diff --git a/CVE-2022/CVE-2022-456xx/CVE-2022-45690.json b/CVE-2022/CVE-2022-456xx/CVE-2022-45690.json index f28d931fd1f..498f883130d 100644 --- a/CVE-2022/CVE-2022-456xx/CVE-2022-45690.json +++ b/CVE-2022/CVE-2022-456xx/CVE-2022-45690.json @@ -2,8 +2,8 @@ "id": "CVE-2022-45690", "sourceIdentifier": "cve@mitre.org", "published": "2022-12-13T15:15:11.387", - "lastModified": "2025-09-12T18:44:22.957", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T12:42:19.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -82,6 +82,22 @@ } ], "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:stleary:json-java:*:*:*:*:*:*:*:*", + "versionEndExcluding": "20220320", + "matchCriteriaId": "4E846B84-DA38-4839-AA5C-AB4666D3B467" + } + ] + } + ] + }, { "nodes": [ { diff --git a/CVE-2024/CVE-2024-539xx/CVE-2024-53977.json b/CVE-2024/CVE-2024-539xx/CVE-2024-53977.json index 8fac56f4da1..a26ec679257 100644 --- a/CVE-2024/CVE-2024-539xx/CVE-2024-53977.json +++ b/CVE-2024/CVE-2024-539xx/CVE-2024-53977.json @@ -2,8 +2,8 @@ "id": "CVE-2024-53977", "sourceIdentifier": "productcert@siemens.com", "published": "2025-02-11T11:15:15.063", - "lastModified": "2025-02-11T11:15:15.063", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T13:39:30.720", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -95,10 +115,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:modelsim:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025.1", + "matchCriteriaId": "A8E3495E-65A8-468D-BE32-511502C11B52" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:questa:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025.1", + "matchCriteriaId": "F6FE0653-A0A0-4C54-85BC-C9BD69EC09FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-637914.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-568xx/CVE-2024-56883.json b/CVE-2024/CVE-2024-568xx/CVE-2024-56883.json index 6849cce6480..06adc472f65 100644 --- a/CVE-2024/CVE-2024-568xx/CVE-2024-56883.json +++ b/CVE-2024/CVE-2024-568xx/CVE-2024-56883.json @@ -2,8 +2,8 @@ "id": "CVE-2024-56883", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-18T18:15:27.287", - "lastModified": "2025-02-19T15:15:15.140", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T13:27:35.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sagedpw:sage_dpw:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024_12_001", + "matchCriteriaId": "E67C2DAB-297B-483F-9B3D-972446393841" + } + ] + } + ] + } + ], "references": [ { "url": "https://cves.at/posts/cve-cve-2024-56883/writeup/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json b/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json index 1c60e5f35cb..a0b09e08332 100644 --- a/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json +++ b/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10438", "sourceIdentifier": "iletisim@usom.gov.tr", "published": "2025-09-25T10:15:29.397", - "lastModified": "2025-09-25T10:15:29.397", + "lastModified": "2025-09-25T12:15:29.053", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -18,27 +18,27 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", - "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 8.6, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", - "privilegesRequired": "LOW", + "privilegesRequired": "NONE", "userInteraction": "NONE", - "scope": "UNCHANGED", + "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", - "availabilityImpact": "LOW" + "availabilityImpact": "NONE" }, - "exploitabilityScore": 2.8, - "impactScore": 4.2 + "exploitabilityScore": 3.9, + "impactScore": 4.0 } ] }, "weaknesses": [ { "source": "iletisim@usom.gov.tr", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-104xx/CVE-2025-10449.json b/CVE-2025/CVE-2025-104xx/CVE-2025-10449.json new file mode 100644 index 00000000000..efa26882b49 --- /dev/null +++ b/CVE-2025/CVE-2025-104xx/CVE-2025-10449.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-10449", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-09-25T13:15:30.590", + "lastModified": "2025-09-25T13:15:30.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows Path Traversal.This issue affects Saysis Web Portal: from 3.1.9 & 3.2.0 before 3.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0297", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10943.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10943.json new file mode 100644 index 00000000000..ae349399159 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10943.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10943", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T12:15:30.340", + "lastModified": "2025-09-25T12:15:30.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/MikeCen/WeChat-Face-Recognition/blob/master/wx.php#L25", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325813", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325813", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651882", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10944.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10944.json new file mode 100644 index 00000000000..a259e155cce --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10944.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10944", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T13:15:30.800", + "lastModified": "2025-09-25T13:15:30.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects the function ip of the file ip.php. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/yi-ge/get-header-ip/blob/master/ip.php#L32", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325814", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325814", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651884", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10945.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10945.json new file mode 100644 index 00000000000..0bef7b3d4ca --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10945.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10945", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T13:15:31.017", + "lastModified": "2025-09-25T13:15:31.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/nuz007/smsboom/blob/main/d.php#L25", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325815", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325815", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651886", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10946.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10946.json new file mode 100644 index 00000000000..b3728b30317 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10946.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10946", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T13:15:31.200", + "lastModified": "2025-09-25T13:15:31.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is an unknown function of the file dy.php. Performing manipulation of the argument hm results in cross site scripting. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/nuz007/smsboom/blob/main/dy.php#L20", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325816", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325816", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651887", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json new file mode 100644 index 00000000000..7b711f3f2bc --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-10947", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T13:15:31.387", + "lastModified": "2025-09-25T13:15:31.387", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in Sistemas Pleno Gest\u00e3o de Loca\u00e7\u00e3o up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing manipulation of the argument pes_cpf can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 2025.8.0 is sufficient to resolve this issue. It is advisable to upgrade the affected component." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", + "baseScore": 5.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 10.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + }, + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main?tab=readme-ov-file#-proofs", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325817", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325817", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.652282", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10957.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10957.json new file mode 100644 index 00000000000..6460ba5bc46 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10957.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-10957", + "sourceIdentifier": "vdisclose@cert-in.org.in", + "published": "2025-09-25T12:15:30.577", + "lastModified": "2025-09-25T12:15:30.577", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service. A remote attacker could exploit this vulnerability by establishing an FTP connection using default credentials, potentially gaining unauthorized access to configuration files, user credentials, or other sensitive information stored on the targeted device." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vdisclose@cert-in.org.in", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "vdisclose@cert-in.org.in", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0223", + "source": "vdisclose@cert-in.org.in" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23359.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23359.json index 88a573e83b3..4028b58bdf9 100644 --- a/CVE-2025/CVE-2025-233xx/CVE-2025-23359.json +++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23359.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23359", "sourceIdentifier": "psirt@nvidia.com", "published": "2025-02-12T01:15:09.230", - "lastModified": "2025-04-11T14:15:24.310", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T13:50:04.687", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 } ] }, @@ -51,14 +71,57 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.17.4", + "matchCriteriaId": "A771528B-FD02-4B98-BA64-BFAEA7BF71F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*", + "versionEndExcluding": "24.9.2", + "matchCriteriaId": "FC194752-D788-4CCC-A4D2-01EB74232EE9" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5616", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25723.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25723.json index 95b826ab23a..03aa8150330 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25723.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25723.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25723", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-28T23:15:11.280", - "lastModified": "2025-04-03T19:15:39.403", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T13:27:40.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,18 +51,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gpac:gpac:2.5:*:*:*:*:*:*:*", + "matchCriteriaId": "D855A53A-8585-412C-9FA3-2EA90B595B1C" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/gpac/gpac/commit/74e26b8dfeb0ab8c7317603b80a18306d0698473", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/gpac/gpac/issues/3089", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/gpac/gpac/issues/3089", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-267xx/CVE-2025-26794.json b/CVE-2025/CVE-2025-267xx/CVE-2025-26794.json index affd54e185b..7ad50dda4c0 100644 --- a/CVE-2025/CVE-2025-267xx/CVE-2025-26794.json +++ b/CVE-2025/CVE-2025-267xx/CVE-2025-26794.json @@ -2,8 +2,8 @@ "id": "CVE-2025-26794", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-21T13:15:11.687", - "lastModified": "2025-02-22T01:15:10.670", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T13:12:00.833", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -51,46 +71,99 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.98", + "versionEndExcluding": "4.98.1", + "matchCriteriaId": "47FC87D6-F3A5-4AB4-824D-1AE553B58F46" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1237424", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch" + ] }, { "url": "https://exim.org", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/Exim/exim/wiki/EximSecurity", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://github.com/NixOS/nixpkgs/pull/383926", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch" + ] }, { "url": "https://www.exim.org/static/doc/security/CVE-2025-26794.txt", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/02/19/1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/02/21/4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/02/21/5", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-406xx/CVE-2025-40698.json b/CVE-2025/CVE-2025-406xx/CVE-2025-40698.json new file mode 100644 index 00000000000..09aa9b46ddf --- /dev/null +++ b/CVE-2025/CVE-2025-406xx/CVE-2025-40698.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-40698", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-09-25T12:15:30.760", + "lastModified": "2025-09-25T12:15:30.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters \u201cmpsCentroin\u201d, \u201cmpsEmpresa\u201d, \u201cmpsProyecto\u201d, and \u201cmpsContrata\u201d in \u201c/servicios/autorizaciones.asmx/mfsRecuperarListado\u201d." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-prevengos-nedatec-consulting", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index f6b7b6d2c62..f1c501f427c 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-09-25T12:00:13.614421+00:00 +2025-09-25T14:00:11.535404+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-09-25T11:15:47.367000+00:00 +2025-09-25T13:50:04.687000+00:00 ``` ### Last Data Feed Release @@ -33,29 +33,34 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -311497 +311505 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `8` -- [CVE-2025-10438](CVE-2025/CVE-2025-104xx/CVE-2025-10438.json) (`2025-09-25T10:15:29.397`) -- [CVE-2025-10940](CVE-2025/CVE-2025-109xx/CVE-2025-10940.json) (`2025-09-25T11:15:45.757`) -- [CVE-2025-10941](CVE-2025/CVE-2025-109xx/CVE-2025-10941.json) (`2025-09-25T11:15:47.120`) -- [CVE-2025-10942](CVE-2025/CVE-2025-109xx/CVE-2025-10942.json) (`2025-09-25T11:15:47.367`) +- [CVE-2025-10449](CVE-2025/CVE-2025-104xx/CVE-2025-10449.json) (`2025-09-25T13:15:30.590`) +- [CVE-2025-10943](CVE-2025/CVE-2025-109xx/CVE-2025-10943.json) (`2025-09-25T12:15:30.340`) +- [CVE-2025-10944](CVE-2025/CVE-2025-109xx/CVE-2025-10944.json) (`2025-09-25T13:15:30.800`) +- [CVE-2025-10945](CVE-2025/CVE-2025-109xx/CVE-2025-10945.json) (`2025-09-25T13:15:31.017`) +- [CVE-2025-10946](CVE-2025/CVE-2025-109xx/CVE-2025-10946.json) (`2025-09-25T13:15:31.200`) +- [CVE-2025-10947](CVE-2025/CVE-2025-109xx/CVE-2025-10947.json) (`2025-09-25T13:15:31.387`) +- [CVE-2025-10957](CVE-2025/CVE-2025-109xx/CVE-2025-10957.json) (`2025-09-25T12:15:30.577`) +- [CVE-2025-40698](CVE-2025/CVE-2025-406xx/CVE-2025-40698.json) (`2025-09-25T12:15:30.760`) ### CVEs modified in the last Commit -Recently modified CVEs: `6` +Recently modified CVEs: `7` -- [CVE-2025-22106](CVE-2025/CVE-2025-221xx/CVE-2025-22106.json) (`2025-09-25T10:15:31.020`) -- [CVE-2025-38322](CVE-2025/CVE-2025-383xx/CVE-2025-38322.json) (`2025-09-25T10:15:31.257`) -- [CVE-2025-38709](CVE-2025/CVE-2025-387xx/CVE-2025-38709.json) (`2025-09-25T10:15:31.403`) -- [CVE-2025-39816](CVE-2025/CVE-2025-398xx/CVE-2025-39816.json) (`2025-09-25T10:15:31.527`) -- [CVE-2025-6198](CVE-2025/CVE-2025-61xx/CVE-2025-6198.json) (`2025-09-25T10:15:31.670`) -- [CVE-2025-7937](CVE-2025/CVE-2025-79xx/CVE-2025-7937.json) (`2025-09-25T10:15:31.877`) +- [CVE-2022-45690](CVE-2022/CVE-2022-456xx/CVE-2022-45690.json) (`2025-09-25T12:42:19.910`) +- [CVE-2024-53977](CVE-2024/CVE-2024-539xx/CVE-2024-53977.json) (`2025-09-25T13:39:30.720`) +- [CVE-2024-56883](CVE-2024/CVE-2024-568xx/CVE-2024-56883.json) (`2025-09-25T13:27:35.977`) +- [CVE-2025-10438](CVE-2025/CVE-2025-104xx/CVE-2025-10438.json) (`2025-09-25T12:15:29.053`) +- [CVE-2025-23359](CVE-2025/CVE-2025-233xx/CVE-2025-23359.json) (`2025-09-25T13:50:04.687`) +- [CVE-2025-25723](CVE-2025/CVE-2025-257xx/CVE-2025-25723.json) (`2025-09-25T13:27:40.590`) +- [CVE-2025-26794](CVE-2025/CVE-2025-267xx/CVE-2025-26794.json) (`2025-09-25T13:12:00.833`) ## Download and Usage diff --git a/_state.csv b/_state.csv index a24206c82c7..41c80cd9d06 100644 --- a/_state.csv +++ b/_state.csv @@ -211294,7 +211294,7 @@ CVE-2022-45685,0,0,df0f53d28103ac6a23f08aa6415a74ad54ee3f1117f84c062447701fdadad CVE-2022-45688,0,0,8f721417b1a5edb5051d55b53c132f0ba61c4b685d741b4af4debc3e44e958b4,2025-09-19T18:54:20.100000 CVE-2022-45689,0,0,870ab60a5c6ea98825b9fbdd39954a2b15960e07d0b89207657712821345ec89,2025-04-22T15:16:04.870000 CVE-2022-4569,0,0,4a2599063fefb513ab23f360a9f2529d620d0c97fa1dc35085c7a5a3cf63116b,2024-11-21T07:35:30.753000 -CVE-2022-45690,0,0,7490bd8b122c9a39fcca5493aec4588e840c019f8c6290de007fc47c31753948,2025-09-12T18:44:22.957000 +CVE-2022-45690,0,1,b7a61d03ad45745a37ea7157467b9aee57b35331b5054629752dc5e0e46bb8db,2025-09-25T12:42:19.910000 CVE-2022-45693,0,0,16e0fdae126746a476c4d8896dad9274b38ecbc704e8591fb4b8e1894c95050a,2025-04-22T15:16:05.277000 CVE-2022-45697,0,0,34e5f81a9d7d780bc32c7f8e99772f6393c876c7e4c870d659e3da43d3fa8093,2024-11-21T07:29:36.173000 CVE-2022-45699,0,0,0f78ff7cfdaa963a27bca80c4b3c4925736061e38fec3ac933fe895e5a7a166c,2025-06-17T06:15:21.230000 @@ -277451,7 +277451,7 @@ CVE-2024-53970,0,0,20958d58eb9515921590df62ce8e737c32b8958b1107c3bfc1e974aee7c7d CVE-2024-53974,0,0,52052a572e52b9dbc089a516bde1b3fe92dc22cc036b47b932527a527df79bc8,2025-03-04T14:04:30.393000 CVE-2024-53975,0,0,1ef4582fd4bc5bf12a2226ef1587e7e199747f5394364a72a9c8e29bbaf92b0b,2025-04-04T16:19:53.597000 CVE-2024-53976,0,0,3c4e290755b1122ca5eef12abc826a22f34cb5f7c1451690e25b02ebe35b73d5,2025-04-04T16:15:43.123000 -CVE-2024-53977,0,0,379c288a87ade1ce92aed60d080a9706136a00417615f6a0b567d55784aea895,2025-02-11T11:15:15.063000 +CVE-2024-53977,0,1,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000 CVE-2024-53979,0,0,172b408869a05417a1da8cf6907f79662a75490e703fbb88a760f582875697a1,2024-11-29T19:15:09.847000 CVE-2024-5398,0,0,1fca9edd99ff7753e0d36d6f4d73a5a23ccf8ab9dd992541f79488471e393289,2024-06-11T10:15:13.690000 CVE-2024-53980,0,0,25270275e7b15ac4ab41a5e880b433dd4bf99fa2318bf1cf75cd2ae0b94938f8,2025-09-05T13:57:24.993000 @@ -279260,7 +279260,7 @@ CVE-2024-5686,0,0,494008cd50a5cb32ba05dd687e88d5cd5348379ce547e26ef1644b29c16458 CVE-2024-5687,0,0,ceba3175c3bfd14790e93d6d60cf2282164bca8098cfa2f452b5343d2a9e086b,2025-03-27T20:13:57.260000 CVE-2024-5688,0,0,d5859f0e06cb4ebc97487fae3042b7b415f604e561186dfe8f72fb7cc29fccbc,2025-04-04T23:46:14.507000 CVE-2024-56882,0,0,14ad5dd23b7cd0e6c0aca460d9e8ac5675d52da6a819b7bb02768fc85dd49dcf,2025-02-19T15:15:14.970000 -CVE-2024-56883,0,0,f99cbbbe44810ecf20ee9a822aaeeb39d677436c7acf1f70c821dc9769f4ff38,2025-02-19T15:15:15.140000 +CVE-2024-56883,0,1,b1b802f4cf6634c24a8fd47ae4fd46f5cf9b7dc71857565f04d01faa0f8878d9,2025-09-25T13:27:35.977000 CVE-2024-56889,0,0,32a23e93a83d411b8c8afe93f2105e99a07e2966d415c1e18a89e389c3e58121,2025-04-18T02:06:14.247000 CVE-2024-5689,0,0,7954cfa7cab5c9d284e75ff2916a8e3e6c71cab8207a342db66b72c3a9729209,2024-11-21T09:48:10.193000 CVE-2024-56897,0,0,c86a728646b989ba2c34050e6cf558894a483f9e45fac8ad92b270dc1bfac754,2025-03-03T20:15:43.540000 @@ -285152,7 +285152,7 @@ CVE-2025-10433,0,0,b43f24c0bce8de742cf431a2eb964b20478589fcc9f48e30948f4931605da CVE-2025-10434,0,0,566295c72d39946410c2309480fa8fc7d9aeb7c4d38aabeb863009539ff6b2c3,2025-09-15T15:21:42.937000 CVE-2025-10435,0,0,8fc0124e2d800034fdad74e6798e13f26fccc87632300a92587bdbcc0cebe3fc,2025-09-18T19:01:20.383000 CVE-2025-10436,0,0,f21ff44bf17938ec96a18cacce855adcf01291edfd9db2076ff92e727b5711b5,2025-09-20T02:53:02.110000 -CVE-2025-10438,1,1,f28b288cc3ae6df8ec2a7d7cf839c1a74932411af182d83387faf9fb76eb375c,2025-09-25T10:15:29.397000 +CVE-2025-10438,0,1,37fbeb62a5b8e94e0fbe9bde4b75d561e904bc0ea17c20ef003501f9916d0daa,2025-09-25T12:15:29.053000 CVE-2025-10439,0,0,1029fd6f848ac3e882b3ab9cbf5ee55679810a321f8eed0af85ef8621512b267,2025-09-17T14:18:55.093000 CVE-2025-1044,0,0,9f8be6c10874ff2755d0454f22f2307f6446f5aad49de046e6d1d7bccf9d96f4,2025-02-18T21:34:01.863000 CVE-2025-10440,0,0,3d43700e9f7bcfd9f5bd2f556ae6ed2f63c5b9922e8602e594be7f1fe4330af3,2025-09-15T15:21:42.937000 @@ -285164,6 +285164,7 @@ CVE-2025-10445,0,0,35b19f2a559a732e39b9c4022cc70c8b4fa82724999a540f17ac4b2e9949e CVE-2025-10446,0,0,4adfe0855fdf711607b03446c931271c897016ae25a91ee38f3ad7d924e0e8e7,2025-09-19T19:26:02.883000 CVE-2025-10447,0,0,97bed52bc6bf6ba67e78df4a8f882d14002e132de5a68a35a6ecf6f33f24c1ef,2025-09-20T02:52:24.587000 CVE-2025-10448,0,0,29f20a0dca84b13d3aa2ec4f8b4075356304b83163c43dd911980825e8f26a3b,2025-09-20T02:52:09.333000 +CVE-2025-10449,1,1,b7555afecb2c4432c02e9044673e414d10b60ddbb54b6e64913eda9e2ae5ce27,2025-09-25T13:15:30.590000 CVE-2025-1045,0,0,3d4e99125d6683010d851d946a9297a9321b6b7ff8ccd958db6e8836001b0da5,2025-08-07T18:26:39.413000 CVE-2025-10452,0,0,f21100824742796fe06c01f61e1a08fe39235e450c63be92b89ef8c4e0885bc6,2025-09-15T15:21:42.937000 CVE-2025-10453,0,0,a1e8c95306d8e3967b47b91f1b9a30fb2e9cfa01abc836c7dbebcc66d0370c07,2025-09-15T15:21:42.937000 @@ -285438,10 +285439,16 @@ CVE-2025-10909,0,0,1eb03db3b4da894115bbf5f69e3a273a6a80a3e00cac6bb5e6337dc71eb89 CVE-2025-1091,0,0,41f3aeac640c3e0e17c6b04948a8dcf1ae635325d94a919fd15d739e41c450e8,2025-02-26T00:15:11.250000 CVE-2025-1093,0,0,a1af9eec6f0022f735b68b643db8d78e6b7244074d1a4213b525a706734f31b1,2025-04-21T14:23:45.950000 CVE-2025-1094,0,0,dca1378d2e11e054a0baff76bda52bd172b0e41af32ad66e0ce66e679989e2ec,2025-02-21T18:15:20.033000 -CVE-2025-10940,1,1,cc658f406e4858b727f47412604774306938318ca02ffa2593c76fb325c2d5e2,2025-09-25T11:15:45.757000 -CVE-2025-10941,1,1,d7b6d906818254f265af5cae57af4881b3c8c01134c4c42e477e1b5a292dd634,2025-09-25T11:15:47.120000 -CVE-2025-10942,1,1,b156651f98215b4bc886d3e7b2323de5e05d5c073a436985435549159baf5727,2025-09-25T11:15:47.367000 +CVE-2025-10940,0,0,cc658f406e4858b727f47412604774306938318ca02ffa2593c76fb325c2d5e2,2025-09-25T11:15:45.757000 +CVE-2025-10941,0,0,d7b6d906818254f265af5cae57af4881b3c8c01134c4c42e477e1b5a292dd634,2025-09-25T11:15:47.120000 +CVE-2025-10942,0,0,b156651f98215b4bc886d3e7b2323de5e05d5c073a436985435549159baf5727,2025-09-25T11:15:47.367000 +CVE-2025-10943,1,1,e8a30df58af17099e8e8bd10f8e6dbdedfea3de4c0e9732c4a60ba53d10b86bf,2025-09-25T12:15:30.340000 +CVE-2025-10944,1,1,0b480f0f50acdde7b3a123e4863eeef09a42c9f84d14927272ad65bbda2c07d6,2025-09-25T13:15:30.800000 +CVE-2025-10945,1,1,f270f3f92595025c09e28d18e84eff5bdd669d9b2c66b2d89595c23ddc7692b6,2025-09-25T13:15:31.017000 +CVE-2025-10946,1,1,82e1a2b24babe3da2bd325bc57f22b1fb69ca7aa8fa5d6668b8f2f08020e96dc,2025-09-25T13:15:31.200000 +CVE-2025-10947,1,1,b620eeb05759d0d785edda5bcdda6498fd62d59cc5e324f559a526ed3309e204,2025-09-25T13:15:31.387000 CVE-2025-1095,0,0,9a08709ed6821d4cec41bca98af9a9b4f3ba88066959c4b4eaf1ce8a45c37d8a,2025-08-13T00:36:44.613000 +CVE-2025-10957,1,1,036ed289facd9ad6eba20d8bc7a92d2b8aedf67c1550a0ec8cb8eededfcdebf3,2025-09-25T12:15:30.577000 CVE-2025-1096,0,0,f369ee58dbaa6e142f3d975d8711cac15a0a303facd75e898c558f3e454cc535,2025-02-08T01:15:07.947000 CVE-2025-1097,0,0,2202b89d343208abc4d734355b4c7ffd6f25bdeae0a3549fe1a1a5c18a5619b5,2025-03-27T16:45:46.410000 CVE-2025-1098,0,0,5e273d1d4e3b115282c7c75a71d4085bca65fed73fce8f6abccd6dd2ec5272b4,2025-03-27T16:45:46.410000 @@ -287977,7 +287984,7 @@ CVE-2025-22102,0,0,aafb8aaf417740d4f2c9c765df7a7e9a98b393fab4d00aa5af81146235973 CVE-2025-22103,0,0,fb8519d5321e527190a8c8a6b633643e6f5493378674f983bdcd72a85048e32b,2025-09-09T17:15:42.080000 CVE-2025-22104,0,0,7cf96e0bd6c8158cd41d6bffca94da844b351f0d1f046837bb0b23aabda50794,2025-04-17T20:22:16.240000 CVE-2025-22105,0,0,d416fd0a91da32acf44347f05e6b130fd7dc099d9a192966e2becb8dc656f7c9,2025-04-17T20:22:16.240000 -CVE-2025-22106,0,1,e7af8a854c91bb47edb7d20c8fb431f482183e778e52a5053c0cc5b7081e368c,2025-09-25T10:15:31.020000 +CVE-2025-22106,0,0,e7af8a854c91bb47edb7d20c8fb431f482183e778e52a5053c0cc5b7081e368c,2025-09-25T10:15:31.020000 CVE-2025-22107,0,0,f43241b797b93b66f1856dc15b2b7fde84ca92f9be815a74e5f73dc1924333ad,2025-04-17T20:22:16.240000 CVE-2025-22108,0,0,69ed97ae836362dfb59ef378023e4c29999a30bdb77cb0944e9239e9b0faaf08,2025-04-17T20:22:16.240000 CVE-2025-22109,0,0,6c017c0d55ef11fe8a3ae2a70d312106a6c60128a1f8df941c03aa07e42fbdaa,2025-04-17T20:22:16.240000 @@ -289119,7 +289126,7 @@ CVE-2025-23349,0,0,9c1cd85ef3f1a15a2b0d72ba619ba80ce2b061f12413fa0ec8c628c959bb6 CVE-2025-2335,0,0,833479a18c8a0594376e23428e7b5d0c44e7fee9fa697872f4bc27a1568d612e,2025-03-16T03:15:37.907000 CVE-2025-23353,0,0,2b0003aedf73bf9e6379f2d0d3a707e29890d3a8e9b54abb74540dafb50e9e22,2025-09-24T18:11:24.520000 CVE-2025-23354,0,0,13db437b82e5361f61fddfff96589edb3a904f2f11595fa3ff9b938392a89986,2025-09-24T18:11:24.520000 -CVE-2025-23359,0,0,48966257c50c8cc26b5f62bd72cbf619098e034576e05bb0b13577496c379a11,2025-04-11T14:15:24.310000 +CVE-2025-23359,0,1,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000 CVE-2025-2336,0,0,e04e263f577ee94994be76c7f45e2a366ef0c6a3a1e415c7a4e9e5f507e17810,2025-06-05T20:12:23.777000 CVE-2025-23360,0,0,c78c6d407e7aa9fb20b6a8f1cc9d50ed7ab53a4f48ce43f2ffcc5cfeaafc7049,2025-09-23T19:12:03.027000 CVE-2025-23362,0,0,f1b04109bb5a53f0fa12693fb841988a838f82d29d11cab82e724120097242c3,2025-01-29T02:15:27.910000 @@ -291202,7 +291209,7 @@ CVE-2025-25709,0,0,b6ab1ce659249624d0a92da07c9379cd0e3b96cdcab65e12bbb19c19fd5b7 CVE-2025-2571,0,0,35ca25196622c2ffb39af24e9f522dc2cc8709c94ddbbd1fdd75a8e835535687,2025-05-30T16:31:03.107000 CVE-2025-25711,0,0,687cbddc40bafa1aa553307129c536c978baa7c3ff70ab2a66988ede6a6f0e53,2025-03-12T16:15:23.023000 CVE-2025-2572,0,0,1c17ee1f93d2404a782270dcdbf00d2a78964847890aca890c9cab1a14592a4e,2025-07-17T14:41:45.487000 -CVE-2025-25723,0,0,e8c9c3b7ce8a94391f1e2d0696694643f2079bf2d5039cbd8233d30f1078ac40,2025-04-03T19:15:39.403000 +CVE-2025-25723,0,1,ee8fd4f2905eeafa3220c1e8e1a05ba486475ca24a8be57a209a7e6f4bd54afb,2025-09-25T13:27:40.590000 CVE-2025-25724,0,0,ceaf233b0f81ae9a6f391733c88ea13b491e944a1f678139217a1972e4a0941b,2025-07-17T15:56:36.083000 CVE-2025-25725,0,0,ac97ba103984120a346a524ddb442d8216a673461532b95f069cbd7053e539c0,2025-03-02T02:15:36.760000 CVE-2025-25726,0,0,1241b8ce4f2f3e5a9582d1cb34e021df8b6f066d37fe203461681ffda7c05f0f,2025-03-02T02:15:36.850000 @@ -291889,7 +291896,7 @@ CVE-2025-26789,0,0,ebea494059b94de49b6b520d5766b69e65af5f122cf9ef029bba111909dc2 CVE-2025-2679,0,0,cafe0cb961640352f6700d1f4f9c72cc0c9f8d69b76916ff519f9c4a67eb3536,2025-06-04T15:19:35.357000 CVE-2025-26791,0,0,a7d63ea0959b4846f11cfb3951f45279f457c98157e5d52d56097a5da007bce1,2025-02-14T16:15:37.350000 CVE-2025-26793,0,0,d30b44911459092c9e08ffe42552727cfd072bd06f4aa8564ac964446a27eec1,2025-02-24T17:15:14.580000 -CVE-2025-26794,0,0,fe65001567301b62f9f70becffce46b16ab4f6e8292d604a049482502e1fc499,2025-02-22T01:15:10.670000 +CVE-2025-26794,0,1,6e9618df8b457b71f21ca97d29f508999c2f86c458299a1f81bf001397d1e23d,2025-09-25T13:12:00.833000 CVE-2025-26795,0,0,3283f9e1bb19da1c039a6534fc32235ec5e4cbc609a28f146625988b1ff56282,2025-07-11T16:16:19.057000 CVE-2025-26796,0,0,68ab74fb372251311859b8e434d48ae111cce4d9cb690323b59ceca29e2126f1,2025-04-01T20:27:46.867000 CVE-2025-2680,0,0,934be0066d2f2c151ff263e21e7acbd87991eb5817b720319e92f8127f51bdc5,2025-06-04T15:16:46.930000 @@ -298024,7 +298031,7 @@ CVE-2025-38319,0,0,b99f4bc99fb4291170d8d94f412d81ae4fa0f61b1dd3b679b3668ac74d31a CVE-2025-3832,0,0,4341ec7053cdfcd8a390d90346badb808517e6099d45c1d26164d2b6c67b7ee1,2025-04-29T13:52:47.470000 CVE-2025-38320,0,0,cea7acfd482107795b44e5a1586f1acbd675f1fb55c57d89dab70b4c5975882c,2025-07-10T13:17:30.017000 CVE-2025-38321,0,0,30137b204209f422663400e75f784c76243a78a6b5760f6cf54fd416d0f4ad05,2025-07-10T13:17:30.017000 -CVE-2025-38322,0,1,8175cdaa5c2e78b3293daf1182b73618e59e5e079b513aa79edc63d8ea573b2b,2025-09-25T10:15:31.257000 +CVE-2025-38322,0,0,8175cdaa5c2e78b3293daf1182b73618e59e5e079b513aa79edc63d8ea573b2b,2025-09-25T10:15:31.257000 CVE-2025-38323,0,0,662ad134d360b4f4ed533e4c8dc25d51a9aa9fd15632237fad78e93afc9f2e0e,2025-07-10T13:17:30.017000 CVE-2025-38324,0,0,6c3995b0f91a9b9a796b3c29eba968bc0d8625d9bd13837968ff84fd7925b333,2025-07-10T13:17:30.017000 CVE-2025-38325,0,0,dc1154ae7b98b51683ab3e328490ea82053fbacc920d2d67898ae74f89f11286,2025-08-01T09:15:32.903000 @@ -298447,7 +298454,7 @@ CVE-2025-38705,0,0,f0012e19e538168c0c44949292bcf1c2ff6a7e201d893be667cf6c34d6311 CVE-2025-38706,0,0,9fc70ae537eb0cd7992e377ca8ddddf2718a0cde0bd29baeef74e0f3fb774a91,2025-09-05T17:47:24.833000 CVE-2025-38707,0,0,df84d30c59ba3c33dfc928d6f46ec670fa3ba84432f7d47561d01338259b7758,2025-09-05T17:47:24.833000 CVE-2025-38708,0,0,185adc9394704d32f36bb7c9e4cacf068fe977394e1c29bbaf77d9ccd07ef353,2025-09-05T17:47:24.833000 -CVE-2025-38709,0,1,9f299ee755d13bfc4d0a8bf5b21ee1d859f24ffc149381fead78175d01485547,2025-09-25T10:15:31.403000 +CVE-2025-38709,0,0,9f299ee755d13bfc4d0a8bf5b21ee1d859f24ffc149381fead78175d01485547,2025-09-25T10:15:31.403000 CVE-2025-3871,0,0,5fda6470f74db15cc9c4cca669930c49610170c12f61b6c7bb768f048b6a64f9,2025-07-16T14:58:59.837000 CVE-2025-38710,0,0,bf129ba7c1155ce7d95e4e24cb25dbd28f3377fc922e93594b842ad6012f3717,2025-09-05T17:47:24.833000 CVE-2025-38711,0,0,4f64675be0142d4c4c03d9a3788a9d03d3c81fbd13bed743f8b7f5705c1fa901,2025-09-05T17:47:24.833000 @@ -298986,7 +298993,7 @@ CVE-2025-39812,0,0,36cf6ac3d052b4576588989e95cab54f6ff3d49be2386555e920dadfc7d74 CVE-2025-39813,0,0,10be887a6f3b812f6d91343984b5c7f3fc195bb87a1133b0c4631a203d4bdc25,2025-09-18T13:43:34.310000 CVE-2025-39814,0,0,e5ec26493c90eb0fa04a6cf686051854df2eed7694e83e12e598d4c4e78f0a75,2025-09-18T13:43:34.310000 CVE-2025-39815,0,0,b47d5d4dda987a5a07fbce80c7af6ee9acad4155c8b1416f4499dcaaaf37ded0,2025-09-18T13:43:34.310000 -CVE-2025-39816,0,1,0a8fce17ec90251c12fae65ed47eaef55ebf5d8b983e26cfa098881e4a94ee3b,2025-09-25T10:15:31.527000 +CVE-2025-39816,0,0,0a8fce17ec90251c12fae65ed47eaef55ebf5d8b983e26cfa098881e4a94ee3b,2025-09-25T10:15:31.527000 CVE-2025-39817,0,0,8c0aa42eb858903798ded779a9c84f5a5a3de7eefbc134edc21b475bf645111f,2025-09-18T13:43:34.310000 CVE-2025-39818,0,0,f8b371817bbeecfb6858c8efeefa1bc553524d565cb046c7915fbb3a2e0ffb9e,2025-09-18T13:43:34.310000 CVE-2025-39819,0,0,fdb9158f179e199933eac8fdb935f0c954d5769057b68d67ee76bf1696fa44ab,2025-09-18T13:43:34.310000 @@ -299251,6 +299258,7 @@ CVE-2025-40693,0,0,b8a8bb6dfd6944c00ba54decc6086b1710041077b93d0f227ddfb368ea743 CVE-2025-40694,0,0,e578c3cdf9d11b2ef09b7118f0275e015848c92bdc7e2e8a3149800078f8b0c5,2025-09-12T15:31:24.010000 CVE-2025-40695,0,0,9db5970302d93ab7c97ed854d5351a44131d9f251764809fbb196aad53045c98,2025-09-12T15:31:11.180000 CVE-2025-40696,0,0,8bfe4d36ec8f1559d58227abaac4bdd24631c6baadc9cf9ae1407420244fbaec,2025-09-12T15:30:57.173000 +CVE-2025-40698,1,1,95ddea10c74ab6ac5c2cb41b2d8ad181f675c9bbfedc845c3fe46b626c1516d4,2025-09-25T12:15:30.760000 CVE-2025-4070,0,0,95239c8a358b05c88e31535f0df25ceb69331749309a950b338783db56336302,2025-05-09T13:50:22.543000 CVE-2025-40702,0,0,922c97d78daeddf868fa5a305ec9a141e7c812e2723d817ebe1949a1ffce3d99,2025-09-02T16:59:58.307000 CVE-2025-40703,0,0,387f7870a3b578f8d6dd994a8417a1b96867f558ffbdb664038c80af8375350d,2025-09-02T16:59:46.367000 @@ -308465,7 +308473,7 @@ CVE-2025-6192,0,0,483547ea6319c95642872363e4e6436ee4f0ce08e6f3ace0cccb8a4053638f CVE-2025-6193,0,0,1b9eea71b477bf9c4e7b9bd5cc5d3e3853a840bafa78d229ba7a22652ff2fec9,2025-09-02T19:15:32.700000 CVE-2025-6196,0,0,ba4eb4f2cb8082e0f1d30085aa97c2b8c1f0646682e0a11fdab60e191c75b93f,2025-08-12T12:48:43.230000 CVE-2025-6197,0,0,ed52a546a3f13ce1b5e199dd6d87c3691e93f6fcb6a6040c167bb160cdaae7ed,2025-07-22T13:06:27.983000 -CVE-2025-6198,0,1,db1c039487e8b4d4c3b8081066603ccfd944901fc68c285d492da4db9add531a,2025-09-25T10:15:31.670000 +CVE-2025-6198,0,0,db1c039487e8b4d4c3b8081066603ccfd944901fc68c285d492da4db9add531a,2025-09-25T10:15:31.670000 CVE-2025-6199,0,0,4b699fc3d41c1cd5ec554598f0043d4faabf4d3adf3f9e852ac413108625db8b,2025-08-21T01:16:43.190000 CVE-2025-6200,0,0,9a910a38b88392376f5190b20a5562991881e482a016d8b5bec3bcfcf4cf4f4e,2025-07-17T01:04:44.910000 CVE-2025-6201,0,0,09953b11a7588a9edc2f3925b0cbb84add185ea803d7765dc4a2a786cd413a85,2025-06-23T20:16:59.783000 @@ -309954,7 +309962,7 @@ CVE-2025-7933,0,0,9712a3b42ffd9d0cce1b92d6860fa09463158a947d61cb746cfd9213e292e4 CVE-2025-7934,0,0,46c06809130887af133e1af727e3a118a56a04f817ff6f91a8209cd1f0235382,2025-07-22T13:05:40.573000 CVE-2025-7935,0,0,87e9d0314bc99bb703a196588ab292657453b812548f39ef2e433d9dbbe87a66,2025-07-22T13:05:40.573000 CVE-2025-7936,0,0,2226fe9a4b5afffaddadd02bcf0588d877521548899b3f79c4950079fe35c950,2025-07-22T13:05:40.573000 -CVE-2025-7937,0,1,314a5062fd4e35d59b66d894fa10a4a13950dcf28fbc963df3a135847651d17a,2025-09-25T10:15:31.877000 +CVE-2025-7937,0,0,314a5062fd4e35d59b66d894fa10a4a13950dcf28fbc963df3a135847651d17a,2025-09-25T10:15:31.877000 CVE-2025-7938,0,0,044b542cdad617c01a4fbddaeb7bc5ebb5bd34bd05771495f238e4a8aded9376,2025-07-22T13:05:40.573000 CVE-2025-7939,0,0,64b0b0662f7d933b92291442b002ddafaaef2f717b195855d85b8861f909f3cf,2025-07-22T13:05:40.573000 CVE-2025-7940,0,0,c8d0889e71151cd036609a253054f266e0036ad8a9ce53bfb32b4af9439b922b,2025-07-22T13:05:40.573000