8009be9665856", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/08f58d10f5abf11d297cc910754922498c921f91", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/539920180c55f5e13a2488a2339f94e6b8cb69e0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -21,6 +29,10 @@ "url": "https://git.kernel.org/stable/c/66bcb04a441fbf15d66834b7e3eefb313dd750c8", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/7429b8b9bfbc276fd304fbaebc405f46b421fedf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/9c2a6456bdf9794474460d885c359b6c4522d6e3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-399xx/CVE-2025-39923.json b/CVE-2025/CVE-2025-399xx/CVE-2025-39923.json index a137b91a872..9fbdc3f9d74 100644 --- a/CVE-2025/CVE-2025-399xx/CVE-2025-39923.json +++ b/CVE-2025/CVE-2025-399xx/CVE-2025-39923.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39923", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-10-01T08:15:35.610", - "lastModified": "2025-10-01T08:15:35.610", + "lastModified": "2025-10-02T14:15:44.837", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -17,10 +17,18 @@ "url": "https://git.kernel.org/stable/c/0ff9df758af7022d749718fb6b8385cc5693acf3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/1d98ba204d8a6db0d986c7f1aefaa0dcd1c007a2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/1fc14731f0be4885e60702b9596d14d9a79cf053", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/2e257a6125c63350f00dc42b9674f20fd3cf4a9f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/5068b5254812433e841a40886e695633148d362d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" @@ -29,6 +37,10 @@ "url": "https://git.kernel.org/stable/c/555bd16351a35c79efb029a196975a5a27f7fbc4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/6ac1599d0e78036d9d08efc2f58c2d91f0a3ee4c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/ebf6c7c908e5999531c3517289598f187776124f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46565.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46565.json index dd9bc0a3447..4575363dd5a 100644 --- a/CVE-2025/CVE-2025-465xx/CVE-2025-46565.json +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46565.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46565", "sourceIdentifier": "security-advisories@github.com", "published": "2025-05-01T18:15:57.797", - "lastModified": "2025-05-02T18:15:27.060", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:40:34.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -73,18 +95,75 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vitejs:vite:*:*:*:*:*:node.js:*:*", + "versionEndExcluding": "4.5.14", + "matchCriteriaId": "77FC6257-88E2-4A6C-BDD4-7698ACAF2D30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vitejs:vite:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "5.0.0", + "versionEndExcluding": "5.4.19", + "matchCriteriaId": "CC4A2476-6C4D-4C09-A509-C870545D7C23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vitejs:vite:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "6.0.0", + "versionEndExcluding": "6.1.6", + "matchCriteriaId": "A46F68BA-EEBF-4644-8751-078708C50B22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vitejs:vite:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "6.2.0", + "versionEndExcluding": "6.2.7", + "matchCriteriaId": "662C2DA3-F405-4D04-B78E-C710BFD7016D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vitejs:vite:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "6.3.0", + "versionEndExcluding": "6.3.4", + "matchCriteriaId": "AE06E232-1DBC-4900-9D3A-46EAB1FB7190" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json b/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json index 3a98368ce3c..2d7c4cec505 100644 --- a/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json +++ b/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json @@ -2,8 +2,8 @@ "id": "CVE-2025-49557", "sourceIdentifier": "psirt@adobe.com", "published": "2025-08-12T18:15:29.300", - "lastModified": "2025-08-22T17:15:32.147", - "vulnStatus": "Modified", + "lastModified": "2025-10-02T14:43:02.840", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -42,20 +42,20 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", - "baseScore": 5.4, - "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", + "baseScore": 8.7, + "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", - "confidentialityImpact": "LOW", - "integrityImpact": "LOW", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", "availabilityImpact": "NONE" }, "exploitabilityScore": 2.3, - "impactScore": 2.7 + "impactScore": 5.8 } ] }, diff --git a/CVE-2025/CVE-2025-538xx/CVE-2025-53881.json b/CVE-2025/CVE-2025-538xx/CVE-2025-53881.json new file mode 100644 index 00000000000..446da90d309 --- /dev/null +++ b/CVE-2025/CVE-2025-538xx/CVE-2025-53881.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53881", + "sourceIdentifier": "meissner@suse.de", + "published": "2025-10-02T14:15:45.010", + "lastModified": "2025-10-02T14:15:45.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "meissner@suse.de", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "meissner@suse.de", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-61" + } + ] + } + ], + "references": [ + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53881", + "source": "meissner@suse.de" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54102.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54102.json index 373758b1758..609a8354da0 100644 --- a/CVE-2025/CVE-2025-541xx/CVE-2025-54102.json +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54102.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54102", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:15:54.857", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T15:01:04.387", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,109 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54102", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54108.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54108.json index 30122f5eb67..ca440739a5d 100644 --- a/CVE-2025/CVE-2025-541xx/CVE-2025-54108.json +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54108.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54108", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:15:56.113", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:36:24.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54108", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54109.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54109.json index 4f2a062cdff..fa0cbda2ce4 100644 --- a/CVE-2025/CVE-2025-541xx/CVE-2025-54109.json +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54109.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54109", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:15:56.307", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:36:32.837", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,146 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54109", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54251.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54251.json index 9a7cb62117d..c4fecc2e77d 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54251.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54251.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54251", "sourceIdentifier": "psirt@adobe.com", "published": "2025-09-09T17:15:59.070", - "lastModified": "2025-09-30T23:15:29.333", - "vulnStatus": "Modified", + "lastModified": "2025-10-02T14:43:16.193", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54255.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54255.json index 7f7974437a1..2bcaa4d55a8 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54255.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54255.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54255", "sourceIdentifier": "psirt@adobe.com", "published": "2025-09-09T20:15:44.357", - "lastModified": "2025-10-01T22:15:31.193", - "vulnStatus": "Modified", + "lastModified": "2025-10-02T14:43:43.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -38,20 +38,20 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", - "baseScore": 4.4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.0, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", - "privilegesRequired": "LOW", + "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "LOW", + "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" }, - "exploitabilityScore": 1.8, - "impactScore": 2.5 + "exploitabilityScore": 2.5, + "impactScore": 1.4 } ] }, diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json index c958369339c..15c3fe56424 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json @@ -2,7 +2,7 @@ "id": "CVE-2025-54286", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:38.427", - "lastModified": "2025-10-02T10:15:38.427", + "lastModified": "2025-10-02T14:15:45.173", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -73,6 +73,10 @@ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h", "source": "security@ubuntu.com" + }, + { + "url": "https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json index fbcf94fa712..7a3735e110a 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json @@ -2,7 +2,7 @@ "id": "CVE-2025-54287", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:38.707", - "lastModified": "2025-10-02T10:15:38.707", + "lastModified": "2025-10-02T14:15:45.290", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -73,6 +73,10 @@ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6", "source": "security@ubuntu.com" + }, + { + "url": "https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54288.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54288.json index 28f153e9c84..a03c5dc0ea4 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54288.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54288.json @@ -2,7 +2,7 @@ "id": "CVE-2025-54288", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:38.887", - "lastModified": "2025-10-02T10:15:38.887", + "lastModified": "2025-10-02T14:15:45.400", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -73,6 +73,10 @@ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525", "source": "security@ubuntu.com" + }, + { + "url": "https://github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54289.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54289.json index d65ed7c6093..29e71d0fd36 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54289.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54289.json @@ -2,7 +2,7 @@ "id": "CVE-2025-54289", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:39.053", - "lastModified": "2025-10-02T10:15:39.053", + "lastModified": "2025-10-02T14:15:45.520", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -73,6 +73,10 @@ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228", "source": "security@ubuntu.com" + }, + { + "url": "https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54912.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54912.json index 23366e05c24..1c5e3fe9d0b 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54912.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54912.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54912", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:03.367", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:40:53.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,136 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54912", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54913.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54913.json index 2658fc0825d..d31d09b7137 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54913.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54913.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54913", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:03.567", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:41:09.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,121 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54913", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54915.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54915.json index 2993b28a42a..2ddfe240406 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54915.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54915.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54915", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:03.850", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:47:43.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,146 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54915", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54916.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54916.json index 39ecdbe4b5a..b9941cf2386 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54916.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54916.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54916", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:04.060", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:47:59.050", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,146 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54916", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54917.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54917.json index d8044757ff7..b964043f0cb 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54917.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54917.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54917", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:04.277", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:51:59.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,146 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54917", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54918.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54918.json index 0b764feebed..5e941afc6ef 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54918.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54918.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54918", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:04.503", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:52:16.013", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,146 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "3C02B817-7D1B-4E29-B9D4-4858F5B870F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21128", + "matchCriteriaId": "6F5077FC-74E8-4534-9E8E-68BB5DC4C331" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "CCF6CD9B-8B61-4998-8AB1-98022B96627C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "B959975A-0845-4975-987B-33BCE5C5F1BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "DAD249FB-512C-4712-A54C-67283AB359A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "01360CEA-14B5-4566-84ED-D785BD98C78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8422", + "matchCriteriaId": "705F2D9A-DBA3-45A9-B11E-EBE1E98E43E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7792", + "matchCriteriaId": "07163682-D393-40AF-BEDD-CDD996C941ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54918", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-552xx/CVE-2025-55228.json b/CVE-2025/CVE-2025-552xx/CVE-2025-55228.json index 6039a54e98d..61da5a87f8f 100644 --- a/CVE-2025/CVE-2025-552xx/CVE-2025-55228.json +++ b/CVE-2025/CVE-2025-552xx/CVE-2025-55228.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55228", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-09T17:16:06.097", - "lastModified": "2025-09-11T17:14:25.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:52:37.270", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,73 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "3F06D935-A817-4D37-808B-0155675F6DCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "48970879-5104-497D-B54F-6BAAA700A120" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55228", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-563xx/CVE-2025-56379.json b/CVE-2025/CVE-2025-563xx/CVE-2025-56379.json new file mode 100644 index 00000000000..e088986e134 --- /dev/null +++ b/CVE-2025/CVE-2025-563xx/CVE-2025-56379.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-56379", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T14:15:45.630", + "lastModified": "2025-10-02T14:15:45.630", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stored cross-site scripting (XSS) vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/MoAlali/", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/MoAlali/CVE-2025-56379", + "source": "cve@mitre.org" + }, + { + "url": "https://www.linkedin.com/in/mohammedaloli/", + "source": "cve@mitre.org" + }, + { + "url": "https://x.com/alaliksa_", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-563xx/CVE-2025-56380.json b/CVE-2025/CVE-2025-563xx/CVE-2025-56380.json new file mode 100644 index 00000000000..21226b97365 --- /dev/null +++ b/CVE-2025/CVE-2025-563xx/CVE-2025-56380.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-56380", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T14:15:45.767", + "lastModified": "2025-10-02T14:15:45.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.get_value API endpoint and a crafted script to the fieldname parameter" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/MoAlali", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/MoAlali/CVE-2025-56380", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-563xx/CVE-2025-56381.json b/CVE-2025/CVE-2025-563xx/CVE-2025-56381.json new file mode 100644 index 00000000000..62ceea9c681 --- /dev/null +++ b/CVE-2025/CVE-2025-563xx/CVE-2025-56381.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-56381", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T14:15:45.890", + "lastModified": "2025-10-02T14:15:45.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/MoAlali/", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/MoAlali/CVE-2025-56381", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-574xx/CVE-2025-57443.json b/CVE-2025/CVE-2025-574xx/CVE-2025-57443.json new file mode 100644 index 00000000000..d1164bc25f5 --- /dev/null +++ b/CVE-2025/CVE-2025-574xx/CVE-2025-57443.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-57443", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T15:15:53.267", + "lastModified": "2025-10-02T15:15:53.267", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables, disable-library-validation) that allow unprivileged local attackers to inject code into the FrostWire process via the DYLD_INSERT_LIBRARIES environment variable. This allows escalated privileges to arbitrary TCC-approved directories." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/SwayZGl1tZyyy/vulnerability-research/tree/main/CVE-2025-57443", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-578xx/CVE-2025-57852.json b/CVE-2025/CVE-2025-578xx/CVE-2025-57852.json index f58b6140c5a..47dc7c0a039 100644 --- a/CVE-2025/CVE-2025-578xx/CVE-2025-57852.json +++ b/CVE-2025/CVE-2025-578xx/CVE-2025-57852.json @@ -2,7 +2,7 @@ "id": "CVE-2025-57852", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-30T15:15:53.720", - "lastModified": "2025-10-01T10:15:31.500", + "lastModified": "2025-10-02T15:15:53.403", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -56,6 +56,18 @@ "url": "https://access.redhat.com/errata/RHBA-2025:16984", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16981", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16982", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:16984", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-57852", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58457.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58457.json index adf07f335f5..995450e8817 100644 --- a/CVE-2025/CVE-2025-584xx/CVE-2025-58457.json +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58457.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58457", "sourceIdentifier": "security@apache.org", "published": "2025-09-24T10:15:28.020", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:56:49.103", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,33 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apache:zookeeper:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.9.0", + "versionEndExcluding": "3.9.4", + "matchCriteriaId": "B539F7ED-4D4B-476C-949D-743BC3BB3118" + } + ] + } + ] + } + ], "references": [ { "url": "https://lists.apache.org/thread/r5yol0kkhx2fzw22pxk1ozwm3oc6yxrx", - "source": "security@apache.org" + "source": "security@apache.org", + "tags": [ + "Mailing List", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59251.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59251.json index 63c251711dd..d11b6a25033 100644 --- a/CVE-2025/CVE-2025-592xx/CVE-2025-59251.json +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59251.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59251", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-24T19:15:41.920", - "lastModified": "2025-09-26T14:32:53.583", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-02T14:36:45.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.3485.81", + "matchCriteriaId": "64AE3DF0-8A51-4577-BE88-1AB189B002A6" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59251", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59735.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59735.json new file mode 100644 index 00000000000..b6051d4bbe7 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59735.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59735", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.020", + "lastModified": "2025-10-02T14:15:46.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a\u00a0'm' parameter in '/clt/LOGINFRM.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59736.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59736.json new file mode 100644 index 00000000000..8df82766ff1 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59736.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59736", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.173", + "lastModified": "2025-10-02T14:15:46.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a\u00a0'm' parameter in '/clt/LOGINFRM_DJO.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59737.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59737.json new file mode 100644 index 00000000000..2052c2a8eb0 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59737.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59737", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.317", + "lastModified": "2025-10-02T14:15:46.317", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_LXA.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59738.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59738.json new file mode 100644 index 00000000000..56fb48eb63a --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59738.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59738", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.463", + "lastModified": "2025-10-02T14:15:46.463", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_BET.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59739.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59739.json new file mode 100644 index 00000000000..aa83dc70d05 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59739.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59739", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.610", + "lastModified": "2025-10-02T14:15:46.610", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_original.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59740.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59740.json new file mode 100644 index 00000000000..f9707d5396b --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59740.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59740", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T14:15:46.763", + "lastModified": "2025-10-02T14:15:46.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM_CAT.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59741.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59741.json new file mode 100644 index 00000000000..69c0959349a --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59741.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59741", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:53.527", + "lastModified": "2025-10-02T15:15:53.527", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59742.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59742.json new file mode 100644 index 00000000000..690cf825094 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59742.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59742", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:53.680", + "lastModified": "2025-10-02T15:15:53.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a\u00a0'USRMAIL' parameter in'/inc/login/TRACK_REQUESTFRMSQL.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59743.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59743.json new file mode 100644 index 00000000000..01c0e216bcd --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59743.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59743", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:53.837", + "lastModified": "2025-10-02T15:15:53.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a\u00a0'SessionID' cookie in '/inc/connect/CONNECTION.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59744.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59744.json new file mode 100644 index 00000000000..9bf907b3881 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59744.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59744", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:53.983", + "lastModified": "2025-10-02T15:15:53.983", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the \u201cdocurl\u201d parameter in \u201c/lib/asp/DOCSAVEASASP.ASP\u201d." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59745.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59745.json new file mode 100644 index 00000000000..487950650cb --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59745.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59745", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.130", + "lastModified": "2025-10-02T15:15:54.130", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-327" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59746.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59746.json new file mode 100644 index 00000000000..6f0f0ccde3b --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59746.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59746", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.287", + "lastModified": "2025-10-02T15:15:54.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'm' parameter in '/lib/asp/alert.asp'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59747.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59747.json new file mode 100644 index 00000000000..19a1c83c999 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59747.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59747", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.433", + "lastModified": "2025-10-02T15:15:54.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is 'l' parameter in '/clt/resetPassword.asp'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59748.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59748.json new file mode 100644 index 00000000000..f5e79a944d6 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59748.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59748", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.580", + "lastModified": "2025-10-02T15:15:54.580", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59749.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59749.json new file mode 100644 index 00000000000..ba4ca587ac2 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59749.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59749", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.727", + "lastModified": "2025-10-02T15:15:54.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is 'l' parameter in '/clt/TRACK_REQUEST.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59750.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59750.json new file mode 100644 index 00000000000..170d79b6d05 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59750.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59750", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:54.870", + "lastModified": "2025-10-02T15:15:54.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59751.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59751.json new file mode 100644 index 00000000000..914f64cafc6 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59751.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59751", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.030", + "lastModified": "2025-10-02T15:15:55.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_DJO.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59752.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59752.json new file mode 100644 index 00000000000..dc1ebe134bb --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59752.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59752", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.177", + "lastModified": "2025-10-02T15:15:55.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_LXA.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59753.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59753.json new file mode 100644 index 00000000000..8a100195a27 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59753.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59753", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.343", + "lastModified": "2025-10-02T15:15:55.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_BET.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59754.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59754.json new file mode 100644 index 00000000000..d82840aa5b5 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59754.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59754", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.493", + "lastModified": "2025-10-02T15:15:55.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_original.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59755.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59755.json new file mode 100644 index 00000000000..28c1eb7f470 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59755.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59755", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.633", + "lastModified": "2025-10-02T15:15:55.633", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_CAT.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59756.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59756.json new file mode 100644 index 00000000000..5bfc5e87c2a --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59756.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59756", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.777", + "lastModified": "2025-10-02T15:15:55.777", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'SuppConn in /clt/LOGINFRM_CON.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59757.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59757.json new file mode 100644 index 00000000000..6ba617c189d --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59757.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59757", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:55.930", + "lastModified": "2025-10-02T15:15:55.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_CATOLD.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59758.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59758.json new file mode 100644 index 00000000000..6c87e6a32bd --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59758.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59758", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.073", + "lastModified": "2025-10-02T15:15:56.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_CYLOG.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59759.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59759.json new file mode 100644 index 00000000000..f8fd2ee61e3 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59759.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59759", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.220", + "lastModified": "2025-10-02T15:15:56.220", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_DELCROIX.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59760.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59760.json new file mode 100644 index 00000000000..986f0741c20 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59760.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59760", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.367", + "lastModified": "2025-10-02T15:15:56.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_DHL.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59761.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59761.json new file mode 100644 index 00000000000..1ab1f25f648 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59761.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59761", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.513", + "lastModified": "2025-10-02T15:15:56.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_DLG.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59762.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59762.json new file mode 100644 index 00000000000..8094380824b --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59762.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59762", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.670", + "lastModified": "2025-10-02T15:15:56.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_DLG.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59763.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59763.json new file mode 100644 index 00000000000..b85fbf80623 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59763.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59763", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.817", + "lastModified": "2025-10-02T15:15:56.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_EK.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59764.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59764.json new file mode 100644 index 00000000000..cdcd8bd63a0 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59764.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59764", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:56.967", + "lastModified": "2025-10-02T15:15:56.967", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_FCC.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59765.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59765.json new file mode 100644 index 00000000000..48c336012bc --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59765.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59765", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.110", + "lastModified": "2025-10-02T15:15:57.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_LF.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59766.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59766.json new file mode 100644 index 00000000000..991d78f21ca --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59766.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59766", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.257", + "lastModified": "2025-10-02T15:15:57.257", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_LT.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59767.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59767.json new file mode 100644 index 00000000000..a623f6d16e0 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59767.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59767", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.407", + "lastModified": "2025-10-02T15:15:57.407", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_LVE.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59768.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59768.json new file mode 100644 index 00000000000..0f06e941365 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59768.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59768", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.553", + "lastModified": "2025-10-02T15:15:57.553", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_MNG.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59769.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59769.json new file mode 100644 index 00000000000..7add01b0df0 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59769.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59769", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.700", + "lastModified": "2025-10-02T15:15:57.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_MOL.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59770.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59770.json new file mode 100644 index 00000000000..f79e8526537 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59770.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59770", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:57.847", + "lastModified": "2025-10-02T15:15:57.847", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_MON.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59771.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59771.json new file mode 100644 index 00000000000..c4e53d75e49 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59771.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59771", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:58.000", + "lastModified": "2025-10-02T15:15:58.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_MRK.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59772.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59772.json new file mode 100644 index 00000000000..aacd373390c --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59772.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59772", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:58.140", + "lastModified": "2025-10-02T15:15:58.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_SIL.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59773.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59773.json new file mode 100644 index 00000000000..ef3dc4eeb48 --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59773.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59773", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:58.290", + "lastModified": "2025-10-02T15:15:58.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_TP.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-597xx/CVE-2025-59774.json b/CVE-2025/CVE-2025-597xx/CVE-2025-59774.json new file mode 100644 index 00000000000..84393665adc --- /dev/null +++ b/CVE-2025/CVE-2025-597xx/CVE-2025-59774.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-59774", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-02T15:15:58.437", + "lastModified": "2025-10-02T15:15:58.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.\u00a0The relationship between parameter and assigned identifier is\u00a0'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in\u00a0'/clt/LOGINFRM_VON.ASP'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60782.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60782.json new file mode 100644 index 00000000000..604805d9ebd --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60782.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-60782", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T15:15:58.587", + "lastModified": "2025-10-02T15:15:58.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site Scripting (XSS) vulnerability in the topics management module (topics.php). Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gold-textbook-8ff.notion.site/php-education-management-Background-storage-xss-25985e97f35380db9d38e7d0fbb408d6?pvs=73", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-610xx/CVE-2025-61087.json b/CVE-2025/CVE-2025-610xx/CVE-2025-61087.json new file mode 100644 index 00000000000..86d9a03ad11 --- /dev/null +++ b/CVE-2025/CVE-2025-610xx/CVE-2025-61087.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-61087", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T15:15:58.727", + "lastModified": "2025-10-02T15:15:58.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-2025-61087", + "source": "cve@mitre.org" + }, + { + "url": "https://www.linkedin.com/in/shuvo-ahmed-sanin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-610xx/CVE-2025-61096.json b/CVE-2025/CVE-2025-610xx/CVE-2025-61096.json new file mode 100644 index 00000000000..6dbff06b8b3 --- /dev/null +++ b/CVE-2025/CVE-2025-610xx/CVE-2025-61096.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-61096", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-02T15:15:58.857", + "lastModified": "2025-10-02T15:15:58.857", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-2025-61096", + "source": "cve@mitre.org" + }, + { + "url": "https://www.linkedin.com/in/shuvo-ahmed-sanin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61735.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61735.json index 7ab9b7a236c..78b2ca35245 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61735.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61735.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61735", "sourceIdentifier": "security@apache.org", "published": "2025-10-02T10:15:40.250", - "lastModified": "2025-10-02T10:15:40.250", + "lastModified": "2025-10-02T15:15:58.993", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.2.\u00a0You are fine as long as the Kylin's system and project admin access is well protected.\n\nUsers are recommended to upgrade to version 5.0.3, which fixes the issue." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ] + }, "weaknesses": [ { "source": "security@apache.org", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9588.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9588.json index d63214f8bb1..966b33071aa 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9588.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9588.json @@ -2,8 +2,8 @@ "id": "CVE-2025-9588", "sourceIdentifier": "iletisim@usom.gov.tr", "published": "2025-09-23T08:15:39.160", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-02T14:24:13.747", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "iletisim@usom.gov.tr", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -47,10 +67,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ironmountain:envision:*:*:*:*:*:*:*:*", + "versionEndExcluding": "250563", + "matchCriteriaId": "630F9843-05BC-471B-8DFC-83BC70EAC47F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.usom.gov.tr/bildirim/tr-25-0285", - "source": "iletisim@usom.gov.tr" + "source": "iletisim@usom.gov.tr", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/README.md b/README.md index e17ba4ccb43..649fc802a42 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-02T14:00:12.598858+00:00 +2025-10-02T16:00:11.172870+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-02T13:55:12.170000+00:00 +2025-10-02T15:55:48.873000+00:00 ``` ### Last Data Feed Release @@ -33,47 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -312431 +312480 ``` ### CVEs added in the last Commit -Recently added CVEs: `8` +Recently added CVEs: `49` -- [CVE-2024-58260](CVE-2024/CVE-2024-582xx/CVE-2024-58260.json) (`2025-10-02T12:15:28.610`) -- [CVE-2024-58267](CVE-2024/CVE-2024-582xx/CVE-2024-58267.json) (`2025-10-02T12:15:28.773`) -- [CVE-2025-0642](CVE-2025/CVE-2025-06xx/CVE-2025-0642.json) (`2025-10-02T13:15:30.180`) -- [CVE-2025-11239](CVE-2025/CVE-2025-112xx/CVE-2025-11239.json) (`2025-10-02T13:15:31.203`) -- [CVE-2025-11240](CVE-2025/CVE-2025-112xx/CVE-2025-11240.json) (`2025-10-02T13:15:31.370`) -- [CVE-2025-22862](CVE-2025/CVE-2025-228xx/CVE-2025-22862.json) (`2025-10-02T13:15:31.520`) -- [CVE-2025-41010](CVE-2025/CVE-2025-410xx/CVE-2025-41010.json) (`2025-10-02T13:15:31.717`) -- [CVE-2025-41064](CVE-2025/CVE-2025-410xx/CVE-2025-41064.json) (`2025-10-02T12:15:29.050`) +- [CVE-2025-59753](CVE-2025/CVE-2025-597xx/CVE-2025-59753.json) (`2025-10-02T15:15:55.343`) +- [CVE-2025-59754](CVE-2025/CVE-2025-597xx/CVE-2025-59754.json) (`2025-10-02T15:15:55.493`) +- [CVE-2025-59755](CVE-2025/CVE-2025-597xx/CVE-2025-59755.json) (`2025-10-02T15:15:55.633`) +- [CVE-2025-59756](CVE-2025/CVE-2025-597xx/CVE-2025-59756.json) (`2025-10-02T15:15:55.777`) +- [CVE-2025-59757](CVE-2025/CVE-2025-597xx/CVE-2025-59757.json) (`2025-10-02T15:15:55.930`) +- [CVE-2025-59758](CVE-2025/CVE-2025-597xx/CVE-2025-59758.json) (`2025-10-02T15:15:56.073`) +- [CVE-2025-59759](CVE-2025/CVE-2025-597xx/CVE-2025-59759.json) (`2025-10-02T15:15:56.220`) +- [CVE-2025-59760](CVE-2025/CVE-2025-597xx/CVE-2025-59760.json) (`2025-10-02T15:15:56.367`) +- [CVE-2025-59761](CVE-2025/CVE-2025-597xx/CVE-2025-59761.json) (`2025-10-02T15:15:56.513`) +- [CVE-2025-59762](CVE-2025/CVE-2025-597xx/CVE-2025-59762.json) (`2025-10-02T15:15:56.670`) +- [CVE-2025-59763](CVE-2025/CVE-2025-597xx/CVE-2025-59763.json) (`2025-10-02T15:15:56.817`) +- [CVE-2025-59764](CVE-2025/CVE-2025-597xx/CVE-2025-59764.json) (`2025-10-02T15:15:56.967`) +- [CVE-2025-59765](CVE-2025/CVE-2025-597xx/CVE-2025-59765.json) (`2025-10-02T15:15:57.110`) +- [CVE-2025-59766](CVE-2025/CVE-2025-597xx/CVE-2025-59766.json) (`2025-10-02T15:15:57.257`) +- [CVE-2025-59767](CVE-2025/CVE-2025-597xx/CVE-2025-59767.json) (`2025-10-02T15:15:57.407`) +- [CVE-2025-59768](CVE-2025/CVE-2025-597xx/CVE-2025-59768.json) (`2025-10-02T15:15:57.553`) +- [CVE-2025-59769](CVE-2025/CVE-2025-597xx/CVE-2025-59769.json) (`2025-10-02T15:15:57.700`) +- [CVE-2025-59770](CVE-2025/CVE-2025-597xx/CVE-2025-59770.json) (`2025-10-02T15:15:57.847`) +- [CVE-2025-59771](CVE-2025/CVE-2025-597xx/CVE-2025-59771.json) (`2025-10-02T15:15:58.000`) +- [CVE-2025-59772](CVE-2025/CVE-2025-597xx/CVE-2025-59772.json) (`2025-10-02T15:15:58.140`) +- [CVE-2025-59773](CVE-2025/CVE-2025-597xx/CVE-2025-59773.json) (`2025-10-02T15:15:58.290`) +- [CVE-2025-59774](CVE-2025/CVE-2025-597xx/CVE-2025-59774.json) (`2025-10-02T15:15:58.437`) +- [CVE-2025-60782](CVE-2025/CVE-2025-607xx/CVE-2025-60782.json) (`2025-10-02T15:15:58.587`) +- [CVE-2025-61087](CVE-2025/CVE-2025-610xx/CVE-2025-61087.json) (`2025-10-02T15:15:58.727`) +- [CVE-2025-61096](CVE-2025/CVE-2025-610xx/CVE-2025-61096.json) (`2025-10-02T15:15:58.857`) ### CVEs modified in the last Commit -Recently modified CVEs: `20` +Recently modified CVEs: `65` -- [CVE-2024-12369](CVE-2024/CVE-2024-123xx/CVE-2024-12369.json) (`2025-10-02T12:15:28.397`) -- [CVE-2024-34361](CVE-2024/CVE-2024-343xx/CVE-2024-34361.json) (`2025-10-02T13:07:15.947`) -- [CVE-2024-38513](CVE-2024/CVE-2024-385xx/CVE-2024-38513.json) (`2025-10-02T13:55:12.170`) -- [CVE-2024-39072](CVE-2024/CVE-2024-390xx/CVE-2024-39072.json) (`2025-10-02T12:54:10.527`) -- [CVE-2024-39935](CVE-2024/CVE-2024-399xx/CVE-2024-39935.json) (`2025-10-02T13:12:10.907`) -- [CVE-2024-52057](CVE-2024/CVE-2024-520xx/CVE-2024-52057.json) (`2025-10-02T13:34:26.213`) -- [CVE-2024-52058](CVE-2024/CVE-2024-520xx/CVE-2024-52058.json) (`2025-10-02T13:35:17.877`) -- [CVE-2024-52059](CVE-2024/CVE-2024-520xx/CVE-2024-52059.json) (`2025-10-02T13:36:04.960`) -- [CVE-2024-52060](CVE-2024/CVE-2024-520xx/CVE-2024-52060.json) (`2025-10-02T13:36:45.580`) -- [CVE-2024-52061](CVE-2024/CVE-2024-520xx/CVE-2024-52061.json) (`2025-10-02T13:38:37.063`) -- [CVE-2024-52062](CVE-2024/CVE-2024-520xx/CVE-2024-52062.json) (`2025-10-02T13:40:24.267`) -- [CVE-2024-52063](CVE-2024/CVE-2024-520xx/CVE-2024-52063.json) (`2025-10-02T13:41:19.057`) -- [CVE-2024-52064](CVE-2024/CVE-2024-520xx/CVE-2024-52064.json) (`2025-10-02T13:52:34.303`) -- [CVE-2024-52065](CVE-2024/CVE-2024-520xx/CVE-2024-52065.json) (`2025-10-02T13:50:46.517`) -- [CVE-2024-52066](CVE-2024/CVE-2024-520xx/CVE-2024-52066.json) (`2025-10-02T13:47:46.823`) -- [CVE-2024-6381](CVE-2024/CVE-2024-63xx/CVE-2024-6381.json) (`2025-10-02T13:47:04.883`) -- [CVE-2024-6382](CVE-2024/CVE-2024-63xx/CVE-2024-6382.json) (`2025-10-02T13:48:26.653`) -- [CVE-2025-1255](CVE-2025/CVE-2025-12xx/CVE-2025-1255.json) (`2025-10-02T13:44:49.900`) -- [CVE-2025-4582](CVE-2025/CVE-2025-45xx/CVE-2025-4582.json) (`2025-10-02T13:43:38.587`) -- [CVE-2025-57105](CVE-2025/CVE-2025-571xx/CVE-2025-57105.json) (`2025-10-02T13:07:11.973`) +- [CVE-2025-39913](CVE-2025/CVE-2025-399xx/CVE-2025-39913.json) (`2025-10-02T14:15:44.723`) +- [CVE-2025-39923](CVE-2025/CVE-2025-399xx/CVE-2025-39923.json) (`2025-10-02T14:15:44.837`) +- [CVE-2025-46565](CVE-2025/CVE-2025-465xx/CVE-2025-46565.json) (`2025-10-02T15:40:34.403`) +- [CVE-2025-49557](CVE-2025/CVE-2025-495xx/CVE-2025-49557.json) (`2025-10-02T14:43:02.840`) +- [CVE-2025-54102](CVE-2025/CVE-2025-541xx/CVE-2025-54102.json) (`2025-10-02T15:01:04.387`) +- [CVE-2025-54108](CVE-2025/CVE-2025-541xx/CVE-2025-54108.json) (`2025-10-02T14:36:24.210`) +- [CVE-2025-54109](CVE-2025/CVE-2025-541xx/CVE-2025-54109.json) (`2025-10-02T14:36:32.837`) +- [CVE-2025-54251](CVE-2025/CVE-2025-542xx/CVE-2025-54251.json) (`2025-10-02T14:43:16.193`) +- [CVE-2025-54255](CVE-2025/CVE-2025-542xx/CVE-2025-54255.json) (`2025-10-02T14:43:43.207`) +- [CVE-2025-54286](CVE-2025/CVE-2025-542xx/CVE-2025-54286.json) (`2025-10-02T14:15:45.173`) +- [CVE-2025-54287](CVE-2025/CVE-2025-542xx/CVE-2025-54287.json) (`2025-10-02T14:15:45.290`) +- [CVE-2025-54288](CVE-2025/CVE-2025-542xx/CVE-2025-54288.json) (`2025-10-02T14:15:45.400`) +- [CVE-2025-54289](CVE-2025/CVE-2025-542xx/CVE-2025-54289.json) (`2025-10-02T14:15:45.520`) +- [CVE-2025-54912](CVE-2025/CVE-2025-549xx/CVE-2025-54912.json) (`2025-10-02T14:40:53.743`) +- [CVE-2025-54913](CVE-2025/CVE-2025-549xx/CVE-2025-54913.json) (`2025-10-02T14:41:09.277`) +- [CVE-2025-54915](CVE-2025/CVE-2025-549xx/CVE-2025-54915.json) (`2025-10-02T14:47:43.120`) +- [CVE-2025-54916](CVE-2025/CVE-2025-549xx/CVE-2025-54916.json) (`2025-10-02T14:47:59.050`) +- [CVE-2025-54917](CVE-2025/CVE-2025-549xx/CVE-2025-54917.json) (`2025-10-02T14:51:59.930`) +- [CVE-2025-54918](CVE-2025/CVE-2025-549xx/CVE-2025-54918.json) (`2025-10-02T14:52:16.013`) +- [CVE-2025-55228](CVE-2025/CVE-2025-552xx/CVE-2025-55228.json) (`2025-10-02T14:52:37.270`) +- [CVE-2025-57852](CVE-2025/CVE-2025-578xx/CVE-2025-57852.json) (`2025-10-02T15:15:53.403`) +- [CVE-2025-58457](CVE-2025/CVE-2025-584xx/CVE-2025-58457.json) (`2025-10-02T14:56:49.103`) +- [CVE-2025-59251](CVE-2025/CVE-2025-592xx/CVE-2025-59251.json) (`2025-10-02T14:36:45.330`) +- [CVE-2025-61735](CVE-2025/CVE-2025-617xx/CVE-2025-61735.json) (`2025-10-02T15:15:58.993`) +- [CVE-2025-9588](CVE-2025/CVE-2025-95xx/CVE-2025-9588.json) (`2025-10-02T14:24:13.747`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 5138d18742e..a0dc2d3baa9 100644 --- a/_state.csv +++ b/_state.csv @@ -224593,6 +224593,7 @@ CVE-2023-28756,0,0,88aa9dc12e2b8ae6b6595ffb134fa56b12caf3a3fc850045630cd369b54d0 CVE-2023-28758,0,0,787787b66cb927a46724ad55db605cac9ab399b0672f7140b0fdb9717099a31f,2025-02-25T20:15:33.880000 CVE-2023-28759,0,0,c98d0156e8139f667e14041a4133aef869dd199576f0ad8893ff66d963924a6a,2025-02-25T20:15:34.047000 CVE-2023-2876,0,0,7152431999aed8fe5b3e1e380f1c55a8265dd115bf7786e198066c7a889177a1,2024-11-21T07:59:28.573000 +CVE-2023-28760,1,1,18f6c01856d1f7480229d7a81c9f86694ccc874306baab828edecce749bac6d8,2025-10-02T14:15:41.870000 CVE-2023-28761,0,0,c2b0597a791a17c176292f28f1590d9a36420a298072c6048ef212c8f9d84bf2,2024-11-21T07:55:57.137000 CVE-2023-28762,0,0,ace81d8f6579fbda387c2c1571b1c7abfb932918a0f788eda35c1a4e6fb2acdc,2024-11-21T07:55:57.293000 CVE-2023-28763,0,0,a2f685232965030086c14c9800cbb0887dbd3ac771b03b3a4a98bdffd5d62077,2024-11-21T07:55:57.433000 @@ -247411,7 +247412,7 @@ CVE-2024-1093,0,0,ac60ea90a5bdbcab92bbb148d0d6ccb636fae604fade2bd9337658c1f74748 CVE-2024-10930,0,0,92450ea54744590353ab0a2dc3032fd79dc2be5bdc71e4ab0f8d2d5a6eb34295,2025-03-04T18:15:23.610000 CVE-2024-10932,0,0,28109702b795f9356a11af2c3727eebea623b98c280555fa2778753a6b0d3d2f,2025-01-04T08:15:05.713000 CVE-2024-10933,0,0,66f96ae0e675eb30603a0fbf28968dfa94ad33c37373d4d85680249645169e8d,2025-09-23T12:54:18.160000 -CVE-2024-10934,0,0,f00749a9618e4f7ef34bc6b1bae1e7f79a2b2697f0244f74c250ef1bbecf3be5,2025-09-04T23:49:11.707000 +CVE-2024-10934,0,1,a8749a30fdd53c8ec12c0c9087ed719f76b6ad48eaac77fdd2e045f2a0cd37cd,2025-10-02T15:15:51.540000 CVE-2024-10935,0,0,b5912f4ab9e43242a924618a50f424835879b913405d033007f5078debe071c4,2025-08-05T16:41:38.587000 CVE-2024-10936,0,0,8259f99ea27b488cb58d53b9271cc52d72eaba4980db6dcd32bf3125a4b88cc5,2025-02-05T19:16:15.393000 CVE-2024-10937,0,0,f3549007a000819e9c2b92d84627c6a8f0950225e9fa8a067012e5b6f0eb9781,2024-12-05T09:15:04.377000 @@ -248909,7 +248910,7 @@ CVE-2024-12365,0,0,e44342e05a0b6e2262a493fac9edc68519495d51c0acf8bc24f40ad738356 CVE-2024-12366,0,0,bf8b8c2c212f453e6f6d5dc642f1270129eabc7111c7a613295f8bc64058885c,2025-02-11T20:15:33.247000 CVE-2024-12367,0,0,76749cab213c76079f8db8db20c0add6d46e4f41b7aac2f6203609fa9b821bb6,2025-09-16T12:49:16.060000 CVE-2024-12368,0,0,cf43f2f55bc00689e177d5a51be5bd5730dfcbcf801633d096fc0bdbd9cefb9b,2025-02-28T15:40:59.097000 -CVE-2024-12369,0,1,6b15c1e5be844e5da3cdee80b0343eed2579c8ab6c1e5a88fa25cc1d81f9f7bb,2025-10-02T12:15:28.397000 +CVE-2024-12369,0,0,6b15c1e5be844e5da3cdee80b0343eed2579c8ab6c1e5a88fa25cc1d81f9f7bb,2025-10-02T12:15:28.397000 CVE-2024-1237,0,0,73d890f90445a3f466d07e44bf460923510366d9a99dc79ba53fedc006c8a010,2025-02-05T18:13:17.037000 CVE-2024-12370,0,0,d98e18bb49c3fbc75f1f7f6601e58a6353c9748a641846c6cbd7e3ecbf6b2cbb,2025-02-11T21:42:23.220000 CVE-2024-12371,0,0,9542186c66f99da6b4ac50ca63fb0b7c1e557e5ac53dc2db179a6f9f5d31e186,2024-12-18T20:15:21.193000 @@ -249108,7 +249109,7 @@ CVE-2024-12552,0,0,717e32d0686c824101d015ef677f1ace45b96d740c9d4084b20d42a205eec CVE-2024-12553,0,0,97934bf754793afaada87cc7ac7a3108711a7052b12898dad715c0f65a66cf0f,2025-08-14T18:47:20.423000 CVE-2024-12554,0,0,03325541f88792da1f6e44f52ff0851958b98ec9e3aa0b4c7708f85287495a8a,2024-12-18T10:15:08.493000 CVE-2024-12555,0,0,2e017ff0ee33b0c8a472113c693bd6d33089424aa43829233098413c47eb605b,2024-12-14T05:15:11.827000 -CVE-2024-12556,0,0,adb0731d789dc2ae65a3c81db9af618f28c442831c1af3213b1bfde8eadfea69,2025-04-09T20:02:41.860000 +CVE-2024-12556,0,1,3f7a94a24e5dc0ccfe0d6d7e6299a50a7b591ac48cde8b1a3b7990b6c9551ff3,2025-10-02T15:27:30.197000 CVE-2024-12557,0,0,37daa206cffaab362fd4ef4709da159d811d551245b9c0c84b85613a0d36d6a7,2025-01-07T04:15:09.260000 CVE-2024-12558,0,0,ff1dd3178bf5e061322cf2e1a359f721c0d270a183cd44116b64f362a8103982,2024-12-21T10:15:08.600000 CVE-2024-12559,0,0,57ab0e0bbf049179f4bb043a31125569183e3823c6e0814b5b25df137c49ef14,2025-01-07T04:15:09.433000 @@ -253734,7 +253735,7 @@ CVE-2024-23146,0,0,24c56a8c5cf111139284effe9bf59dda48c4fe135097cb3e4fcdab701466a CVE-2024-23147,0,0,767854decc747d93912dfe232cfcf18daf2d0e6c05b79ccd8dff9c1af328d1a3,2025-08-26T21:15:42.597000 CVE-2024-23148,0,0,4d7d869632fb9ac96cf2fef3ad1b93cadd601a8844453ddd6a2e837d1850a812,2025-08-26T21:15:42.823000 CVE-2024-23149,0,0,1de939214d90739e7520dfa27e38df4683f0176e40c7410d318f81d369e0fa2e,2025-08-26T21:15:43.040000 -CVE-2024-2315,0,0,878104e0603f39000b39591a26c7c66c7211b62f8ea34ef99d5e9fc8b3872ece,2024-11-21T17:15:12.817000 +CVE-2024-2315,0,1,547421e4942364c4c4acd8fcde074d6e7733ad28e5d29152194efa249687c549,2025-10-02T14:28:05.957000 CVE-2024-23150,0,0,0a2c3bd9295dec816fdd1b15be56cdbfa000498cf50520377d650c14b3300ee6,2025-08-26T21:15:43.250000 CVE-2024-23151,0,0,724a7d339756a14e4be384772c720697cf5019d4621ac53985d6f6e3b7214506,2025-05-06T19:46:04.660000 CVE-2024-23152,0,0,c5a3e6b0edd55f8c9b18f0493d0a5f8b8fb5be0e931b90a35b02c7d2c634946d,2025-08-26T21:15:43.547000 @@ -258329,7 +258330,7 @@ CVE-2024-29035,0,0,ef070b7e2246729f1c81fdb7adbddc3bb2de12297c6114bc6cf2e9e3860cc CVE-2024-29036,0,0,e9111c2bda4a8c52794b1d916cb4324b7edad3f1eb225d5de173609179c57fb0,2024-11-21T09:07:25.367000 CVE-2024-29037,0,0,07c5d00e82c63a2e1f8060633a0057734cf3176ca69685a1f25b09381e8c2a24,2024-11-21T09:07:25.500000 CVE-2024-29038,0,0,ab1754fc3644a675e43d0204fbdf3c13edd49ec888c10c118f2732d14e3bf261,2024-11-21T09:07:25.623000 -CVE-2024-29039,0,0,c2593aeacd7965d475c8bf390153129605b467b45e4c0a06ca668caa53468a71,2024-11-21T09:07:25.760000 +CVE-2024-29039,0,1,69ccf668ee3546f8a716998de2bc3a0eefe7ddc45f631a2ccefd4ce224b21461,2025-10-02T14:15:24.910000 CVE-2024-2904,0,0,e6586a0e0a8a8357c4d8e40fe57cdb27a69a7f461f34acbd8ec447b7a6408ecb,2024-11-21T09:10:48.053000 CVE-2024-29040,0,0,6f600fd776c6a2753acef940ae7e86d9938f64b7492793359aca46255cc2c2bc,2024-11-21T09:07:25.880000 CVE-2024-29041,0,0,6ac0f71fb6f950c6f7b59cb10e9a1d9aeaaf1dbdf40430ddb4997841553145c1,2024-11-21T09:07:26.023000 @@ -259473,7 +259474,7 @@ CVE-2024-30486,0,0,2636b7ca72fcc83ab76e46ed85ccf7083244ca1fc5ae3da9251ea650daeb7 CVE-2024-30487,0,0,44e76078517893bf1cc3851df2c3f60079ad355c29fc120ead15ea5e778782be,2025-01-31T19:41:37.667000 CVE-2024-30488,0,0,bfd4f5fe87e8a9f7b9fe1f6ec5173da223ecc167c53c87968dc932484719c4ca,2025-04-08T17:01:49.073000 CVE-2024-30489,0,0,746eb42c1d4701f5dab7993ae5fc87612143a868b6199455ec72c55bae79c78e,2024-11-21T09:12:01.587000 -CVE-2024-3049,0,0,69e7bfbfef26db4e3d3a51aba83795862f7448aceb6e3efc5bff438eba047663,2024-11-21T09:28:45.870000 +CVE-2024-3049,0,1,cece5e7c19490ece74d3252bee9bcdaac9cee46fe52cee0e6ada40616d2cef25,2025-10-02T14:15:42.810000 CVE-2024-30490,0,0,d6134cbb402eab81b5496c3a10a0b1901817c22ea2db064481c9735634f40605,2025-02-04T20:23:23.073000 CVE-2024-30491,0,0,c471b95ffa72c84cec306306a8927a25bf938efaf5999b9fb1d7038a72f4d37c,2025-02-04T20:23:32.890000 CVE-2024-30492,0,0,944b6e4f4861258dbb795ac5398cdeb34f608f275efd240e733c219ffb14ec03,2024-11-21T09:12:02.030000 @@ -261848,10 +261849,10 @@ CVE-2024-33654,0,0,679f0da6158c8ef3dbe1a34775a2e16b4b4cf8e03a7e4e9ab0e81ee03fa26 CVE-2024-33655,0,0,de93781cf66822a33a28e3d65450990b089e0fa18d88669cbc9a6e40b730aa4c,2024-11-21T09:17:19.950000 CVE-2024-33656,0,0,c4dee97415c96965744276a271ca4ea6d67279b386b7e2c6c20831508b30939f,2024-08-21T17:24:59.627000 CVE-2024-33657,0,0,90ce9be009fa7f2f1e0676159d1ea146f159c1dd2c64edb8dc766f1b5805908f,2024-08-21T17:24:59.627000 -CVE-2024-33658,0,0,04a69c9eb3f0bdb2abe89b26b2a59255c37cfe05fed9c59ba944b0458255af1d,2024-11-21T17:15:13.010000 -CVE-2024-33659,0,0,c1bbe061505e93589ceaeb057df1ffe40ff14b682610ce740b733e3cd8d4fae8,2025-02-11T15:15:17.200000 +CVE-2024-33658,0,1,2c83d29c289c5e4db94e4c8325694ea88b0683f76ae59a331368f7e6adf21499,2025-10-02T14:28:53.380000 +CVE-2024-33659,0,1,98b4002a7f435607e9236c59b0cfd68061abd5401c1df4ad21a6c7a286a75bfd,2025-10-02T14:35:03.623000 CVE-2024-3366,0,0,8231a957ed0aa7737ad2a94020ec69c8273b6f03b501407e2df83d5e81391322,2025-07-18T18:49:58.350000 -CVE-2024-33660,0,0,9329bd49961c50031673c07af7778dce71608a0b1b8918f403b7cf4d38ee0dbe,2024-11-12T16:35:09.330000 +CVE-2024-33660,0,1,6bf53d394e31bc0350afffd09c40ca295fd7a9f593bebe764211b515d2ad5f5e,2025-10-02T14:32:14.733000 CVE-2024-33661,0,0,8d5dfd60025b0a5c03ae5fec29062e9b02e56fb9f40697ab8ee7b3bd264e1104,2025-05-21T18:07:35 CVE-2024-33662,0,0,4ff05e3fc1fa84e5421aba97eca621d5bb5d7e2406d1be3d2a3b8b7d597183d0,2025-05-21T18:07:02.313000 CVE-2024-33663,0,0,b11c7ac0280ab92c25f07bd31d9a7e07af2f0155cc0e517d56cb99fc16281394,2025-09-02T18:37:53.477000 @@ -262362,7 +262363,7 @@ CVE-2024-34358,0,0,997ff5f69072f224d9e0b1ba01a842e5b2bf710ad4d6d8ad07a6c2e83e18f CVE-2024-34359,0,0,a2b566ee74cd54c8e28068a7337a3de6f775341a1766580900d77fb7abe8e13f,2024-11-21T09:18:30.130000 CVE-2024-3436,0,0,2950b2eee382edd4ca310becff142b02b89a54c4626af9336f843e2bed46accc,2025-02-10T16:15:59.843000 CVE-2024-34360,0,0,099848f50108e780e9e29b1fefe3d5cd78588d0996190bb7551f8092c3ca9718,2024-11-21T09:18:30.277000 -CVE-2024-34361,0,1,258b4476933ed2330cd10ecb20d58615142007d309811aed831af80286663967,2025-10-02T13:07:15.947000 +CVE-2024-34361,0,0,258b4476933ed2330cd10ecb20d58615142007d309811aed831af80286663967,2025-10-02T13:07:15.947000 CVE-2024-34362,0,0,168517ed47cb720cbb954de1e46415c3d103d983058e9f48796d5b60d303142a,2024-11-21T09:18:30.537000 CVE-2024-34363,0,0,d1bfe157658696bd6a0d4b9b90522e3d14b2e0dd90b669e13436a60dba378d58,2024-11-21T09:18:30.680000 CVE-2024-34364,0,0,502679098572f8b792418423eb8d4f0bf38d7db460e803bc9f167444539289ae,2024-11-21T09:18:30.830000 @@ -265813,7 +265814,7 @@ CVE-2024-3851,0,0,2b6ccc2cf1b324882be57251851c39364b34f10c95f1c3823cb3e2d4b1b190 CVE-2024-38510,0,0,69c9824b1953f757b3c5c975703d289cb278c428a4ffb7556fd5abfef3a6797f,2024-11-21T09:26:07.563000 CVE-2024-38511,0,0,8a1d1a5a10ba124298993fd63de174b349639845cf9306cde4bfcd833a675d6e,2024-11-21T09:26:07.767000 CVE-2024-38512,0,0,3a6d9cddd06ace08deb089e67644860a08dba72ab3462f835a3938462ececdd2,2024-11-21T09:26:07.980000 -CVE-2024-38513,0,1,707a145b70235683fbb678367ad63aaf42319b84b3c726f25cab91d7a098f88a,2025-10-02T13:55:12.170000 +CVE-2024-38513,0,0,707a145b70235683fbb678367ad63aaf42319b84b3c726f25cab91d7a098f88a,2025-10-02T13:55:12.170000 CVE-2024-38514,0,0,bbee9655910f130033f830a629224772ff7c1b4e8dd2386fa6445c8e76b5b316,2024-11-21T09:26:08.353000 CVE-2024-38515,0,0,d3d565d31ea66ca604696e1076ac15c512d3ad24c4382f00e423460072e049fd,2024-06-27T13:16:00.717000 CVE-2024-38516,0,0,c3b92d1f806c0367acf8d206ed141fceaa7f7feef0fd85eecaa0abd26fd8de0d,2024-11-21T09:26:08.510000 @@ -266286,7 +266287,7 @@ CVE-2024-39063,0,0,1f8e26cf4e98abfdc7b6058f73f534bd52a0245eabab786c5a57812027f6a CVE-2024-39069,0,0,df07d5b4e498e68eab0525d09eafd252e5aae6cc734f27b8571431c3959a392e,2024-11-21T09:27:10.793000 CVE-2024-3907,0,0,d33abb7499d8bdfc0449d1ce0b19211840dd2ba2d6c9eb538b65c815ab9ef15f,2025-01-17T21:21:37.327000 CVE-2024-39071,0,0,bcf49297986e31d2062e985568f055f9ac47c400defe91dd2a64b6e8784beffa,2024-11-21T09:27:10.997000 -CVE-2024-39072,0,1,4f8430b9c4b33dc42ec5a5706e9a6dda0b0249f761924e68e59c4a90921a9874,2025-10-02T12:54:10.527000 +CVE-2024-39072,0,0,4f8430b9c4b33dc42ec5a5706e9a6dda0b0249f761924e68e59c4a90921a9874,2025-10-02T12:54:10.527000 CVE-2024-3908,0,0,32cc26b53789ac42f9085c7424d4e7e5e1385983e1e04bf11b22f248840a758b,2025-01-17T21:16:07.327000 CVE-2024-39081,0,0,1ea98431957362ab56a3af379eeef002d3bbd99853a222b010a3be68bd797b7b,2025-03-17T15:15:40.787000 CVE-2024-3909,0,0,d5574f4925d57273c75b63e724e2aae982f973388b6e621ddd87893b5d997ccf,2025-02-07T01:57:01.643000 @@ -267027,7 +267028,7 @@ CVE-2024-39931,0,0,7812805453d7f8921333ebcf634bcadda5befd1e13c58a4ce9979741cca7a CVE-2024-39932,0,0,9a4f5a8279117acb9b5c69ca769b00c9e67897d00214cd782689bac2a39d51e0,2025-04-10T13:44:52.103000 CVE-2024-39933,0,0,99da420be37037001e1bfeb8e5e3400494fc64eb4bd14376430e48fc3179c9ca,2025-04-10T13:45:38.273000 CVE-2024-39934,0,0,a040eeb58db8dc357074257c6548a542573771e14e58a5691af92614e3e7c903,2024-11-21T09:28:36.553000 -CVE-2024-39935,0,1,bd3fdea0652ba8e065161548935a77249a5e1437f6baff8e6e9c1e751040b32a,2025-10-02T13:12:10.907000 +CVE-2024-39935,0,0,bd3fdea0652ba8e065161548935a77249a5e1437f6baff8e6e9c1e751040b32a,2025-10-02T13:12:10.907000 CVE-2024-39936,0,0,e821e5a3bdb05b6dde9222f704eae2d36ecf741fc03b3f00768268ab9a5c894f,2025-03-19T20:15:18.770000 CVE-2024-39937,0,0,ae9ab5f050d906a5961bb72c56c15cedac541bb0393283d03c6542795d50285a,2024-11-21T09:28:37.077000 CVE-2024-3994,0,0,7ba880059a180fa773780c21c98bdb38159c861d778abee114a2eda89bb5f8e1,2025-01-15T18:36:21.003000 @@ -268846,9 +268847,9 @@ CVE-2024-42439,0,0,b33c2f3e3b8aaca19d134320359fcd40e49507166f36f5cf749ba8a0bbdac CVE-2024-4244,0,0,f0763faa282204a3143e65ed724762a293f636f4b57a3b9e02d3bfc3986c234f,2025-01-27T18:28:39.927000 CVE-2024-42440,0,0,e21d9b776ef80bd04d695f0a47e516545028ac8225f143837019c4c0b08b76a7,2024-08-28T23:59:01.537000 CVE-2024-42441,0,0,04cb6e9a13f27c86bb2051d7eae465da3e0fd75a34af891d94c6ed0cb275f3f5,2024-08-28T23:58:06.960000 -CVE-2024-42442,0,0,c95b9702729f1aa9eb8ceba5f94968c5cfabdca93c030d049ba8bcc0788889f5,2024-11-12T15:48:59.103000 -CVE-2024-42444,0,0,9c10c1c787216d53ad642f4276dcecfc578d8b3c31bd900159c9e2c546a3099a,2025-01-14T15:15:25.997000 -CVE-2024-42446,0,0,9414863be932aed3f783529e0b9830d76c4d4e090647972f8a476b1d61644b39,2025-05-13T19:35:18.080000 +CVE-2024-42442,0,1,1204823eaa5f8811cd613a34bba37cc4fc64cb97ae829645d9b8fb566f6e90ee,2025-10-02T14:29:40.480000 +CVE-2024-42444,0,1,32e1bac9ff45c0ad57e59ba4b909c72f426b5fe2d6571b460111ed5c14231724,2025-10-02T14:33:37.707000 +CVE-2024-42446,0,1,10dc6e646ed3afa4351e6d067bc148063fd3931c4cbf3b5d1c5f79d625ea163f,2025-10-02T14:22:05.427000 CVE-2024-42447,0,0,ec5028ca9c2877d724d58cd2657776d064c01b5e53d51b90e7da16171d64fb63,2025-03-19T15:15:49.917000 CVE-2024-42448,0,0,b2ac39b31ded9216cdbe436ad867b986a202acfcc6e34d426fd4cbd2727261bf,2024-12-12T15:15:14.230000 CVE-2024-42449,0,0,e29f7e5e44a4232b5b69c825a33822ae0550ad2fa3441b6d10c935be1d26c4ca,2025-03-13T15:15:47.283000 @@ -271434,7 +271435,7 @@ CVE-2024-45739,0,0,e401c1067ae62d3010dec5837781417ceb0fcd2787fa1291050f9c670fd42 CVE-2024-4574,0,0,1b6d403334723d115786beb2809ef84771bad083ac82aa3701fa582bd88e1409,2024-11-21T09:43:08.107000 CVE-2024-45740,0,0,4cc02d5ded4a2c45418183314ce79d89061d6e556fc0dc980aef0bc32e277488,2024-10-17T13:14:20.107000 CVE-2024-45741,0,0,62c6538d1daa912d666f392681c064b49806c35b3f9d0939c85b38eeb3848416,2024-10-17T13:12:54.180000 -CVE-2024-45744,0,0,52ea01cd7662f6b19408ec0bc0ec57efa88598fd328676196274b9cac0fac226,2025-09-22T17:23:02.757000 +CVE-2024-45744,0,1,ca719c28e03aa62fa969e5d675d9bd38c77b2c8c88856abd034cee0844ae5286,2025-10-02T15:15:52.620000 CVE-2024-45745,0,0,8d373e06d518a8f22f29afb6fdc64186bfad5777392a0a3a0061b932bb1a82bc,2025-09-22T17:17:23.523000 CVE-2024-45746,0,0,bf32e4ae231f1c9a924174b17b7fb8613f513dea9306b03f9721f3f223ce0520,2024-10-11T21:36:34.350000 CVE-2024-4575,0,0,a6089954d31921fdf836903a486406fc924d59494d61ec3e80f0d915ee1f796d,2024-11-21T09:43:08.243000 @@ -276212,17 +276213,17 @@ CVE-2024-52053,0,0,2b0d7384cd5399ac212029f0ee9c2ad45221000a0a080c1f7fd2e1352114d CVE-2024-52054,0,0,fcf6021ac2556c6be9f2f6ebb1b2f5b65aef2bb8846179e15165646239d69b82,2025-03-03T19:20:47.837000 CVE-2024-52055,0,0,c3ab3afa77d37a30283afcbefedd6a3327b61548c3424bc9e205bbaf0fbd57b6,2025-03-03T19:18:22.647000 CVE-2024-52056,0,0,cb12bd80587a5701e337c11fc75ef398bb6fddd529c76e9533fcbdfdb4bb744f,2025-03-03T19:13:57.427000 -CVE-2024-52057,0,1,5f5f2e0f92fc71992eb02607845d5ce1305a53e6e284c80e68ea0165a21878c0,2025-10-02T13:34:26.213000 -CVE-2024-52058,0,1,8456ddb479de2d9a00750fff637df5d9d88ad132f2cfeb795c6353701c8d47e0,2025-10-02T13:35:17.877000 -CVE-2024-52059,0,1,2e9eb2c7f5dea39a1bb366ef60fb0d556ecaf71c6c5ef5ffcbd44bf78a8cd579,2025-10-02T13:36:04.960000 +CVE-2024-52057,0,0,5f5f2e0f92fc71992eb02607845d5ce1305a53e6e284c80e68ea0165a21878c0,2025-10-02T13:34:26.213000 +CVE-2024-52058,0,0,8456ddb479de2d9a00750fff637df5d9d88ad132f2cfeb795c6353701c8d47e0,2025-10-02T13:35:17.877000 +CVE-2024-52059,0,0,2e9eb2c7f5dea39a1bb366ef60fb0d556ecaf71c6c5ef5ffcbd44bf78a8cd579,2025-10-02T13:36:04.960000 CVE-2024-5206,0,0,8862c9be0fc374f53d6a02e5cb7505c5867d3e503357cffe44c63c1a9e66a567,2024-11-21T09:47:11.143000 -CVE-2024-52060,0,1,d680c3749308ba1ee3beda97f84d5ea1cb50df2bc10d70e86f15512edce9fbaf,2025-10-02T13:36:45.580000 -CVE-2024-52061,0,1,c041b2e3e6febf76dda09267f2d63d825c20dda4eee986a622e2a1e8d4a26f74,2025-10-02T13:38:37.063000 -CVE-2024-52062,0,1,abf38616797f7122d2b4b58042630bff2e38a51d5474be2b307fbe681056891b,2025-10-02T13:40:24.267000 -CVE-2024-52063,0,1,2a503f78f5985a76ff372ecd0000bb800e2c4e9374fbb9d4d0638a860a5dcf99,2025-10-02T13:41:19.057000 -CVE-2024-52064,0,1,83761c30cf4afd2c6c6f4a4d8703dd591906819fa6892a75f1cdc1b9f6cd51f2,2025-10-02T13:52:34.303000 -CVE-2024-52065,0,1,396ba2c1dbfc86433fdb37b08ccf8cdbb6a0b3d6ea07bc8152a879f87c4f1ed2,2025-10-02T13:50:46.517000 -CVE-2024-52066,0,1,fe301d4a9d2c8a8efa1fa2697a2da82bd61074bd5e515ab5d674348c1e1b2193,2025-10-02T13:47:46.823000 +CVE-2024-52060,0,0,d680c3749308ba1ee3beda97f84d5ea1cb50df2bc10d70e86f15512edce9fbaf,2025-10-02T13:36:45.580000 +CVE-2024-52061,0,0,c041b2e3e6febf76dda09267f2d63d825c20dda4eee986a622e2a1e8d4a26f74,2025-10-02T13:38:37.063000 +CVE-2024-52062,0,0,abf38616797f7122d2b4b58042630bff2e38a51d5474be2b307fbe681056891b,2025-10-02T13:40:24.267000 +CVE-2024-52063,0,0,2a503f78f5985a76ff372ecd0000bb800e2c4e9374fbb9d4d0638a860a5dcf99,2025-10-02T13:41:19.057000 +CVE-2024-52064,0,0,83761c30cf4afd2c6c6f4a4d8703dd591906819fa6892a75f1cdc1b9f6cd51f2,2025-10-02T13:52:34.303000 +CVE-2024-52065,0,0,396ba2c1dbfc86433fdb37b08ccf8cdbb6a0b3d6ea07bc8152a879f87c4f1ed2,2025-10-02T13:50:46.517000 +CVE-2024-52066,0,0,fe301d4a9d2c8a8efa1fa2697a2da82bd61074bd5e515ab5d674348c1e1b2193,2025-10-02T13:47:46.823000 CVE-2024-52067,0,0,fa447551da92c09e9df3bf1f490ec7ca3a1ef87cbca9e71d73097b25c5317bda,2025-02-11T16:26:42.950000 CVE-2024-5207,0,0,dacc69a605cf55f4cbb721f478eb5fd706609f74fac1ef3688ba0b20e11890c3,2025-06-05T20:49:19.867000 CVE-2024-5208,0,0,532904166d410d6398570038e0af94d3116984eea9227887277d3e825086da5c,2025-07-12T00:51:57.953000 @@ -276311,7 +276312,7 @@ CVE-2024-52328,0,0,a04295d173075f3a62b69f5b2fecd5dafe1dfc267e4f751cb76db853e6a4c CVE-2024-52329,0,0,b29f1c42c2dd46de027c958a729a2e8a6948fcf7f94933c0e1b6badda088652d,2025-09-23T17:33:34.660000 CVE-2024-5233,0,0,749403088352361e2986fc2566426aafc544613446ac5fd3ac82ce8b947196db,2025-02-27T01:48:53.927000 CVE-2024-52330,0,0,4bc91213024f5e2a964d82900e4d30362d5803b9e3cf9e26e3e2f5b594255874,2025-09-23T17:48:33.127000 -CVE-2024-52331,0,0,5b793c6d13cfe614243f36eb2e8bf1fd4d033624ccd4013ebe348aa05552efed,2025-09-23T17:46:12.860000 +CVE-2024-52331,0,1,e4e62815d44245f8193c194571152f3c172f5568dcac9d7a7f61c84842045935,2025-10-02T15:15:52.810000 CVE-2024-52332,0,0,a49dd499216082d3bcf826c498648e279b61af0e5af8caba78ab04852c00894b,2025-09-23T14:42:02.580000 CVE-2024-52333,0,0,b7d0f71813f948324a406290fa6ccd1c978c2190104ced6f812939e57d54f6b3,2025-06-24T13:44:55.670000 CVE-2024-52335,0,0,dd4f62d353da42f6dc7115815924c982f0175669a07ab002418fb12d6de291f2,2024-12-06T14:15:21.230000 @@ -276828,7 +276829,7 @@ CVE-2024-52976,0,0,8c8e9e1556b63e99cb5e93b24304ab2ba8315a93119381d5b45f096ab9d57 CVE-2024-52979,0,0,f29dfd8e4563a5e727d135605104048c61c0e05f43b832cbf7b42dae99b53fb6,2025-05-02T13:53:20.943000 CVE-2024-5298,0,0,3aa9802bbfd78e039ad0f928ab3b932af99979f8d10fe05d8b8a14a275394df2,2025-08-06T14:25:19.830000 CVE-2024-52980,0,0,8346c1bdee1271e16f1a51807e20fdfa2beea65653ad5cb216045bbd58ffb15d,2025-09-30T21:35:59.087000 -CVE-2024-52981,0,0,34a7b38dec43783ae558bf34867a9dec0553794511e5a77dcadb3bdd490ea5a5,2025-04-08T18:13:53.347000 +CVE-2024-52981,0,1,179d5094831f86def2294d638965408e1ff2a6ae5646bb8d06c8560d6f3e8942,2025-10-02T15:33:30.240000 CVE-2024-52982,0,0,87ddbec0fddbec6a4eb61fd0607c77d31103b1dd9283c5a13ec4d5a36a8ccef0,2024-12-18T18:22:52.637000 CVE-2024-52983,0,0,6cf30a09aaa853464d214fc07b1d213f931e08bd912522971a9cefc2fb965c45,2024-12-18T18:23:06.273000 CVE-2024-52984,0,0,11fbf459d3485030a8f786e9a22df0fcdca9965df622457357e14148db310355,2024-12-18T18:23:18.347000 @@ -277672,7 +277673,7 @@ CVE-2024-5407,0,0,5c250d57b291b38d901392bfcc258199c4b6c520f3fc77396d529666871f6d CVE-2024-5408,0,0,fa6b3cfb5fa0c30106c5ac3ea6add5195e2bf0919853555e00f52962c2a69b1f,2025-06-05T15:31:04.310000 CVE-2024-54082,0,0,65aa9ae45e1268a98d7772f17453032df41f59a165b23f820cdeaede4b477a68,2024-12-23T01:15:07.840000 CVE-2024-54083,0,0,e4d4db389b37cc5c7a23859944870199c1e02c029b40479c819040ee376656bd,2025-09-30T15:49:33.440000 -CVE-2024-54084,0,0,c1aee3e143998bbdc982177558f44486e207fe61fab43f3469a59c234690bf0a,2025-03-11T14:15:22.730000 +CVE-2024-54084,0,1,1ee85085a0cdd41b77522d4a74ba7c12bd1605cbdb52a5fbcb8fedfe0735d75b,2025-10-02T14:21:08.137000 CVE-2024-54085,0,0,c17788900cd231476143e3f255e8b11cdd412b98376ba6329df57d275ce55a03,2025-06-27T16:57:49.563000 CVE-2024-54089,0,0,efd2198ce361ea992eb01ea5caf6a93dad81fb83e8cf416236617bce8d42af11,2025-02-11T11:15:15.423000 CVE-2024-5409,0,0,e57e1ade9406d6824e9de4b5fb59a028c0cc0d3b407f2e5791339282678e1347,2025-06-05T15:31:08.950000 @@ -280213,14 +280214,14 @@ CVE-2024-58257,0,0,3718fc409a19211cae96f73793c568cfa3e01bccf5fb2db2a680e5b75f611 CVE-2024-58258,0,0,f502f2e6a4b137a20e95adef25a8d105beda3687cf5bcfa6f847a568092a92c0,2025-07-15T13:14:24.053000 CVE-2024-58259,0,0,7274c003e9c33b99b066bdb1783e62ec4f90532353d66a31fc1539447dbef1dc,2025-09-02T15:55:25.420000 CVE-2024-5826,0,0,676ce5cec2202232492aeb7a31cb471cd0485dd44f0bad4d2271201c9d98c0de,2024-11-21T09:48:24.490000 -CVE-2024-58260,1,1,13998d496398d166a47f4be9eaf3508d4433cf9fd9c35ce19a94a6d5ba08cce1,2025-10-02T12:15:28.610000 +CVE-2024-58260,0,0,13998d496398d166a47f4be9eaf3508d4433cf9fd9c35ce19a94a6d5ba08cce1,2025-10-02T12:15:28.610000 CVE-2024-58261,0,0,172b9fd3d8b7b295abdc648bb9d3c4ca52e78bb2536c72212fff0711f50b2628,2025-08-06T20:59:26.090000 CVE-2024-58262,0,0,6d0436f49501f89a55e0fc7116e284f7cc104ac5b2a6f4814be22d781bdb5302,2025-08-07T14:58:59.310000 CVE-2024-58263,0,0,98ffa9deddfa64e35f34048cf25b95a552230a7d4b774ed50b29a2c771511762,2025-08-07T15:01:17.017000 CVE-2024-58264,0,0,0c3d8cb05077c42fab745628d7ed7902bd23b95460c735e03d01a094538aaf68,2025-08-06T17:02:21.823000 CVE-2024-58265,0,0,b7552704c428833261c15869783f6004e5cb103c70c3b30e74e648f485560b54,2025-08-07T15:13:03.593000 CVE-2024-58266,0,0,4f761f2a88fa77c373ceebfdd5314c674a2acbd7b13253200bca69419616a435,2025-08-07T15:18:56.680000 -CVE-2024-58267,1,1,8278c99c8775bbbced7121825f3edd281944a0a19989a8b78e6bb9747a97d7a8,2025-10-02T12:15:28.773000 +CVE-2024-58267,0,0,8278c99c8775bbbced7121825f3edd281944a0a19989a8b78e6bb9747a97d7a8,2025-10-02T12:15:28.773000 CVE-2024-5827,0,0,12cdd01c3634b5f2da13128a187bc2d1c8d9fa87429a9aed8ec50812f82df183,2024-11-21T09:48:24.607000 CVE-2024-5828,0,0,73069a2f9dbd005f637a8c432d288f4c861c4d147da919c5c71f3de2432e48cd,2025-01-08T21:25:28.967000 CVE-2024-5829,0,0,f09f0239641fdb754784b919d6546725e07ed84be2384ba5f9478a520ddd6f78,2024-11-21T09:48:24.870000 @@ -280760,8 +280761,8 @@ CVE-2024-6377,0,0,7ba55c1a0f44da87190eb66bf8022174cc99a68e4f4460d16cec4625ee8e50 CVE-2024-6378,0,0,0517535a8244e04990dec4863e4bc354d4900ab3ec3f09d0b63966a8bf408ca5,2024-08-21T15:53:57.750000 CVE-2024-6379,0,0,59b490c94b53575f0b1fd05c03a3b90d05a9e3a86a880b002a6d950efdbd8e43,2024-08-27T09:15:03.780000 CVE-2024-6380,0,0,a0114acb703d2d99d168d29b13f890d7146637e1f9094671351763544b18b967,2024-10-16T16:38:14.557000 -CVE-2024-6381,0,1,4142dcc499ed416a068ba8f22fca5322f567796abb254504108757423d4873de,2025-10-02T13:47:04.883000 -CVE-2024-6382,0,1,258ec0530052bfc31cd8ba13bc50b94f26bda5b9d41c21b79c045c8cad6ec200,2025-10-02T13:48:26.653000 +CVE-2024-6381,0,0,4142dcc499ed416a068ba8f22fca5322f567796abb254504108757423d4873de,2025-10-02T13:47:04.883000 +CVE-2024-6382,0,0,258ec0530052bfc31cd8ba13bc50b94f26bda5b9d41c21b79c045c8cad6ec200,2025-10-02T13:48:26.653000 CVE-2024-6383,0,0,b270742266a81ffe3b762bba71f798234282fda1ed7d5720a710bcd8c8a467fe,2024-11-21T09:49:32.483000 CVE-2024-6384,0,0,9fa1823a419526b14e6f711c19585c707a435fc7070377faa120a7daf6ede5a3,2024-11-21T09:49:32.613000 CVE-2024-6385,0,0,d61991e9eeeaf88e0ef24cefe65219272f86e6dc19bd5a1079fe3c128929da0b,2024-11-21T09:49:32.767000 @@ -284269,7 +284270,7 @@ CVE-2025-0120,0,0,2fd1a763f2a8d85ef8fea084d8b102a4bdd89808df8f46a4b6710ba980018c CVE-2025-0121,0,0,ab1b5f513492b32da52a345b509b42810605f75413b2320c976db919e45e2e95,2025-04-11T15:39:52.920000 CVE-2025-0122,0,0,8a7047ba6772458fc769cae5828f4011d52f01fea8b67b5172f392f80be1dd9e,2025-04-11T15:39:52.920000 CVE-2025-0123,0,0,7955b8d39e8dabbf3776f921ee563ac83e82fce9930b7eed029f73d3cc6b5c7a,2025-04-15T18:39:43.697000 -CVE-2025-0124,0,0,a0660a8ebf0e82267579be40c3c9e7d31c21a21d46fee64bb274cdb21cc707ce,2025-04-11T15:39:52.920000 +CVE-2025-0124,0,1,39f7c5449af6c516689817353a9c8934bddd5b60d662163e923bb37bccc609bf,2025-10-02T15:16:35.017000 CVE-2025-0125,0,0,e554dff44f9688a52010db8440762a4a8d907276dd2745e071baf7624a2a0b91,2025-04-11T15:39:52.920000 CVE-2025-0126,0,0,1b4453e3324d0750a93960a33294f4914c0302b059bcbcc71281d7c9d513d6bf,2025-04-11T15:39:52.920000 CVE-2025-0127,0,0,e303a9a2c01a285aee210c2131c17c310104b348913f180c4d8d27a3c936dc7b,2025-04-11T15:39:52.920000 @@ -284711,7 +284712,7 @@ CVE-2025-0637,0,0,527088f0979b18ce444b6ef69464399256b011e8d9eae0913ca1205a9c4503 CVE-2025-0638,0,0,d2f28f2eed7bea7b9f8ec19bd8fd1769a6b74ef8696049ed8fd676bfab511c4b,2025-01-22T16:15:29.977000 CVE-2025-0639,0,0,0605125c0f93bcbc378d140c7800b1d646a4d0fce2e6da1dba238fea0cb70636,2025-08-08T16:54:20.310000 CVE-2025-0640,0,0,5b20a9993e2101995aae8317c5f9c0f7bf80ebdb6df13d6e29ec89bacea57e86,2025-09-02T15:55:25.420000 -CVE-2025-0642,1,1,24fdd1b1c67dd4313ee56cc792640f1270ce4da7b4b0b6d33e470c33b8374b96,2025-10-02T13:15:30.180000 +CVE-2025-0642,0,0,24fdd1b1c67dd4313ee56cc792640f1270ce4da7b4b0b6d33e470c33b8374b96,2025-10-02T13:15:30.180000 CVE-2025-0646,0,0,3fa89761aaab1ecbb519b177daba83187a4dbebf34f23a05d78cdf927adc2ceb,2025-07-09T23:15:24.637000 CVE-2025-0648,0,0,14768df502506893e04a871405a68a3a94ff0c449b83e66c30586b78c50c67b0,2025-02-17T13:15:09.667000 CVE-2025-0649,0,0,552f61256c94ca642d04ce84fe614dda229b5b549b1f94a73a96a4c9b2c3ee43,2025-07-31T18:12:48.403000 @@ -285511,7 +285512,7 @@ CVE-2025-10719,0,0,b78133c801185dbe11442bc65cd701cdd9ed6bf4e062ea9f98fdccdade78d CVE-2025-1072,0,0,750813ceedfb7d92d875ecb99f21bf44014f112b560d1d1a3f685ed2bfe17c8b,2025-08-06T20:11:21.433000 CVE-2025-10721,0,0,5531e9dfa10cca95fb867dea200e8a3532d007d309f460ac287dc60a2859811a,2025-09-22T21:23:01.543000 CVE-2025-10722,0,0,6813f3053a14e77a913db307b2427d77139d69d712a057c66273caafa027b147,2025-09-22T21:23:01.543000 -CVE-2025-10725,0,0,9a19096e396cfc302a0054fe6129963f8e1e709ba9909cedecebabba6b2c0416,2025-10-01T09:15:36.517000 +CVE-2025-10725,0,1,2a58ed4ef0455db99be8440d5079ce1cbfd87be7cce5a88a818f48efff24789e,2025-10-02T15:15:53.017000 CVE-2025-1073,0,0,60172e8f6f7042a3e0dae5bdecfd8cea2f2f414971078e028146b285831b8bc3,2025-04-11T15:39:52.920000 CVE-2025-10735,0,0,498a42570bc78f0be0276fcd88fe65394f9c7e3c9d3fb247d1adc03e15eec956,2025-10-01T04:15:59.680000 CVE-2025-1074,0,0,fa27fa0c9cb977dbec9e01b7e0e09573d564049dce536c4e96cb4da4f04b16cb,2025-07-02T19:11:15.693000 @@ -285848,8 +285849,8 @@ CVE-2025-11221,0,0,10635f66da2826008ba9c9bf960002643c5de3f1ed7aab964b1d02ff35276 CVE-2025-11226,0,0,e38dba4d605a23830b2d2612bc01a4f3feac09908b1e45fe134c233ec4f5b3ca,2025-10-01T08:15:31.250000 CVE-2025-1123,0,0,3e140349aab38ffb5fac0cadfc40ebe2986b451d443b93e3b03363edade0e2ba,2025-05-23T15:54:42.643000 CVE-2025-11233,0,0,1578426c4f950f74fb83c954a622e49f09bab224848b9e4b303f2de1110616bd,2025-10-01T17:15:38.553000 -CVE-2025-11239,1,1,c39a666da890486477e1d368c566f400eb98c183b2473962806dad839b22298c,2025-10-02T13:15:31.203000 -CVE-2025-11240,1,1,d61f4f8736d207ba1b8d8cdbe0a922482efc179750a70cf7dec9d94a26103ae7,2025-10-02T13:15:31.370000 +CVE-2025-11239,0,0,c39a666da890486477e1d368c566f400eb98c183b2473962806dad839b22298c,2025-10-02T13:15:31.203000 +CVE-2025-11240,0,0,d61f4f8736d207ba1b8d8cdbe0a922482efc179750a70cf7dec9d94a26103ae7,2025-10-02T13:15:31.370000 CVE-2025-1125,0,0,64c060281199c9654f8fdd99085ba3139218ea7f460c1edb551cce591e2f94ce,2025-08-12T14:15:27.730000 CVE-2025-1126,0,0,75a0af68b2de42873e4ee33ccd68bb162ec9dabf122dea8ebb0bf11a24b953a1,2025-02-11T17:15:23.537000 CVE-2025-1127,0,0,5cab03037829677b3ff4c77d268b6ebc0b526a062cfabc702392a7f88c64ffc1,2025-02-13T19:15:14.153000 @@ -285965,7 +285966,7 @@ CVE-2025-1250,0,0,948f8f8504fb4e6039d5daa9421aaf6329f46c4cdc22875f0ce19678fe699b CVE-2025-1252,0,0,879badb34857fcb92daaf57f235e8a78c5b2dbbb0866798213ebe8b9edb79d14,2025-07-31T15:15:35.783000 CVE-2025-1253,0,0,3716b2d06442d5e26b5bfdfed34b43ab19bdfc8675134c53b0f8ffc6fd1ea286,2025-07-31T15:15:35.943000 CVE-2025-1254,0,0,2d42fe39b0469e8dea2e9e07ad0ef18f353c9bfde6249c7137d267d3e130782f,2025-07-31T14:15:33.970000 -CVE-2025-1255,0,1,1aca6f27929ccb759d7d03416bffcd39b922af5d9c0ec230e9461392103e3756,2025-10-02T13:44:49.900000 +CVE-2025-1255,0,0,1aca6f27929ccb759d7d03416bffcd39b922af5d9c0ec230e9461392103e3756,2025-10-02T13:44:49.900000 CVE-2025-1257,0,0,05d8edb7ee3cea569d0f878192fce84d7acf522bc66c1f37e161f00a8a0bb7a8,2025-08-08T01:07:44.687000 CVE-2025-1258,0,0,e60d49e74992453b0cd2d8b93f0bc7a60901e2447adb1d6d0cde7627e3bb44f5,2025-02-20T18:15:26.217000 CVE-2025-1259,0,0,96573da653e81cf9f41f5a6e0a68d414d64a0b47be9c10926141f4af2c7ce792,2025-03-04T20:15:37.003000 @@ -288107,7 +288108,7 @@ CVE-2025-21858,0,0,66d9ca804eb089b50343b13981639c14692bfbf712b8926853e87f75b6577 CVE-2025-21859,0,0,38bfe55342d2efcb225e76a67c1e631af015c8226e1d203e7f5d8f22c1a278b1,2025-10-01T20:18:30.150000 CVE-2025-2186,0,0,cad89263354fd092311c6a0b967f19d144a65ee9997059fc729d42796f57f926,2025-03-22T13:15:35.683000 CVE-2025-21860,0,0,d47057a5e6733b4fc7c5608ae2de3532b05d0458156af54ce2fd9ea6edda2c34,2025-04-16T19:15:53.090000 -CVE-2025-21861,0,0,ae21a6363798292a41a0fee6e36f24337d2a116a303c60b9cfbe6862b8f5a0e0,2025-10-01T20:18:30.360000 +CVE-2025-21861,0,1,5c2a45dd02030da2775f74ee257036b02817461784567b0aff6deb9fb5025596,2025-10-02T14:15:43.133000 CVE-2025-21862,0,0,d4e6c76e3d99ebfd3575aa0faa97ac198c94e6a55491b51d50438a1bad6a3b2f,2025-10-01T20:18:30.590000 CVE-2025-21863,0,0,d4838bf9eec68d1369b14504a37bbadd03da66068b1a6917b4f2aa25373afb9a,2025-10-01T20:18:30.813000 CVE-2025-21864,0,0,886e562a4e2cd1457b14d4acab85a4869246403a525264b46c6d8f7d76910bc7,2025-10-01T20:18:30.997000 @@ -289060,8 +289061,8 @@ CVE-2025-22826,0,0,36b6e140cfbfa94ee1e1f9414c9bba12f6b84f8e81d4c4eb37d1cc60556b5 CVE-2025-22827,0,0,3baed988c384781b752e63a63aac2d02b4618a6f769d736ff71142b8ba1a8f98,2025-01-09T16:16:33.200000 CVE-2025-22828,0,0,39a5b744d6ff5c4f03f42f17e0533fcee6d93dac275e60dd6fdcc63387201f7c,2025-07-01T19:20:38.217000 CVE-2025-22829,0,0,5d2323355591036af8275268590702e55752554ece8f91178fecfcf085e83902,2025-06-25T19:38:05.817000 -CVE-2025-22830,0,0,4ff890647df397f3d64204abfeb5f8cc7ce70261364028b9c911ff5712f0959b,2025-08-12T14:25:33.177000 -CVE-2025-22834,0,0,d410c5bf921d59446066f07ca323e5624c7729d6f4eec5087b40b8af6010630e,2025-08-12T14:25:33.177000 +CVE-2025-22830,0,1,5860b52d06fdccdef61b50d900a5230446b1e628f3ff453e75a0f659fc6e1256,2025-10-02T14:11:07.867000 +CVE-2025-22834,0,1,b8f825f4f32ede650c5d8a2ab85d56de557a6d004ff2654e2412ea74ee6762dc,2025-10-02T14:13:43.570000 CVE-2025-22835,0,0,5a3dcbb0db6caed0d293b2385a1d98cd90d73989d0608fc471dc171b2ccb9358,2025-03-06T18:08:28.420000 CVE-2025-22836,0,0,0397d23cc82817a9951afcf58397383ecfaf4e47dd2392f2243fc3e5fb2ebd42,2025-08-13T17:34:12.350000 CVE-2025-22837,0,0,44b033dacb8e2726df0092d557d37995eccde71edf39d22fec862e0e0c807b9a,2025-03-04T17:38:12.983000 @@ -289085,7 +289086,7 @@ CVE-2025-22859,0,0,0b6a20d899cc7d58598935bb112a7261bc957a9b6ce9ab46955b48b282b16 CVE-2025-2286,0,0,8e0d68be57f179e50a7654eaff747b88aeb30c31deed463822775a61c9446c7b,2025-07-14T19:13:59.183000 CVE-2025-22860,0,0,83c92fd0a1703055970578a4d84c9802606489d44b78907df751d7b265939788,2025-08-23T03:15:29.600000 CVE-2025-22861,0,0,28901aacebfd4aaa4f8d6c2066c2ae70b2154ee70a0cfe616f741207eca6595b,2025-08-23T03:15:29.727000 -CVE-2025-22862,1,1,7e54a2214f9070dc4d3bd73263dbc9f33b7165968f97f5e7deba795c16705afa,2025-10-02T13:15:31.520000 +CVE-2025-22862,0,0,7e54a2214f9070dc4d3bd73263dbc9f33b7165968f97f5e7deba795c16705afa,2025-10-02T13:15:31.520000 CVE-2025-22863,0,0,8363f72c27133ead549b535bff164a724cfe11dd1402b94ad596fd7d92bca93e,2025-08-23T03:15:29.810000 CVE-2025-22864,0,0,0ecd07abdfdba3a0e0a0b875e436de1ff1ca8e02f5c4a6fbc7ae8ac876efb086,2025-08-23T03:15:29.883000 CVE-2025-22865,0,0,19a89c82649ad3129bff7c393f18a8aa29547854e8bed3a25f76183fca3a3ccc,2025-01-28T16:15:40.540000 @@ -289313,7 +289314,7 @@ CVE-2025-2314,0,0,da0d16bd7cdf67126af9cb8b7b9eae653178ef2aa94ef32791352e7cdd49ed CVE-2025-23140,0,0,228e663a0046050fd524022ce7f9bf7261209ea111d5a2b3aaa41f57cbff575d,2025-05-02T13:53:20.943000 CVE-2025-23141,0,0,9213578851e826f65d526b78c9ee9ad2cb380a3f37bcf2d1744e5971cdfa0ab5,2025-05-02T13:53:20.943000 CVE-2025-23142,0,0,c12afcfb2fcf788b68bc146846e98694dbca25605eb0ba5203f8225efb7f189a,2025-05-02T13:53:20.943000 -CVE-2025-23143,0,0,6252ec3b85b98adeffcebbedac1ad128d7ce20efeab3a6f4004cbc1d7685d28d,2025-09-19T15:15:48.583000 +CVE-2025-23143,0,1,74babb6e6c02a03e2df16f06d54f354f74234b15b4710c426212e1f2e6d701c2,2025-10-02T14:15:43.407000 CVE-2025-23144,0,0,6c4418a69affaea22d9e8f220ec3bcbeab3d6ccbb956d09aedaa76fba5a052dc,2025-05-02T13:53:20.943000 CVE-2025-23145,0,0,2204c27cac97dc63a7c4ed69238574569918d94dd0ff200890eb772c91724c83,2025-05-02T13:53:20.943000 CVE-2025-23146,0,0,a6694c01c7953bf379ec5641a531c3d26cd98378bbc2d07c121712d85437d49c,2025-05-02T13:53:20.943000 @@ -290924,7 +290925,7 @@ CVE-2025-24746,0,0,e640d68193c997efe97249e6f1cee0e9ce9f97ddc69dd52467ca15646a568 CVE-2025-24747,0,0,d8d5879f141d02ac440b19c8b796e44b06e3fcae6bfd445bce644f72bd561c9d,2025-01-27T15:15:17.253000 CVE-2025-24748,0,0,4c4617fa31e758420dff3f63ef5a443e8b03c3b9f68d73ad125ad1defb0afe50,2025-07-08T16:18:53.607000 CVE-2025-24749,0,0,7e56b04f2f502be4c647ffa52a0c1f2e91f2bc25e979a1ff629db670a4b544fb,2025-01-31T09:15:11.760000 -CVE-2025-2475,0,0,c0a0336fb403efb898458fa5072cfe904fb815c7e89b5030a20878b1fe124799,2025-04-15T18:39:27.967000 +CVE-2025-2475,0,1,8a342cb9f41392d71693ddc24ec58c189035c1122e897e78ba7a40b81b6bcd2e,2025-10-02T14:53:10.797000 CVE-2025-24750,0,0,6398f7b1e29d3519e65e0864494e38f2a68b8317a82c560542e0c4814ca79359,2025-01-24T18:15:48.663000 CVE-2025-24751,0,0,d999066b9fc4be710f419f3d363e7444c778eaf47794160a144b74e633cf7720,2025-01-24T18:15:48.810000 CVE-2025-24752,0,0,af4f34954ca0ffe3b26766ac5519513e555ba1faa97537dceef2a58cbf308756,2025-04-17T20:21:48.243000 @@ -291006,7 +291007,7 @@ CVE-2025-24831,0,0,c92da556f0147b9019570da06039147ae8945532d2deb083de9ea344daaf5 CVE-2025-24832,0,0,6323ca18fbb7b250ae25bd8a26128cc938f8c40313999a5eb50edb4a58e57eec,2025-02-27T23:15:37.310000 CVE-2025-24835,0,0,f400a00930825f62b3ee3a3b4ac348cc3df2c7ac11a9158a57bbed12ae02882e,2025-08-13T17:34:12.350000 CVE-2025-24836,0,0,2105a2b27eb3ab727652655fd6687e9c6f3ddb37ef353b640f3771eb913e5f22,2025-02-13T22:15:12.270000 -CVE-2025-24839,0,0,a846cdd6107cb952410793e2cde865928fce6c802a7520fb2e32a76686b5af5c,2025-04-16T13:25:37.340000 +CVE-2025-24839,0,1,0461285756b48ee72dd81e2963fb62b49981cc20dc76ffc7096efcca0e05d326,2025-10-02T14:50:00.653000 CVE-2025-2484,0,0,db81dd224fb04a4b222ed8145c9034a222c25b121346c742360e791dd95045f7,2025-03-22T07:15:25.470000 CVE-2025-24840,0,0,394b5b662e91baaedb29e0922dfd737dd073f496b6f47f938d2d4971ae4650d2,2025-08-13T17:34:12.350000 CVE-2025-24841,0,0,a2bfe696c59d71d61006c3347b2512e90c01384ccb7467de18b9531d5dd49072,2025-02-19T06:15:21.853000 @@ -291832,7 +291833,7 @@ CVE-2025-26241,0,0,5f2d9a933f3b2f884ecd489a847b9ca013497c5ff3fd7d523fb523bbdffcb CVE-2025-2625,0,0,a69b2a16e33cc77b4a32fd1909039df09919db2fa3840e12d206a48632ea57ae,2025-03-27T00:36:50.850000 CVE-2025-26258,0,0,8d7abf68683ce8e576be374e296fd8be9caefa62ada08fdb00aaeb6eaaf926c5,2025-09-29T19:34:10.030000 CVE-2025-2626,0,0,ea2dc4024c9d8147d3035ca3c15ae2949d9c2178dae7d68cdb58dcfe9202c964,2025-04-02T14:42:26.510000 -CVE-2025-26260,0,0,c9921bdf75bf6340ff9f90a190f9160b4ac9af03c074a2437173e4efa86febad,2025-03-19T19:15:46.987000 +CVE-2025-26260,0,1,0bb5416a9112f7a4bb74ebe8e21e3011595e7f8c39eb0564f2359d081acfacdc,2025-10-02T15:55:48.873000 CVE-2025-26262,0,0,a9159de7dbdc485f4b968ac65e22797c0c98ac316c75b48b3d68e479ee732803,2025-05-07T14:13:20.483000 CVE-2025-26263,0,0,87852969ca209a829a551b3d11cffebf3ca020061fd4d362c34f3d6a1719258e,2025-03-19T14:15:39.293000 CVE-2025-26264,0,0,7eeeb1b8e87d7e06484f4d071bc6d32b977cfa79c395c4fbca1cefbdfdd35c84,2025-03-19T14:15:39.440000 @@ -293937,7 +293938,7 @@ CVE-2025-2972,0,0,9bd90eb57737eba9afab46fcd8061576d92129d2495ebdef7228d08af43889 CVE-2025-29720,0,0,9b73e0686fbe622b35974a849caec30c010b2e44f8ca3ac34a25563280bff006,2025-06-18T13:40:32.790000 CVE-2025-29722,0,0,ca2877891fb5b9bd3510371a0bd9d38fa50473b0a31dcb3ab5591fd6a04068ac,2025-04-23T18:49:16.977000 CVE-2025-2973,0,0,f988078874627143c2def1ab30019bab3c4d13be44205338de0c50c2330cd94b,2025-04-10T14:34:24.567000 -CVE-2025-2974,0,0,695ae768ef6524a31e333a2a15c7b6d7e58b63b62d57be8f5f977780042de419,2025-04-01T20:26:30.593000 +CVE-2025-2974,0,1,dd7ca666dbcdde78a34c091dd97f82fd9b16c1658439ea89a80164b206635a3b,2025-10-02T15:36:16.090000 CVE-2025-29743,0,0,81120842f22b2571ea7e3fe058ac6f5d5658e8dd31a46120b990d9a82771d185,2025-04-30T13:54:38.493000 CVE-2025-29744,0,0,8bfb96f89cce97062c314018c8edec565c77bbef9e00a3d8e5249bb1771ecc3e,2025-07-02T15:55:22.687000 CVE-2025-29745,0,0,2be0a9f589f3c9aacfcf7e0b0f9b3bbe37dae5fde2b250267d3e2c38d659ec69,2025-08-05T21:06:25.813000 @@ -294064,7 +294065,7 @@ CVE-2025-29900,0,0,101e86e752f138d80d23fcb6a764f95c8621744d2739cedab2c6169ed81b4 CVE-2025-29901,0,0,012e2809167e6a53da6ffee7b1c856a7749b698339e845329207bc5350d0fff0,2025-09-15T19:40:55.510000 CVE-2025-29902,0,0,b3d89b0f6881f1cb65d6947442d2a8e60ffe6b407b435a1ceed7358dd30c6b0c,2025-06-16T12:32:18.840000 CVE-2025-29903,0,0,10c68e7ddaac62cfaf56fa2d0c36952343de94dcaf74d7de9700d239804e47d3,2025-03-12T13:15:37.823000 -CVE-2025-29904,0,0,8151be9d68bba0e8c527ecea5490dd29fd8894724b2933080703a0ecee03e639,2025-03-12T13:15:38.050000 +CVE-2025-29904,0,1,74e0eaabf9eab7e7802167722315f4263b8fa54f50b6a96c67f9b5583aed412e,2025-10-02T15:49:13.827000 CVE-2025-29905,0,0,47ba0f867e94a0b1403e3ba42e6c189e508de8b1f54741f966b105e104029c7e,2025-08-19T14:48:46.397000 CVE-2025-29906,0,0,2abf99176d79630851622f42bdd1888aea11567a76dd69f7c3e95e8d3c56d6ea,2025-05-02T13:53:40.163000 CVE-2025-29907,0,0,ed25331b14b8e46a18a6fdba30a17313856fa99fc63bd2049a6ad43d491d9f0a,2025-09-22T18:43:44.280000 @@ -296044,7 +296045,7 @@ CVE-2025-3208,0,0,467c67ee8369e3212684108818f80d158b2f4485a63647368e73220138caff CVE-2025-32080,0,0,476f6d5f06fbb960cd093fb065cf3625046fd24147d1c1820490adfc187e1786,2025-04-15T18:39:43.697000 CVE-2025-32086,0,0,8107266236b6baa60a518c38fae36ee8d97f815eee5785e56619ad780ec5cbff,2025-08-13T17:34:12.350000 CVE-2025-3209,0,0,67195a835acffe5135c80a3d8ad9cc228d886a4b156f30c4554a13ec4114273f,2025-05-28T16:07:37.803000 -CVE-2025-32093,0,0,0be67561f687e419f366910e8dba9fd229d2f66cc865d230a0136e401d9d9941,2025-04-15T18:39:27.967000 +CVE-2025-32093,0,1,f931012036e0d0ab9d1dc10666dbf9a98ddcb4f48a184cc67ee48846c25ce091,2025-10-02T15:02:34.290000 CVE-2025-32094,0,0,9f405f51680a07e7bce53bef27776ef3cd8d86cf2c7b808cef0066d04ab0add6,2025-08-07T21:26:37.453000 CVE-2025-32098,0,0,9aeb6eb7b3c2b7675deac4e5e2afef2997e96369bdc0f918a9ab6e6d4b0c02f0,2025-09-05T19:33:29.087000 CVE-2025-3210,0,0,e3a6c98204c21b98a0522091394112cf3856887b7b64633cf1e308a0cb6727df,2025-04-08T17:43:12.840000 @@ -296140,7 +296141,7 @@ CVE-2025-32186,0,0,d7444af290cb11e37ffc912e4c502334ce15b024cbec174b8f26567128bc9 CVE-2025-32187,0,0,7074b16a6fb8d9bd944478a0f463ed161b1b4d1135515d7645f77a241760ef1b,2025-04-07T14:18:15.560000 CVE-2025-32188,0,0,7116435a3941b02384a36108834841bd2cdf25c9448805a9d926d9df1420d72c,2025-04-07T14:18:15.560000 CVE-2025-32189,0,0,e136d920d2d9b5744268274328880293bdf63bef26f6ce5392413d9a587e7507,2025-04-07T14:18:15.560000 -CVE-2025-3219,0,0,e51c9379f19d140b38d5faad4978efc8fa482633dba1c594ce52d6d4627fcfb3,2025-04-07T14:18:15.560000 +CVE-2025-3219,0,1,fe6793a182e1bad928953e0fe06c17223b1d8c8d95118fe2cb47399d4c1f153c,2025-10-02T15:35:11.303000 CVE-2025-32190,0,0,0da88017114d062137e8a196d5adafe6ce3df3396e42a4bca37b29d9ac304179,2025-04-07T14:18:15.560000 CVE-2025-32191,0,0,4002cb4ce6c85fbb6c06dc117246f96bf729179cdbc5caf84f853a77d65d519f,2025-04-07T14:18:15.560000 CVE-2025-32192,0,0,ac39e50ced6707390437254aa2b92518554157606973e52dcb5317b08794954e,2025-04-07T14:18:15.560000 @@ -296932,8 +296933,8 @@ CVE-2025-33036,0,0,8f22a453c7c81575a0a30e2dd1944e5e164ad58c7f7231abe57ebebef618c CVE-2025-33037,0,0,65dd293416eab7b4477b5ad4a7d19fa1e63550593008f64d53b8d2f9ffa76a20,2025-09-19T17:06:00.273000 CVE-2025-33038,0,0,b83b9863095ed5946072f6eb95bb124f94f2f3ff73fae7e31d472e58566fb742,2025-09-19T17:06:10.107000 CVE-2025-3304,0,0,cd001e23659b91ac09e62e7f84c563c50c19190543e934899e672b5c50fb7073,2025-05-28T21:10:23.573000 -CVE-2025-33043,0,0,044f6c7834f7eed1d82fb6b8377e155f5c1ae51cb36f952b6bba03be184e28e8,2025-05-29T14:29:50.247000 -CVE-2025-33045,0,0,0769b5ebcda454fe45547d5ab9354979ec7cb2a0cdb5556e48cadd4f0f215a08,2025-09-09T16:28:43.660000 +CVE-2025-33043,0,1,2811362a166af33b4167a5bdab3138e5b8934656e0127d89cb8a05808193f012,2025-10-02T14:23:44.580000 +CVE-2025-33045,0,1,c2b9d815253fc95a6e412d71121105b17d15029004b6f9c35930173aca916633,2025-10-02T14:12:42.347000 CVE-2025-3305,0,0,caed50d99616da9f2a70f5ff8ff690cbc48b6002cca415c3290f8e367603d490,2025-04-08T16:46:55.203000 CVE-2025-33050,0,0,07069748d987c9cf309d3fef73bdc9c2f3fb7e40f9cd47b631470a115579c21b,2025-07-10T16:16:47.560000 CVE-2025-33051,0,0,dd9090d5f9230bf4706bf977312ec250f070d7aaae34c0662df0bce6946ac125,2025-09-03T14:48:20.063000 @@ -298391,7 +298392,7 @@ CVE-2025-38232,0,0,b59c5c4de98f460491c42b2561273f52f1c5b558aa0592fecd60c98ce0fd8 CVE-2025-38233,0,0,aba5ba6fb83069ec7292f30a022276b783b700914b8006071fd7b3b1544efa79,2025-07-08T16:18:53.607000 CVE-2025-38234,0,0,7801cd6daadf896b034b55772ae192aff2623e5097c77279aba0275b578ed8f4,2025-07-08T16:18:53.607000 CVE-2025-38235,0,0,59873f035daa0e680ba496a3e232026e89dce464be5b4ba966b2d6abbb44f108,2025-07-08T16:18:34.923000 -CVE-2025-38236,0,0,d69f3071ae3b0b8a43380881b7581973d674baa0ede287fa4e1368db056c1d85,2025-08-09T15:15:28.627000 +CVE-2025-38236,0,1,d1f65cda60cd1b1f0877bc280a072258c31fe0e4a92746b297bdb103a06b4cca,2025-10-02T14:15:43.583000 CVE-2025-38237,0,0,3fdb0a5b39477f2910150e2e191c0d515db3c8030bb3e6ce688865dd74daa358,2025-07-08T16:18:14.207000 CVE-2025-38238,0,0,ce222b5cb2d0713405724eecf43ab4cffcc34c7c7b589632a657d5821fa9cc4e,2025-07-10T13:17:30.017000 CVE-2025-38239,0,0,3b08d53cdcf42f25a8b28427edcdf96ce947f4d525c00f009681276116184062,2025-07-10T13:17:30.017000 @@ -298909,7 +298910,7 @@ CVE-2025-38705,0,0,f0012e19e538168c0c44949292bcf1c2ff6a7e201d893be667cf6c34d6311 CVE-2025-38706,0,0,9fc70ae537eb0cd7992e377ca8ddddf2718a0cde0bd29baeef74e0f3fb774a91,2025-09-05T17:47:24.833000 CVE-2025-38707,0,0,df84d30c59ba3c33dfc928d6f46ec670fa3ba84432f7d47561d01338259b7758,2025-09-05T17:47:24.833000 CVE-2025-38708,0,0,185adc9394704d32f36bb7c9e4cacf068fe977394e1c29bbaf77d9ccd07ef353,2025-09-05T17:47:24.833000 -CVE-2025-38709,0,0,9f299ee755d13bfc4d0a8bf5b21ee1d859f24ffc149381fead78175d01485547,2025-09-25T10:15:31.403000 +CVE-2025-38709,0,1,bff3c7e26283d5d195e13393da0f1f86dbcdc442a275646b9e03af7925a12025,2025-10-02T14:15:43.713000 CVE-2025-3871,0,0,5fda6470f74db15cc9c4cca669930c49610170c12f61b6c7bb768f048b6a64f9,2025-07-16T14:58:59.837000 CVE-2025-38710,0,0,bf129ba7c1155ce7d95e4e24cb25dbd28f3377fc922e93594b842ad6012f3717,2025-09-05T17:47:24.833000 CVE-2025-38711,0,0,4f64675be0142d4c4c03d9a3788a9d03d3c81fbd13bed743f8b7f5705c1fa901,2025-09-05T17:47:24.833000 @@ -299506,25 +299507,25 @@ CVE-2025-39865,0,0,67e66174a621897226d22aa96e401e199bad5dded6b2063bfc777af7e7118 CVE-2025-39866,0,0,2911894e8a0d10a6432efd59f9293c5b6a8eaef0164c368da9b572aae90c4b4c,2025-09-22T21:23:01.543000 CVE-2025-39867,0,0,12b76864a00bb96839dcb8efc20b4c4f7fa13c7329ef00c7f45f23e59b84f86e,2025-09-29T06:16:41.710000 CVE-2025-39868,0,0,2c16844d0a4fee34dc25d2f11b5fca5c79b015a902a7cf8834c57f04d630d676,2025-09-24T18:11:24.520000 -CVE-2025-39869,0,0,3cea9b5e369ed1aac2c36a821f310101802d6487377ed8285a873cb2a200a59d,2025-09-24T18:11:24.520000 +CVE-2025-39869,0,1,5f4517f759277151135727647278b0deac9f9a86b1ab75cfa4a45f7a4ef23ae9,2025-10-02T14:15:43.823000 CVE-2025-3987,0,0,0ba010be0ff8a310d9be1944e18013e7f8df594401f3103e327ce2c2e77526a2,2025-05-07T18:36:05.907000 CVE-2025-39870,0,0,8ad9f5003190518ad0ad0a0f2159b9cc7336aac72d4afecf0abb81e73d5c791e,2025-09-24T18:11:24.520000 CVE-2025-39871,0,0,d7ecf1fce6ef4f796c7f65a8a9f18cd309790cdb60f67f8a1063cc0d9e79ade1,2025-09-24T18:11:24.520000 CVE-2025-39872,0,0,fedf7727baf0eda52de9f9bbdb441b4318c6ce54122ebab702d610c4b167363d,2025-09-24T18:11:24.520000 -CVE-2025-39873,0,0,ce0f2992965e4edf91af2407cd445634725972721896d28a6e0813441867edbf,2025-09-24T18:11:24.520000 +CVE-2025-39873,0,1,2143f5aa3a8c24110e369812ff0c4c6e5abf6de3487a7ea2e4a1c16c27cb2a25,2025-10-02T14:15:43.937000 CVE-2025-39874,0,0,083a273720d8a8adf2698d3d840ecb387fc918507e1f3c863c668d85be3bef47,2025-09-24T18:11:24.520000 CVE-2025-39875,0,0,7b60f3ecc19cc6c04b50355e20c73b6c07972f82b5f97bbdaf562dd187e9e913,2025-09-24T18:11:24.520000 -CVE-2025-39876,0,0,19b5459b1dcf378a48dc936a729d6d38250785904bc1d9d9597edc5f5204cf36,2025-09-24T18:11:24.520000 +CVE-2025-39876,0,1,7586505ab3fea389907ea95636540ff9f34dc99b3e0f7cf1a03fb2640a09a7e8,2025-10-02T14:15:44.043000 CVE-2025-39877,0,0,9a3f33507e29f08b78e57b73e1c1facdd06523a04824edaca4e22f24a8041317,2025-09-24T18:11:24.520000 CVE-2025-39878,0,0,be3fa225d195105c43accb40637e4556848aca2e9ad803a6531aff4dae616ec1,2025-09-24T18:11:24.520000 CVE-2025-39879,0,0,f13e1e1027c8b1e748b97dfa5342b0fa87cf8d132aa74c601cab50dde4b7612b,2025-09-24T18:11:24.520000 CVE-2025-3988,0,0,aba2015fa42ade920bae8cc8f7ccbb522ac614a4089ef0705c73b0c83d27c780,2025-05-07T18:29:25.460000 -CVE-2025-39880,0,0,299e20abdfa81f759c877ed707eea228b4e08e5deee8f54d3048cf26e1479682,2025-09-24T18:11:24.520000 +CVE-2025-39880,0,1,fb3fdd33cb104f4665a271e79edc26cf5a779224fb7d4a7ae50a2d8382eb8caf,2025-10-02T14:15:44.153000 CVE-2025-39881,0,0,ad2129ae6d369359049bb7546f92f3583d7eeee02aec3cfe6b7a2e6624746a72,2025-09-24T18:11:24.520000 CVE-2025-39882,0,0,b316ee56d0ba58239945946b7103cbb174d50502a36bc2aae4c299bb7d855502,2025-09-24T18:11:24.520000 -CVE-2025-39883,0,0,d882dec18868c19c9f994a6c368691a400a3acf96bdad62bb83c1e3c4989f37f,2025-09-24T18:11:24.520000 +CVE-2025-39883,0,1,f58a767a471033674ba9e3231cad8e5ec952254777e70190f1f1d8ca8d58a6dc,2025-10-02T14:15:44.260000 CVE-2025-39884,0,0,e650c328b424bf541b8586ebae9110c9dec90959a87f471903a66d71f54758df,2025-09-24T18:11:24.520000 -CVE-2025-39885,0,0,3dec2abbaa67165601218bfd1f33e6443ec06067d9d1079746afb609d7fff984,2025-09-24T18:11:24.520000 +CVE-2025-39885,0,1,84782fb1d3c7f69e32cd7138115005b213cb493f4c36e59a19e0a736261b3f02,2025-10-02T14:15:44.377000 CVE-2025-39886,0,0,5216cb2d709bb53b97f53e0c2b95f3d2526ce98dfb0f498e8007a675dd536877,2025-09-24T18:11:24.520000 CVE-2025-39887,0,0,e724c2d135394f0e3920a39e01b4ce2740283fd888bed322f9975cf7bf596b54,2025-09-24T18:11:24.520000 CVE-2025-39888,0,0,4c27ad06c21f74b896caf9faf75e045513dbef54ed14399711269eb128d3db40,2025-09-24T18:11:24.520000 @@ -299548,14 +299549,14 @@ CVE-2025-39903,0,0,02a74ab720925db19d1cda80977c88644faa04e5cc9a37c7dc9efe17c446f CVE-2025-39904,0,0,f2dee793ebe2584fceef51ee2148a12da771a8cbaf1f0b7cee998c4a4f06b074,2025-10-01T08:15:33.250000 CVE-2025-39905,0,0,54ec59320c13909b81a6a45703ad589645af06af9786fb19561f06890efe1de0,2025-10-01T08:15:33.370000 CVE-2025-39906,0,0,ddb7227a7b461bbd5b1c271465e5ace174e4cab4ffc163789682ed74ce3783cc,2025-10-01T08:15:33.487000 -CVE-2025-39907,0,0,48de8391e6a44a79b6d7d367dbdc7a1d345759602843ce1dd005c3390e30ddeb,2025-10-01T08:15:33.603000 +CVE-2025-39907,0,1,c4fe319a7f919567ff006f7da4e8293c86677f924f71394582c1b89531274a50,2025-10-02T14:15:44.490000 CVE-2025-39908,0,0,02ed506afb9024c4636d93fabf334c21251be494e9c5af4bfa0e0247a74a5cf6,2025-10-01T08:15:33.727000 CVE-2025-39909,0,0,486c4887c929a65fabe3893a3258d23585b38fe76bbed913a97ef04588384e11,2025-10-01T08:15:33.850000 CVE-2025-3991,0,0,5c9f69c7819fd4dfcd1a5a46f87359b8d5b3ea39d332f84b96e67c7a8dabb6f1,2025-05-12T19:31:21.247000 CVE-2025-39910,0,0,1bbdfbf293bbd6562ca14ab48707b0a6277989d6527cfa2613ef4bf6bed63314,2025-10-01T08:15:33.993000 -CVE-2025-39911,0,0,e6c36a318218fc0091403e955847b142ef7e8703dc369effb0a1b94f2800eea8,2025-10-01T08:15:34.140000 +CVE-2025-39911,0,1,421d56bdfac81a59bfd0a2fc62da849a15cc2f8c2e9536080dcfee9de1b30d30,2025-10-02T14:15:44.607000 CVE-2025-39912,0,0,2449d5af45ee35002d6deae67913b932087c8bc7487a72f802c16d26f32156a6,2025-10-01T08:15:34.270000 -CVE-2025-39913,0,0,85cc1ee6135e774509d048128a21eccc362220a09f508fa4b41ac483c42cac9d,2025-10-01T08:15:34.390000 +CVE-2025-39913,0,1,f208f9c9f0495a2b1e7ee148ae8ab34ad7d1039d22a5f325b74e26669749bf95,2025-10-02T14:15:44.723000 CVE-2025-39914,0,0,5dba5be14ba6e88fb0227c14576ecafb03c401ec1f8ad787869e1871819d001f,2025-10-01T08:15:34.520000 CVE-2025-39915,0,0,36e6896d1407b7969ce56d427a538b05760e66bd7aa8f8d2f3aa9cadc5cbc489,2025-10-01T08:15:34.647000 CVE-2025-39916,0,0,dbc8f51a5995ce6fafbda76b4308f9311513de54f9446f00784f1297a4fd37ba,2025-10-01T08:15:34.763000 @@ -299566,7 +299567,7 @@ CVE-2025-3992,0,0,619824d71cb5f0374a63c9454cfbbe17fab3b425f14b779238656ee5bf36d2 CVE-2025-39920,0,0,d297cf84d72ae14b82b3c1a9b35c5d99f96f6ccfe9a6db41f790556d10e62f28,2025-10-01T08:15:35.237000 CVE-2025-39921,0,0,496a8aec69b147dc2335d3ba64e812aa0c81a49d7c6501911b8d778f453a0af4,2025-10-01T08:15:35.370000 CVE-2025-39922,0,0,1a51ff75e63f1ebc6484470c32fb48c89022c48799eff8151d53bc546982f2cf,2025-10-01T08:15:35.487000 -CVE-2025-39923,0,0,0f08fb9b69d712ccae456cc22a8b762fd88565c29be2b1120ddc52d07aa00c31,2025-10-01T08:15:35.610000 +CVE-2025-39923,0,1,a15c42e5d2b99ffbf26dddedb639cc764a29aa9a285d1aaeec46753c9106cdd2,2025-10-02T14:15:44.837000 CVE-2025-39924,0,0,568616eb9f6cfc10556dcfbba29f6d1d49ee49911d57470097ede171da672f0e,2025-10-01T08:15:35.737000 CVE-2025-39925,0,0,4dcadc66845c4bda8cb05b9a8b250e6b771b525413d328c4e6998277868a1815,2025-10-01T08:15:35.857000 CVE-2025-39926,0,0,6d68b6890da44ed69f4732e37cca9adc7a98c55c9a0591d8fea6cf195b3778c7,2025-10-01T08:15:35.977000 @@ -299889,7 +299890,7 @@ CVE-2025-40992,0,0,55497c4779a9631f45f141ca107ec65a279bbc928980e05abebeae10908da CVE-2025-4100,0,0,f77bad4e79dd995e69fb9df2c2feed5b3f15d25f3ec0714aaa9ab5523a58223e,2025-05-02T13:53:40.163000 CVE-2025-41000,0,0,9e192a2cdab387d989a2ab959094b17d0397755d90aaffc51f0bffb2a1bb23f1,2025-09-04T15:36:56.447000 CVE-2025-4101,0,0,481e3ee81d9ced511d86706ddbf21e16ba7244b1e206df435d80c8013121d01e,2025-05-28T13:28:20.060000 -CVE-2025-41010,1,1,95e29336a87a91a0eaf6c5e7bb81a29dd8e33820fa202649f1215e51b8153a7c,2025-10-02T13:15:31.717000 +CVE-2025-41010,0,0,95e29336a87a91a0eaf6c5e7bb81a29dd8e33820fa202649f1215e51b8153a7c,2025-10-02T13:15:31.717000 CVE-2025-4102,0,0,a51f5553369d28cb1dc0282a0efd83c5ec25a5e5c8e67f7e0b9dda6cd0b7cf50,2025-07-11T12:39:11.507000 CVE-2025-4103,0,0,95ffd1bbbd8b91948da068554f13130bbdb49af71cd7a23c1f27918b987446dc,2025-06-02T17:32:17.397000 CVE-2025-41030,0,0,f3f08bdaf1517f55ed9cd90745fda6e60d67b8383851a48bc0fcbf9474a2e719,2025-09-02T15:55:25.420000 @@ -299928,7 +299929,7 @@ CVE-2025-41060,0,0,3f16952f196966f64bf74029e06eb76a23d966d46c3fc6b13c5e243df54d2 CVE-2025-41061,0,0,5c534628c12f313b1a520d43c9b4da7335aff25a64b71dfcc1713f3698f2ab2e,2025-09-04T17:50:34.057000 CVE-2025-41062,0,0,64db17c186b6ee805014674c3aac4975edc63d045ec0a8c09b3d7adc86f28b0b,2025-09-04T17:50:28.117000 CVE-2025-41063,0,0,79b43d2cdd66d456aca18c96965c2b1c7321502ccf29c7ff3a46303eee2a5a5d,2025-09-04T17:50:21.547000 -CVE-2025-41064,1,1,8710eb08bbff9477d3e408c2766e27d585fa9565e85e869019cd6e248863f672,2025-10-02T12:15:29.050000 +CVE-2025-41064,0,0,8710eb08bbff9477d3e408c2766e27d585fa9565e85e869019cd6e248863f672,2025-10-02T12:15:29.050000 CVE-2025-4107,0,0,80bb7abdec5d37800b07ca68e7dfa10215abe5d87f8e994a47512d482e70dee5,2025-05-08T23:15:53.240000 CVE-2025-4108,0,0,99f1be6498bde74cd0dec545c35ee00e799f5fd928071043f07160da085a8dfe,2025-05-13T20:26:29.923000 CVE-2025-4109,0,0,0fdd257ebdcd9712bbbe8c6079eccfde19a10a05d503fef8381784b5bf1bee49,2025-05-13T20:26:18.360000 @@ -301348,7 +301349,7 @@ CVE-2025-45813,0,0,1cdb35349454355ea90284f73a3a629e371e03fd1917b24cadfbc183cc8f1 CVE-2025-45814,0,0,8e500fbe650a74a0fb125601ba4882cc600d6293d2674f68472c4b342456b8fe,2025-07-03T15:13:53.147000 CVE-2025-45818,0,0,9a72de08da5294536bea0753f94263b2b855db9b94abd12b9c3b0d1fd37d9e3b,2025-06-17T19:42:01.770000 CVE-2025-45819,0,0,c665b8750201a2fc239ff6acb7a2f60c43e76c91b36aa53da175cb91cdf72bb5,2025-06-17T19:41:54.183000 -CVE-2025-4582,0,1,328ef56a56a10e9da0e96b93cb09724a26441c358d449a3afeb7ac5ffd42afc6,2025-10-02T13:43:38.587000 +CVE-2025-4582,0,0,328ef56a56a10e9da0e96b93cb09724a26441c358d449a3afeb7ac5ffd42afc6,2025-10-02T13:43:38.587000 CVE-2025-45820,0,0,95a4e4eb3429b44b329ce72184a4d2ba508647a05ea4c8a36c99350258cec814,2025-06-17T19:41:43.420000 CVE-2025-4583,0,0,d033db5d8e1445724b5ad15f6035fe34ad2e9550c6dccd9e6ec8dd9370a2da58,2025-05-29T14:29:50.247000 CVE-2025-45835,0,0,b5a2ddd334a5a69e8e14fa66eb09ef9ca47475f518b477dcf849e79072195f44,2025-07-09T01:57:10.290000 @@ -301754,7 +301755,7 @@ CVE-2025-46558,0,0,a2ecb4d0920985345c0670bbdc2342326bb125337ec5b8781ea31eed362a5 CVE-2025-46559,0,0,0eb89fa97be833f753a4eb284edfefef0ef58b8e0a447c7cd3b442b5d84bb60b,2025-09-03T18:29:40.357000 CVE-2025-4656,0,0,e42037d3d52d4a722fc31ecc76e72ee9b988641c1cc79db375596da1df17bf9d,2025-08-13T18:02:04.647000 CVE-2025-46560,0,0,6a0b92fa9b29effaffc6e89d51a92fd2337a6f1c3f6c1149eb2801e9c0d0f8d6,2025-05-28T19:15:56.887000 -CVE-2025-46565,0,0,ca429903a3b00afcae2e0e85a323a8fb9b403b7095ab653703dc40490c695e06,2025-05-02T18:15:27.060000 +CVE-2025-46565,0,1,b4bfa3d52c36192c5be68c5a369770347b77680392dd0da3c88be76c629e59b0,2025-10-02T15:40:34.403000 CVE-2025-46566,0,0,24d113192be0c68059a74a8b38378d8007a4303882cf168243cb6e7bc5606a7f,2025-05-28T16:02:36.163000 CVE-2025-46567,0,0,bc82994034cac9d270d67e3ad4b581e4a047083d44f54435e8936072aa047d70,2025-06-17T14:19:39.290000 CVE-2025-46568,0,0,74c299788a3c6fb1d3c1e3efa08198b5d781f2674e99fc634be9d4c153a96da1,2025-06-17T14:19:19.067000 @@ -303997,7 +303998,7 @@ CVE-2025-49551,0,0,6a3b273e713b0681470e6b66c827509dbb9079ea2aeb5d09d2d9a3f3b8172 CVE-2025-49554,0,0,96e1a8faf7d46f7ae442bedb7ebba6bb9b5d7305fa49e0d56a27cb55b3d506d8,2025-08-15T15:37:34.777000 CVE-2025-49555,0,0,60fb962ae2a5141d14bfae6fb7b603832cb1a571759b3eea8b5a59fa85cebe9b,2025-08-15T15:39:48.550000 CVE-2025-49556,0,0,17f3cadb64ce85a787c6c8a6e046656e1b03c5e7c861f32f7420d939181120c3,2025-08-15T15:39:58.133000 -CVE-2025-49557,0,0,de11c69a43dcae3d9f8574c8d14291a8e7093b9cefad0da0604921241b32bb9a,2025-08-22T17:15:32.147000 +CVE-2025-49557,0,1,5db6f2070f1108d95a85811d04b9cd1fbe4b9ea88ba348d49e14babfbd663037,2025-10-02T14:43:02.840000 CVE-2025-49558,0,0,293c94fb3acd8a445aea8de95233c827ed9177f1d19b329460c4fed9f2f35ef3,2025-08-15T15:40:51.597000 CVE-2025-49559,0,0,f23977da65c2b138e2f76c7d8f2284eee2194c7573860a0ea14c7809d2061dfa,2025-08-15T15:40:55.130000 CVE-2025-4956,0,0,dc3c9ceb3ea505e96977fd5dd24ebc74ab95cd1505aa185538e1b2f6372fb9eb,2025-09-02T15:55:35.520000 @@ -306106,6 +306107,7 @@ CVE-2025-53877,0,0,fc3212a53f962fb80a7235c0da97322d071be92c715554fd6d58e5b51c8b6 CVE-2025-53878,0,0,9165505352b5c37b8c1961bf21efc7a42907de0187eebb25c825c3378919917d,2025-07-12T03:15:21.510000 CVE-2025-53879,0,0,545c12e530654eaf9a8103b69e46604978ae38f77eade94059202eada8fbb209,2025-07-12T03:15:21.570000 CVE-2025-5388,0,0,1d6b962bcb08bcd26edb12f11a701da907c096511b72ce6c08959208f393ad89,2025-09-11T20:43:40.707000 +CVE-2025-53881,1,1,375b84494a39eea9b5c35cdfb3d8c8028bfa63ca3dc1bb1db3c7f7bcebb8d626,2025-10-02T14:15:45.010000 CVE-2025-53882,0,0,01826766f09695c0e4bfcfd3affdf1264737a5b246919f8af259ae67d84f64da,2025-09-03T08:15:31.683000 CVE-2025-53884,0,0,fa446ba69c72dcbd79a307abc2340483f7916f9fec552851b3e1a10a5f5b417a,2025-09-17T14:18:55.093000 CVE-2025-53885,0,0,5f7da26e13d2330dbf6f7fb4cafad95528f5f03ddb037698d9c8938ab64b8f99,2025-07-16T14:18:18.337000 @@ -306290,14 +306292,14 @@ CVE-2025-54098,0,0,b81ab2ccd157c5bcb9c4febcb1cc0fa21779857b3fb1ed4e2448947422673 CVE-2025-54099,0,0,cd7f58ed0ba954bf3c231073061ab84a92dc473de5e9c2bc567807c1f64e7110,2025-09-11T17:14:25.240000 CVE-2025-5410,0,0,60de637176ae188b21c928ddf29aeb5cb2d5057ec1cb9930e2bf7416d8e02e6f,2025-06-02T17:32:17.397000 CVE-2025-54101,0,0,91587f2796f96c1e49b55055faafce8e209661c416089889f7e7a00dedeb81a7,2025-09-11T17:14:25.240000 -CVE-2025-54102,0,0,e81bbf7e60c3383b8286deedfa1e6bbd4078282f5c62d047fabefb9b14528431,2025-09-11T17:14:25.240000 +CVE-2025-54102,0,1,38117f95a0907ee339843cd678e5d69c627dce43f28ef1fdcb63d0ecddea7d42,2025-10-02T15:01:04.387000 CVE-2025-54103,0,0,647e506df7e35a1f01ac0e77e9c8c9495fd27d8a5d59c39986bd6239748974a6,2025-09-11T17:14:25.240000 CVE-2025-54104,0,0,230614519b267248c016e28a8af1735f0c905062bc58ea8f5cf66113ec531994,2025-09-11T17:14:25.240000 CVE-2025-54105,0,0,e694dfc9b4929dc131f1995bf6139bae48b6701a9ae0f3e5b53c3eed81f7da9b,2025-09-11T17:14:25.240000 CVE-2025-54106,0,0,c836cf23ba2f5ea328ef5dcc8fa0610429881031d3eea931d79b5ef092243106,2025-09-11T17:14:25.240000 CVE-2025-54107,0,0,6e3660967cb4568ec3bac275084961132c95870dedb02153686e1a6731115464,2025-09-11T17:14:25.240000 -CVE-2025-54108,0,0,b1c86f9ccefe6900b18ca4a707190ea2f9795f02a48a3caa353cfdd6f138b2b6,2025-09-11T17:14:25.240000 -CVE-2025-54109,0,0,132cd9cb168768e43f4810d9b23c2e87ad61b801094e51d29afafc999de637f9,2025-09-11T17:14:25.240000 +CVE-2025-54108,0,1,956e2c58d952140674fb77692208488a5bd1ecc792c8b5bb622e9749ac8fd8a8,2025-10-02T14:36:24.210000 +CVE-2025-54109,0,1,b4b9ebe6310057407bc970c546b65cdc4facb36ec05d95aa928d796d0deafb1b,2025-10-02T14:36:32.837000 CVE-2025-5411,0,0,ad8be7495abcae78273f6c1ce2f42bd21b73f6b28a6ccf317309fd27de8359de,2025-06-02T17:32:17.397000 CVE-2025-54110,0,0,f0cc192bdb024b0eacfeef7bfd2848d331c83cfb45f5054f037208e8f5837857,2025-10-01T19:56:19.163000 CVE-2025-54111,0,0,5117997dadc90b7edcc31b7c324e6fee4979cd3344430a18ef23e78546341acf,2025-10-01T20:00:39.310000 @@ -306413,11 +306415,11 @@ CVE-2025-54248,0,0,000b74b3d9a9f6a9a7e5f510d1653a4f9c0ed94dc5a62a979640c5378877d CVE-2025-54249,0,0,978ec55a5662d2eeda792d77698c036c5fe8a55a54edcb7128dc57b54a469e96,2025-09-12T14:21:46.463000 CVE-2025-5425,0,0,f606444a1d6aa9ebb0d9abea2da121b7bac702d032e173b190d1683a8bbeaca7,2025-06-18T15:15:13.637000 CVE-2025-54250,0,0,5d7d14eea431d6f9af5df0ba39de37c708df52a1d175a38b836e6dd3b7055c11,2025-09-12T14:22:03.050000 -CVE-2025-54251,0,0,87854c5bf284e69071f6d41a4ec6fbf6ef1947235628c2b22a97d22038898ce4,2025-09-30T23:15:29.333000 +CVE-2025-54251,0,1,4ce752a05ab511d528b881d205938727a7eb725d731aa10624c126f94bac254e,2025-10-02T14:43:16.193000 CVE-2025-54252,0,0,a42912188b8956f153047cd429f289ac7b403e0ba87b1df2e1eb088d38746304,2025-09-12T14:14:17.757000 CVE-2025-54253,0,0,0efd7cfb21f5ef889597f1b69c5f5b415c4b4971cca12e142cb6c2888135b3a1,2025-08-13T18:56:02.910000 CVE-2025-54254,0,0,5e51233c9cfa27be5bdbcbfee93dbdc171395216049b5d293e01b1be4d134563,2025-08-22T17:15:32.407000 -CVE-2025-54255,0,0,1532c75c4d7fd5a6e056cb4baccb50316639db31c868d2b615244cb0269b3ed0,2025-10-01T22:15:31.193000 +CVE-2025-54255,0,1,3701eeb31860a6d701dc3724f6939cd1aa957fe1ea66fdda43284c8b2de5e33d,2025-10-02T14:43:43.207000 CVE-2025-54256,0,0,23ec5a8cffbc2658c9f03e924e214c30831b8a701f5d87adbb570730c8fa9be0,2025-09-15T14:20:49.737000 CVE-2025-54257,0,0,2f92f4121e9e3ddff7e16013d0e12c2646d8c8cb2ba666084649b83915caf509,2025-09-15T14:19:33.977000 CVE-2025-54258,0,0,000ec9f4507ccec4c28c12096de9d8c66036ae8052bb70f0983c2193a5cde241,2025-09-12T15:02:57.290000 @@ -306428,10 +306430,10 @@ CVE-2025-54261,0,0,a1a0711c3facab77b802f9f5226d82a69ccbb56c4fc648d46a47847382105 CVE-2025-54262,0,0,583446d3b9de22d3ef42515af4efca9665e05c589fc102a08c503e5079b76074,2025-09-18T13:38:25.510000 CVE-2025-5427,0,0,5f63d9ad9dc6404e6fb72008382c641e46396609fcc52c5828eb2252185ffd4c,2025-06-18T15:14:51.873000 CVE-2025-5428,0,0,2e7c423ec5ae3bf4368570058331740a674fc62a4682da3d065e5fa91ab978f5,2025-06-16T16:18:13.987000 -CVE-2025-54286,0,0,4d3dfd77a903642554c7b0ca701664c78cea77032f866f2cd77d2bb9222224e5,2025-10-02T10:15:38.427000 -CVE-2025-54287,0,0,4bc682cfde72927b708a7078a82b8ccaf40d2789aff3a898d5cf8ee6de5ccb60,2025-10-02T10:15:38.707000 -CVE-2025-54288,0,0,a01a6c19338e85fc039b6868c15a3eda888407552fe3e82f177b5f2de4ba7205,2025-10-02T10:15:38.887000 -CVE-2025-54289,0,0,78b294b06a86277f6edd7c7d367042137e79cad90df50bfa4447aea81b1a80d5,2025-10-02T10:15:39.053000 +CVE-2025-54286,0,1,d74cb5dd2ec98fab58c7f14c768f10e5d67a94e81e28d2cac579558942d1ada9,2025-10-02T14:15:45.173000 +CVE-2025-54287,0,1,6e9405cb60832c57be3e92bee3e82a87e77826d927cfa2ae044b268ab6128e1c,2025-10-02T14:15:45.290000 +CVE-2025-54288,0,1,aa9aa7a0977ed45e5e364a0ef25c7b8d836e026ef3650df10893224157a4259c,2025-10-02T14:15:45.400000 +CVE-2025-54289,0,1,0162fa832f529a43d537da3fd581424fe5d5ca769626e3ccbbe38642ce8eabe0,2025-10-02T14:15:45.520000 CVE-2025-5429,0,0,4fb90f6f61f001b2df63d98ac4a6940b3b8387c064a27049429bbaa8520457eb,2025-06-18T15:14:39.320000 CVE-2025-54290,0,0,2a1effb3a89106d4520ee57a0a700babc47e864214b60c541417078b0e3fcbf3,2025-10-02T10:15:39.227000 CVE-2025-54291,0,0,e5e13cacefa75a251ca1ae9399995d10c7142fb49cae31ca0b264cd02f4e9510,2025-10-02T10:15:39.387000 @@ -306908,13 +306910,13 @@ CVE-2025-54908,0,0,ac4403d24e65c32b472ce1c330e9d215ce666ab510b4a41a4a690e2212197 CVE-2025-5491,0,0,bde4a3997792f29e78b23bdff62128712428eb2913e7a1e844f896d042cfe900,2025-06-16T12:32:18.840000 CVE-2025-54910,0,0,e92d311ab9adbdd025c1853f30d7e6db741fcc358988970f22c0b2dfbff991a0,2025-09-12T16:54:37.893000 CVE-2025-54911,0,0,19c1e8f010bbbab21485d71badfc3df3655d12e783011349b652b08b2596ab9a,2025-09-15T18:02:12.710000 -CVE-2025-54912,0,0,b979bd0a89eaa750401600baef6b078720f2ffabc4a758793212a2409e602e67,2025-09-11T17:14:25.240000 -CVE-2025-54913,0,0,1d512678ee8f46ff7a9f56530b9727aa6265707e1e2345999f0450ef5506a245,2025-09-11T17:14:25.240000 +CVE-2025-54912,0,1,7a00e39ae991553b2906bca2688e22e0f7557a016b6c3a7e167c497a8fb69930,2025-10-02T14:40:53.743000 +CVE-2025-54913,0,1,cd6310b35378a394e9cd56f7518cb6bc384e98691910b4389d209cfe0c9b60d0,2025-10-02T14:41:09.277000 CVE-2025-54914,0,0,3337bff3b5ab54077a2b0b996d7d568dbe372bd171c6109e575468e0ec3beae5,2025-09-05T17:47:10.303000 -CVE-2025-54915,0,0,65c293059b42b2dfafa03fcffed88452ca763682b2f699336f3bed5fe14d2d4c,2025-09-11T17:14:25.240000 -CVE-2025-54916,0,0,8c422c96b500dc9fe430cf874808d647a1514994887388385ec449eb282dc5a8,2025-09-11T17:14:25.240000 -CVE-2025-54917,0,0,355ecc71f999cdf3e5de7aaddfe7d8bf1e758a21138066bbc45f411786601eda,2025-09-11T17:14:25.240000 -CVE-2025-54918,0,0,a3d692cff82202bb18ffed57caf0cd64a8e541c4912ede35d6eafea51ed71e3a,2025-09-11T17:14:25.240000 +CVE-2025-54915,0,1,580c5f0aa639067ac78854a70f901df885304aa32296c76cb14a2928d57d558c,2025-10-02T14:47:43.120000 +CVE-2025-54916,0,1,617ac3f642bc7bf6d8a1d0b278225191f6cfc1b285c6abd37d39eb2378eff490,2025-10-02T14:47:59.050000 +CVE-2025-54917,0,1,edf837da0053f00e0480c838c56e357d83edc9743a2ae08ebc713cb0dc470306,2025-10-02T14:51:59.930000 +CVE-2025-54918,0,1,61e1df9105ecfef61c66480b264c25780a6b7eeab82ddbaaf9801df46499912f,2025-10-02T14:52:16.013000 CVE-2025-54919,0,0,34201bacc76a862066cf243b7e3070b68abcdf7602b53bf66093964acd23fba3,2025-09-12T16:56:56.560000 CVE-2025-5492,0,0,12ed89f524fc52f090a4824e6665f618e32105d760227daf77f6fef07206fa64,2025-07-15T17:22:55.370000 CVE-2025-54923,0,0,2792234c7c831b68374379cf0497703b2718a7a7f5c6f05ca9ea13f238377f7a,2025-08-20T14:39:07.860000 @@ -307111,7 +307113,7 @@ CVE-2025-55224,0,0,86fe9cb4198e5a0504119cdf213e2e023689c7d7d688dbbc2d4cf6c9cf1dd CVE-2025-55225,0,0,f9493630b78c0db56c7b86ed5f7c96d89fc8219c1585a1e330d51172c87d5197,2025-09-12T14:53:59.267000 CVE-2025-55226,0,0,83f6bef05b5c1f65b63ebc8467d5ab30270e0f05a0a6885ea4b444cbeae87f16,2025-09-12T14:54:20.230000 CVE-2025-55227,0,0,024be35480d47cbd6ec75f4ef7562135c201580db32e6aef23d379443a5b3ad5,2025-09-12T16:57:17.750000 -CVE-2025-55228,0,0,0d8f1bf40cab87d3946ea46578c4966b8ec90369e12e8275772737a5d7f57e21,2025-09-11T17:14:25.240000 +CVE-2025-55228,0,1,9fce3c156c259ec7baa51eccaa27ab1624d1e95e0f7bfb5c62384d8de3a4dabf,2025-10-02T14:52:37.270000 CVE-2025-55229,0,0,060e13f151ca1c792da4eee84cfb2c862d0994234ca763e037fad9c605eef4aa,2025-09-30T18:38:18.990000 CVE-2025-5523,0,0,5efa29e7b7bd4b4641984376098bb78d90287d527ffeb481b2aac415b7a4bb5c,2025-06-09T15:12:42.317000 CVE-2025-55230,0,0,75b64a5794c053ecdc527e036a1c56545e6c346a13c73d0cb6fcfaba291fdfd0,2025-09-30T18:40:10.440000 @@ -307448,7 +307450,10 @@ CVE-2025-5634,0,0,79e619a0d12876f1f3abb21edea43976fb5e79a207411ff7c557bbc7d06ac8 CVE-2025-5635,0,0,bc5c1b353b8b62592e3088994e6b7d9ab116bea8eb21ffb8e8451ff0a399a971,2025-06-17T20:42:01.883000 CVE-2025-5636,0,0,caa30d4b1a37d87a3295efa003c0ceb7f6178792d6f6b6b2561baf1243059210,2025-06-24T15:49:29.907000 CVE-2025-5637,0,0,5668bf0e3ff950a3e7c45948f98078496d5d5038cd976435ccd52d60ea687fdf,2025-06-24T15:49:25.277000 +CVE-2025-56379,1,1,2dac3c7e34604033863885225e171ac9c523a7b3464d96d1b6005832661702df,2025-10-02T14:15:45.630000 CVE-2025-5638,0,0,5fa603e90eeb98583ea40591c0f1493256693a05d984ab5725744a9282518d9e,2025-06-06T20:12:17.237000 +CVE-2025-56380,1,1,68de3a3967b8095ab4ddf1d3a14bb347890fd5b2007c30546d1ffee1531cd875,2025-10-02T14:15:45.767000 +CVE-2025-56381,1,1,a841b873e6355b8464480ba225e80e6e37b4f526dc1c1f140904dbb281ee6ab8,2025-10-02T14:15:45.890000 CVE-2025-56383,0,0,d9f9d1012b24fd4db713475884c99ba17e8979cffb08dbe7d5fd594d04687c92,2025-10-01T14:15:40.280000 CVE-2025-5639,0,0,df69c796d2f2dcdd7b52222b3cca34eb33581a84dfcf4149ec44f708e4f12118,2025-06-06T20:12:28.340000 CVE-2025-56392,0,0,7cf05219e1be22e07f44f7b6daf0ecb2fb0b12cb2622c03c85c2d363d9b323a1,2025-09-30T20:15:39.997000 @@ -307590,7 +307595,7 @@ CVE-2025-57087,0,0,0d5210f862844e305a9a5e9f43efbd05bc9ae941371095d91b89b7eb1f181 CVE-2025-5709,0,0,c194837df8957976fdf65b0a79b8ad4ab8ba025b71104af1ea83e4fe3936ff0d,2025-06-10T15:00:06.023000 CVE-2025-5710,0,0,22d317274e29d58e8d0f080c3cbfb50424283196345fb5d5b671f6ecde0eba5b,2025-06-10T14:59:55.803000 CVE-2025-57104,0,0,8d82ce34c5a8a253f74066c0c908d3a97d5aed7e8d718446b9c2b9882a8e2cf0,2025-09-20T02:47:42.020000 -CVE-2025-57105,0,1,592310ba6f2a9d530e15bb063aa7801f0c9afb35c7007ca1cb6006aeb66a1ab5,2025-10-02T13:07:11.973000 +CVE-2025-57105,0,0,592310ba6f2a9d530e15bb063aa7801f0c9afb35c7007ca1cb6006aeb66a1ab5,2025-10-02T13:07:11.973000 CVE-2025-5711,0,0,4e07d34f832c4a98bdc02eca84c69019cff401001befb4bad883e986f4062c5b,2025-06-10T14:59:46.313000 CVE-2025-57117,0,0,2bed937ea70c3e7e4b5f6aa5c7834472657489fbeda92e75b50f65ad9adefa0d,2025-09-18T16:48:43.503000 CVE-2025-57118,0,0,5e7cb185577aa87c5ea2030db4d8b25c21d7ca46fc3c85fe80d2664629d08993,2025-09-18T16:48:50.220000 @@ -307696,6 +307701,7 @@ CVE-2025-57438,0,0,9c34914fbf7c6f30b94b6c300e5de2fd440988de8932fa1d8309ee4a7d2f1 CVE-2025-57439,0,0,6bbb7e76d579f9e8ae0bd2f7b3c8e7cc5cf652fee45549756707d82d6919a7ab,2025-09-22T21:22:33.590000 CVE-2025-57440,0,0,cd8c367c5b9351cce7a98a982e6aeaa48a6d7ee57ccaa500c3d5fd255cf3b3e8,2025-09-22T21:22:33.590000 CVE-2025-57441,0,0,295ec0e3abb93e7cafa4d15b3d04586833dcab52a9e130e655d3c0ab0f0952ed,2025-09-22T21:22:33.590000 +CVE-2025-57443,1,1,4611544b445cd491550a030b73324eb3b5fcf0134e26473db2a6aab087dc7868,2025-10-02T15:15:53.267000 CVE-2025-57444,0,0,6d987739a339f665427312cd2332198c1f91f48af781b2fa53aed31f8ef8ba17,2025-10-01T20:18:37.700000 CVE-2025-57446,0,0,e892c395dc2ac3248895782c62c75a80d68556256a6aa366fd0cf3d38a12c961,2025-09-26T20:15:37.677000 CVE-2025-5745,0,0,2bc6939e726c1d82131cb431d1959aa10a930465d7aba1c819a790a214ec3b77,2025-06-06T14:07:28.330000 @@ -307870,7 +307876,7 @@ CVE-2025-5784,0,0,e09538ed3fb443c9b7bf4475803950b33e688b0670f3753325c659e87e3e11 CVE-2025-57845,0,0,e197ef9e22dc92d519bfad88f27336cf96b3e03be865a2910db54fcb10e2ce6b,2025-08-28T03:15:38.037000 CVE-2025-57846,0,0,50dc522f73c3b9ebdf0d76d274539a2a3481af0dccd2e696ea2202cffbda720c,2025-08-29T16:24:09.860000 CVE-2025-5785,0,0,bed468c76f00e36e796a823df55cc8ba5b8001ab8cd4a0bc3ebd1b409037ea2f,2025-06-10T14:56:41.397000 -CVE-2025-57852,0,0,f77f290c77a22cd4ade8132c3f2cda2b5cf5c3ed2c851ac895b9846b6d851970,2025-10-01T10:15:31.500000 +CVE-2025-57852,0,1,cbc7a66cdf6b0e4e472fcdf078b461cc07c8c72b47705cf94b3cbad4a2aa150f,2025-10-02T15:15:53.403000 CVE-2025-5786,0,0,cba78e3d1605d0575de2eda7ef0114839aba755a1d173d5fef8167822e753f46,2025-06-10T14:56:32.553000 CVE-2025-5787,0,0,33fdb7d532b54bc886ec0cf9d76d17f2a503e91b7267fc08e8c1631a963666fb,2025-06-09T19:08:58.440000 CVE-2025-57871,0,0,c1ddbb016413762b2185844f4359ade9808da94d5a8e9f86fbc09ccbd612b63b,2025-09-29T19:34:10.030000 @@ -308309,7 +308315,7 @@ CVE-2025-58451,0,0,a852cd08b76ee80fe18244312f9e9c7ccc76b83bb635400b159dd6af0aa8e CVE-2025-58452,0,0,d44c6c49cf1b0fa36987969c093a06596daa2408cb3c64d99aca28e718f74416,2025-09-17T16:35:57.123000 CVE-2025-58453,0,0,bd74a9d880051b0bbe13ca22bf8f047be228985e04a5f29147771491ddf84ede,2025-09-17T16:31:24.797000 CVE-2025-58454,0,0,23bf97281f3ca126d8e2338203a493434a31400b6f9a70104ed43aa3e745df04,2025-09-17T16:29:29.123000 -CVE-2025-58457,0,0,611f0bf543c77cb4bb93a1874fa002c77b8d578a15de44b80572c6b7269325cb,2025-09-24T18:11:24.520000 +CVE-2025-58457,0,1,124db51d68b97cbc283fb507210d0c51bd929ced2d5a7a72f6a4e2e713909d37,2025-10-02T14:56:49.103000 CVE-2025-58458,0,0,fc688a86a9930099eee5ad51fb6038e14ca2204fbe52b9e495814d8cac7e6206,2025-09-08T17:14:19.823000 CVE-2025-58459,0,0,4dc0ae9791e62d1e12120b8bfc2c51b6c705fb1022b9dd58db91ed701efc5e5f,2025-09-08T17:00:40.780000 CVE-2025-5846,0,0,e694470fdbb678079e2c87823fac2cd4e7bf177b0dca1ba6c720bd0ecbabb186,2025-08-12T14:44:01.437000 @@ -308723,7 +308729,7 @@ CVE-2025-59220,0,0,d4aeb8690f64c8042b853c5f136806327614043d872c260577b842d28cb86 CVE-2025-5923,0,0,bd32fa6b95a8f310c6b07918d04b1a4cdef7f962ecfa8c2518b68d11b4b0741e,2025-06-16T12:32:18.840000 CVE-2025-5924,0,0,e5569afefc2dc17b32a552fbc140ea78dd0087634a8b357eb3997017a1b3e8ef,2025-07-10T15:13:40.917000 CVE-2025-5925,0,0,74cb0f740f96269546a558716b8983e19baddafe2aff8e369ed86d426f629748,2025-06-12T16:06:39.330000 -CVE-2025-59251,0,0,e1d2046e610107ce195c88ef02ed4b11242e75e403c379d26d81e254f14b998b,2025-09-26T14:32:53.583000 +CVE-2025-59251,0,1,3cfdf53db98f4c7a326faba73e7e9410aae7dca0728fc3e92003a1390ed03c9f,2025-10-02T14:36:45.330000 CVE-2025-5926,0,0,d101bf01d3fcfe0cdb9553376422f17ca8d863b6b3e856d7675080f3ca9408fd,2025-06-16T12:32:18.840000 CVE-2025-5927,0,0,eed1e2da4fd1e07e1ab2082ed43631c56c04f807cb9ac6c4583d4e6eab81ab78,2025-07-08T14:54:00.810000 CVE-2025-59270,0,0,936bb58a78491e6aa36a532d96a721559024ee0cf34c7408383280303f1ad948,2025-09-26T13:55:40.717000 @@ -308922,10 +308928,50 @@ CVE-2025-59725,0,0,e60dece9d64d177673c0a81f96e2b0d8187a661bb6df14589f5e3fad13cac CVE-2025-59726,0,0,cc9fc4cd72f965bab2b23ff7f217358ebc4a40159eed4d1e98a31063e6bd1762,2025-09-20T03:15:36.830000 CVE-2025-59727,0,0,b05f36957d97e3c194ee17f0935eee8f0ab002b10ceb6fa78ea0a14fb60ddab1,2025-09-20T03:15:36.947000 CVE-2025-5973,0,0,3c06bfa5ed70d1a2bfc4e03f35791b87e7803d60dc7eb9eead02837a22b40095,2025-06-17T20:35:13.273000 +CVE-2025-59735,1,1,03b20d1c1f58379cd0a4cdac29a0396549caaf53d86a46455b5e983a1679fd25,2025-10-02T14:15:46.020000 +CVE-2025-59736,1,1,d5bff5dfe7f7ee11d2d525c0995eef1ec7799ad0e85122c50d4f0a6bb99f53f9,2025-10-02T14:15:46.173000 +CVE-2025-59737,1,1,5a2d64948ac631031a61e739f8af2fc2d69c987c5046abda73ecbfc5ae491d40,2025-10-02T14:15:46.317000 +CVE-2025-59738,1,1,841483b6f698e9f8fb6ff529e662ad690342b5244c238a91f832779cea4d5ab2,2025-10-02T14:15:46.463000 +CVE-2025-59739,1,1,b6504de48c5a6fa09888dfecfd92f6b23535f80486147ba94f80c3f3717ab72e,2025-10-02T14:15:46.610000 CVE-2025-5974,0,0,585bba09b157701805e1965c8ba440e3a072822bc44aaaa7f63d9ca1f2acc422,2025-06-17T20:35:05.280000 +CVE-2025-59740,1,1,73edb57b3f881615b8ec7d39df0a6b3840a48a63df608e09db9836132604676a,2025-10-02T14:15:46.763000 +CVE-2025-59741,1,1,aeaa9e6bd799c62efce416529700e21065bab210259fd53beddce13b40d29207,2025-10-02T15:15:53.527000 +CVE-2025-59742,1,1,fc4ff4ffdf2a408e3c0748ff576f652c174c66f5925153586cf5528ef1e87786,2025-10-02T15:15:53.680000 +CVE-2025-59743,1,1,3262c76a4f2e2297446580a36c6d2e687f8f374696f4fec5064fec6da8fd7acc,2025-10-02T15:15:53.837000 +CVE-2025-59744,1,1,f32fc8f99f5373e7ef115d1b4c4b9e455465a15f24d4dee51cb2e1f7fec856ab,2025-10-02T15:15:53.983000 +CVE-2025-59745,1,1,540d3a9aabee20a77eb3bd4917c7190d62950f5cd7058ed2dc5591cb982251ae,2025-10-02T15:15:54.130000 +CVE-2025-59746,1,1,8ee849a8e6a279137d69354292802a1970d0e6f8d61def617c2b599453043d1e,2025-10-02T15:15:54.287000 +CVE-2025-59747,1,1,c61555f6bd516991b9b3f28361260811b2d2cacf162fd2a4f379ad42e640adfc,2025-10-02T15:15:54.433000 +CVE-2025-59748,1,1,7d504ce4de239a21705f41dd91d7c952070820ce5c6b8667c8f5c13362e41871,2025-10-02T15:15:54.580000 +CVE-2025-59749,1,1,1390a80d524858e611e90098c52418125c24883c624671f692d4e72b99ebb684,2025-10-02T15:15:54.727000 CVE-2025-5975,0,0,6563d02d134225f76ff922ff55044823a14c5b57df55d3f2a822968b5e7b4587,2025-06-17T20:34:57.913000 +CVE-2025-59750,1,1,20f2d2b794d8aa4fbb6445f858dc52f5da2a24472a83e3b4d424c357b713da6f,2025-10-02T15:15:54.870000 +CVE-2025-59751,1,1,e1ac84e01080c200edcde1567ff01d2166a7c5a636179447a082a00f214fa113,2025-10-02T15:15:55.030000 +CVE-2025-59752,1,1,2e85fe3a811e363853695ea772858e01dab017a94c409b6426e10edda4d0c339,2025-10-02T15:15:55.177000 +CVE-2025-59753,1,1,0b08ce4553529a1473bd324c0bcfebd890e46dfae4d4537051898afea4f05bb2,2025-10-02T15:15:55.343000 +CVE-2025-59754,1,1,888cdb7d7aa8ccd1b82a55dca6affde519d13fe7a699f49034da65057e521d0c,2025-10-02T15:15:55.493000 +CVE-2025-59755,1,1,5b2a6ae9de611d9650b11aa97b9810f17fccc817fcb433f137963e6c182e0025,2025-10-02T15:15:55.633000 +CVE-2025-59756,1,1,0b63f26d54aa3c43cd3d48f9eac366818d7a76296fb5bd00593e0132f513fddc,2025-10-02T15:15:55.777000 +CVE-2025-59757,1,1,5f7d1bb705d438c2a09396d6ed75740b3c837cea103ffccd632e0ec38221035f,2025-10-02T15:15:55.930000 +CVE-2025-59758,1,1,b88768c417ca9e0e0309cbbf3cd28946e8ba6ecb6aa038f96ed445cd8f40068d,2025-10-02T15:15:56.073000 +CVE-2025-59759,1,1,ffca485a5a09aa2482332fa52da20b083a3f84d404d3c0743937f7a680084c44,2025-10-02T15:15:56.220000 CVE-2025-5976,0,0,481b9b9b1b28141dc022cfec5731b5f7c817f260c5bba8eb57c2e2d848d31862,2025-06-17T20:34:51.377000 +CVE-2025-59760,1,1,cdf0cff4efbef6d312d12c38008fa4dd0e307725e45315baaafb9a48759fbaca,2025-10-02T15:15:56.367000 +CVE-2025-59761,1,1,e2b8014ee60ac617cf7c29292bda0cc6714469f1a523512e1975a4dac371ca7b,2025-10-02T15:15:56.513000 +CVE-2025-59762,1,1,0c4f7d2b2d04bbc32cf38d54f8c7f1e20703b806cde5afb5e6e955e40a78fd8a,2025-10-02T15:15:56.670000 +CVE-2025-59763,1,1,1a38386b11e2915f9c1bac17fc5a2e267fefeb9a86f72b89693f1397e14bfa36,2025-10-02T15:15:56.817000 +CVE-2025-59764,1,1,9f1a5518ac604c99c6b6da6af9dad4ae3bcfd8bb041f00609ca1417f170162d9,2025-10-02T15:15:56.967000 +CVE-2025-59765,1,1,89bd6829491758d90d63c3c8a5d571276466216c4b415736670ea1f7a016f64c,2025-10-02T15:15:57.110000 +CVE-2025-59766,1,1,01180d52034d49ff03155a554707b3a81e455d78fc74851f0c184e10f434c28c,2025-10-02T15:15:57.257000 +CVE-2025-59767,1,1,7468090f7dc38b34c03c3733e39f6bc6b2898c34ce033f4dee735437c6c766b8,2025-10-02T15:15:57.407000 +CVE-2025-59768,1,1,69ec64c367381201fd3074856794e20e53ba4f88966504ba94dca128b7a6ad20,2025-10-02T15:15:57.553000 +CVE-2025-59769,1,1,eb16cf843393856c51c38d9310104eac9635bd00084a88b7f81d77257748c3f9,2025-10-02T15:15:57.700000 CVE-2025-5977,0,0,f1be6f85f13503775c495ea6cc25e73f56acbe00f921f8b9bd047e78e8e954e3,2025-06-17T20:34:44.630000 +CVE-2025-59770,1,1,65012c03cb5cbb235d0ba3f8fd841e3aab3f6e93165e6c041a5d138a3c7cc68b,2025-10-02T15:15:57.847000 +CVE-2025-59771,1,1,79643e57e2ca08f165eb54c520342cbc17d3354ab3ab05cd44636883c727855e,2025-10-02T15:15:58 +CVE-2025-59772,1,1,6dc54a3648dc5af28ce6c25e7c425d43bd2dbc73d0c44f18c3fc3ec33e26cc3a,2025-10-02T15:15:58.140000 +CVE-2025-59773,1,1,7730ad6ca5f2745d8c24ca2f4b7c389a8fb8ec6800edde2b6ae9f4320bbe4ce2,2025-10-02T15:15:58.290000 +CVE-2025-59774,1,1,782363fc29e523c3f0fb157ab7a22b16ff35c4118a3f30477663cfc288014aa3,2025-10-02T15:15:58.437000 CVE-2025-5978,0,0,597668148753ac208e7a61c78cb9eca20301049b4f8be17d052715cab71f0835,2025-06-20T14:47:11.770000 CVE-2025-5979,0,0,62f87aab912999e1a8c01e4f2d3083fff610fe2dfce4896415cd0de1f9a17fa5,2025-06-16T15:00:09.443000 CVE-2025-59797,0,0,96877589905a88afdd0cd40217f57e21fee097361b5acb86f3e2319254e0d435,2025-09-22T21:22:33.590000 @@ -309174,6 +309220,7 @@ CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418a CVE-2025-6076,0,0,34c85139f7850389377ec94990de20f7a4ffa7f010201d174b09a6ea7b9bb278,2025-09-25T04:16:24.140000 CVE-2025-6077,0,0,dcc34d07d9d46c290bb5cfc1c4da41a649e98c0104f2a3dc715b8e8dac2a0603,2025-09-25T04:16:24.483000 CVE-2025-6078,0,0,27fca84f9eecc93c2ae593c458ad54c2547f69397f62d1c2ae67137878bca3a4,2025-09-25T04:16:24.793000 +CVE-2025-60782,1,1,f11db655d2bdb6e53330bd8c39e34055bd00e9ee368e561836e21051c9e46bfe,2025-10-02T15:15:58.587000 CVE-2025-6079,0,0,3acae9406359beeb566b8c872a5ac87499ca5a517d323b5859b95024ba8d796e,2025-08-18T20:16:28.750000 CVE-2025-6080,0,0,09cd9257aacd26b3c0d0b7db39eeca754c6a52ebacd815d309102b493d922e90,2025-08-18T20:16:28.750000 CVE-2025-6081,0,0,1392e63485f5340f9ebbe3280ccff994df6ebed7ffeba0a6bfe7122906780321,2025-07-03T15:14:12.767000 @@ -309206,7 +309253,9 @@ CVE-2025-6105,0,0,d0b427b8e24eff9c1fd2770ade249e2d64f1c6773b84a7efea055d3510d740 CVE-2025-6106,0,0,9ce74342112a339d02ba904cb792c013f1dc3051cd62505a233626e99f717e80,2025-06-16T12:32:18.840000 CVE-2025-6107,0,0,515ce59b3a14c6e5359fc28163a1254718bf9c3840594c4c70f4e9091fdfda30,2025-06-16T12:32:18.840000 CVE-2025-6108,0,0,453b26447525a1c77bdd022d41df6e5d7f63a434acb776c6d4a82b4bb7e90eb5,2025-06-16T12:32:18.840000 +CVE-2025-61087,1,1,b7f8af293b5d1f64e3c56a0abd82efa601bcc1f9cbcc97edd5b3c642915629d0,2025-10-02T15:15:58.727000 CVE-2025-6109,0,0,0d7db4ecae81615766e8ee4f45643deb77b735eed1bf35a97e5466c4bcea88d6,2025-06-16T12:32:18.840000 +CVE-2025-61096,1,1,48ddd1472dd28f129a4a932f8d2f086002dbb90e4051c7062a9ae165762b2e53,2025-10-02T15:15:58.857000 CVE-2025-6110,0,0,e6ad5566ac94697d2374ca63ba005da6ea647950a470675f2bc0a4660fa49e6e,2025-06-17T19:38:18.840000 CVE-2025-6111,0,0,ed08010159a7015ca6d5772c7e08fa818e15fba15944cabf5d6defa1f2b84af4,2025-06-17T19:38:24.550000 CVE-2025-6112,0,0,581b9c462b8e756289a5fbc7841b8abf1c4b1a629991f88608285bbb0ff64b98,2025-07-18T12:49:50.367000 @@ -309303,7 +309352,7 @@ CVE-2025-61722,0,0,30fb2d9363e1a2f58571d1624fb6a130441e0283a8f775fc48c50f20bb709 CVE-2025-6173,0,0,c070b1517acd95c5e869ebc2e1f1712fafd19138bea48c0324a49cddfc5a27e5,2025-06-26T15:57:47.900000 CVE-2025-61733,0,0,d690d66157bccf8185c19a0b3237ef82b424ac770da7cb64d05ef2a5a2d4825c,2025-10-02T10:15:39.930000 CVE-2025-61734,0,0,edf1939c58caa784fea131e15a6abb40c271fee140aec0430c7e1d1b8c8d406d,2025-10-02T10:15:40.100000 -CVE-2025-61735,0,0,f9857ca84967cbfb82a1711b5eef401c9fd8c4c64ffad85e7f9c065196df02e1,2025-10-02T10:15:40.250000 +CVE-2025-61735,0,1,2dd98e4c27705d1de018f366eff94d9cad8705720930989fb50eaa7e666e949f,2025-10-02T15:15:58.993000 CVE-2025-6174,0,0,b3f69907f434ed253427566b8040097f2502b0a3a5c38b9d6989acb3f257a8af,2025-07-25T15:29:44.523000 CVE-2025-6175,0,0,09fa23c481d8732e61210889e113a2752bb1b4f0e4be1cfaa0f014d05c6fce99,2025-07-29T14:14:29.590000 CVE-2025-6177,0,0,edd6b1d41a5c4b8e0408f6aa59fea86a8c8b780a92c52491789320f71941d7a1,2025-07-02T18:26:40.590000 @@ -312106,7 +312155,7 @@ CVE-2025-9584,0,0,f8a96c07041186b11f314bf68eff6319e2553dd91bd2d3eb87a90a112d3436 CVE-2025-9585,0,0,67197df688ffaa66b0903b7b46d496598242118c6d2d14171e6422ef26dae4e6,2025-08-29T16:24:29.730000 CVE-2025-9586,0,0,11b17d85a7644f2d950cadb22f5e7022859c5fa4ccb2be96381552ba032d7607,2025-08-29T16:24:29.730000 CVE-2025-9587,0,0,6766ec8df77bc11facb0eac93bca509aa082d1bbcc64647364880f680c099599,2025-10-02T06:15:38.443000 -CVE-2025-9588,0,0,6d08afc80b4d68a76f6decf875cadbddba226bc9d8f08785711f911ea363d1b8,2025-09-24T18:11:24.520000 +CVE-2025-9588,0,1,7c3365a6f9ff3805f30789ecca2aba7e808752c6acea0a659b4e5e3786fcbb05,2025-10-02T14:24:13.747000 CVE-2025-9589,0,0,1b1dacdbfa7a496183ebb20457a22214b5a0e21300ddacebe3b7b0ce69e25472,2025-08-29T16:24:29.730000 CVE-2025-9590,0,0,b04bd8a75efd174cf773c5a25e1d71428e96309c4476557d562656a3ac5c8f6c,2025-08-29T16:24:29.730000 CVE-2025-9591,0,0,02047d18b2e90eae64522ab9a1fb79ce85dca95ea221cef65dcdb7d9d5e5b84f,2025-08-29T16:24:29.730000