admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-28 23:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-10-02T22:00:11.668524+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-10-02 22:03:56 +00:00
1 parent 3654ad874e
commit 414a1abbb1
59 files changed
+3365 -837
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2024/CVE-2024-398xx/CVE-2024-39819.json
+4 -4
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-39819",
"sourceIdentifier": "[email protected]",
"published": "2024-07-15T18:15:04.407",
"lastModified": "2025-08-05T13:39:36.587",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:15:58.217",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access."
"value": "Integrity check\u00a0in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access."
},
{
"lang": "es",
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-269"
"value": "CWE-494"
}
]
}
CVE-2024/CVE-2024-398xx/CVE-2024-39823.json
+4 -4
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-39823",
"sourceIdentifier": "[email protected]",
"published": "2024-08-14T17:15:15.437",
"lastModified": "2024-09-04T21:30:22.210",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:15:59.367",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
"value": "Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
},
{
"lang": "es",
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-200"
"value": "CWE-862"
}
]
},
CVE-2024/CVE-2024-398xx/CVE-2024-39824.json
+4 -4
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-39824",
"sourceIdentifier": "[email protected]",
"published": "2024-08-14T17:15:15.670",
"lastModified": "2024-09-04T21:32:02.783",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:15:59.557",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
"value": "Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
},
{
"lang": "es",
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-200"
"value": "CWE-862"
}
]
},
CVE-2024/CVE-2024-398xx/CVE-2024-39826.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-39826",
"sourceIdentifier": "[email protected]",
"published": "2024-07-15T18:15:05.033",
"lastModified": "2025-08-05T13:44:47.913",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:15:59.720",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path traversal in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access."
"value": "Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access."
},
{
"lang": "es",
CVE-2024/CVE-2024-424xx/CVE-2024-42434.json
+4 -4
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-42434",
"sourceIdentifier": "[email protected]",
"published": "2024-08-14T17:15:16.270",
"lastModified": "2024-09-04T21:35:50.963",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:15:59.857",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
"value": "Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access."
},
{
"lang": "es",
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-200"
"value": "CWE-862"
}
]
},
CVE-2024/CVE-2024-424xx/CVE-2024-42441.json
+4 -4
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-42441",
"sourceIdentifier": "[email protected]",
"published": "2024-08-14T17:15:17.990",
"lastModified": "2024-08-28T23:58:06.960",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:16:00.037",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access."
"value": "Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access."
},
{
"lang": "es",
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-269"
"value": "CWE-266"
}
]
},
CVE-2024/CVE-2024-454xx/CVE-2024-45431.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-45431",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T17:15:45.850",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:03:21.330",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*",
"versionEndIncluding": "6.0.1",
"matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579"
}
]
}
]
}
],
"references": [
{
"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.opensynergy.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2024/CVE-2024-454xx/CVE-2024-45432.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-45432",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T17:15:46.697",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:03:09.920",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*",
"versionEndIncluding": "6.0.1",
"matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579"
}
]
}
]
}
],
"references": [
{
"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.opensynergy.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2024/CVE-2024-454xx/CVE-2024-45433.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-45433",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T17:15:46.827",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:02:34.333",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*",
"versionEndIncluding": "6.0.1",
"matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579"
}
]
}
]
}
],
"references": [
{
"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.opensynergy.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2024/CVE-2024-454xx/CVE-2024-45434.json
+34 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-45434",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T17:15:46.950",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:00:43.860",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,18 +47,47 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:opensynergy:blue_sdk:*:*:*:*:*:*:*:*",
"versionEndIncluding": "6.0.1",
"matchCriteriaId": "B8C2A32B-8E89-48E8-9E3E-9E836F9FE579"
}
]
}
]
}
],
"references": [
{
"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.opensynergy.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://pcacybersecurity.com/resources/advisory/perfekt-blue",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-102xx/CVE-2025-10234.json
+71 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10234",
"sourceIdentifier": "[email protected]",
"published": "2025-09-11T00:15:33.303",
"lastModified": "2025-09-11T17:14:10.147",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:19:10.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -118,24 +138,68 @@
"value": "CWE-94"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.7.8.1",
"matchCriteriaId": "E420F2FD-D264-4284-A5BE-F62F0227AA2B"
}
]
}
]
}
],
"references": [
{
"url": "https://medium.com/@warlleyfreire/stored-xss-in-scada-lts-data-point-edit-42c7383402f0",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323503",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323503",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.641896",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-102xx/CVE-2025-10235.json
+71 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10235",
"sourceIdentifier": "[email protected]",
"published": "2025-09-11T01:15:33.027",
"lastModified": "2025-09-11T17:14:10.147",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:18:25.550",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -118,24 +138,68 @@
"value": "CWE-94"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.7.8.1",
"matchCriteriaId": "E420F2FD-D264-4284-A5BE-F62F0227AA2B"
}
]
}
]
}
],
"references": [
{
"url": "https://medium.com/@warlleyfreire/stored-xss-in-scada-lts-reports-module-colour-field-4d7e6633d298",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323504",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323504",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.641972",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10325.json
+87 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10325",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T20:15:42.493",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:17:36.187",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,87 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:wavlink:wl-wn578w2_firmware:m78w2_v221110:*:*:*:*:*:*:*",
"matchCriteriaId": "81461184-1114-4BFF-8F6A-8C2571ACBD70"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:wavlink:wl-wn578w2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92D9BD84-F88E-4B8A-BB2F-19C5E55D1310"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/login.cgi/login/readme.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323751",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323751",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643436",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643437",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10326.json
+85 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10326",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T21:15:33.197",
"lastModified": "2025-09-15T16:15:33.757",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:16:24.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,36 +138,92 @@
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.8.0",
"matchCriteriaId": "7912F3E1-4234-4C25-9106-0168E1D24C28"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md#poc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323752",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323752",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643500",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md#poc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10327.json
+71 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10327",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T21:15:33.397",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:15:29.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,24 +138,68 @@
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.8.0",
"matchCriteriaId": "7912F3E1-4234-4C25-9106-0168E1D24C28"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce4.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323753",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323753",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643511",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10328.json
+75 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10328",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T22:15:33.520",
"lastModified": "2025-09-15T16:15:34.190",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:14:15.457",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,76 @@
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.8.0",
"matchCriteriaId": "7912F3E1-4234-4C25-9106-0168E1D24C28"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce5.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323754",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323754",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643512",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce5.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10358.json
+96 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10358",
"sourceIdentifier": "[email protected]",
"published": "2025-09-13T08:15:26.673",
"lastModified": "2025-09-15T16:15:34.940",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:12:32.153",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,36 +138,103 @@
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:wavlink:wl-wn578w2_firmware:m78w2_v221110:*:*:*:*:*:*:*",
"matchCriteriaId": "81461184-1114-4BFF-8F6A-8C2571ACBD70"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:wavlink:wl-wn578w2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92D9BD84-F88E-4B8A-BB2F-19C5E55D1310"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac#proof-of-concept-poc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323772",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323772",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643438",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac#proof-of-concept-poc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10359.json
+87 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10359",
"sourceIdentifier": "[email protected]",
"published": "2025-09-13T13:15:32.190",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:12:03.467",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,87 @@
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:wavlink:wl-wn578w2_firmware:m78w2_v221110:*:*:*:*:*:*:*",
"matchCriteriaId": "81461184-1114-4BFF-8F6A-8C2571ACBD70"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:wavlink:wl-wn578w2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92D9BD84-F88E-4B8A-BB2F-19C5E55D1310"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac#proof-of-concept-poc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323773",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323773",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643444",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-103xx/CVE-2025-10366.json
+76 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10366",
"sourceIdentifier": "[email protected]",
"published": "2025-09-13T14:15:31.100",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-02T20:10:47.040",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -118,28 +138,76 @@
"value": "CWE-94"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.8.0",
"matchCriteriaId": "7912F3E1-4234-4C25-9106-0168E1D24C28"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss1.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss1.md#poc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.323774",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.323774",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.643517",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-106xx/CVE-2025-10653.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-10653",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:31.507",
"lastModified": "2025-10-02T20:15:31.507",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An unauthenticated debug port may allow access to the device file system."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-288"
}
]
}
],
"references": [
{
"url": "https://support.raise3d.com/",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-275-01",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-306xx/CVE-2025-30664.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-30664",
"sourceIdentifier": "[email protected]",
"published": "2025-05-14T18:15:30.180",
"lastModified": "2025-05-16T14:43:56.797",
"lastModified": "2025-10-02T21:16:00.287",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access."
"value": "Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access."
},
{
"lang": "es",
@@ -46,7 +46,7 @@
"description": [
{
"lang": "en",
"value": "CWE-74"
"value": "CWE-79"
}
]
}
CVE-2025/CVE-2025-306xx/CVE-2025-30668.json
+2 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-30668",
"sourceIdentifier": "[email protected]",
"published": "2025-05-14T18:15:30.877",
"lastModified": "2025-05-16T14:43:56.797",
"lastModified": "2025-10-02T21:16:00.447",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -46,7 +46,7 @@
"description": [
{
"lang": "en",
"value": "CWE-476"
"value": "CWE-191"
}
]
}
CVE-2025/CVE-2025-467xx/CVE-2025-46786.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-46786",
"sourceIdentifier": "[email protected]",
"published": "2025-05-14T18:15:31.303",
"lastModified": "2025-05-16T14:43:56.797",
"lastModified": "2025-10-02T21:16:00.597",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access."
"value": "Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access."
},
{
"lang": "es",
@@ -46,7 +46,7 @@
"description": [
{
"lang": "en",
"value": "CWE-74"
"value": "CWE-79"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54086.json
+66
View File
@@ -0,0 +1,66 @@
{
"id": "CVE-2025-54086",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:32.680",
"lastModified": "2025-10-02T20:15:32.680",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CVE-2025-54086 is an excess permissions vulnerability in the\nWarehouse component of Absolute Secure Access prior to version 14.10. Attackers\nwith access to the local file system can read the Java keystore file. The\nattack complexity is low, there are no attack requirements, the privileges\nrequired are low and no user interaction is required. Impact to confidentiality\nis low, there is no impact to integrity or availability."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"references": [
{
"url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54086",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54087.json
+66
View File
@@ -0,0 +1,66 @@
{
"id": "CVE-2025-54087",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:32.830",
"lastModified": "2025-10-02T20:15:32.830",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CVE-2025-54087 is a server-side request forgery\nvulnerability in Secure Access prior to version 14.10. Attackers with\nadministrative privileges can publish a crafted test HTTP request originating\nfrom the Secure Access server. The attack complexity is high, there are no\nattack requirements, and user interaction is required. There is no direct\nimpact to confidentiality, integrity, or availability. There is a low severity\nsubsequent system impact to integrity."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 1.8,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"references": [
{
"url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54087",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54088.json
+66
View File
@@ -0,0 +1,66 @@
{
"id": "CVE-2025-54088",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T21:16:00.740",
"lastModified": "2025-10-02T21:16:00.740",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CVE-2025-54088 is an open-redirect vulnerability in Secure\nAccess prior to version 14.10. Attackers with access to the console can\nredirect victims to an arbitrary URL. The attack complexity is low, attack\nrequirements are present, no privileges are required, and users must actively\nparticipate in the attack. Impact to confidentiality is low and there is no\nimpact to integrity or availability. There are high severity impacts to\nconfidentiality, integrity, availability in subsequent systems."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"references": [
{
"url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54088",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54089.json
+66
View File
@@ -0,0 +1,66 @@
{
"id": "CVE-2025-54089",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T21:16:00.860",
"lastModified": "2025-10-02T21:16:00.860",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "CVE-2025-54089 is a cross-site scripting vulnerability in versions\nof secure access prior to 14.10. Attackers with administrative access to the\nconsole can interfere with another administrator\u2019s access to the console. The\nattack complexity is low; there are no attack requirements. Privileges required\nto execute the attack are high and the victim must actively participate in the\nattack sequence. There is no impact to confidentiality or availability, there\nis a low impact to integrity."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"references": [
{
"url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54089",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-560xx/CVE-2025-56019.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-56019",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T18:15:46.163",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.033",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-277"
}
]
}
],
"references": [
{
"url": "https://github.com/Yashodhanvivek/Agatsa-EasyTouch-Plus---CVE-2025-56019/blob/main/input.md",
CVE-2025/CVE-2025-561xx/CVE-2025-56162.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-56162",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T16:15:35.047",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.220",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw('field(goods_id, ...)'), allowing attackers to: (a) enumerate or modify database data, including dumping admin password hashes; (b) write web-shell files or invoke xp_cmdshell, leading to remote code execution on servers configured with sufficient DB privileges."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://gitee.com/xany/yoshop2.0",
CVE-2025/CVE-2025-573xx/CVE-2025-57305.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-57305",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T16:15:35.350",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.407",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "http://vitaracharts.com",
CVE-2025/CVE-2025-574xx/CVE-2025-57443.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-57443",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T15:15:53.267",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.583",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables, disable-library-validation) that allow unprivileged local attackers to inject code into the FrostWire process via the DYLD_INSERT_LIBRARIES environment variable. This allows escalated privileges to arbitrary TCC-approved directories."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://github.com/SwayZGl1tZyyy/vulnerability-research/tree/main/CVE-2025-57443",
CVE-2025/CVE-2025-575xx/CVE-2025-57579.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-57579",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T16:15:35.290",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:04:07.443",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:totolink:x2000r_firmware:2.0.0-b20230727.1043.web:*:*:*:*:*:*:*",
"matchCriteriaId": "79A3F735-30B4-44DF-98B5-5DDB3ABEA61D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:totolink:x2000r:v2:*:*:*:*:*:*:*",
"matchCriteriaId": "E04390BE-A47B-4821-8552-42035775A2FB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/259/ids/36.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59403.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59403",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:05.530",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.743",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
CVE-2025/CVE-2025-594xx/CVE-2025-59405.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59405",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:06.243",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:33.913",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover the OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
CVE-2025/CVE-2025-594xx/CVE-2025-59406.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59406",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:06.880",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:34.083",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover this OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-319"
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
CVE-2025/CVE-2025-594xx/CVE-2025-59407.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59407",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:07.527",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:34.257",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (flock_rye.bks) along with its hardcoded password (flockhibiki17) in its code. The keystore contains a private key."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-321"
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
CVE-2025/CVE-2025-594xx/CVE-2025-59409.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59409",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:08.177",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:34.427",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
CVE-2025/CVE-2025-597xx/CVE-2025-59736.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59736",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T14:15:46.173",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:05:11.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59737.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59737",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T14:15:46.317",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:13:13.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59738.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59738",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T14:15:46.463",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:14:42.183",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59739.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59739",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T14:15:46.610",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:25:41.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59740.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59740",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T14:15:46.763",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:29:29.883",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59741.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59741",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T15:15:53.527",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:29:54.237",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -67,12 +89,42 @@
"value": "CWE-77"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59742.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59742",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T15:15:53.680",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:30:04.473",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59743.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59743",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T15:15:53.837",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:31:17.863",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59744.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59744",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T15:15:53.983",
"lastModified": "2025-10-02T19:11:46.753",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-02T20:31:10.147",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:andsoft:e-tms:25.03:*:*:*:*:*:*:*",
"matchCriteriaId": "DA9BDB99-4B85-46EF-A8EA-B0E7B1DCF276"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-606xx/CVE-2025-60660.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60660",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T16:15:38.380",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:34.663",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/file/d/1YTKUiYXMsaAEoasx7xbQxy2tsrC5E3Ew/view?usp=sharing",
CVE-2025/CVE-2025-606xx/CVE-2025-60661.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60661",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:08.817",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:34.870",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/file/d/10bqMY1XighOBZ5D_Q8GtWFwhmxSN2GJw/view?usp=sharing",
CVE-2025/CVE-2025-606xx/CVE-2025-60662.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60662",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T16:15:38.517",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:35.077",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/file/d/1-XpZmT_Yw5JtygQJ6HZBRnC5IjlAnLQO/view?usp=sharing",
CVE-2025/CVE-2025-606xx/CVE-2025-60663.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60663",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:09.457",
"lastModified": "2025-10-02T19:11:46.753",
"lastModified": "2025-10-02T20:15:35.287",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/file/d/1co536tsEdPANFHsvhBvay0_FOMCA4R6r/view?usp=sharing",
CVE-2025/CVE-2025-615xx/CVE-2025-61595.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-61595",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:35.493",
"lastModified": "2025-10-02T20:15:35.493",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://github.com/MANTRA-Chain/mantrachain/commit/30d36c46e9823b56b8f0dcbb66e980ca5df284e4",
"source": "[email protected]"
},
{
"url": "https://github.com/MANTRA-Chain/mantrachain/security/advisories/GHSA-qwvm-wqq8-8j69",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-616xx/CVE-2025-61603.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-61603",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:35.647",
"lastModified": "2025-10-02T21:16:01.113",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/commit/84958eed73741a544859eea297908db3b83b3833",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-v8hm-pq8g-c7j4",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-v8hm-pq8g-c7j4",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-616xx/CVE-2025-61604.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-61604",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T20:15:35.803",
"lastModified": "2025-10-02T21:16:01.230",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery (CSRF) vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger the action using the victim\u2019s authenticated session. This issue is fixed in version 3.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/commit/839de09798f61c9a76043bb2c4b3063d310c5aed",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-59hm-4m9h-ch3m",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-59hm-4m9h-ch3m",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-616xx/CVE-2025-61605.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-61605",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T21:16:01.340",
"lastModified": "2025-10-02T21:16:01.340",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/commit/176733543c9b6762bef5ddec7c9c555f76fafa1d",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8963-9833-gpx7",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-616xx/CVE-2025-61606.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-61606",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T21:16:01.490",
"lastModified": "2025-10-02T21:16:01.490",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-601"
}
]
}
],
"references": [
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/commit/85051ad14b1e7fa14116e74a90c0bd5480b2ec84",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-m64v-hm7q-33wr",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-616xx/CVE-2025-61665.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-61665",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T21:16:01.647",
"lastModified": "2025-10-02T21:16:01.647",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"references": [
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/commit/828f23a6a760a52b8bb8bfd583cc2b23c42da51e",
"source": "[email protected]"
},
{
"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-62wp-6qmh-6p5f",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-83xx/CVE-2025-8354.json
+5 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-8354",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T14:15:41.597",
"lastModified": "2025-09-25T18:23:14.440",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-02T21:16:01.800",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
@@ -75,11 +75,8 @@
]
},
{
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019",
"source": "[email protected]",
"tags": [
"Not Applicable"
]
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0021",
"source": "[email protected]"
}
]
}
README.md
+41 -35
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-02T20:00:11.904354+00:00
2025-10-02T22:00:11.668524+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-02T19:58:41.413000+00:00
2025-10-02T21:16:01.800000+00:00
```
### Last Data Feed Release
@@ -33,49 +33,55 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
312500
312511
```
### CVEs added in the last Commit
Recently added CVEs: `5`
Recently added CVEs: `11`
- [CVE-2025-32942](CVE-2025/CVE-2025-329xx/CVE-2025-32942.json) (`2025-10-02T19:15:30.123`)
- [CVE-2025-49090](CVE-2025/CVE-2025-490xx/CVE-2025-49090.json) (`2025-10-02T19:15:31.290`)
- [CVE-2025-54315](CVE-2025/CVE-2025-543xx/CVE-2025-54315.json) (`2025-10-02T19:15:31.477`)
- [CVE-2025-56019](CVE-2025/CVE-2025-560xx/CVE-2025-56019.json) (`2025-10-02T18:15:46.163`)
- [CVE-2025-59835](CVE-2025/CVE-2025-598xx/CVE-2025-59835.json) (`2025-10-02T19:15:31.983`)
- [CVE-2025-10653](CVE-2025/CVE-2025-106xx/CVE-2025-10653.json) (`2025-10-02T20:15:31.507`)
- [CVE-2025-54086](CVE-2025/CVE-2025-540xx/CVE-2025-54086.json) (`2025-10-02T20:15:32.680`)
- [CVE-2025-54087](CVE-2025/CVE-2025-540xx/CVE-2025-54087.json) (`2025-10-02T20:15:32.830`)
- [CVE-2025-54088](CVE-2025/CVE-2025-540xx/CVE-2025-54088.json) (`2025-10-02T21:16:00.740`)
- [CVE-2025-54089](CVE-2025/CVE-2025-540xx/CVE-2025-54089.json) (`2025-10-02T21:16:00.860`)
- [CVE-2025-61595](CVE-2025/CVE-2025-615xx/CVE-2025-61595.json) (`2025-10-02T20:15:35.493`)
- [CVE-2025-61603](CVE-2025/CVE-2025-616xx/CVE-2025-61603.json) (`2025-10-02T20:15:35.647`)
- [CVE-2025-61604](CVE-2025/CVE-2025-616xx/CVE-2025-61604.json) (`2025-10-02T20:15:35.803`)
- [CVE-2025-61605](CVE-2025/CVE-2025-616xx/CVE-2025-61605.json) (`2025-10-02T21:16:01.340`)
- [CVE-2025-61606](CVE-2025/CVE-2025-616xx/CVE-2025-61606.json) (`2025-10-02T21:16:01.490`)
- [CVE-2025-61665](CVE-2025/CVE-2025-616xx/CVE-2025-61665.json) (`2025-10-02T21:16:01.647`)
### CVEs modified in the last Commit
Recently modified CVEs: `590`
Recently modified CVEs: `46`
- [CVE-2025-8566](CVE-2025/CVE-2025-85xx/CVE-2025-8566.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8608](CVE-2025/CVE-2025-86xx/CVE-2025-8608.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8623](CVE-2025/CVE-2025-86xx/CVE-2025-8623.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8624](CVE-2025/CVE-2025-86xx/CVE-2025-8624.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8625](CVE-2025/CVE-2025-86xx/CVE-2025-8625.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8679](CVE-2025/CVE-2025-86xx/CVE-2025-8679.json) (`2025-10-02T19:11:46.753`)
- [CVE-2025-8777](CVE-2025/CVE-2025-87xx/CVE-2025-8777.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-8877](CVE-2025/CVE-2025-88xx/CVE-2025-8877.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-9075](CVE-2025/CVE-2025-90xx/CVE-2025-9075.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9230](CVE-2025/CVE-2025-92xx/CVE-2025-9230.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9231](CVE-2025/CVE-2025-92xx/CVE-2025-9231.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9232](CVE-2025/CVE-2025-92xx/CVE-2025-9232.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9512](CVE-2025/CVE-2025-95xx/CVE-2025-9512.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9583](CVE-2025/CVE-2025-95xx/CVE-2025-9583.json) (`2025-10-02T19:39:18.337`)
- [CVE-2025-9584](CVE-2025/CVE-2025-95xx/CVE-2025-9584.json) (`2025-10-02T19:38:58.230`)
- [CVE-2025-9585](CVE-2025/CVE-2025-95xx/CVE-2025-9585.json) (`2025-10-02T19:38:52.050`)
- [CVE-2025-9586](CVE-2025/CVE-2025-95xx/CVE-2025-9586.json) (`2025-10-02T19:38:36.537`)
- [CVE-2025-9587](CVE-2025/CVE-2025-95xx/CVE-2025-9587.json) (`2025-10-02T19:11:46.753`)
- [CVE-2025-9697](CVE-2025/CVE-2025-96xx/CVE-2025-9697.json) (`2025-10-02T19:11:46.753`)
- [CVE-2025-9762](CVE-2025/CVE-2025-97xx/CVE-2025-9762.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-9852](CVE-2025/CVE-2025-98xx/CVE-2025-9852.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-9946](CVE-2025/CVE-2025-99xx/CVE-2025-9946.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-9948](CVE-2025/CVE-2025-99xx/CVE-2025-9948.json) (`2025-10-02T19:12:42.843`)
- [CVE-2025-9991](CVE-2025/CVE-2025-99xx/CVE-2025-9991.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-9993](CVE-2025/CVE-2025-99xx/CVE-2025-9993.json) (`2025-10-02T19:12:17.160`)
- [CVE-2025-46786](CVE-2025/CVE-2025-467xx/CVE-2025-46786.json) (`2025-10-02T21:16:00.597`)
- [CVE-2025-56019](CVE-2025/CVE-2025-560xx/CVE-2025-56019.json) (`2025-10-02T20:15:33.033`)
- [CVE-2025-56162](CVE-2025/CVE-2025-561xx/CVE-2025-56162.json) (`2025-10-02T20:15:33.220`)
- [CVE-2025-57305](CVE-2025/CVE-2025-573xx/CVE-2025-57305.json) (`2025-10-02T20:15:33.407`)
- [CVE-2025-57443](CVE-2025/CVE-2025-574xx/CVE-2025-57443.json) (`2025-10-02T20:15:33.583`)
- [CVE-2025-57579](CVE-2025/CVE-2025-575xx/CVE-2025-57579.json) (`2025-10-02T20:04:07.443`)
- [CVE-2025-59403](CVE-2025/CVE-2025-594xx/CVE-2025-59403.json) (`2025-10-02T20:15:33.743`)
- [CVE-2025-59405](CVE-2025/CVE-2025-594xx/CVE-2025-59405.json) (`2025-10-02T20:15:33.913`)
- [CVE-2025-59406](CVE-2025/CVE-2025-594xx/CVE-2025-59406.json) (`2025-10-02T20:15:34.083`)
- [CVE-2025-59407](CVE-2025/CVE-2025-594xx/CVE-2025-59407.json) (`2025-10-02T20:15:34.257`)
- [CVE-2025-59409](CVE-2025/CVE-2025-594xx/CVE-2025-59409.json) (`2025-10-02T20:15:34.427`)
- [CVE-2025-59736](CVE-2025/CVE-2025-597xx/CVE-2025-59736.json) (`2025-10-02T20:05:11.530`)
- [CVE-2025-59737](CVE-2025/CVE-2025-597xx/CVE-2025-59737.json) (`2025-10-02T20:13:13.133`)
- [CVE-2025-59738](CVE-2025/CVE-2025-597xx/CVE-2025-59738.json) (`2025-10-02T20:14:42.183`)
- [CVE-2025-59739](CVE-2025/CVE-2025-597xx/CVE-2025-59739.json) (`2025-10-02T20:25:41.133`)
- [CVE-2025-59740](CVE-2025/CVE-2025-597xx/CVE-2025-59740.json) (`2025-10-02T20:29:29.883`)
- [CVE-2025-59741](CVE-2025/CVE-2025-597xx/CVE-2025-59741.json) (`2025-10-02T20:29:54.237`)
- [CVE-2025-59742](CVE-2025/CVE-2025-597xx/CVE-2025-59742.json) (`2025-10-02T20:30:04.473`)
- [CVE-2025-59743](CVE-2025/CVE-2025-597xx/CVE-2025-59743.json) (`2025-10-02T20:31:17.863`)
- [CVE-2025-59744](CVE-2025/CVE-2025-597xx/CVE-2025-59744.json) (`2025-10-02T20:31:10.147`)
- [CVE-2025-60660](CVE-2025/CVE-2025-606xx/CVE-2025-60660.json) (`2025-10-02T20:15:34.663`)
- [CVE-2025-60661](CVE-2025/CVE-2025-606xx/CVE-2025-60661.json) (`2025-10-02T20:15:34.870`)
- [CVE-2025-60662](CVE-2025/CVE-2025-606xx/CVE-2025-60662.json) (`2025-10-02T20:15:35.077`)
- [CVE-2025-60663](CVE-2025/CVE-2025-606xx/CVE-2025-60663.json) (`2025-10-02T20:15:35.287`)
- [CVE-2025-8354](CVE-2025/CVE-2025-83xx/CVE-2025-8354.json) (`2025-10-02T21:16:01.800`)
## Download and Usage
_state.csv
+630 -619
View File
File diff suppressed because it is too large. Load diff