diff --git a/CVE-2021/CVE-2021-200xx/CVE-2021-20021.json b/CVE-2021/CVE-2021-200xx/CVE-2021-20021.json index 6d1d1f086b0..c2722a639dc 100644 --- a/CVE-2021/CVE-2021-200xx/CVE-2021-20021.json +++ b/CVE-2021/CVE-2021-200xx/CVE-2021-20021.json @@ -2,8 +2,8 @@ "id": "CVE-2021-20021", "sourceIdentifier": "PSIRT@sonicwall.com", "published": "2021-04-09T18:15:13.380", - "lastModified": "2025-10-22T00:17:18.770", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:04:58.607", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -112,6 +112,7 @@ ], "configurations": [ { + "operator": "AND", "nodes": [ { "operator": "OR", @@ -122,6 +123,257 @@ "criteria": "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.9.6103", "matchCriteriaId": "08AD853A-995F-435D-B2AC-A7A0745D6172" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C2434930-79AB-4AA9-AAC8-B116F3CD5CC0" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "AA584C94-2321-4BBC-9FCD-D7C13C57F1DA" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "ECF2B5A6-B62F-444E-BDB3-0084896CD83B" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A18DCCAF-A373-4550-805B-EF329643B068" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "866762BF-F65B-4C9C-A08E-1F25041576AE" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DC5803B4-57F1-4F0C-A459-F367F56AFE16" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "53641CB5-CC2E-4C12-9125-64DCE99F0838" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BA9126B7-5C64-4692-954C-6EF71261862C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "113E3915-7EF3-42CA-8429-5310EA631DF1" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A114E829-5FC6-4321-8D28-C63EC09F9099" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*", + "matchCriteriaId": "271F06DD-8DAA-46EF-A803-659EA253CC63" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "75D58601-90F8-4501-9FD0-FA1E1E9DB546" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*", + "matchCriteriaId": "443B635B-6B08-479B-A635-26724B192BF0" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E" }, { "vulnerable": true, @@ -151,7 +403,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20021", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-200xx/CVE-2021-20022.json b/CVE-2021/CVE-2021-200xx/CVE-2021-20022.json index e80d673f233..1771db1e7db 100644 --- a/CVE-2021/CVE-2021-200xx/CVE-2021-20022.json +++ b/CVE-2021/CVE-2021-200xx/CVE-2021-20022.json @@ -2,8 +2,8 @@ "id": "CVE-2021-20022", "sourceIdentifier": "PSIRT@sonicwall.com", "published": "2021-04-09T18:15:13.460", - "lastModified": "2025-10-22T00:17:18.923", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:07:07.287", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -64,17 +64,17 @@ "type": "Primary", "cvssData": { "version": "2.0", - "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", - "baseScore": 6.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, "accessVector": "NETWORK", "accessComplexity": "LOW", - "authentication": "SINGLE", + "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL" }, - "baseSeverity": "MEDIUM", - "exploitabilityScore": 8.0, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, @@ -112,6 +112,7 @@ ], "configurations": [ { + "operator": "AND", "nodes": [ { "operator": "OR", @@ -122,6 +123,257 @@ "criteria": "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.9.6103", "matchCriteriaId": "08AD853A-995F-435D-B2AC-A7A0745D6172" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C2434930-79AB-4AA9-AAC8-B116F3CD5CC0" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "AA584C94-2321-4BBC-9FCD-D7C13C57F1DA" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "ECF2B5A6-B62F-444E-BDB3-0084896CD83B" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A18DCCAF-A373-4550-805B-EF329643B068" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "866762BF-F65B-4C9C-A08E-1F25041576AE" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DC5803B4-57F1-4F0C-A459-F367F56AFE16" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "53641CB5-CC2E-4C12-9125-64DCE99F0838" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BA9126B7-5C64-4692-954C-6EF71261862C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "113E3915-7EF3-42CA-8429-5310EA631DF1" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A114E829-5FC6-4321-8D28-C63EC09F9099" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*", + "matchCriteriaId": "271F06DD-8DAA-46EF-A803-659EA253CC63" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "75D58601-90F8-4501-9FD0-FA1E1E9DB546" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*", + "matchCriteriaId": "443B635B-6B08-479B-A635-26724B192BF0" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.9.6105", + "matchCriteriaId": "7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E" }, { "vulnerable": true, @@ -151,7 +403,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49818.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49818.json index d3414060f50..cc7685726b6 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49818.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49818.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49818", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.207", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:58:25.520", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,163 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mISDN: corregir el uso incorrecto de put_device() en mISDN_register_device() No debemos liberar la referencia de put_device() antes de llamar a device_initialize()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.265", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "63999353-31D4-4ADF-B8A9-539228294EB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.154", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "2AC41C94-5056-48B9-8510-A18D202EC178" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.78", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "C13C4555-0362-4613-9763-168EA87C9747" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.8", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "6D01C583-70A2-4E59-A899-2490596BF147" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.9.333:*:*:*:*:*:*:*", + "matchCriteriaId": "6292C608-38FC-4382-B5B5-BC57A4F58ACD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.14.299:*:*:*:*:*:*:*", + "matchCriteriaId": "989E7362-14CB-4A9F-B1C8-85730E39B6CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4.224:*:*:*:*:*:*:*", + "matchCriteriaId": "022BBE5E-3A0C-4184-820C-CE96EE99D5F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2d25107e111a85c56f601a5470f1780ec054e6ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/44658d65f6b3118f595a1229d7eed74845a5e2ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/596230471da3415e92ae6b9d2a4e26f4a81cac5a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/709aa1f73d3e9e9ea16e2c4e44f2874c5d2c382c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/81db4f182744acd004f17d7cc52dde9ea53467e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/83672c1b83d107b0d4fe0accf1bf64d8988398e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/87b336aa158201dc30a318431e63e8c5b26c4156", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d40b35a7922f4df3767ad6fb8ef3dc86e31d7ba3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49819.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49819.json index 55cfab39182..013d7847a67 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49819.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49819.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49819", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.317", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:57:06.550", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: octeon_ep: se corrige una posible fuga de memoria en octep_device_setup(). Cuando se producen errores unsupported_dev e init de mbox, no se liberan oct->conf ni iounmap() de oct->mmio[i].hw_addr. Esto causar\u00eda un problema de fuga de memoria. Se a\u00f1aden kfree() para oct->conf e iounmap() para oct->mmio[i].hw_addr en los errores unsupported_dev e init de mbox para solucionar el problema." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "34351652-9335-4383-BE7F-D0AA497D8C41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/67b65a0db8a7fdad43159819f41335497a4bb04f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e4041be97b15302ebfffda8bbd45f3b2d096048f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49820.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49820.json index ddcb9e7c3d5..725df8aa918 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49820.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49820.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49820", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.413", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:45:23.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mctp i2c: no cuente las claves no utilizadas o no v\u00e1lidas para la liberaci\u00f3n del flujo Actualmente estamos alcanzando el WARN_ON en mctp_i2c_flow_release: if (midev->release_count > midev->i2c_lock_count) { WARN_ONCE(1, \"release count overflow\"); Esto puede ser alcanzado si expiramos un flujo antes de enviar el primer paquete que contiene, ya que no estaremos emparejando el incremento de release_count (realizado en la liberaci\u00f3n del flujo) con la operaci\u00f3n de bloqueo i2c (solo se realiza en TX real). Para corregir esto, solo libere un flujo si lo hemos encontrado previamente (es decir, dev_flow_state no indica NUEVO), ya que marcaremos el flujo como ACTIVO al mismo tiempo que contabilizamos la operaci\u00f3n de bloqueo i2c. Tambi\u00e9n necesitamos agregar un estado de flujo INV\u00c1LIDO, para indicar cu\u00e1ndo hemos realizado la liberaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "2C26F938-1D52-4536-9D3F-4796538E0B0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/9cbd48d5fa14e4c65f8580de16686077f7cea02b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a5915a9a3ab4067ef8996a57738d156eabeb3a12", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49821.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49821.json index 9a582c76626..5d60e58d2ae 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49821.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49821.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49821", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.513", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:17:09.993", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,184 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mISDN: corrige posible p\u00e9rdida de memoria en mISDN_dsp_element_register() Despu\u00e9s de la confirmaci\u00f3n 1fa5ae857bb1 (\"n\u00facleo del controlador: deshacerse de la matriz de cadenas bus_id del dispositivo struct\"), el nombre del dispositivo se asigna din\u00e1micamente, use put_device() para renunciar a la referencia, de modo que el nombre se pueda liberar en kobject_cleanup() cuando refcount sea 0. La 'entrada' se liberar\u00e1 en mISDN_dsp_dev_release(), por lo que se elimina kfree(). list_del() se llama en mISDN_dsp_dev_release(), por lo que necesita inicializarse." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.30", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "70ED9A8E-5DAC-4ECE-9EA5-30AD1A6D83EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "424802D2-E9E7-48A9-AD6F-DF2227B3D83A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "A5C69A12-68E2-400E-9A5A-375A673C8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/083a2c9ef82e184bdf0b9f9a1e5fc38d32afbb47", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0f2c681900a01e3f23789bca26d88268c3d5b51d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/727ed7d28348c026c7ef4d852f3d0e5054d376e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a05e3929668c8cfef495c69752a9e91fac4878f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98a2ac1ca8fd6eca6867726fe238d06e75eb1acd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b119bedbefb7dd9ed8bf8cb9f1056504250d610e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bbd53d05c4c892080ef3b617eff4f57903acecb9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d4b8394725079670be309f9a35ad88a8cbbaaefd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49822.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49822.json index 08e82ae1906..50d189270c0 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49822.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49822.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49822", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.623", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:17:02.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cifs: Se corrige la fuga de conexiones al fallar la configuraci\u00f3n de Tlink. Si la configuraci\u00f3n de Tlink falla, se pierden las conexiones y se produce una fuga de referencia del m\u00f3dulo, ya que el kthread de cifsd no finaliza. Tambi\u00e9n se filtra la informaci\u00f3n de fscache, y en el siguiente montaje con fsc, se mostrar\u00e1n los siguientes errores: CIFS: La clave del volumen de cach\u00e9 ya est\u00e1 en uso (cifs,127.0.0.1:445,TEST). Revisemos el resultado de la configuraci\u00f3n de Tlink y realicemos una limpieza." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.15.81", + "matchCriteriaId": "00A78005-6361-427F-8D7B-122A764B8EBB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a087842d10b5daa123ee5291e386cdd78413705", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1dcdf5f5b2137185cbdd5385f29949ab3da4f00c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9059e338fc000c0b87d8cf29e93c74fd703212e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49823.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49823.json index 1f4c06d0c8d..18589d025dc 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49823.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49823.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49823", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.723", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:16:57.870", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ata: libata-transport: correcci\u00f3n del manejo de errores en ata_tdev_add(). En ata_tdev_add(), no se comprueba el valor de retorno de transport_add_device(). Como resultado, se genera una referencia nula al eliminar el m\u00f3dulo, ya que se llama a transport_remove_device() para eliminar el dispositivo no a\u00f1adido. No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 00000000000000d0 CPU: 13 PID: 13603 Comm: rmmod Kdump: cargado Tainted: GW 6.1.0-rc3+ #36 pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : device_del+0x48/0x3a0 lr : device_del+0x44/0x3a0 Rastreo de llamadas: device_del+0x48/0x3a0 attribute_container_class_device_del+0x28/0x40 transport_remove_classdev+0x60/0x7c attribute_container_device_trigger+0x118/0x120 transport_remove_device+0x20/0x30 ata_tdev_delete+0x24/0x50 [libata] ata_tlink_delete+0x40/0xa0 [libata] ata_tport_delete+0x2c/0x60 [libata] ata_port_detach+0x148/0x1b0 [libata] ata_pci_remove_one+0x50/0x80 [libata] ahci_remove_one+0x4c/0x8c [ahci] Para solucionar este problema, verifique y gestione el valor de retorno de transport_add_device() en ata_tdev_add(). En la ruta de error, se llama a device_del() para eliminar el dispositivo a\u00f1adido previamente en esta funci\u00f3n, y ata_tdev_free() para liberar ata_dev." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "4CC31C0A-FA97-4ADC-B7F9-A03D37895074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ff36351309e3eadcff297480baf4785e726de9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef2ac07ab83163b9a53f45da20e14302591ad9cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f23058dc2398db1d8faca9a2b1ce30b85cdd8b22", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f54331962883f4fc4bf5e487e6e7cf07c4567fef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49824.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49824.json index 1ad81c713c6..d8ec173da50 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49824.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49824.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49824", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.830", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:16:47.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ata: libata-transport: correcci\u00f3n del manejo de errores en ata_tlink_add(). En ata_tlink_add(), no se comprueba el valor de retorno de transport_add_device(). Como resultado, se genera una referencia nula al eliminar el m\u00f3dulo, ya que se llama a transport_remove_device() para eliminar el dispositivo no a\u00f1adido. No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 00000000000000d0 CPU: 33 PID: 13850 Comm: rmmod Kdump: cargado Tainted: GW 6.1.0-rc3+ #12 pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : device_del+0x48/0x39c lr : device_del+0x44/0x39c Rastreo de llamadas: device_del+0x48/0x39c attribute_container_class_device_del+0x28/0x40 transport_remove_classdev+0x60/0x7c attribute_container_device_trigger+0x118/0x120 transport_remove_device+0x20/0x30 ata_tlink_delete+0x88/0xb0 [libata] ata_tport_delete+0x2c/0x60 [libata] ata_port_detach+0x148/0x1b0 [libata] ata_pci_remove_one+0x50/0x80 [libata] ahci_remove_one+0x4c/0x8c [ahci] Solucione esto verificando y manejando el valor de retorno de transport_add_device() en ata_tlink_add()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "4CC31C0A-FA97-4ADC-B7F9-A03D37895074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/67b219314628b90b3a314528e177335b0cd5c70b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7377a14598f6b04446c54bc4a50cd249470d6c6f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf0816f6322c5c37ee52655f928e91ecf32da103", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5234480ca822bdcf03fe4d6a590ddcb854558f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49825.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49825.json index 914a9a52e51..7ff78602a99 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49825.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49825.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49825", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:05.937", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:16:31.057", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ata: libata-transport: correcci\u00f3n del manejo de errores en ata_tport_add(). En ata_tport_add(), no se comprueba el valor de retorno de transport_add_device(). Como resultado, se genera una referencia nula al eliminar el m\u00f3dulo, ya que se llama a transport_remove_device() para eliminar el dispositivo no a\u00f1adido. No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 00000000000000d0 CPU: 12 PID: 13605 Comm: rmmod Kdump: cargado Tainted: GW 6.1.0-rc3+ #8 pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : device_del+0x48/0x39c lr : device_del+0x44/0x39c Rastreo de llamadas: device_del+0x48/0x39c attribute_container_class_device_del+0x28/0x40 transport_remove_classdev+0x60/0x7c attribute_container_device_trigger+0x118/0x120 transport_remove_device+0x20/0x30 ata_tport_delete+0x34/0x60 [libata] ata_port_detach+0x148/0x1b0 [libata] ata_pci_remove_one+0x50/0x80 [libata] ahci_remove_one+0x4c/0x8c [ahci] Solucione esto verificando y manejando el valor de retorno de transport_add_device() en ata_tport_add()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "4CC31C0A-FA97-4ADC-B7F9-A03D37895074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3613dbe3909dcc637fe6be00e4dc43b4aa0470ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52d9bb0adae9359711a0c5271430afd3754069e7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5362dc1634d8b8d5f30920f33ac11a3276b7ed9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e7bb1b7a7bf26f6b7372b7b683daece4a42fda02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49826.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49826.json index a38d6d833d2..b5d749bebff 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49826.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49826.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49826", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.043", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:15:47.177", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,151 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ata: libata-transport: correcci\u00f3n de un error doble de ata_host_put() en ata_tport_add(). En la ruta de error de ata_tport_add(), al llamar a put_device(), se llama a ata_tport_release(), lo que resta el recuento de referencias de 'ap->host'. A continuaci\u00f3n, se vuelve a llamar a ata_host_put(), el recuento de referencias se reduce a 0 y se llama a ata_host_release(), liberando todos los puertos y estableci\u00e9ndolos en nulo. Al desvincular el dispositivo tras un fallo, se llama a ata_host_stop() para liberar los recursos, lo que genera un error null-ptr-deref(), ya que todos los puertos est\u00e1n liberados y en nulo. No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 0000000000000008 CPU: 7 PID: 18671 Comm: modprobe Kdump: cargado Contaminado: GE 6.1.0-rc3+ #8 pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ata_host_stop+0x3c/0x84 [libata] lr : release_nodes+0x64/0xd0 Rastreo de llamadas: ata_host_stop+0x3c/0x84 [libata] release_nodes+0x64/0xd0 devres_release_all+0xbc/0x1b0 device_unbind_cleanup+0x20/0x70 really_probe+0x158/0x320 __driver_probe_device+0x84/0x120 driver_probe_device+0x44/0x120 __driver_attach+0xb4/0x220 bus_for_each_dev+0x78/0xdc driver_attach+0x2c/0x40 bus_add_driver+0x184/0x240 driver_register+0x80/0x13c __pci_register_driver+0x4c/0x60 ahci_pci_driver_init+0x30/0x1000 [ahci] Solucione esto eliminando ata_host_put() redundante en la ruta de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "268BF8F6-FA26-4338-9B9C-FD9E65830393" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/30e12e2be27ac6c4be2af4163c70db381364706f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/377ff82c33c0cb74562a353361b64b33c09562cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/865a6da40ba092c18292ae5f6194756131293745", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8c76310740807ade5ecdab5888f70ecb6d35732e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac471468f7c16cda2525909946ca13ddbcd14000", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bec9ded5404cb14e5f5470103d0973a2ff83d6a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49827.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49827.json index f331a2641b8..b5c095d5066 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49827.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49827.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49827", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.150", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:15:36.423", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm: Se corrige la posible desreferencia PTR nula en la llamada drm_vblank_destroy_worker(). drm_vblank_init() llama a drmm_add_action_or_reset() con la acci\u00f3n drm_vblank_init_release(). Si __drmm_add_action() falla, se llamar\u00e1 directamente a drm_vblank_init_release() con el vblank cuyo trabajador sea NULL. Como resultado, se producir\u00e1 una desreferencia PTR nula en kthread_destroy_worker(). Se a\u00f1ade la comprobaci\u00f3n de valores NULL antes de llamar a drm_vblank_destroy_worker(). ERROR: null-ptr-deref KASAN: null-ptr-deref en el rango [0x0000000000000068-0x000000000000006f] CPU: 5 PID: 961 Comm: modprobe No contaminado 6.0.0-11331-gd465bff130bf-dirty RIP: 0010:kthread_destroy_worker+0x25/0xb0 Seguimiento de llamadas: drm_vblank_init_release+0x124/0x220 [drm] ? drm_crtc_vblank_restore+0x8b0/0x8b0 [drm] __drmm_add_action_or_reset+0x41/0x50 [drm] drm_vblank_init+0x282/0x310 [drm] vkms_init+0x35f/0x1000 [vkms] ? 0xffffffffc4508000 ? lock_is_held_type+0xd7/0x130 ? __kmem_cache_alloc_node+0x1c2/0x2b0 ? lock_is_held_type+0xd7/0x130 ? 0xffffffffc4508000 do_one_initcall+0xd0/0x4f0 ... do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "169D89E4-6BEF-43D4-A0B5-35B3BA704553" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1d160dfb3fdf11ba9447e862c548447f91f4e74a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3acd2016421b2e628acad65495d15493bf7a3bc3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4979524f5a2a8210e87fde2f642b0dc060860821", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e884a6c2d49a6c12761e5bed851e9fe93bd923a1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49828.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49828.json index 0c187cb0ca9..8aef60532ec 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49828.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49828.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49828", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.260", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:10:01.750", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: hugetlbfs: no elimine la p\u00e1gina de error de la cach\u00e9 de p\u00e1ginas Este cambio es muy similar al cambio que se realiz\u00f3 para shmem [1] y resuelve el mismo problema, pero para HugeTLBFS. Actualmente, cuando se encuentra veneno en una p\u00e1gina HugeTLB, la p\u00e1gina se elimina de la cach\u00e9 de p\u00e1ginas. Eso significa que intentar mapear o leer esa p\u00e1gina enorme en el futuro dar\u00e1 como resultado que se asigne una nueva p\u00e1gina enorme en lugar de notificar al usuario que la p\u00e1gina fue envenenada. Como indica [1], esto es efectivamente corrupci\u00f3n de memoria. La soluci\u00f3n es dejar la p\u00e1gina en la cach\u00e9 de p\u00e1ginas. Si el usuario intenta usar una p\u00e1gina HugeTLB envenenada con una llamada al sistema, la llamada al sistema fallar\u00e1 con EIO, el mismo c\u00f3digo de error que usa shmem. Para los intentos de mapear la p\u00e1gina, el hilo obtendr\u00e1 un SIGBUS BUS_MCEERR_AR. [1]: commit a76054266661 (\"mm: shmem: no truncar la p\u00e1gina si se produce un fallo de memoria\")" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "15DB3C25-553E-4AFA-AD20-45C84054F9CD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/30571f28bb35c826219971c63bcf60d2517112ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8625147cafaa9ba74713d682f5185eb62cb2aedb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec667443b2dbc6cdbbac4073e51a17733158ec6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49829.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49829.json index 59cbfa6e8ea..1c7d6f217df 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49829.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49829.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49829", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.373", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:07:23.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,85 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/scheduler: correcci\u00f3n del conteo de referencias de vallas. Se filtraron vallas de dependencias al finalizar procesos. Adem\u00e1s, se obtuvo una referencia a la \u00faltima valla programada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.18", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "6105977D-D5ED-49CD-877D-605DBADFB242" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/b3af84383e7abdc5e63435817bb73a268e7c3637", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5f4b38362df93594cb426b04979d8834122f159", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49830.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49830.json index dc084cd95f3..8c879daef50 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49830.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49830.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49830", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.470", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:58:04.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/drv: Se solucion\u00f3 una posible fuga de memoria en drm_dev_init(). drm_dev_init() a\u00f1adir\u00e1 drm_dev_init_release() como devoluci\u00f3n de llamada. Si drmm_add_action() falla, la funci\u00f3n de liberaci\u00f3n no se a\u00f1adir\u00e1. Como resultado, el valor de referencia a\u00f1adido por device_get() en drm_dev_init() no se incluir\u00e1 en drm_dev_init_release(), lo que provoca la fuga de memoria. Utilice drmm_add_action_or_reset() en lugar de drmm_add_action() para evitar la fuga de memoria. objeto sin referencia 0xffff88810bc0c800 (tama\u00f1o 2048): comm \"modprobe\", pid 8322, jiffies 4305809845 (antig\u00fcedad 15.292s) volcado hexadecimal (primeros 32 bytes): e8 cc c0 0b 81 88 ff ff ff ff ff ff ff 00 00 00 00 ................ 20 24 3c 0c 81 88 ff ff 18 c8 c0 0b 81 88 ff ff $<............. backtrace: [<000000007251f72d>] __kmalloc+0x4b/0x1c0 [<0000000045f21f26>] platform_device_alloc+0x2d/0xe0 [<000000004452a479>] platform_device_register_full+0x24/0x1c0 [<0000000089f4ea61>] 0xffffffffa0736051 [<00000000235b2441>] do_one_initcall+0x7a/0x380 [<0000000001a4a177>] do_init_module+0x5c/0x230 [<000000002bf8a8e2>] load_module+0x227d/0x2420 [<00000000637d6d0a>] __do_sys_finit_module+0xd5/0x140 [<00000000c99fc324>] do_syscall_64+0x3f/0x90 [<000000004d85aa77>] entry_SYSCALL_64_after_hwframe+0x63/0xcd " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "4BE6700E-DF20-41B4-AB3C-6375B309FA3C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07e56de8766fe5be67252596244b84ac0ec0de91", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd8d1335e6e70a396094ef98913b513140c0b86b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c47a823ea186263ab69cfb665327b7f72cb5e779", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff963634f7b2e0dc011349abb3fb81a0d074f443", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49831.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49831.json index 0d9b6c5d33e..528ccb42f47 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49831.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49831.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49831", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.573", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:57:59.030", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: zoned: inicializar la informaci\u00f3n de zona del dispositivo para la propagaci\u00f3n. Al propagar en un sistema de archivos con zonas, es necesario inicializar la estructura btrfs_zoned_device_info de cada dispositivo; de lo contrario, al montar el sistema de archivos se producir\u00e1 una desreferencia de puntero nulo. Esto fue descubierto por el caso de prueba btrfs/163 de fstests." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "6625FAD9-319E-412C-8D78-4A6E90BA989E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/544f38a738343d7e75f104e5e9d1ade58d8b71bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91c38504e589dadbcde47b1cacdfc5b684154d44", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a8d1b1647bf8244a5f270538e9e636e2657fffa3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49832.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49832.json index 164a4c98216..506b8408b60 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49832.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49832.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49832", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.673", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:57:51.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,184 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: devicetree: correcci\u00f3n de la desreferencia de puntero nulo en pinctrl_dt_to_map Aqu\u00ed est\u00e1 el informe de ERROR de KASAN sobre la desreferencia de puntero nulo: ERROR: KASAN: null-ptr-deref en strcmp+0x2e/0x50 Lectura de tama\u00f1o 1 en la direcci\u00f3n 0000000000000000 por la tarea python3/2640 Rastreo de llamadas: strcmp __of_find_property of_find_property pinctrl_dt_to_map kasprintf() devolver\u00eda un puntero NULL cuando kmalloc() no pudiera asignar. Por lo tanto, devuelve directamente ENOMEM, si kasprintf() devuelve un puntero NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "BEC815C4-690B-4052-BCD6-FB52389084E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "424802D2-E9E7-48A9-AD6F-DF2227B3D83A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "A5C69A12-68E2-400E-9A5A-375A673C8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/040f726fecd88121f3b95e70369785ad452dddf9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5834a3a98cd266ad35a229923c0adbd0addc8d68", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/777430aa4ddccaa5accec6db90ffc1d47f00d471", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91d5c5060ee24fe8da88cd585bb43b843d2f0dce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97e5b508e96176f1a73888ed89df396d7041bfcb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a988dcd3dd9e691c5ccc3324b209688f3b5453e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aaf552c5d53abe4659176e099575fe870d2e4768", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4d9f55cd38435358bc16d580612bc0d798d7b4c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json b/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json index ee8f035f1ca..e0e9a8baf5d 100644 --- a/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json +++ b/CVE-2024/CVE-2024-582xx/CVE-2024-58272.json @@ -2,134 +2,15 @@ "id": "CVE-2024-58272", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-10-30T22:15:46.597", - "lastModified": "2025-11-06T16:34:16.403", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-10T19:15:45.723", + "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Nagios Log Server versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability\u00a0where an attacker-supplied username containing JavaScript is stored and later rendered without proper encoding/escaping in admin or user-facing pages. When an authenticated victim loads the affected page, the browser executes the injected script in the victim's context." + "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of\u00a0CVE-2023-7323." } ], - "metrics": { - "cvssMetricV40": [ - { - "source": "disclosure@vulncheck.com", - "type": "Secondary", - "cvssData": { - "version": "4.0", - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", - "baseScore": 5.1, - "baseSeverity": "MEDIUM", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "attackRequirements": "NONE", - "privilegesRequired": "LOW", - "userInteraction": "PASSIVE", - "vulnConfidentialityImpact": "NONE", - "vulnIntegrityImpact": "NONE", - "vulnAvailabilityImpact": "NONE", - "subConfidentialityImpact": "LOW", - "subIntegrityImpact": "LOW", - "subAvailabilityImpact": "NONE", - "exploitMaturity": "NOT_DEFINED", - "confidentialityRequirement": "NOT_DEFINED", - "integrityRequirement": "NOT_DEFINED", - "availabilityRequirement": "NOT_DEFINED", - "modifiedAttackVector": "NOT_DEFINED", - "modifiedAttackComplexity": "NOT_DEFINED", - "modifiedAttackRequirements": "NOT_DEFINED", - "modifiedPrivilegesRequired": "NOT_DEFINED", - "modifiedUserInteraction": "NOT_DEFINED", - "modifiedVulnConfidentialityImpact": "NOT_DEFINED", - "modifiedVulnIntegrityImpact": "NOT_DEFINED", - "modifiedVulnAvailabilityImpact": "NOT_DEFINED", - "modifiedSubConfidentialityImpact": "NOT_DEFINED", - "modifiedSubIntegrityImpact": "NOT_DEFINED", - "modifiedSubAvailabilityImpact": "NOT_DEFINED", - "Safety": "NOT_DEFINED", - "Automatable": "NOT_DEFINED", - "Recovery": "NOT_DEFINED", - "valueDensity": "NOT_DEFINED", - "vulnerabilityResponseEffort": "NOT_DEFINED", - "providerUrgency": "NOT_DEFINED" - } - } - ], - "cvssMetricV31": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", - "baseScore": 5.4, - "baseSeverity": "MEDIUM", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "LOW", - "userInteraction": "REQUIRED", - "scope": "CHANGED", - "confidentialityImpact": "LOW", - "integrityImpact": "LOW", - "availabilityImpact": "NONE" - }, - "exploitabilityScore": 2.3, - "impactScore": 2.7 - } - ] - }, - "weaknesses": [ - { - "source": "disclosure@vulncheck.com", - "type": "Secondary", - "description": [ - { - "lang": "en", - "value": "CWE-79" - } - ] - } - ], - "configurations": [ - { - "nodes": [ - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": true, - "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", - "versionEndExcluding": "2024", - "matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1" - } - ] - } - ] - } - ], - "references": [ - { - "url": "https://www.nagios.com/changelog/#log-server-2024R1", - "source": "disclosure@vulncheck.com", - "tags": [ - "Release Notes" - ] - }, - { - "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com", - "tags": [ - "Release Notes" - ] - }, - { - "url": "https://www.vulncheck.com/advisories/nagios-log-server-stored-xss-via-username", - "source": "disclosure@vulncheck.com", - "tags": [ - "Third Party Advisory" - ] - } - ] + "metrics": {}, + "references": [] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11690.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11690.json index 3dce907c8aa..5bc83859409 100644 --- a/CVE-2025/CVE-2025-116xx/CVE-2025-11690.json +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11690.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11690", "sourceIdentifier": "cert@ncsc.nl", "published": "2025-11-04T11:15:37.573", - "lastModified": "2025-11-10T13:15:44.427", + "lastModified": "2025-11-10T19:15:55.950", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -51,6 +51,10 @@ { "url": "https://advisories.ncsc.nl/2025/ncsc-2025-0350.html", "source": "cert@ncsc.nl" + }, + { + "url": "https://medium.com/@ilnur.khakimov_86612/how-i-hacked-100-000-motorcycles-including-my-own-666bdb702b7d", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12428.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12428.json new file mode 100644 index 00000000000..55597463df7 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12428.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12428", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:35.947", + "lastModified": "2025-11-10T20:15:35.947", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-843" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/447613211", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json new file mode 100644 index 00000000000..f1a95aeb7d3 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12429", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:36.660", + "lastModified": "2025-11-10T20:15:36.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/450618029", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12430.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12430.json new file mode 100644 index 00000000000..00ca96877c3 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12430.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12430", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:37.530", + "lastModified": "2025-11-10T20:15:37.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/442860743", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12431.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12431.json new file mode 100644 index 00000000000..cbe2c8c9ff0 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12431.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12431", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:37.647", + "lastModified": "2025-11-10T20:15:37.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/436887350", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json new file mode 100644 index 00000000000..ff85373d51c --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12432", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:37.750", + "lastModified": "2025-11-10T20:15:37.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/439522866", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json new file mode 100644 index 00000000000..0b2ead9e2b6 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12433", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:37.910", + "lastModified": "2025-11-10T20:15:37.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/449760249", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json new file mode 100644 index 00000000000..346a3f85206 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12434", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.017", + "lastModified": "2025-11-10T20:15:38.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/337356054", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json new file mode 100644 index 00000000000..cd0fa4edf02 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12435", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.150", + "lastModified": "2025-11-10T20:15:38.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/446463993", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json new file mode 100644 index 00000000000..3f01daeea32 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12436", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.260", + "lastModified": "2025-11-10T20:15:38.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/40054742", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12437.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12437.json new file mode 100644 index 00000000000..409144b0812 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12437.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12437", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.377", + "lastModified": "2025-11-10T20:15:38.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/446294487", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json new file mode 100644 index 00000000000..178a8fbaaee --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12438", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.513", + "lastModified": "2025-11-10T20:15:38.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/433027577", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json new file mode 100644 index 00000000000..70e3ec28e0a --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12439", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.647", + "lastModified": "2025-11-10T20:15:38.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/382234536", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json new file mode 100644 index 00000000000..26a7e22616f --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12440", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.757", + "lastModified": "2025-11-10T20:15:38.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/430555440", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json new file mode 100644 index 00000000000..bdd96b910ef --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12441", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:38.867", + "lastModified": "2025-11-10T20:15:38.867", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/444049512", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json new file mode 100644 index 00000000000..010acc7d5a2 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12443", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.000", + "lastModified": "2025-11-10T20:15:39.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/452071845", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json new file mode 100644 index 00000000000..2a993547ef4 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12444", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.143", + "lastModified": "2025-11-10T20:15:39.143", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/390571618", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12445.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12445.json new file mode 100644 index 00000000000..0adb4997b4d --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12445.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12445", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.260", + "lastModified": "2025-11-10T20:15:39.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/428397712", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json new file mode 100644 index 00000000000..2c844bc74ee --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12446", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.363", + "lastModified": "2025-11-10T20:15:39.363", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. (Chromium security severity: Low)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/444932667", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12447.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12447.json new file mode 100644 index 00000000000..f54e0cddf6e --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12447.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12447", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.473", + "lastModified": "2025-11-10T20:15:39.473", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/442636157", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json new file mode 100644 index 00000000000..ea97919db97 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-12725", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.577", + "lastModified": "2025-11-10T20:15:39.577", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "chrome-cve-admin@google.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/443906252", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json new file mode 100644 index 00000000000..220c287e80e --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12726", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.707", + "lastModified": "2025-11-10T20:15:39.707", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/447172715", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12727.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12727.json new file mode 100644 index 00000000000..aeb81c81084 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12727.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12727", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.833", + "lastModified": "2025-11-10T20:15:39.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/454485895", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json new file mode 100644 index 00000000000..a78abb7b5cf --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12728", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:39.967", + "lastModified": "2025-11-10T20:15:39.967", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/452392032", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json new file mode 100644 index 00000000000..8f0ef8084d8 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-12729", + "sourceIdentifier": "chrome-cve-admin@google.com", + "published": "2025-11-10T20:15:40.080", + "lastModified": "2025-11-10T20:15:40.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", + "source": "chrome-cve-admin@google.com" + }, + { + "url": "https://issues.chromium.org/issues/454354281", + "source": "chrome-cve-admin@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12779.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12779.json index 8ad4a167d7b..5ef2b8b10ad 100644 --- a/CVE-2025/CVE-2025-127xx/CVE-2025-12779.json +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12779.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12779", "sourceIdentifier": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "published": "2025-11-05T22:15:33.010", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T19:15:56.127", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -95,6 +95,10 @@ { "url": "https://aws.amazon.com/security/security-bulletins/AWS-2025-025/", "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12967.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12967.json index 8f79ae2a686..c687386be3a 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12967.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12967.json @@ -2,13 +2,13 @@ "id": "CVE-2025-12967", "sourceIdentifier": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "published": "2025-11-10T18:16:06.043", - "lastModified": "2025-11-10T18:16:06.043", + "lastModified": "2025-11-10T19:15:56.320", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.\n\nWe recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.01, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1" + "value": "An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.\n\nWe recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1" } ], "metrics": { @@ -95,6 +95,46 @@ { "url": "https://aws.amazon.com/security/security-bulletins/AWS-2025-028/", "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-go-wrapper/releases/tag/release-2025-10-17", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-go-wrapper/security/advisories/GHSA-7wq2-32h4-9hc9", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-jdbc-wrapper/releases/tag/2.6.5", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-jdbc-wrapper/security/advisories/GHSA-7xw4-g7mm-r4hh", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-nodejs-wrapper/releases/tag/2.0.1", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-nodejs-wrapper/security/advisories/GHSA-8wj8-cfxr-9374", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-python-wrapper/releases/tag/1.4.0", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-advanced-python-wrapper/security/advisories/GHSA-4jvf-wx3f-2x8q", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-pgsql-odbc/releases/tag/1.0.1", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" + }, + { + "url": "https://github.com/aws/aws-pgsql-odbc/security/advisories/GHSA-q327-fgm8-7mxf", + "source": "ff89ba41-3aa1-4d27-914a-91399e9639e5" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21042.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21042.json index f0edc3f6085..1a1199e96a3 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21042.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21042.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21042", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-09-12T08:15:44.743", - "lastModified": "2025-09-19T20:12:59.913", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-10T19:15:56.463", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -516,6 +516,14 @@ "tags": [ "Vendor Advisory" ] + }, + { + "url": "https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21042", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-279xx/CVE-2025-27916.json b/CVE-2025/CVE-2025-279xx/CVE-2025-27916.json index ee77e800c90..f6041ee99a5 100644 --- a/CVE-2025/CVE-2025-279xx/CVE-2025-27916.json +++ b/CVE-2025/CVE-2025-279xx/CVE-2025-27916.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27916", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-06T18:15:40.473", - "lastModified": "2025-11-07T18:07:15.860", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-10T20:15:40.190", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-290" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-290" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json index 159ea496e30..bfe707f5ea8 100644 --- a/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31029.json @@ -2,7 +2,7 @@ "id": "CVE-2025-31029", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:50.067", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:40.613", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail replymail allows Stored XSS.This issue affects replyMail: from n/a through <= 1.2.0." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json index d5901c2290e..c5686336ab6 100644 --- a/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32222.json @@ -2,7 +2,7 @@ "id": "CVE-2025-32222", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:50.237", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:40.783", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through <= 6.0.5." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33150.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33150.json new file mode 100644 index 00000000000..ad6c14377b9 --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33150.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-33150", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-10T20:15:40.960", + "lastModified": "2025-11-10T20:15:40.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-552" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7250395", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37923.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37923.json index 6c37dabd1a7..4b714a3e5d2 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37923.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37923.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37923", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.930", - "lastModified": "2025-11-03T20:18:41.733", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:58:04.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,210 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rastreo: Se corrige la escritura fuera de los l\u00edmite en trace_seq_to_buffer() syzbot inform\u00f3 este error: ====================================================================== ERROR: KASAN: slab-out-of-bounds en trace_seq_to_buffer kernel/trace/trace.c:1830 [en l\u00ednea] ERROR: KASAN: slab-out-of-bounds en tracing_splice_read_pipe+0x6be/0xdd0 kernel/trace/trace.c:6822 Escritura de tama\u00f1o 4507 en la direcci\u00f3n ffff888032b6b000 por tarea syz.2.320/7260 CPU: 1 UID: 0 PID: 7260 Comm: syz.2.320 No contaminado 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Seguimiento de llamadas: __dump_stack lib/dump_stack.c:94 [en l\u00ednea] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [en l\u00ednea] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 check_region_inline mm/kasan/generic.c:183 [en l\u00ednea] kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189 __asan_memcpy+0x3c/0x60 mm/kasan/shadow.c:106 trace_seq_to_buffer kernel/trace/trace.c:1830 [en l\u00ednea] tracing_splice_read_pipe+0x6be/0xdd0 kernel/trace/trace.c:6822 .... ===================================================================== Se ha informado que trace_seq_to_buffer() intenta copiar m\u00e1s datos que PAGE_SIZE a buf. Por lo tanto, para evitarlo, debemos usar el valor menor entre trace_seq_used(&iter->seq) y PAGE_SIZE como argumento." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.30", + "versionEndExcluding": "5.4.294", + "matchCriteriaId": "8865E23F-F4EB-464B-A533-1F91B8E79775" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "0DAAEF7F-D560-47FC-8B65-20404DB82432" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/056ebbddb8faf4ddf83d005454dd78fc25c2d897", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1a3f9482b50b74fa9421bff8ceecfefd0dc06f8f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1f27a3e93b8d674b24b27fcdbc6f72743cd96c0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/441021e5b3c7d9bd1b963590652c415929f3b157", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/665ce421041890571852422487f4c613d1824ba9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c5d2b66c5ef5037b4b4360e5447605ff00ba1bd4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4b0174e9f18aaba59ee6ffdaf8827a7f94eb606", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f5178c41bb43444a6008150fe6094497135d07cb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37924.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37924.json index ee019a50d38..55e3c7bf640 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37924.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37924.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37924", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.037", - "lastModified": "2025-11-03T20:18:41.837", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:48:10.663", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,160 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: correcci\u00f3n del use-after-free en la autenticaci\u00f3n Kerberos. Se introdujo la configuraci\u00f3n sess->user = NULL para corregir el puntero colgante creado por ksmbd_free_user. Sin embargo, es posible que otro hilo est\u00e9 operando en la sesi\u00f3n y utilice sess->user despu\u00e9s de que se haya pasado a ksmbd_free_user, pero antes de que sess->user se establezca en NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "E8D2BFA7-4503-4FF2-A31E-B6BE242A7FEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/28c756738af44a404a91b77830d017bb0c525890", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b447463562238428503cfba1c913261047772f90", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e18c616718018dfc440e4a2d2b94e28fe91b1861", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e34a33d5d7e87399af0a138bb32f6a3e95dd83d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e86e9134e1d1c90a960dd57f59ce574d27b9a124", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37926.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37926.json index 003b76234f8..246a6d8c5ea 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37926.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37926.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37926", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.140", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:33:25.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,109 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige el problema de use-after-free en ksmbd_session_rpc_open. Un problema de UAF puede ocurrir debido a una condici\u00f3n de ejecuci\u00f3n entre ksmbd_session_rpc_open() y __session_rpc_close(). Agregue rpc_lock a la sesi\u00f3n para protegerla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "A5AE7607-A0C1-4BF7-867C-7743E11A880A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6323fec65fe54b365961fed260dd579191e46121", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8fb3b6c85b7e3127161623586b62abcc366caa20", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a1f46c99d9ea411f9bf30025b912d881d36fc709", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37927.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37927.json index 72727bf199a..72fb9671e0a 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37927.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37927.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37927", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.240", - "lastModified": "2025-11-03T20:18:41.930", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:33:13.267", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,210 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iommu/amd: Arreglar desbordamiento de b\u00fafer potencial en parse_ivrs_acpihid Hay un error de l\u00f3gica de an\u00e1lisis de cadenas que puede provocar un desbordamiento de los b\u00faferes hid o uid. La comparaci\u00f3n de ACPIID_LEN con la longitud total de una cadena no tiene en cuenta las longitudes de los b\u00faferes hid y uid individuales, por lo que la comprobaci\u00f3n es insuficiente en algunos casos. Por ejemplo, si la longitud de la cadena hid es 4 y la longitud de la cadena uid es 260, la longitud de str ser\u00e1 igual a ACPIID_LEN + 1, pero la cadena uid desbordar\u00e1 el b\u00fafer uid, cuyo tama\u00f1o es 256. Lo mismo se aplica a la cadena hid con una longitud de 13 y a la cadena uid con una longitud de 250. Compruebe la longitud de las cadenas hid y uid por separado para evitar el desbordamiento del b\u00fafer. Encontrado por el Centro de verificaci\u00f3n de Linux (linuxtesting.org) con SVACE." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.7", + "versionEndExcluding": "5.4.294", + "matchCriteriaId": "92E39174-61BF-4109-8818-526E2BDF55A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "0DAAEF7F-D560-47FC-8B65-20404DB82432" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/10d901a95f8e766e5aa0bb9a983fb41271f64718", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13d67528e1ae4486e9ab24b70122fab104c73c29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2b65060c84ee4d8dc64fae6d2728b528e9e832e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/466d9da267079a8d3b69fa72dfa3a732e1f6dbb5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8dee308e4c01dea48fc104d37f92d5b58c50b96c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a65ebfed65fa62797ec1f5f1dcf7adb157a2de1e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c3f37faa71f5d26dd2144b3f2b14525ec8f5e41f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c8bdfc0297965bb13fa439d36ca9c4f7c8447f0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37928.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37928.json index 1be74188b09..6c4b91dfd62 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37928.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37928.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37928", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.363", - "lastModified": "2025-11-03T20:18:42.027", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:32:41.360", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,160 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm-bufio: no programar en contexto at\u00f3mico Se inform\u00f3 un ERROR como el siguiente cuando CONFIG_DEBUG_ATOMIC_SLEEP y try_verify_in_tasklet est\u00e1n habilitados. [ 129.444685][ T934] ERROR: funci\u00f3n de suspensi\u00f3n llamada desde un contexto no v\u00e1lido en drivers/md/dm-bufio.c:2421 [ 129.444723][ T934] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 934, name: kworker/1:4 [ 129.444740][ T934] preempt_count: 201, esperado: 0 [ 129.444756][ T934] Profundidad de anidamiento de RCU: 0, esperado: 0 [ 129.444781][ T934] Preempci\u00f3n deshabilitada en: [ 129.444789][ T934] [] shrink_work+0x21c/0x248 [ 129.445167][ T934] \u00a1ERROR del kernel en kernel/sched/walt/walt_debug.c:16! [ 129.445183][ T934] Error interno: Ups - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 129.445204][ T934] Omitir volcado de b\u00fafer de md ftrace para: 0x1609e0 [ 129.447348][ T934] CPU: 1 PID: 934 Comm: kworker/1:4 Contaminado: GW OE 6.6.56-android15-8-o-g6f82312b30b9-debug #1 1400000003000000474e5500b3187743670464e8 [ 129.447362][ T934] Nombre del hardware: Qualcomm Technologies, Inc. Parrot QRD, Alpha-M (DT) [ 129.447373][ T934] Cola de trabajo: dm_bufio_cache shrink_work [ 129.447394][ T934] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 129.447406][ T934] pc : android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug] [ 129.447435][ T934] lr : __traceiter_android_rvh_schedule_bug+0x44/0x6c [ 129.447451][ T934] sp : ffffffc0843dbc90 [ 129.447459][T934] x29: ffffffc0843dbc90 x28: ffffffffffffffff x27: 0000000000000c8b [ 129.447479][T934] x26: 0000000000000040 x25: ffffff804b3d6260 x24: ffffffd816232b68 [ 129.447497][ T934] x23: ffffff805171c5b4 x22: 00000000000000000 x21: ffffffd816231900 [ 129.447517][T934] x20: ffffff80306ba898 x19: 0000000000000000 x18: ffffffc084159030 [ 129.447535][ T934] x17: 00000000d2b5dd1f x16: 00000000d2b5dd1f x15: ffffffd816720358 [ 129.447554][ T934] x14: 0000000000000004 x13: ffffff89ef978000 x12: 0000000000000003 [ 129.447572][ T934] x11: ffffffd817a823c4 x10: 0000000000000202 x9: 7e779c5735de9400 [129.447591][T934] x8: ffffffd81560d004 x7: 205b5d3938373434 x6: ffffffd8167397c8 [ 129.447610][T934] x5: 0000000000000000 x4: 0000000000000001 x3: ffffffc0843db9e0 [129.447629][T934] x2: 0000000000002f15 x1: 0000000000000000 x0 : 0000000000000000 [ 129.447647][ T934] Rastreo de llamadas: [ 129.447655][ T934] android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug 1400000003000000474e550080cce8a8a78606b6] [ 129.447681][ T934] __might_resched+0x190/0x1a8 [ 129.447694][ T934] shrink_work+0x180/0x248 [ 129.447706][ T934] proceso_uno_trabajo+0x260/0x624 [ 129.447718][ T934] subproceso_de_trabajo+0x28c/0x454 [ 129.447729][ T934] subproceso_de_trabajo+0x118/0x158 [ 129.447742][ T934] ret_de_bifurcaci\u00f3n+0x10/0x20 [ 129.447761][ T934] C\u00f3digo: ???????? ???????? ???????? d2b5dd1f (d4210000) [ 129.447772][ T934] ---[ fin del seguimiento 0000000000000000 ]--- dm_bufio_lock llamar\u00e1 a spin_lock_bh cuando try_verify_in_tasklet est\u00e9 habilitado, y se llamar\u00e1 a __scan en el contexto at\u00f3mico." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "3FA0ED94-5B49-46CD-BBB6-05D2DE753F2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/69a37b3ba85088fc6b903b8e1db7f0a1d4d0b52d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3d8f0a7f5e8b193db509c7191fefeed3533fc44", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a99f5bf4f7197009859dbce14c12f8e2ce5a5a69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c8c83052283bcf2fdd467a33d1d2bd5ba36e935a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f45108257280e0a1cc951ce254853721b40c0812", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37929.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37929.json index f63058c35fc..10faabd12cc 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37929.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37929.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37929", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.483", - "lastModified": "2025-11-03T20:18:42.123", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:24:46.587", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,186 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: errata: A\u00f1adir centinelas faltantes a las matrices MIDR de Spectre-BHB. El commit a5951389e58d (\"arm64: errata: A\u00f1adir nuevos n\u00facleos ARM a las listas spectre_bhb_loop_affected()\") a\u00f1adi\u00f3 CPU adicionales a la soluci\u00f3n alternativa de Spectre-BHB, incluyendo nuevas matrices para dise\u00f1os que requieren nuevos valores 'k' para que la soluci\u00f3n sea efectiva. Desafortunadamente, las nuevas matrices omitieron la entrada de centinela, por lo que is_midr_in_range_list() se desviar\u00e1 al final si no encuentra una coincidencia. Con UBSAN habilitado, esto provoca un fallo durante el arranque cuando is_midr_in_range_list() est\u00e1 en l\u00ednea (lo cual era m\u00e1s com\u00fan antes de c8c2647e69be (\"arm64: Convertir _midr_in_range_list() en una funci\u00f3n exportada\")): | Error interno: aarch64 BRK: 00000000f2000001 [#1] PREEMPT SMP | pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : spectre_bhb_loop_affected+0x28/0x30 | lr : is_spectre_bhb_affected+0x170/0x190 | [...] | Rastreo de llamadas: | spectre_bhb_loop_affected+0x28/0x30 | update_cpu_capabilities+0xc0/0x184 | init_cpu_features+0x188/0x1a4 | cpuinfo_store_boot_cpu+0x4c/0x60 | smp_prepare_boot_cpu+0x38/0x54 | start_kernel+0x8c/0x478 | __primary_switched+0xc8/0xd4 | C\u00f3digo: 6b09011f 54000061 52801080 d65f03c0 (d4200020) | ---[ fin del seguimiento 000000000000000 ]--- | P\u00e1nico del kernel - no sincroniza: aarch64 BRK: Excepci\u00f3n fatal Agregue las entradas centinela faltantes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.135", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "E787BD46-482C-4E09-821E-8028365B76A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.88", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2FFB790F-1BC6-4932-B4D4-581AC5AF0DDB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.24", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "9EC7439E-D071-428D-AD6A-332044906923" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13.12", + "versionEndExcluding": "6.14", + "matchCriteriaId": "A1F1E5FF-68CB-46CE-BC4F-8E19FA72A921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14.3", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "608839B0-DD0C-4FDA-9311-A47D53598DBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15.181:*:*:*:*:*:*:*", + "matchCriteriaId": "AD65585E-43A5-4D25-8124-53D7300CFFAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/090c8714efe1c3c470301cc2f794c1ee2a57746c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/333579202f09e260e8116321df4c55f80a19b160", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3821cae9bd5a99a42d3d0be1b58e41f072cd4c4c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/446289b8b36b2ee98dabf6388acbddcc33ed41be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6266b3509b2c6ebf2f9daf2239ff8eb60c5f5bd3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e68da90ac00d8b681561aeb8f5d6c47af3a04861", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fee4d171451c1ad9e8aaf65fc0ab7d143a33bd72", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37930.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37930.json index 3e0b5e830e6..133e554fd2c 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37930.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37930.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37930", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:29.600", - "lastModified": "2025-11-03T20:18:42.227", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:16:11.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,196 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/nouveau: Correcci\u00f3n de WARN_ON en nouveau_fence_context_kill(). Nouveau est\u00e1 dise\u00f1ado principalmente de tal manera que se espera que las vallas solo se se\u00f1alicen mediante nouveau_fence_signal(). Sin embargo, en al menos otro lugar, nouveau_fence_done(), tambi\u00e9n puede se\u00f1alizar vallas. Si esto sucede (ejecuci\u00f3n), una valla se\u00f1alizada permanece en la lista de pendientes durante un tiempo, hasta que nouveau_fence_update() la elimina. Si nouveau_fence_context_kill() se ejecuta mientras tanto, esto ser\u00eda un error porque la funci\u00f3n intentar\u00eda establecer un c\u00f3digo de error en una valla ya se\u00f1alizada. Haga que nouveau_fence_context_kill() compruebe si hay una valla se\u00f1alizada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "5CA6C90D-C2FB-440C-8433-F78F660A037E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0453825167ecc816ec15c736e52316f69db0deb9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/126f5c6e0cb84e5c6f7a3a856d799d85668fb38e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ec0f5f6d4768f292c8406ed92fa699f184577e5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/39d6e889c0b19a2c79e1c74c843ea7c2d0f99c28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/47ca11836c35c5698088fd87f7fb4b0ffa217e17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b771b2017260ffc3a8d4e81266619649bffcb242", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bbe5679f30d7690a9b6838a583b9690ea73fe0e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json index 53657a53ecf..c5852ae99df 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39463.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39463", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:50.447", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:41.150", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json index 0548132d8f1..f2d2b8ee3c8 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39465.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39465", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:50.700", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:41.360", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through <= 5.8.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json index dfde420ace8..4ca4152fa49 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39466.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39466", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:50.903", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:41.530", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes D\u00f8r dor allows PHP Local File Inclusion.This issue affects D\u00f8r: from n/a through <= 2.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json index 303f2630d17..51996d774b9 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39467.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39467", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.053", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:41.693", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json index 739ccc29736..20539e8d4e8 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39468.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39468", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.210", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:41.860", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through <= 2.0.2.0.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-437xx/CVE-2025-43723.json b/CVE-2025/CVE-2025-437xx/CVE-2025-43723.json new file mode 100644 index 00000000000..2d5346a1a31 --- /dev/null +++ b/CVE-2025/CVE-2025-437xx/CVE-2025-43723.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-43723", + "sourceIdentifier": "security_alert@emc.com", + "published": "2025-11-10T19:15:56.880", + "lastModified": "2025-11-10T19:15:56.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security_alert@emc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security_alert@emc.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-327" + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000390206/dsa-2025-381-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities", + "source": "security_alert@emc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-441xx/CVE-2025-44163.json b/CVE-2025/CVE-2025-441xx/CVE-2025-44163.json index caac375b64c..f5efe2ef17c 100644 --- a/CVE-2025/CVE-2025-441xx/CVE-2025-44163.json +++ b/CVE-2025/CVE-2025-441xx/CVE-2025-44163.json @@ -2,8 +2,8 @@ "id": "CVE-2025-44163", "sourceIdentifier": "cve@mitre.org", "published": "2025-06-27T14:15:37.417", - "lastModified": "2025-06-30T18:38:48.477", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T20:38:28.663", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:raspap:raspap-webgui:3.3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "AE6F6177-FF16-4EBA-9FAD-9F935A002F8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://gist.github.com/YichaoXu/3694f039a3d1b973efd068e4dc662a41", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://github.com/RaspAP/raspap-webgui/blob/125ae7a39ad7c9a71250d3b3e349fd767687ff8d/ajax/networking/get_wgkey.php#L9", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-472xx/CVE-2025-47286.json b/CVE-2025/CVE-2025-472xx/CVE-2025-47286.json new file mode 100644 index 00000000000..b8862c436b1 --- /dev/null +++ b/CVE-2025/CVE-2025-472xx/CVE-2025-47286.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-47286", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T19:15:57.043", + "lastModified": "2025-11-10T19:15:57.043", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on it." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-4w93-rw6g-5m9c", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json index 07657852abf..e61aa10249f 100644 --- a/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47588.json @@ -2,7 +2,7 @@ "id": "CVE-2025-47588", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.363", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:42.140", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through <= 4.5.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-477xx/CVE-2025-47773.json b/CVE-2025/CVE-2025-477xx/CVE-2025-47773.json new file mode 100644 index 00000000000..298f3114085 --- /dev/null +++ b/CVE-2025/CVE-2025-477xx/CVE-2025-47773.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47773", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T19:15:57.207", + "lastModified": "2025-11-10T19:15:57.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is edited via an AJAX call. Versions 2.7.13 and 3.2.2 protect rendered HTML content." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-9qmf-5457-9xp3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-479xx/CVE-2025-47932.json b/CVE-2025/CVE-2025-479xx/CVE-2025-47932.json new file mode 100644 index 00000000000..56039099740 --- /dev/null +++ b/CVE-2025/CVE-2025-479xx/CVE-2025-47932.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47932", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T20:15:42.363", + "lastModified": "2025-11-10T20:15:42.363", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is rendered via an AJAX call. Versions 2.7.13 and 3.2.2 sanitize the var responsible for the attack." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-rmxq-fx69-7wg5", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json index b31e6833b8d..3ff4853c702 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48077.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48077", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.513", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:42.543", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows Stored XSS.This issue affects Block Country: from n/a through <= 1.0." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json index 1491b66f18d..2586d3e85a0 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48078.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48078", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.670", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:42.707", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issue affects Slick Google Map: from n/a through <= 0.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json index b2d2531fcb3..77c1cab774b 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48083.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48083", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.810", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:42.873", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allows Stored XSS.This issue affects wpNamedUsers: from n/a through <= 0.5." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json index a2ec3bf3694..09675512eb3 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48085.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48085", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:51.970", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.040", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through <= 0.9.17." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json index 41ecc55a543..97cf67e54fe 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48086.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48086", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:52.120", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.203", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through <= 4.13.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json index c2fc1cf4a1a..c3e90cb2088 100644 --- a/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48089.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48089", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:52.270", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.440", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json index 861a4f4821a..b42878bb2ee 100644 --- a/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48290.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48290", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:52.627", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.620", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through <= 3.4.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json index 7b973499e86..ab58c071102 100644 --- a/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48330.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48330", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:52.780", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.790", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP Local File Inclusion.This issue affects Real Time Validation for Gravity Forms: from n/a through <= 1.7.0." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json index 71c79f9d9be..8f1bde95b10 100644 --- a/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49386.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49386", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:53.103", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:43.950", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows Object Injection.This issue affects Preserve Code Formatting: from n/a through <= 4.0.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json index a0f90539a4e..075b85ed2c3 100644 --- a/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49390.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49390", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:53.260", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.123", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in christophrado Cookie Notice & Consent cookie-notice-consent allows Stored XSS.This issue affects Cookie Notice & Consent: from n/a through <= 1.6.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json index 458f3b55b28..02f173434d5 100644 --- a/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49393.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49393", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:53.413", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.320", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through <= 2.3.2." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json index baf4a511613..ed30e20ef06 100644 --- a/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49394.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49394", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:53.720", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.487", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in bPlugins Image Gallery block \u2013 Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block \u2013 Create and display photo gallery/photo album.: from n/a through <= 1.0.7." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json index 5c08b14d37f..bbccbadc23c 100644 --- a/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49398.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49398", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:53.890", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.657", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy Appointments easy-appointments allows Code Injection.This issue affects Easy Appointments: from n/a through <= 3.12.14." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json index 098eeaf09ff..6f918e092a2 100644 --- a/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49900.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49900", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.070", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.827", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Incorrect Privilege Assignment vulnerability in bPlugins Advanced scrollbar advanced-scrollbar allows Privilege Escalation.This issue affects Advanced scrollbar: from n/a through <= 1.1.8." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json index e9d57b585f4..403e6433ea3 100644 --- a/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49904.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49904", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.243", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:44.993", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json index 2bb6ef62ccb..44c749bfeb4 100644 --- a/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49905.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49905", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.430", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:45.157", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through <= 1.1.6." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json index 2d824a9c370..a17a358c093 100644 --- a/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49909.json @@ -2,7 +2,7 @@ "id": "CVE-2025-49909", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.583", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:45.323", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Bookmark & Follow penci-bookmark-follow allows Reflected XSS.This issue affects Penci Bookmark & Follow: from n/a through < 2.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json index 437506bf77d..e876970b9d1 100644 --- a/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52764.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52764", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.760", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:45.493", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marielav flexoslider flexoslider allows Reflected XSS.This issue affects flexoslider: from n/a through <= 1.0004." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json index e751af4e5f1..b809d471e6b 100644 --- a/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52773.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52773", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:54.933", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:45.667", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hiecor HieCOR Payment Gateway Plugin hcv4-payment-gateway allows SQL Injection.This issue affects HieCOR Payment Gateway Plugin: from n/a through <= 1.5.11." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json index f8a08c09025..2545e5db1dd 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53214.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53214", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:55.110", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:45.830", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-certificates-open-badges allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sertifier Certificate & Badge Maker: from n/a through <= 1.21." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json index aa6d1065ccf..4871537ab60 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53239.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53239", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:55.300", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.003", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bnovotny User Registration Aide user-registration-aide allows Reflected XSS.This issue affects User Registration Aide: from n/a through <= 1.5.3.8." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json index b8b5419a87b..e7e20048835 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53242.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53242", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:55.473", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.173", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.This issue affects Seil: from n/a through <= 1.7.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json index 83686d376f4..bd35fbbb2b3 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53245.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53245", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:55.637", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.367", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through <= 1.2." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json index d71b3a8f9e4..1276f8d4f92 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53246.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53246", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:55.833", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.533", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through <= 0.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json index 24102a48a11..523fc873267 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53252.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53252", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.010", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.697", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <= 1.1.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json index a7c4da032b8..fc82990f508 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53286.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53286", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.333", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:46.860", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue affects Dropify: from n/a through <= 4.6.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json index 57d73363268..f6a92f1c1e6 100644 --- a/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53316.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53316", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.483", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:47.027", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-cookie-consent allows Stored XSS.This issue affects WP GDPR Cookie Consent: from n/a through <= 1.0.0." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json index c3a30ad6d84..10f768d281a 100644 --- a/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53324.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53324", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.630", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:47.197", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeYatri Gutenify gutenify allows Stored XSS.This issue affects Gutenify: from n/a through <= 1.5.7." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json index 3f093ab2b6d..dc22c6b484e 100644 --- a/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53349.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53349", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.780", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:47.437", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json index 81bb72ee3b4..ee59d7a64fb 100644 --- a/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53574.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53574", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:57.080", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:47.660", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ptibogxiv Doliconnect doliconnect allows Reflected XSS.This issue affects Doliconnect: from n/a through <= 9.3.2." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json index d3a31059b34..50bbf887e1c 100644 --- a/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53586.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53586", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:57.373", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:47.827", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in NooTheme WeMusic noo-wemusic allows Object Injection.This issue affects WeMusic: from n/a through <= 1.9.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5400.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5400.json index b4cb9957920..bcd0cb34266 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5400.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5400.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5400", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T09:15:20.557", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:15:07.957", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20user.php%20u_id%20Parameter%20SQL%20Injection.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310740", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310740", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582865", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5401.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5401.json index 917c2179609..268f80a3faf 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5401.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5401.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5401", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T13:15:19.893", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:13:09.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20post.php%20p_id%20Parameter%20SQL%20Injection.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310741", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310741", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582874", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5402.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5402.json index 8220e788938..6cbd17d5fa6 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5402.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5402.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5402", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T14:15:21.250", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:11:11.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20posts.php%20edit_post%20p_id%20Parameter%20SQL%20Injection.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310742", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310742", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582904", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5403.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5403.json index d2bc0aa09d4..7c581a784e0 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5403.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5403.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5403", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T16:15:20.210", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:07:40.007", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20posts.php%20delete_post%20delete%20Parameter%20SQL%20Injection.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310743", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310743", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582910", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5404.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5404.json index 32ea197dc41..fee69b45a9f 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5404.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5404.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5404", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T17:15:20.377", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:06:32.143", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -120,22 +140,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20search.php%20search%20Parameter%20SQL%20Injection.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310744", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310744", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582915", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5405.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5405.json index 004252568d2..ea72d553755 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5405.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5405.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5405", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T18:15:20.723", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:04:10.697", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20post.php%20Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Comment%20Functionality%20Leading%20to%20Admin%20and%20User%20Account%20Takeover.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310745", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310745", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.582925", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5406.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5406.json index 4a58c793f53..53f99e5ebb3 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5406.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5406.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5406", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T19:15:20.313", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:43:07.087", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20posts.php%20add_post%20post_image%20Parameter%20Unrestricted%20Upload.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310746", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310746", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.583427", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5407.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5407.json index 153fc676fc4..796858965a3 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5407.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5407.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5407", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-01T21:15:20.237", - "lastModified": "2025-06-02T17:32:17.397", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T20:40:57.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,24 +142,68 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2021-11-22", + "matchCriteriaId": "34246EE6-6AA1-492A-8905-A296317E96CB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20Stored%20XSS%20in%20User%20Registration%20via%20fullname%20Parameter%20Leading%20to%20Admin%20Account%20Takeover.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.310747", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.310747", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.583432", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json b/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json new file mode 100644 index 00000000000..d28253e4b72 --- /dev/null +++ b/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-56503", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T20:15:47.990", + "lastModified": "2025-11-10T20:15:47.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://drive.google.com/file/d/1QDi9_RKJO-Gi_8jkHJKi7QV1Tajqh4WT/view?usp=sharing", + "source": "cve@mitre.org" + }, + { + "url": "https://drive.google.com/file/d/1aP4S-WdFUL9ocNOucioIqxOgzreZ6Ey7/view?usp=sharing", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/secxplorers/CVE-2025-56503", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json b/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json index 10b89fbeff4..5bbf0c39b0f 100644 --- a/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json +++ b/CVE-2025/CVE-2025-585xx/CVE-2025-58595.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58595", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.233", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:48.183", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through <= 2.0.8." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json b/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json index aeb19524e5c..944174fcc0b 100644 --- a/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json +++ b/CVE-2025/CVE-2025-58xx/CVE-2025-5803.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5803", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:02.763", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-10T20:15:48.473", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.8.2." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-608xx/CVE-2025-60876.json b/CVE-2025/CVE-2025-608xx/CVE-2025-60876.json new file mode 100644 index 00000000000..134ccf55e0d --- /dev/null +++ b/CVE-2025/CVE-2025-608xx/CVE-2025-60876.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-60876", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T20:15:48.683", + "lastModified": "2025-11-10T20:15:48.683", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092", + "source": "cve@mitre.org" + }, + { + "url": "https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm", + "source": "cve@mitre.org" + }, + { + "url": "https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json index bfdc9d13fdd..47ada6d7f4a 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62423", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-16T19:15:34.960", - "lastModified": "2025-11-07T17:41:34.633", + "lastModified": "2025-11-10T19:58:10.237", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -77,8 +77,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", "versionEndExcluding": "5.5.2-142", - "matchCriteriaId": "FAD9068F-E2EB-46F3-BA77-805BD47EA4BC" + "matchCriteriaId": "A502A9E4-84FA-46D3-BAB1-9F1F271E4054" } ] } diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62424.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62424.json index ad9ebe0df18..7ed3c9693e6 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62424.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62424.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62424", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-17T18:15:37.870", - "lastModified": "2025-11-07T17:32:04.460", + "lastModified": "2025-11-10T19:58:14.303", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -77,8 +77,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", "versionEndExcluding": "5.5.2-147", - "matchCriteriaId": "4F90AE10-9C84-4BC3-90C5-9E3E99132359" + "matchCriteriaId": "31214EBB-325C-478D-9E78-FACDB17B17D2" } ] } diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json index 5a72912d893..f97e4b6e052 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62429", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-20T17:15:38.433", - "lastModified": "2025-11-07T16:59:54.857", + "lastModified": "2025-11-10T19:58:23.353", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -57,8 +57,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", "versionEndExcluding": "5.5.2-147", - "matchCriteriaId": "4F90AE10-9C84-4BC3-90C5-9E3E99132359" + "matchCriteriaId": "31214EBB-325C-478D-9E78-FACDB17B17D2" } ] } diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62430.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62430.json index 1ea4e9ef5e0..5dec2457d1d 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62430.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62430.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62430", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-17T18:15:38.020", - "lastModified": "2025-11-07T17:23:00.983", + "lastModified": "2025-11-10T19:58:19.593", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -77,8 +77,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", "versionEndExcluding": "5.5.2-146", - "matchCriteriaId": "38E8AAC6-11F4-4017-BDFC-558678EBEADF" + "matchCriteriaId": "CDB24FFE-98B4-4756-A3F6-54E1652B5355" } ] } diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62715.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62715.json index 7b408463813..f50fdf7a4f1 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62715.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62715.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62715", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-04T22:16:38.637", - "lastModified": "2025-11-07T18:20:29.597", + "lastModified": "2025-11-10T19:58:06.520", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -101,8 +101,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", "versionEndExcluding": "5.5.2-157", - "matchCriteriaId": "5B976FD3-430C-46F0-BCE2-80FF7292DF8A" + "matchCriteriaId": "3853CC60-97B9-4859-A4FC-F46AEEBF327B" } ] } diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62719.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62719.json index fcc920fa456..d0b52f9e6ce 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62719.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62719.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62719", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-04T22:16:38.787", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:57:35.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,22 +91,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.4.0", + "matchCriteriaId": "68ED0A13-FFAB-4927-A526-E51A4CA1B2BC" + } + ] + } + ] + } + ], "references": [ { "url": "http://github.com/Kovah/LinkAce/releases/tag/v2.4.0", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/Kovah/LinkAce/commit/4e0b822163ccefc2640c283ae969a39e673a0619", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-473x-rmm6-mc8c", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-473x-rmm6-mc8c", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62720.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62720.json index 742ead03a53..b555ef394c6 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62720.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62720.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62720", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-04T22:16:38.973", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:57:02.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -71,24 +93,66 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.4.0", + "matchCriteriaId": "68ED0A13-FFAB-4927-A526-E51A4CA1B2BC" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Kovah/LinkAce/commit/0ba49dba5176db390999de1f90b9d743a4aedc24", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Kovah/LinkAce/releases/tag/v2.4.0", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-cqxv-6v28-2f2h", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-cqxv-6v28-2f2h", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62721.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62721.json index 6d18e4c320f..816ef7c0366 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62721.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62721.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62721", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-04T22:16:39.120", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:56:06.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -71,24 +93,66 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.4.0", + "matchCriteriaId": "68ED0A13-FFAB-4927-A526-E51A4CA1B2BC" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Kovah/LinkAce/commit/1fef32694cee2bd80892fb478416be9364c3fddd", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Kovah/LinkAce/releases/tag/v2.4.0", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-47g2-qw6q-cr96", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-47g2-qw6q-cr96", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-631xx/CVE-2025-63149.json b/CVE-2025/CVE-2025-631xx/CVE-2025-63149.json new file mode 100644 index 00000000000..e4f2847bb96 --- /dev/null +++ b/CVE-2025/CVE-2025-631xx/CVE-2025-63149.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-63149", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T20:15:48.863", + "lastModified": "2025-11-10T20:15:48.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-3/3/1.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63288.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63288.json new file mode 100644 index 00000000000..4583650932c --- /dev/null +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63288.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63288", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T19:15:57.490", + "lastModified": "2025-11-10T19:15:57.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/open5gs/open5gs/commit/be765fe2b03e350836272eee5afb3931bdfb86d5", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/open5gs/open5gs/issues/4087", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-633xx/CVE-2025-63384.json b/CVE-2025/CVE-2025-633xx/CVE-2025-63384.json new file mode 100644 index 00000000000..c706a637daa --- /dev/null +++ b/CVE-2025/CVE-2025-633xx/CVE-2025-63384.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63384", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T20:15:49.013", + "lastModified": "2025-11-10T20:15:49.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET (Supervisor-mode Exception Return) instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode (M-mode) to Supervisor-mode (S-mode) as specified by the sstatus.SPP bit, the processor incorrectly remains in M-mode, leading to a critical privilege retention vulnerability." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/107040503/RISC-V-Vulnerability-Disclosure_SRET", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/chipsalliance/rocket-chip.git", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63455.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63455.json index f8582ab96d8..520975db74d 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63455.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63455.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63455", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:34.803", - "lastModified": "2025-11-10T17:15:34.803", + "lastModified": "2025-11-10T19:15:57.640", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-3/6/1.md", diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63785.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63785.json index 7a035e3f4f8..2269bdeac70 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63785.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63785.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63785", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T17:15:47.887", - "lastModified": "2025-11-07T17:15:47.887", + "lastModified": "2025-11-10T20:15:49.180", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,50 @@ "value": "A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onlook web application 0.2.32. This vulnerability occurs because user-supplied input is not properly sanitized before being directly injected into the DOM via innerHTML when editing a text element. An attacker can exploit this to inject malicious HTML and script code, which is then executed within the context of the preview iframe, allowing for the execution of arbitrary scripts in the user's session." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-116" + } + ] + } + ], "references": [ { "url": "https://blog.soohyun.tech/CVE-2025-63785-DOM-XSS-in-Onlook-27e557175d2e80e1b210c75b77952115", diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64107.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64107.json index 5b0c884a457..c545bda5f27 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64107.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64107.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64107", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-04T23:15:44.330", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T19:54:02.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "2.0", + "matchCriteriaId": "E8F5CD47-F0BD-4FB2-A5D9-266C512BC943" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/cursor/cursor/security/advisories/GHSA-2jr2-8wf5-v6pf", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/README.md b/README.md index 2d5ac30442e..b92bf1261f6 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T19:00:12.351508+00:00 +2025-11-10T21:00:11.547594+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T18:38:51.153000+00:00 +2025-11-10T20:58:25.520000+00:00 ``` ### Last Data Feed Release @@ -33,53 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317471 +317505 ``` ### CVEs added in the last Commit -Recently added CVEs: `9` +Recently added CVEs: `34` -- [CVE-2025-12967](CVE-2025/CVE-2025-129xx/CVE-2025-12967.json) (`2025-11-10T18:16:06.043`) -- [CVE-2025-43079](CVE-2025/CVE-2025-430xx/CVE-2025-43079.json) (`2025-11-10T18:16:06.420`) -- [CVE-2025-63147](CVE-2025/CVE-2025-631xx/CVE-2025-63147.json) (`2025-11-10T17:15:34.637`) -- [CVE-2025-63455](CVE-2025/CVE-2025-634xx/CVE-2025-63455.json) (`2025-11-10T17:15:34.803`) -- [CVE-2025-63456](CVE-2025/CVE-2025-634xx/CVE-2025-63456.json) (`2025-11-10T17:15:34.957`) -- [CVE-2025-63457](CVE-2025/CVE-2025-634xx/CVE-2025-63457.json) (`2025-11-10T17:15:35.100`) -- [CVE-2025-63497](CVE-2025/CVE-2025-634xx/CVE-2025-63497.json) (`2025-11-10T17:15:35.250`) -- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-11-10T17:15:35.810`) -- [CVE-2025-63835](CVE-2025/CVE-2025-638xx/CVE-2025-63835.json) (`2025-11-10T17:15:35.960`) +- [CVE-2025-12437](CVE-2025/CVE-2025-124xx/CVE-2025-12437.json) (`2025-11-10T20:15:38.377`) +- [CVE-2025-12438](CVE-2025/CVE-2025-124xx/CVE-2025-12438.json) (`2025-11-10T20:15:38.513`) +- [CVE-2025-12439](CVE-2025/CVE-2025-124xx/CVE-2025-12439.json) (`2025-11-10T20:15:38.647`) +- [CVE-2025-12440](CVE-2025/CVE-2025-124xx/CVE-2025-12440.json) (`2025-11-10T20:15:38.757`) +- [CVE-2025-12441](CVE-2025/CVE-2025-124xx/CVE-2025-12441.json) (`2025-11-10T20:15:38.867`) +- [CVE-2025-12443](CVE-2025/CVE-2025-124xx/CVE-2025-12443.json) (`2025-11-10T20:15:39.000`) +- [CVE-2025-12444](CVE-2025/CVE-2025-124xx/CVE-2025-12444.json) (`2025-11-10T20:15:39.143`) +- [CVE-2025-12445](CVE-2025/CVE-2025-124xx/CVE-2025-12445.json) (`2025-11-10T20:15:39.260`) +- [CVE-2025-12446](CVE-2025/CVE-2025-124xx/CVE-2025-12446.json) (`2025-11-10T20:15:39.363`) +- [CVE-2025-12447](CVE-2025/CVE-2025-124xx/CVE-2025-12447.json) (`2025-11-10T20:15:39.473`) +- [CVE-2025-12725](CVE-2025/CVE-2025-127xx/CVE-2025-12725.json) (`2025-11-10T20:15:39.577`) +- [CVE-2025-12726](CVE-2025/CVE-2025-127xx/CVE-2025-12726.json) (`2025-11-10T20:15:39.707`) +- [CVE-2025-12727](CVE-2025/CVE-2025-127xx/CVE-2025-12727.json) (`2025-11-10T20:15:39.833`) +- [CVE-2025-12728](CVE-2025/CVE-2025-127xx/CVE-2025-12728.json) (`2025-11-10T20:15:39.967`) +- [CVE-2025-12729](CVE-2025/CVE-2025-127xx/CVE-2025-12729.json) (`2025-11-10T20:15:40.080`) +- [CVE-2025-33150](CVE-2025/CVE-2025-331xx/CVE-2025-33150.json) (`2025-11-10T20:15:40.960`) +- [CVE-2025-43723](CVE-2025/CVE-2025-437xx/CVE-2025-43723.json) (`2025-11-10T19:15:56.880`) +- [CVE-2025-47286](CVE-2025/CVE-2025-472xx/CVE-2025-47286.json) (`2025-11-10T19:15:57.043`) +- [CVE-2025-47773](CVE-2025/CVE-2025-477xx/CVE-2025-47773.json) (`2025-11-10T19:15:57.207`) +- [CVE-2025-47932](CVE-2025/CVE-2025-479xx/CVE-2025-47932.json) (`2025-11-10T20:15:42.363`) +- [CVE-2025-56503](CVE-2025/CVE-2025-565xx/CVE-2025-56503.json) (`2025-11-10T20:15:47.990`) +- [CVE-2025-60876](CVE-2025/CVE-2025-608xx/CVE-2025-60876.json) (`2025-11-10T20:15:48.683`) +- [CVE-2025-63149](CVE-2025/CVE-2025-631xx/CVE-2025-63149.json) (`2025-11-10T20:15:48.863`) +- [CVE-2025-63288](CVE-2025/CVE-2025-632xx/CVE-2025-63288.json) (`2025-11-10T19:15:57.490`) +- [CVE-2025-63384](CVE-2025/CVE-2025-633xx/CVE-2025-63384.json) (`2025-11-10T20:15:49.013`) ### CVEs modified in the last Commit -Recently modified CVEs: `72` +Recently modified CVEs: `91` -- [CVE-2025-1974](CVE-2025/CVE-2025-19xx/CVE-2025-1974.json) (`2025-11-10T18:16:06.267`) -- [CVE-2025-28953](CVE-2025/CVE-2025-289xx/CVE-2025-28953.json) (`2025-11-10T17:15:34.387`) -- [CVE-2025-37799](CVE-2025/CVE-2025-377xx/CVE-2025-37799.json) (`2025-11-10T17:36:25.963`) -- [CVE-2025-37806](CVE-2025/CVE-2025-378xx/CVE-2025-37806.json) (`2025-11-10T17:32:50.763`) -- [CVE-2025-37807](CVE-2025/CVE-2025-378xx/CVE-2025-37807.json) (`2025-11-10T17:32:35.180`) -- [CVE-2025-37808](CVE-2025/CVE-2025-378xx/CVE-2025-37808.json) (`2025-11-10T17:31:43.270`) -- [CVE-2025-47776](CVE-2025/CVE-2025-477xx/CVE-2025-47776.json) (`2025-11-10T17:59:50.593`) -- [CVE-2025-48076](CVE-2025/CVE-2025-480xx/CVE-2025-48076.json) (`2025-11-10T18:14:15.173`) -- [CVE-2025-48884](CVE-2025/CVE-2025-488xx/CVE-2025-48884.json) (`2025-11-10T18:13:05.253`) -- [CVE-2025-54867](CVE-2025/CVE-2025-548xx/CVE-2025-54867.json) (`2025-11-10T17:50:01.987`) -- [CVE-2025-55155](CVE-2025/CVE-2025-551xx/CVE-2025-55155.json) (`2025-11-10T18:02:32.813`) -- [CVE-2025-62161](CVE-2025/CVE-2025-621xx/CVE-2025-62161.json) (`2025-11-10T18:13:27.723`) -- [CVE-2025-62264](CVE-2025/CVE-2025-622xx/CVE-2025-62264.json) (`2025-11-10T17:11:02.387`) -- [CVE-2025-62267](CVE-2025/CVE-2025-622xx/CVE-2025-62267.json) (`2025-11-10T17:04:42.033`) -- [CVE-2025-62520](CVE-2025/CVE-2025-625xx/CVE-2025-62520.json) (`2025-11-10T17:55:42.480`) -- [CVE-2025-62596](CVE-2025/CVE-2025-625xx/CVE-2025-62596.json) (`2025-11-10T17:58:27.753`) -- [CVE-2025-63560](CVE-2025/CVE-2025-635xx/CVE-2025-63560.json) (`2025-11-10T17:15:35.413`) -- [CVE-2025-63588](CVE-2025/CVE-2025-635xx/CVE-2025-63588.json) (`2025-11-10T17:29:28.327`) -- [CVE-2025-63589](CVE-2025/CVE-2025-635xx/CVE-2025-63589.json) (`2025-11-10T17:29:33.603`) -- [CVE-2025-63601](CVE-2025/CVE-2025-636xx/CVE-2025-63601.json) (`2025-11-10T17:15:35.603`) -- [CVE-2025-64108](CVE-2025/CVE-2025-641xx/CVE-2025-64108.json) (`2025-11-10T18:38:51.153`) -- [CVE-2025-64114](CVE-2025/CVE-2025-641xx/CVE-2025-64114.json) (`2025-11-10T17:26:24.800`) -- [CVE-2025-64458](CVE-2025/CVE-2025-644xx/CVE-2025-64458.json) (`2025-11-10T18:33:02.957`) -- [CVE-2025-64459](CVE-2025/CVE-2025-644xx/CVE-2025-64459.json) (`2025-11-10T18:25:59.883`) -- [CVE-2025-8849](CVE-2025/CVE-2025-88xx/CVE-2025-8849.json) (`2025-11-10T17:14:43.587`) +- [CVE-2025-53324](CVE-2025/CVE-2025-533xx/CVE-2025-53324.json) (`2025-11-10T20:15:47.197`) +- [CVE-2025-53349](CVE-2025/CVE-2025-533xx/CVE-2025-53349.json) (`2025-11-10T20:15:47.437`) +- [CVE-2025-53574](CVE-2025/CVE-2025-535xx/CVE-2025-53574.json) (`2025-11-10T20:15:47.660`) +- [CVE-2025-53586](CVE-2025/CVE-2025-535xx/CVE-2025-53586.json) (`2025-11-10T20:15:47.827`) +- [CVE-2025-5400](CVE-2025/CVE-2025-54xx/CVE-2025-5400.json) (`2025-11-10T20:15:07.957`) +- [CVE-2025-5401](CVE-2025/CVE-2025-54xx/CVE-2025-5401.json) (`2025-11-10T20:13:09.790`) +- [CVE-2025-5402](CVE-2025/CVE-2025-54xx/CVE-2025-5402.json) (`2025-11-10T20:11:11.940`) +- [CVE-2025-5403](CVE-2025/CVE-2025-54xx/CVE-2025-5403.json) (`2025-11-10T20:07:40.007`) +- [CVE-2025-5404](CVE-2025/CVE-2025-54xx/CVE-2025-5404.json) (`2025-11-10T20:06:32.143`) +- [CVE-2025-5405](CVE-2025/CVE-2025-54xx/CVE-2025-5405.json) (`2025-11-10T20:04:10.697`) +- [CVE-2025-5406](CVE-2025/CVE-2025-54xx/CVE-2025-5406.json) (`2025-11-10T20:43:07.087`) +- [CVE-2025-5407](CVE-2025/CVE-2025-54xx/CVE-2025-5407.json) (`2025-11-10T20:40:57.120`) +- [CVE-2025-5803](CVE-2025/CVE-2025-58xx/CVE-2025-5803.json) (`2025-11-10T20:15:48.473`) +- [CVE-2025-58595](CVE-2025/CVE-2025-585xx/CVE-2025-58595.json) (`2025-11-10T20:15:48.183`) +- [CVE-2025-62423](CVE-2025/CVE-2025-624xx/CVE-2025-62423.json) (`2025-11-10T19:58:10.237`) +- [CVE-2025-62424](CVE-2025/CVE-2025-624xx/CVE-2025-62424.json) (`2025-11-10T19:58:14.303`) +- [CVE-2025-62429](CVE-2025/CVE-2025-624xx/CVE-2025-62429.json) (`2025-11-10T19:58:23.353`) +- [CVE-2025-62430](CVE-2025/CVE-2025-624xx/CVE-2025-62430.json) (`2025-11-10T19:58:19.593`) +- [CVE-2025-62715](CVE-2025/CVE-2025-627xx/CVE-2025-62715.json) (`2025-11-10T19:58:06.520`) +- [CVE-2025-62719](CVE-2025/CVE-2025-627xx/CVE-2025-62719.json) (`2025-11-10T19:57:35.260`) +- [CVE-2025-62720](CVE-2025/CVE-2025-627xx/CVE-2025-62720.json) (`2025-11-10T19:57:02.250`) +- [CVE-2025-62721](CVE-2025/CVE-2025-627xx/CVE-2025-62721.json) (`2025-11-10T19:56:06.980`) +- [CVE-2025-63455](CVE-2025/CVE-2025-634xx/CVE-2025-63455.json) (`2025-11-10T19:15:57.640`) +- [CVE-2025-63785](CVE-2025/CVE-2025-637xx/CVE-2025-63785.json) (`2025-11-10T20:15:49.180`) +- [CVE-2025-64107](CVE-2025/CVE-2025-641xx/CVE-2025-64107.json) (`2025-11-10T19:54:02.790`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 044ccaca99e..983c7624a6b 100644 --- a/_state.csv +++ b/_state.csv @@ -85130,7 +85130,7 @@ CVE-2016-15050,0,0,5e208783c8569cf48590949707a3f88b1cb2ba4c592e42d11afc62ab16147 CVE-2016-15051,0,0,ee21e64f2ff93436fe7742197305b71e6a880a64feddf655c1bf957e796c06ee,2025-11-05T18:27:28.850000 CVE-2016-15052,0,0,00b251e7ee71c4d41f46899da6881e9a7f5760b1d0c655254635edfaff480be5,2025-11-05T18:27:18.367000 CVE-2016-15053,0,0,a4411b2de56397429229b112e8c6926b103d55a46d21a13c38d9b29f05fd7baf,2025-11-05T18:27:07.803000 -CVE-2016-15054,0,1,a797d90816b7130b874120ee8782f7a45191b7da875f27c690428c0b2563ecec,2025-11-10T18:15:34.540000 +CVE-2016-15054,0,0,a797d90816b7130b874120ee8782f7a45191b7da875f27c690428c0b2563ecec,2025-11-10T18:15:34.540000 CVE-2016-1513,0,0,06136b6111d450b6f9a09af32cd105798eeb2e0357d398298aa697c3a3f64994,2025-04-12T10:46:40.837000 CVE-2016-1514,0,0,b7fef097b48e8e79c45cbf0778b00b6a0da537c685d5ef916a10faf8cfdae6e7,2023-11-07T02:29:56.923000 CVE-2016-1515,0,0,7650f16bc9bfdae9e539eda0300a3023d110d1932894a66d7e6ac27f785826da,2023-11-07T02:29:57.150000 @@ -159887,7 +159887,7 @@ CVE-2020-36788,0,0,538e84f4cb96c9d3452e4c0d6032a1a5bac616bb875a71e1847cbdf2d7f05 CVE-2020-36789,0,0,ca7274b8b36a6de36e19d0ca3435eff0a26a29e1598c0f88858e512587e7ef77,2025-10-01T17:15:31.817000 CVE-2020-3679,0,0,e50c3284f3a657c667bb2bcead40e1009be12a2605501d7af9afc6e97b996914,2024-11-21T05:31:33.770000 CVE-2020-36790,0,0,a7688629d5eba7ce3b59c9692810c3346222a498f962ae61bffd4e74d9683800,2025-11-06T21:59:33.563000 -CVE-2020-36791,0,1,5bdf0a84bfa83f3e7790b3c49e16d0b00e297987503b62b16745066de2bea8aa,2025-11-10T17:34:55.777000 +CVE-2020-36791,0,0,5bdf0a84bfa83f3e7790b3c49e16d0b00e297987503b62b16745066de2bea8aa,2025-11-10T17:34:55.777000 CVE-2020-36792,0,0,177371a1ebc0ce84b4d1331a373417ec64ba5cd46d312642b2a13618624aadcf,2025-09-16T16:15:37.037000 CVE-2020-36793,0,0,15757d438c79b15f740c3ff62d1e8fa7a21f4352fd32d4b473656035a370713c,2025-09-16T16:15:37.110000 CVE-2020-36794,0,0,3dec9bc933f4699b27b9b647a55edba5e6a13ee22f5b1e3e44aad82f8ab12b9a,2025-09-16T16:15:37.177000 @@ -167042,8 +167042,8 @@ CVE-2021-20018,0,0,d0bbfa5a404bcd376b168a5a44fd585c3821223dfd8ef054682c1200cc04f CVE-2021-20019,0,0,4a1ee3e78cc6ec55376aaa3539fc9e69e05f7279eda40958a7fd5be74754de53,2024-11-21T05:45:47.597000 CVE-2021-2002,0,0,f81d4e198ed607669e35b2fcf34388c7cbea1317b5509943dbd156c60a15ebd6,2024-11-21T06:02:09.217000 CVE-2021-20020,0,0,06b8d82ae838202570441cb019399630ef1f11daf63d0d7606763ab84cfbddee,2024-11-21T05:45:47.723000 -CVE-2021-20021,0,0,76556e67b6cd50c0b5b8cbe4326489ee2bfe09152e2aea41133a67cb4cb6c21e,2025-10-22T00:17:18.770000 -CVE-2021-20022,0,0,736c2d0ae76895f9b9570d8de8151ae76efa3d701f7f7c94bf41f7f49617067d,2025-10-22T00:17:18.923000 +CVE-2021-20021,0,1,ad79875752390f9d57192fc84bcea8dadc3d993adb928fd785fd5834863129d3,2025-11-10T19:04:58.607000 +CVE-2021-20022,0,1,64fb50a2a9288c710e419d5340cf9ba8fd4211c0c503c7d7497bd53d867feebb,2025-11-10T19:07:07.287000 CVE-2021-20023,0,0,62341dad5fac7947fa86e27897749dc691ea801bcf3a0c0996054636fc30199c,2025-10-22T00:17:19.077000 CVE-2021-20024,0,0,ed3768e12e4f14c754a691b9f1a8d63c0ba5d9e615ceab7a5079097a78da5889,2024-11-21T05:45:48.230000 CVE-2021-20025,0,0,a557c524f3d0620495311f58e53d5b6d2a34e4771a645ab67df4e0312ad32324,2024-11-21T05:45:48.370000 @@ -191764,7 +191764,7 @@ CVE-2022-21542,0,0,40a5bcc12eabf6258801e78e6dc2d267a4fe441026d924242ff67b3e7342b CVE-2022-21543,0,0,c76ee9b7a29c0e131577bf6b9934c1cb1bf0c1670a2ed75054ba6efb261c3c24,2024-11-21T06:44:55.483000 CVE-2022-21544,0,0,11c2ecfdea00503bacbb9472730fdae5939e1310a2f31bda79dcb601f471d00c,2024-11-21T06:44:55.610000 CVE-2022-21545,0,0,20632a8e5e2d297e5dc5567814288b9e21b0351e381ffd66dae3b43622145575,2024-11-21T06:44:55.737000 -CVE-2022-21546,0,1,5e107af5121e16c23ef255e826215c840a4a42d4731dd2248a8f01c66b25f76d,2025-11-10T17:37:14.470000 +CVE-2022-21546,0,0,5e107af5121e16c23ef255e826215c840a4a42d4731dd2248a8f01c66b25f76d,2025-11-10T17:37:14.470000 CVE-2022-21547,0,0,7852e220889c5dd0ad167f791cca7bdf9f02c7853c53e39a323f705bd216b802,2024-11-21T06:44:55.867000 CVE-2022-21548,0,0,2a9883299b3d40c55b8600f291a673339f0f880aee096b244247faec73a7804d,2024-11-21T06:44:55.990000 CVE-2022-21549,0,0,5cad69ea91cedb7215bdf3e9009750377e2eff3f29cefe9b81dff221fa824e82,2024-11-21T06:44:56.113000 @@ -214686,21 +214686,21 @@ CVE-2022-49814,0,0,147aea580102baebf34439f3899350b860a7b9d44dd89bfd115ec0bd15a6e CVE-2022-49815,0,0,58322723586210066c80df6d0d6d00ca08e739774aeddba8b43c8ef1a7d98022,2025-11-07T18:50:07.070000 CVE-2022-49816,0,0,49ad3b8054f86e86650c01d46ca22bf791af5833625cf9576d234fe2f59041a2,2025-05-02T06:15:47.253000 CVE-2022-49817,0,0,3932a6e9a266dcfcd250c96a6d02f8ec60bf5334bc2ef462b08385646ca2d3ad,2025-11-07T18:43:37.180000 -CVE-2022-49818,0,0,d08ac2d6404f5f76401cc5449ed87649966a4aad14748afb1c198fa58201d908,2025-05-02T13:53:20.943000 -CVE-2022-49819,0,0,d96378a56d04a69a37ad9967289aae0919c3893c62cca230c824b220472b4b93,2025-05-02T13:53:20.943000 -CVE-2022-49820,0,0,6b9767778372e38aadf1615e1fa35dbd6f21dcdcd2df9c255d150bd8862fb425,2025-05-02T13:53:20.943000 -CVE-2022-49821,0,0,6499ab1a9e079ef29cc00909e6fa59722d834edc31587e13232c9aa00fc507b1,2025-05-02T13:53:20.943000 -CVE-2022-49822,0,0,c0c9657c8f4b45b180e63d0cac0534913ff2990c3fc1b4af310fe26d61cfc39d,2025-05-02T13:53:20.943000 -CVE-2022-49823,0,0,58f6433b4a06fe42f53de88f80659309e4f582916576a3ce150e1f83f9bc52a3,2025-05-02T13:53:20.943000 -CVE-2022-49824,0,0,9d0c44527e8767e5f03e4b34c6cc3808a14effc0b58583e78beeca021aa4ffd1,2025-05-02T13:53:20.943000 -CVE-2022-49825,0,0,b4959e244379fc8839002968ee98f17d09ff25e6fc9991d4f82a8959d0a9e701,2025-05-02T13:53:20.943000 -CVE-2022-49826,0,0,e704a3b9ffe6c6ecb13bd801ec73eba5b50d38c0b0e12f89e72408f98c7fe5ba,2025-05-02T13:53:20.943000 -CVE-2022-49827,0,0,e972d76eb1fb9499fe284ebe1c505f88ad0baf08b185715c520a71e834c43e39,2025-05-02T13:53:20.943000 -CVE-2022-49828,0,0,c60dc6c890e30c4b1e0a5f90473c058826a54826aae8dff459693120a7f08e7b,2025-05-02T13:53:20.943000 -CVE-2022-49829,0,0,dd75012e6de304bc49f28f21186db8ed52bc8c990c46dd3d51288652bf76ec5f,2025-05-02T13:53:20.943000 -CVE-2022-49830,0,0,6fc1f542c5d835d8539b734378c1d59fa86888546a2b15fa34fd9935234f7be6,2025-05-02T13:53:20.943000 -CVE-2022-49831,0,0,d8281cc56cf2750f3cfe1436d84a20a8fe46ee8eee68c8ddbcd0d4c3a5bb8116,2025-05-02T13:53:20.943000 -CVE-2022-49832,0,0,2c330c1773734efd0e76b6697c4d660e65ff063069d6980c191176f7be889926,2025-05-02T13:53:20.943000 +CVE-2022-49818,0,1,6470e1e5d94ceabc79addf7866844058c0d73f4c4926757a9d011fdd7a0f74a9,2025-11-10T20:58:25.520000 +CVE-2022-49819,0,1,4b11d06f75f1d168e54f08f6c78f050b33fb2fb18be6bf2ed4ce64cf5820479c,2025-11-10T20:57:06.550000 +CVE-2022-49820,0,1,d04a3612761d41d8f4788a8151144e1781c4c06a70782dbb02ad6ff15c26ec6f,2025-11-10T20:45:23.667000 +CVE-2022-49821,0,1,d9e2eee4b283e2ceabbacb06f3807c7e84fc9b536a58553068b6eed04d5e7c0c,2025-11-10T20:17:09.993000 +CVE-2022-49822,0,1,5875206923f55f130a090547e7289a1b72c92cd1b64a3bafb380a126b4e340c3,2025-11-10T20:17:02.400000 +CVE-2022-49823,0,1,8e943ef40c33eb8aad744a8bf0b60d03ddd7cf3ca04925c463f6e555614387f0,2025-11-10T20:16:57.870000 +CVE-2022-49824,0,1,811967fbb9ebc65bccc8662e6067816787162beec7e8529b879c5ae372bda721,2025-11-10T20:16:47.063000 +CVE-2022-49825,0,1,55ee7ed930a5877be540ae6b468f29310c65a32e05a7d16c5d2f51e664f738f9,2025-11-10T20:16:31.057000 +CVE-2022-49826,0,1,f97059d60361642207eea0846ae913338c1f8d6a8376a22393316779cfbecd7a,2025-11-10T20:15:47.177000 +CVE-2022-49827,0,1,7a4d69bcc5cfc2b35d1c1afdb8ec7f40f889343b30302244e451f3090f7320ad,2025-11-10T20:15:36.423000 +CVE-2022-49828,0,1,dd60fc97d5c48a10c06a1f4958de7fb1458514d9fdaeabd2614adfc9fe5c8024,2025-11-10T20:10:01.750000 +CVE-2022-49829,0,1,c7b3e05c0a5f46860441f1c46d8a002b76035c3992a9e0249e9b36b7c0e5ef26,2025-11-10T20:07:23.567000 +CVE-2022-49830,0,1,7ebca27a4f60318c543487010fee653bd6097def86ff035c718714cdca5c61a6,2025-11-10T19:58:04.560000 +CVE-2022-49831,0,1,240986cb6b7134d51b1504569170b354c43798a596ffa81d3fc48fdcbc1904b7,2025-11-10T19:57:59.030000 +CVE-2022-49832,0,1,472d50fca4cc9a3e866eefce93a2395436d442317423df7b00c4e383619ff473,2025-11-10T19:57:51.190000 CVE-2022-49833,0,0,e9c413a140794bb2f4daf7c9fa492459985436b7d0d23d3c48031da2b074ba95,2025-05-02T13:53:20.943000 CVE-2022-49834,0,0,cf2737f26ced1c36b7a4492400d5b65707895dfd16c53133baab139c6b2db49c,2025-05-02T13:53:20.943000 CVE-2022-49835,0,0,d7417414d8a971dada5b5c796e41aa5773bb51e28477a9ba320dc37e77e4cce8,2025-05-02T13:53:20.943000 @@ -243454,57 +243454,57 @@ CVE-2023-53095,0,0,84a332bbf8e0bbbf14e30fb93efc90e5a4f1dba56dbc96be54139c846275f CVE-2023-53096,0,0,93395447e0ee5354eba9abc663b5142c677070860422de66b3c4992413929fde,2025-05-05T20:54:45.973000 CVE-2023-53097,0,0,ceeeadaa92ba671078a8845f8c8390adf156f7b07fd098fb3ccd6e26cf05691b,2025-05-05T20:54:45.973000 CVE-2023-53098,0,0,037b2299905820f48ad06a2dcbb3d8a97fd9355a2f39753fa19b782ad11d939c,2025-05-05T20:54:45.973000 -CVE-2023-53099,0,1,bd80dbced0e81d4dd6aa7a04e7bc0b15a79c64568856edc08c6571ecb4c4f49c,2025-11-10T17:57:07.893000 +CVE-2023-53099,0,0,bd80dbced0e81d4dd6aa7a04e7bc0b15a79c64568856edc08c6571ecb4c4f49c,2025-11-10T17:57:07.893000 CVE-2023-5310,0,0,ae19de1a22d7f22d6fd9acfd5ee40221bbaa3312e010ce020b441062ea91c97f,2024-11-21T08:41:30.240000 -CVE-2023-53100,0,1,9da3d1ae750aeb452b5e91452cf02dcc700a0968ea22897ffe27e9d7208b18e2,2025-11-10T17:56:45.163000 -CVE-2023-53101,0,1,c9ad3b00b311d869adf0444711cc6466143fa6758e8f067d63ccf9f524b119aa,2025-11-10T17:56:32.930000 -CVE-2023-53102,0,1,eeca484257f2d452a542c5a53b7b633d77d745ba6a3c13f5147f82d2d9f321f2,2025-11-10T17:56:19.380000 -CVE-2023-53103,0,1,d14a7a58de781457be4135b31ff04bf493b92cb6eddd5d0f85ce4e885b16b451,2025-11-10T17:56:07.493000 +CVE-2023-53100,0,0,9da3d1ae750aeb452b5e91452cf02dcc700a0968ea22897ffe27e9d7208b18e2,2025-11-10T17:56:45.163000 +CVE-2023-53101,0,0,c9ad3b00b311d869adf0444711cc6466143fa6758e8f067d63ccf9f524b119aa,2025-11-10T17:56:32.930000 +CVE-2023-53102,0,0,eeca484257f2d452a542c5a53b7b633d77d745ba6a3c13f5147f82d2d9f321f2,2025-11-10T17:56:19.380000 +CVE-2023-53103,0,0,d14a7a58de781457be4135b31ff04bf493b92cb6eddd5d0f85ce4e885b16b451,2025-11-10T17:56:07.493000 CVE-2023-53104,0,0,7dc3ad94c1ecfca574aecafe90a762b698759b99173043c9e1e3db6e647bffa8,2025-05-08T11:15:51.903000 -CVE-2023-53105,0,1,6d68ef71df19835fa2cbad77eb7cee915fc75f71ea66cb30d9aaf41e66487de8,2025-11-10T17:54:56.077000 -CVE-2023-53106,0,1,5fe182c36eac83f37502bd25dbb8d87c912d754a7ef4ff100cf46cb744963ac0,2025-11-10T17:54:42.723000 -CVE-2023-53107,0,1,a5ce223b40ab3dfb4a5f67d3129625a9617b6b51d5a6061b472b2059d4c6d40d,2025-11-10T17:54:31.843000 -CVE-2023-53108,0,1,e7878acd30fd490e755f1a5e83ea8da63ea68c27109ca2d81af0de25f0700f75,2025-11-10T17:54:19.280000 -CVE-2023-53109,0,1,b5136353ca3f06df1e83e3ce1bf3eb2337b5ba98981e5e299b327899aacf2164,2025-11-10T17:54:04.560000 +CVE-2023-53105,0,0,6d68ef71df19835fa2cbad77eb7cee915fc75f71ea66cb30d9aaf41e66487de8,2025-11-10T17:54:56.077000 +CVE-2023-53106,0,0,5fe182c36eac83f37502bd25dbb8d87c912d754a7ef4ff100cf46cb744963ac0,2025-11-10T17:54:42.723000 +CVE-2023-53107,0,0,a5ce223b40ab3dfb4a5f67d3129625a9617b6b51d5a6061b472b2059d4c6d40d,2025-11-10T17:54:31.843000 +CVE-2023-53108,0,0,e7878acd30fd490e755f1a5e83ea8da63ea68c27109ca2d81af0de25f0700f75,2025-11-10T17:54:19.280000 +CVE-2023-53109,0,0,b5136353ca3f06df1e83e3ce1bf3eb2337b5ba98981e5e299b327899aacf2164,2025-11-10T17:54:04.560000 CVE-2023-5311,0,0,62b6ab15a640c341942aa3984f0eb204c70a157164b7d966ddfb1b9333dc4d0c,2024-11-21T08:41:30.370000 -CVE-2023-53110,0,1,fecb0216db9d67694110c71fbdce5659dd8e6b19984ffbe78f5b9c4142a7658d,2025-11-10T17:53:47.337000 -CVE-2023-53111,0,1,cf246217ecb1723cf531b7e0cfe2552e70ef24d1afa69d64c59fa4d8ff0147f5,2025-11-10T17:53:35.377000 -CVE-2023-53112,0,1,554495e7766928e7649dd92018b8cfd5338cf84a587919280935d29fb788e93c,2025-11-10T17:53:20.930000 -CVE-2023-53113,0,1,8f26a0994a75d1de8f8efb2342d11d1fc982efbec07539194e09c8c9b9a43c84,2025-11-10T17:53:08.543000 -CVE-2023-53114,0,1,bba0ac0519ea37dc38d1117b53e84f66070cece13cd1da19d2e21ee3855b27c9,2025-11-10T17:52:52.840000 -CVE-2023-53115,0,1,195f3f31272acfaec6ced0666a82a5334349c3c3993e5b92edea7021ab40022b,2025-11-10T17:52:31.233000 -CVE-2023-53116,0,1,2cde41403aa6fe2b9480d93c1ee64466243d53f2390c2952bbf59e5603bd36a2,2025-11-10T17:52:14.500000 -CVE-2023-53117,0,1,b3878637df886691b38f0df82bc5c7ee3a5f4e60bd8042de45672a13f0fed6b3,2025-11-10T17:51:59.087000 -CVE-2023-53118,0,1,4f9235830ecc20af82843dd02d6dcbd91f6c45c38b235a16a74c004a9854a9ab,2025-11-10T17:51:39.893000 -CVE-2023-53119,0,1,b52a6cb00faf89de603d1badcefc9b3e5bc4567e6cbc75c2148886f3725d06d5,2025-11-10T17:50:48.083000 +CVE-2023-53110,0,0,fecb0216db9d67694110c71fbdce5659dd8e6b19984ffbe78f5b9c4142a7658d,2025-11-10T17:53:47.337000 +CVE-2023-53111,0,0,cf246217ecb1723cf531b7e0cfe2552e70ef24d1afa69d64c59fa4d8ff0147f5,2025-11-10T17:53:35.377000 +CVE-2023-53112,0,0,554495e7766928e7649dd92018b8cfd5338cf84a587919280935d29fb788e93c,2025-11-10T17:53:20.930000 +CVE-2023-53113,0,0,8f26a0994a75d1de8f8efb2342d11d1fc982efbec07539194e09c8c9b9a43c84,2025-11-10T17:53:08.543000 +CVE-2023-53114,0,0,bba0ac0519ea37dc38d1117b53e84f66070cece13cd1da19d2e21ee3855b27c9,2025-11-10T17:52:52.840000 +CVE-2023-53115,0,0,195f3f31272acfaec6ced0666a82a5334349c3c3993e5b92edea7021ab40022b,2025-11-10T17:52:31.233000 +CVE-2023-53116,0,0,2cde41403aa6fe2b9480d93c1ee64466243d53f2390c2952bbf59e5603bd36a2,2025-11-10T17:52:14.500000 +CVE-2023-53117,0,0,b3878637df886691b38f0df82bc5c7ee3a5f4e60bd8042de45672a13f0fed6b3,2025-11-10T17:51:59.087000 +CVE-2023-53118,0,0,4f9235830ecc20af82843dd02d6dcbd91f6c45c38b235a16a74c004a9854a9ab,2025-11-10T17:51:39.893000 +CVE-2023-53119,0,0,b52a6cb00faf89de603d1badcefc9b3e5bc4567e6cbc75c2148886f3725d06d5,2025-11-10T17:50:48.083000 CVE-2023-5312,0,0,1415bfd069705ff55f79f6d249de3b45d246fa9bee5d6271b902326ea749ba1b,2023-11-07T04:23:52.920000 -CVE-2023-53120,0,1,d302b6d49db78bd5440b2a9c3e4bacec2a84f0b3059f72baf79ccb21386535d8,2025-11-10T17:50:32.333000 -CVE-2023-53121,0,1,c1e895ab3766f9794abd218c3e6a51f61cb6b736d1b982f5630ebe345f0a52cb,2025-11-10T17:50:22.173000 +CVE-2023-53120,0,0,d302b6d49db78bd5440b2a9c3e4bacec2a84f0b3059f72baf79ccb21386535d8,2025-11-10T17:50:32.333000 +CVE-2023-53121,0,0,c1e895ab3766f9794abd218c3e6a51f61cb6b736d1b982f5630ebe345f0a52cb,2025-11-10T17:50:22.173000 CVE-2023-53122,0,0,912c9704ea9b8710a1f92236af9d7f942dc96eba171634278670cec3092d9fc3,2025-05-08T11:15:52.123000 -CVE-2023-53123,0,1,9067c9bc8eb02864bfd7fffc95e0234f89e0d5314dfaf0c97dd790576d23df36,2025-11-10T17:50:06.467000 -CVE-2023-53124,0,1,d6ecbb715e6b2aaa683548e8a448e80b72799d4a173abd1082a14a5890c3b11d,2025-11-10T17:49:51.370000 -CVE-2023-53125,0,1,b4644c656a41ca7407aca2c78ccf0920545cb1ee90e00aa2862aacaa844dc80f,2025-11-10T17:46:06.737000 -CVE-2023-53126,0,1,dfcfab706bc3a27b2a3f05a8dc0611ea56737d38d22db6cacc0fd8de58d94092,2025-11-10T17:41:02.887000 -CVE-2023-53127,0,1,1bd4984f921348f6bdba3fd42bf283fd5e9c2bb01309921f3e8133ef8b28895b,2025-11-10T17:40:51.537000 -CVE-2023-53128,0,1,8d4b2317e2c114c65227581c66aebeddd173049a2a72cf3fa51bd99b59992a8f,2025-11-10T17:40:41.820000 +CVE-2023-53123,0,0,9067c9bc8eb02864bfd7fffc95e0234f89e0d5314dfaf0c97dd790576d23df36,2025-11-10T17:50:06.467000 +CVE-2023-53124,0,0,d6ecbb715e6b2aaa683548e8a448e80b72799d4a173abd1082a14a5890c3b11d,2025-11-10T17:49:51.370000 +CVE-2023-53125,0,0,b4644c656a41ca7407aca2c78ccf0920545cb1ee90e00aa2862aacaa844dc80f,2025-11-10T17:46:06.737000 +CVE-2023-53126,0,0,dfcfab706bc3a27b2a3f05a8dc0611ea56737d38d22db6cacc0fd8de58d94092,2025-11-10T17:41:02.887000 +CVE-2023-53127,0,0,1bd4984f921348f6bdba3fd42bf283fd5e9c2bb01309921f3e8133ef8b28895b,2025-11-10T17:40:51.537000 +CVE-2023-53128,0,0,8d4b2317e2c114c65227581c66aebeddd173049a2a72cf3fa51bd99b59992a8f,2025-11-10T17:40:41.820000 CVE-2023-53129,0,0,d87785112de2da68774c98c3ae701288d834d4d70fe5501c1c3b1a44e1cffcb5,2025-05-08T11:15:52.333000 CVE-2023-5313,0,0,cd3bd91ba814e0cfcdc6860d53d08840012171da1ca119fc7cc0fd9b81fc32e2,2024-11-21T08:41:30.507000 CVE-2023-53130,0,0,c8eeea6d2dd28357ee12d4951af1f101ef69bb2418e6f858d4b8642809383aae,2025-05-08T11:15:52.570000 -CVE-2023-53131,0,1,b571bec10a152c590d4a6a45c60c37e61db049837b79b51dd4e588d9caf1d884,2025-11-10T17:40:30.317000 -CVE-2023-53132,0,1,ea1fc89781ffc2799fbe080a577bf930688ec6c74887ee4b5bfe512f82f9c058,2025-11-10T17:40:13.177000 -CVE-2023-53133,0,1,d2c60e58a26193579aff5b9bcd93300d6aa999d4b0634b6b7e05452b78e10e30,2025-11-10T17:40:00.680000 -CVE-2023-53134,0,1,7affe51a2c18aa33b20a91a624fc303257c6ada83ad9956701b0335dbfc16814,2025-11-10T17:39:47.117000 -CVE-2023-53135,0,1,aeb2646d0c05c07fc2a8fbfbb5acd8bf0c56955ffd49bd092bb39d965efe8246,2025-11-10T17:39:31.467000 -CVE-2023-53136,0,1,3ba584a418c9a07fee68ce37b0d80df893e6fb63983f3a0fcbf7c565691dc216,2025-11-10T17:39:17.243000 +CVE-2023-53131,0,0,b571bec10a152c590d4a6a45c60c37e61db049837b79b51dd4e588d9caf1d884,2025-11-10T17:40:30.317000 +CVE-2023-53132,0,0,ea1fc89781ffc2799fbe080a577bf930688ec6c74887ee4b5bfe512f82f9c058,2025-11-10T17:40:13.177000 +CVE-2023-53133,0,0,d2c60e58a26193579aff5b9bcd93300d6aa999d4b0634b6b7e05452b78e10e30,2025-11-10T17:40:00.680000 +CVE-2023-53134,0,0,7affe51a2c18aa33b20a91a624fc303257c6ada83ad9956701b0335dbfc16814,2025-11-10T17:39:47.117000 +CVE-2023-53135,0,0,aeb2646d0c05c07fc2a8fbfbb5acd8bf0c56955ffd49bd092bb39d965efe8246,2025-11-10T17:39:31.467000 +CVE-2023-53136,0,0,3ba584a418c9a07fee68ce37b0d80df893e6fb63983f3a0fcbf7c565691dc216,2025-11-10T17:39:17.243000 CVE-2023-53137,0,0,e5df918d0010a826fe532b5adc0167035d07bd0487c98e015b74550dcd0f2aef,2025-09-05T20:15:32.140000 -CVE-2023-53138,0,1,03a4e33dd66813e767a681e6414f384c487e962ee063ac8196e86ab0dd5f614c,2025-11-10T17:39:03.013000 -CVE-2023-53139,0,1,e909d910bbc1d4dd0d48cbdd297699cd4b687f08871fbabecd304f799a281814,2025-11-10T17:38:51.187000 +CVE-2023-53138,0,0,03a4e33dd66813e767a681e6414f384c487e962ee063ac8196e86ab0dd5f614c,2025-11-10T17:39:03.013000 +CVE-2023-53139,0,0,e909d910bbc1d4dd0d48cbdd297699cd4b687f08871fbabecd304f799a281814,2025-11-10T17:38:51.187000 CVE-2023-5314,0,0,ab65d90f9e757aa5d5d35478939c7c9ec9fd5a6803914a758827aac0e3dc09cb,2024-11-21T08:41:30.647000 -CVE-2023-53140,0,1,0e10028f63268ef4a7ea065e61f0cbb7b369e83ece349d717cf87c6d00f5da57,2025-11-10T17:38:38.440000 -CVE-2023-53141,0,1,96a1836cd9866af92e60454d4a745839f37d60b4cb2ade3b899846b07b28dab3,2025-11-10T17:38:24.907000 -CVE-2023-53142,0,1,91120d93a764e1738ab22dafd29bdad6c445ac5855b5954925454ff16da16dc4,2025-11-10T17:38:10.867000 -CVE-2023-53143,0,1,69379791d13ead027daecb2932df0f1a35b4e8291db8cccd368cc8c01c5b1d8b,2025-11-10T17:37:57.567000 -CVE-2023-53144,0,1,66ca00ca394941cf693bdc8a61321dfb4a3b51e30aabab63bbf292c0583b95c7,2025-11-10T17:37:29.700000 +CVE-2023-53140,0,0,0e10028f63268ef4a7ea065e61f0cbb7b369e83ece349d717cf87c6d00f5da57,2025-11-10T17:38:38.440000 +CVE-2023-53141,0,0,96a1836cd9866af92e60454d4a745839f37d60b4cb2ade3b899846b07b28dab3,2025-11-10T17:38:24.907000 +CVE-2023-53142,0,0,91120d93a764e1738ab22dafd29bdad6c445ac5855b5954925454ff16da16dc4,2025-11-10T17:38:10.867000 +CVE-2023-53143,0,0,69379791d13ead027daecb2932df0f1a35b4e8291db8cccd368cc8c01c5b1d8b,2025-11-10T17:37:57.567000 +CVE-2023-53144,0,0,66ca00ca394941cf693bdc8a61321dfb4a3b51e30aabab63bbf292c0583b95c7,2025-11-10T17:37:29.700000 CVE-2023-53145,0,0,a998b932a230a3f2c0ad382119f484273dcd734471b9c85f46ef2419c87aaab5,2025-05-12T17:32:32.760000 CVE-2023-53146,0,0,0b178056e0ffb1fe04ebec7f81648c9d71d56383b3fb35e94e4bdc294a601c90,2025-05-16T14:43:56.797000 CVE-2023-53147,0,0,0076a17b1bb348cfb6135d2cccc8211b6b4499b8532de034c0c57316b667cfc1,2025-09-15T15:22:27.090000 @@ -280616,10 +280616,10 @@ CVE-2024-58094,0,0,35fd3a9fb7c87a2c86d2c3450e065bfb99ea761096bbe6bf300be8fa572a4 CVE-2024-58095,0,0,1fa03956d0abebc930ab5fcff7118ed9d43c4fd262a5cdc892851d94e546f5b3,2025-10-28T18:55:30.840000 CVE-2024-58096,0,0,b43905e9773fcf33444cd1b89a234ef877c5fab7488339cbcd214430217ebd16,2025-10-28T18:55:59.950000 CVE-2024-58097,0,0,35e53f119c904718301af12a5c1a075c592ab441c23dac2bd60c2964a675b239,2025-10-01T17:15:38.047000 -CVE-2024-58098,0,1,5b13121a4c4e12580d4871d2280a5b37fdfb6e7267123fbd0b8b1ed8d2b6364c,2025-11-10T17:35:57.700000 +CVE-2024-58098,0,0,5b13121a4c4e12580d4871d2280a5b37fdfb6e7267123fbd0b8b1ed8d2b6364c,2025-11-10T17:35:57.700000 CVE-2024-58099,0,0,ba3190772c1692c1a8315545370dc8e0abb34c1fc08b6036313bcdcbbc8417a9,2025-10-01T17:15:38.293000 CVE-2024-5810,0,0,1cfa1d347c98633461d8a7b5c70e7a88c8da42418f63ef991acf03eb3681102e,2024-11-21T09:48:22.557000 -CVE-2024-58100,0,1,9cecf2e9cf3b6707c611bcf92e11c2ad17cf1a57e6dd28f4eceb0579ea6472f5,2025-11-10T17:35:41.117000 +CVE-2024-58100,0,0,9cecf2e9cf3b6707c611bcf92e11c2ad17cf1a57e6dd28f4eceb0579ea6472f5,2025-11-10T17:35:41.117000 CVE-2024-58101,0,0,b91b4d5f4a792367085eb8b1aec162d18ff42e88c253e5f5b772996fce9c29c0,2025-05-16T14:43:26.160000 CVE-2024-58102,0,0,4dc860437f0ba427949919cafebfa86609daf7b8bf0e07d0b25300f040f00362,2025-10-10T20:29:09.157000 CVE-2024-58103,0,0,10a7b3d9d518bc786063856000a89f8cacb058ea7d9597066e2f5581bacc0a09,2025-03-16T04:15:12.313000 @@ -280663,7 +280663,7 @@ CVE-2024-5820,0,0,c62ddcc202c66cee4a6e5fc45bdcb53ca360cce60972d67b27c7efb2639157 CVE-2024-5821,0,0,4e4339d91216262757f2e64918f607d304a2840f1a4070d16605ff31aeee96e9,2025-10-15T13:15:47.970000 CVE-2024-5822,0,0,ccc5abd0f861908ac7486568b3dd97f9dd750098c37ef7d437754eb4a43c1606,2025-07-15T15:34:23.277000 CVE-2024-5823,0,0,5123d89c111b48b404a1b53c7b20aef07938a088538cba82da9ac7e629cc09b9,2024-10-31T18:05:00.637000 -CVE-2024-58237,0,1,cf3c925eb12a1832c7d0cf34da344ddcfff0d4a63d6c309471cc449475b92276,2025-11-10T17:35:27.920000 +CVE-2024-58237,0,0,cf3c925eb12a1832c7d0cf34da344ddcfff0d4a63d6c309471cc449475b92276,2025-11-10T17:35:27.920000 CVE-2024-58238,0,0,7e67548b3c788765bf4e603c0191e99296b08f12809269db294325a467194edb,2025-08-11T18:32:48.867000 CVE-2024-58239,0,0,2ec195ee8870020f828159f8af2be78fb67fc373c75b3839886eef97a914a71d,2025-08-22T18:08:51.663000 CVE-2024-5824,0,0,e1bcdf6d43e3da8ae6ba6ab7de5f8d3f3eaee723b9a1ed9af8e8dbb46b2110c6,2024-11-21T09:48:24.360000 @@ -280693,7 +280693,7 @@ CVE-2024-58266,0,0,4f761f2a88fa77c373ceebfdd5314c674a2acbd7b13253200bca69419616a CVE-2024-58267,0,0,11fb5730599d5d307851725ee1026f75a8bb9b288218666e4c902bb58e8a640c,2025-10-02T19:11:46.753000 CVE-2024-58269,0,0,c9acd61b0494274aaf5de585bb4c2f516eae78df0ed23a8db0fb65573a934c69,2025-10-30T15:03:13.440000 CVE-2024-5827,0,0,d83af7fe62780bf2edbbd2aba17ac7e2a79e5ee41ca69db7d52abbfcd5f3d7bd,2025-10-15T13:15:48.180000 -CVE-2024-58272,0,0,d2cd1b861b23096b5babf533134fa03a354e8bc72dccc1cdbdc50b72f8d68218,2025-11-06T16:34:16.403000 +CVE-2024-58272,0,1,ad9e34da4f5ede2f3d57ec11fb19b5e56f2f6086225f8637ef2e063bd8614f85,2025-11-10T19:15:45.723000 CVE-2024-58273,0,0,9ce0fbf1239ef4727b2d7255116d5570a6bb417b4584ae4c57d7f234a6ce1871,2025-11-06T16:34:35.273000 CVE-2024-58274,0,0,8756d3ed1488978bf9f10ba59e528fe68f91d7534fbcc0b5a5a2bd161ed3da4d,2025-10-22T21:12:48.953000 CVE-2024-5828,0,0,73069a2f9dbd005f637a8c432d288f4c861c4d147da919c5c71f3de2432e48cd,2025-01-08T21:25:28.967000 @@ -286986,7 +286986,7 @@ CVE-2025-11680,0,0,b2321c5f6524e9275218cd1a86c19c0061b764a2b5cfd019d226562a457ad CVE-2025-11682,0,0,0e7fb35f6aabdb0ff5ae67f61a8707127178ee52a21670d6bef2406c9f4a9b62,2025-10-27T13:19:49.063000 CVE-2025-11683,0,0,562b6ddecd757d974a3cd06cb4a91e1cbf3407e06c1b215f13523df3f6204a17,2025-10-16T15:28:59.610000 CVE-2025-1169,0,0,ad57e3ebca9d9361258028a4f6880b5b420e9bfeb30e11c1ec67cc7b58af0c9a,2025-03-03T17:16:44.157000 -CVE-2025-11690,0,0,c67ad590a1ee7a05d8c25a287d4d39917f425a82ecc949e37138dcb711e8632a,2025-11-10T13:15:44.427000 +CVE-2025-11690,0,1,0e211a22ea1fa584cba5ffb6b4f683ba121d94b1b0cfb9a6995230da4a24996c,2025-11-10T19:15:55.950000 CVE-2025-11691,0,0,fb3d89b9e088f40d5583a4d7c5821f9bc9c45aa4004b40ac06dde7f840863bfc,2025-10-21T19:31:25.450000 CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1186,2025-10-16T15:28:59.610000 CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000 @@ -287460,8 +287460,27 @@ CVE-2025-12422,0,0,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72 CVE-2025-12423,0,0,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000 CVE-2025-12424,0,0,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000 CVE-2025-12425,0,0,43aaac0b175aaa195986cd5a730bc223ba21fabd755ab85853fa015b598f9b6a,2025-11-07T14:41:22.743000 +CVE-2025-12428,1,1,b69862f7519d05ec2e52da7d43f9427b7abaf38fd9024a4529cdbdeaea312a48,2025-11-10T20:15:35.947000 +CVE-2025-12429,1,1,636fde722f663b486b4c288c9e5a55cafb2c8ea6f8fba0f6a5313d9853a71991,2025-11-10T20:15:36.660000 CVE-2025-1243,0,0,b36908327b1b41fa664c4a39c71934592fd1d75bcc40ba67f7d64ed64955da7e,2025-02-12T01:15:09.073000 +CVE-2025-12430,1,1,ec89d3600319f63cff3dfaa830f08478fbb4cee2a31b1d2e46d295bc8596a2a0,2025-11-10T20:15:37.530000 +CVE-2025-12431,1,1,1c1878997924a2cc8777ea0505916e0429d905a798b2a260eacd8b5873790b24,2025-11-10T20:15:37.647000 +CVE-2025-12432,1,1,2ba902ec1f2d2c2afe8cc81db25a822ce53c33d328d0455c13fba943c964ee21,2025-11-10T20:15:37.750000 +CVE-2025-12433,1,1,e0b85a3185c3da535ebc98d3e87de2849c43958af266b67b419e2f83a9cefe76,2025-11-10T20:15:37.910000 +CVE-2025-12434,1,1,e8cc600689196e8a5eac896879fcd0f57ee4fe011c5fa82f704b8e2ccb453b98,2025-11-10T20:15:38.017000 +CVE-2025-12435,1,1,f95e0cb092ac147cbc1c6f2e693959927b0daf587a7cb1c67325e1267492daf2,2025-11-10T20:15:38.150000 +CVE-2025-12436,1,1,00b62acfb3dd4a6a7edf43286b9b05a085b392ac38f35277aca89b91a05617f0,2025-11-10T20:15:38.260000 +CVE-2025-12437,1,1,fcd402cd9fb4fb5e1b55c9a7efa170ea2da23bf9131c30c2fd4b255cc6a1ebab,2025-11-10T20:15:38.377000 +CVE-2025-12438,1,1,bb4b2b6722c1e642f64436476a261bfeb700b24f21eb4a92f12b80386d7704da,2025-11-10T20:15:38.513000 +CVE-2025-12439,1,1,628d7b21cb87044e5718511d6cca6e64553a00caee5e2c7fefe9980b36d243ab,2025-11-10T20:15:38.647000 CVE-2025-1244,0,0,511fd9716249718f9e2af8c639e9da9d69840e0db63e4ab656a288d391609d08,2025-11-03T21:18:52.620000 +CVE-2025-12440,1,1,1823a52a99c7b465bc934aa824f76400d739e6a53422b4278e7babe874524b42,2025-11-10T20:15:38.757000 +CVE-2025-12441,1,1,9bf97426a177f233c433d7c45218640af6c53410846e447cec8f00403ecbf292,2025-11-10T20:15:38.867000 +CVE-2025-12443,1,1,84ca76f9899c9c60a2596b0d9e342999e6589533ea7f98653d9d9d26e95613dd,2025-11-10T20:15:39 +CVE-2025-12444,1,1,1bbd161d8149f79ac05ac8c58ad39f68a0f0f4affeb6f8fdd65d45c52276f78d,2025-11-10T20:15:39.143000 +CVE-2025-12445,1,1,9f3188cf4aed6798ccf66cf40b24beab63eba685218db715e5764dd504ba0163,2025-11-10T20:15:39.260000 +CVE-2025-12446,1,1,c00fe79489e075f82b54cb8f11271d5cae1bf5c5798fbebed16bf80db1d39bf9,2025-11-10T20:15:39.363000 +CVE-2025-12447,1,1,c200aa754b33a945c46d82c9a1d3644bd12f706a6b6ef9ea1ac7f3cad3db58ef,2025-11-10T20:15:39.473000 CVE-2025-1245,0,0,02f6531ee412acf536871fa74be895340813b85f3805e0a3e6f8a053107da143,2025-05-16T14:42:18.700000 CVE-2025-12450,0,0,894ab03c4320afdedbcada5e6e824017e26940bf12bc6b312fe54343f81abc90,2025-10-30T15:03:13.440000 CVE-2025-12452,0,0,6ea268cff271e13f387b1be76ffd534dfb3563554cec29c13cc965ba6f9f97fb,2025-11-04T15:40:45.533000 @@ -287576,6 +287595,11 @@ CVE-2025-1269,0,0,3d8990f3f321bb84afc5ce31cc37206b4dfeae7b9639d4320eceb6f39d26cf CVE-2025-12695,0,0,6e4e9ad294f548ef2ed154c0d88f2be1a56cf411abe463333277e2dde487c4ba,2025-11-04T15:40:45.533000 CVE-2025-1270,0,0,a0fba4bca59afda304bf8335640266a3acf6a1624640bee675db51d94e9fc436,2025-02-13T13:15:09.273000 CVE-2025-1271,0,0,0359319eae8a142a0720b34e58c3d3808902c47ddd06a524c0e8a18f2f2f366a,2025-02-13T13:15:09.433000 +CVE-2025-12725,1,1,437e97d222f7e48e93685140aaeeef46e39ac72c19377c871195f20f9170fb4c,2025-11-10T20:15:39.577000 +CVE-2025-12726,1,1,058556bc877682d2796d7534cc35149c4edaaea33cb64876ba1b150a98cd8701,2025-11-10T20:15:39.707000 +CVE-2025-12727,1,1,be13c0cf41090d5c6218266b475d7c8ee3f8fbad018f45a4f155b09d9361eaa6,2025-11-10T20:15:39.833000 +CVE-2025-12728,1,1,2ee877d0d5ada4bea408efe0e7ef8f81415795e20094aaf738087cfda59077d5,2025-11-10T20:15:39.967000 +CVE-2025-12729,1,1,ad913f82103905385882b796350dfb945915524f2c5bafdc112973da6a51a28f,2025-11-10T20:15:40.080000 CVE-2025-1273,0,0,a53ca368fd1241998b0718bab24221bda830537b090b6087ccbff111a94c4582,2025-08-19T13:15:38.577000 CVE-2025-12735,0,0,8887e78958415b7bf6c14302f06726575e91114d0daf98d9d9f9ef8ab41ee6a5,2025-11-10T14:15:42.750000 CVE-2025-1274,0,0,5e5cfd476c5408f888f5b2f1a929101dbb2bd5e4199efa0bbbf5f7b5bb7dd7ed,2025-08-19T13:15:39.467000 @@ -287583,7 +287607,7 @@ CVE-2025-12745,0,0,98d6e6a936cfb7cbdefe188b4d47f3ebc52d27fa109ac61e902bd54f45f48 CVE-2025-1275,0,0,37ac9eafc83f367a9b020f98459eacda940bbbebedd7c265613d3a0c3d38bd1c,2025-08-19T13:15:39.617000 CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000 CVE-2025-1277,0,0,57685abd09dc1885cc11ccf07a9b385f71df04f25ba617ba6e9e34c573194718,2025-08-19T13:15:40.063000 -CVE-2025-12779,0,0,d679c19534f4078ee0931f920982f0a21ebc24e8cec4bd1a3b50e0f9cc4354ec,2025-11-06T19:45:09.883000 +CVE-2025-12779,0,1,e58721a4356c4457ba22dcd171af16333addd4d4c04075750244792d79a2dda8,2025-11-10T19:15:56.127000 CVE-2025-1278,0,0,d92b07150326c8969aa5397e1bb50e32afc76c0c2192dd156776f73dc055eb12,2025-08-08T18:32:48.323000 CVE-2025-12789,0,0,c657ab39209f892875643469446090d521427a48631a9b4be35dead962e78e88,2025-11-07T00:15:53.117000 CVE-2025-1279,0,0,81b425d3af391d6b47292396dd129cbf7aa0312666c7090cda5b04e25a332e30,2025-04-29T13:52:28.490000 @@ -287658,7 +287682,7 @@ CVE-2025-12939,0,0,6a51857e1342c9fc25fa26434940a41ae40289a5530d73b51c963f9736e63 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 -CVE-2025-12967,1,1,961baba9ce376e0433f6887f155d5cb39d793de12d074ea662d729045cea9d92,2025-11-10T18:16:06.043000 +CVE-2025-12967,0,1,51e50db834406eb4f5ce83166f8c22b4e96b7948b67a08da630d288b7f734049,2025-11-10T19:15:56.320000 CVE-2025-1297,0,0,78515bdaa2af0e7a9c64065f59df89a4063ec0cd41bf5cb9d6ac47f9b8659894,2025-07-05T23:15:24.687000 CVE-2025-1298,0,0,6d4aedba34a1b42dd7b6cbe281c33d4bfa87f549f0e4974dbe3a1a66067b8d82,2025-09-05T07:15:33.710000 CVE-2025-1299,0,0,05ad5803bebc6b17851a9b0bf8285bd6d3e063e6e9aad7d7dfb7cfe06c333fcf,2025-07-28T13:23:04.953000 @@ -288262,7 +288286,7 @@ CVE-2025-1970,0,0,5215aeca8d50b9181154126aaed6f63c626fe8baa0214f8cb487c473968b32 CVE-2025-1971,0,0,ce2b6cbbf40d84d9e72513174642c4effbf8e8bbe8d1a7a6337843392ee12e7b,2025-07-09T17:50:49.670000 CVE-2025-1972,0,0,2bceac4d3e721f9de4e780d2eea9aaa5c3c0acb3be1195297478126f76278982,2025-07-09T17:46:11.870000 CVE-2025-1973,0,0,30fff315b659b5d6ddf6a37c1af0c564755ca243c89167f25411855e800e7498,2025-07-09T17:43:34.383000 -CVE-2025-1974,0,1,b087988ac68c6d535ad67e68e51b517931d5eb83fdb6c03c34bd0d830d7786ef,2025-11-10T18:16:06.267000 +CVE-2025-1974,0,0,b087988ac68c6d535ad67e68e51b517931d5eb83fdb6c03c34bd0d830d7786ef,2025-11-10T18:16:06.267000 CVE-2025-1975,0,0,7a8d8df62673a7fb2ad103c8dc2f4fd6ac62e491a15e852383973c92df2e6004,2025-06-24T16:40:44.220000 CVE-2025-1976,0,0,e1348ac38be01aee823aa79bfc51da33c8f73ce0be736654080e9ab761914008,2025-10-24T12:56:14.740000 CVE-2025-1979,0,0,5cf047efa61126850f2bff74f6db8ba74d6d633b7373b143cc2f515f22996b33,2025-03-06T16:15:54.187000 @@ -289010,7 +289034,7 @@ CVE-2025-21039,0,0,825c978ac5bfad98598812ed86cb955b3194672567c9b19e4a7b155c65e37 CVE-2025-2104,0,0,a7380b662ef6f9b3cc024de0a2e69f475947f9323e5b71fc953b0a1f9a49f2a9,2025-05-26T02:13:09.153000 CVE-2025-21040,0,0,a90f672c8f95adb36c595680ce576ce3638dd8ad075391167efbc044393db46b,2025-09-05T16:43:58.663000 CVE-2025-21041,0,0,59ad10c3f1f18d7dc2dd235a7358acebba862398fa8e970943f9c335a9cf11f6,2025-09-19T20:13:14.480000 -CVE-2025-21042,0,0,bee8f234ab97386bb08da9a2b0bd14f8212a9d126dae263e80a0db226342b192,2025-09-19T20:12:59.913000 +CVE-2025-21042,0,1,8886c87c417329f2facbfa73785a1cc429d4c8d2f5f0d26b6b8939d6d69deb29,2025-11-10T19:15:56.463000 CVE-2025-21043,0,0,8f9d1e0ebf15e05006b6eb0f4f50ace455eb1620b8812cd95dcb04fac4ce4c6c,2025-10-30T15:36:12.360000 CVE-2025-21044,0,0,037aa7d372ca428d17c4d3cef6c2bd6d2985475fbb8ebe5e1ae18188b906a929,2025-10-23T12:43:38.350000 CVE-2025-21045,0,0,fff159406dd61ffb7069a67787553a0a3b4c4840d25660f79816f7912037704d,2025-10-14T19:37:28.107000 @@ -295093,7 +295117,7 @@ CVE-2025-27912,0,0,12b22661e6d403c9b49dd6cac77505d1ceaab24fecf87c382dbf02a76fb37 CVE-2025-27913,0,0,485fe06bc425120126a2274ee10ae796cc1723ddd3b39b8ce670ae2e45be546c,2025-06-19T00:14:38.870000 CVE-2025-27914,0,0,f279e908e73009eab2977a1f24fd2dfdc09b80866f9164398ffd96fb6fa013f7,2025-04-02T20:38:06.430000 CVE-2025-27915,0,0,3159e9e41fb27225c578acc825f293ddb0c37773757c5d90e4c891d50235440c,2025-11-04T16:45:11.053000 -CVE-2025-27916,0,0,dcba3f40c3779171676c54e79a7179283d51c3f4c1f7115319231122d207a196,2025-11-07T18:07:15.860000 +CVE-2025-27916,0,1,0231d7d81bdb5e4a02351debcc61c11d757145d7461f3c656b1be6125e4bc0ef,2025-11-10T20:15:40.190000 CVE-2025-27917,0,0,2a654aedafa7b0f240612ad21ab746ee097b1f6ddb8efb992afe9d5ed8ee82f8,2025-11-07T18:07:25.993000 CVE-2025-27918,0,0,a1bf732fd920483c97e5c07f9fdaac856f148b0314024af534d8587e6f8d469e,2025-11-07T18:08:34.190000 CVE-2025-27919,0,0,66a72adcd040f2d1d8f81bd0cad5e0127c2608b8eab98b118e75097087110ea7,2025-11-07T18:09:28.823000 @@ -295438,7 +295462,7 @@ CVE-2025-2895,0,0,3c2ce648aa8442ec45cbde153bbb6051bcea399427aef9f333774bbcaa5d5d CVE-2025-28950,0,0,95165f9c1a939415b93ab4b82b6c9d0ac3c413eca61b0efe3dd2ef6e35397ed6,2025-06-06T14:06:58.193000 CVE-2025-28951,0,0,75162b7766e45056e363b46751a222af796c3509972f2b653ef295b9bb8ff637,2025-07-08T16:18:53.607000 CVE-2025-28952,0,0,36a2d7e90e0ea02d7a032d500231cfdd2aabec1fc4b51f58a9dcb0a5dc7dfaf2,2025-06-06T14:06:58.193000 -CVE-2025-28953,0,1,6a1f485686d90fc6fcfff554d97d3421d375c3164c4fcbe57a7fe96d7b964521,2025-11-10T17:15:34.387000 +CVE-2025-28953,0,0,6a1f485686d90fc6fcfff554d97d3421d375c3164c4fcbe57a7fe96d7b964521,2025-11-10T17:15:34.387000 CVE-2025-28954,0,0,5e1648f3e4f3b4c2a3d29f98809dccb3c28ca26ee065ae7467a201e3a5a261fd,2025-06-06T14:06:58.193000 CVE-2025-28955,0,0,4bb0238289349e1eba6b771f42542c08125b429ff6c02b480957884fddce1607,2025-07-16T14:58:59.837000 CVE-2025-28956,0,0,c65daa2f3b934be4b73db85bd78ce38beea4797c7b3913097ef918a694d7e252,2025-06-30T18:38:48.477000 @@ -296965,7 +296989,7 @@ CVE-2025-31025,0,0,053527fbe27001f119a974095c520ba6e0ed6e07579def4bdb1aa3af43612 CVE-2025-31026,0,0,254b219c6491f5a7e38a4af9c5c74d846ca2f862f1957eae5acb00be5bfdce97,2025-04-09T20:02:41.860000 CVE-2025-31027,0,0,f30ea6fb52fa2dda5750b4591b97e847198dcd2345c994fdef1b0b243473e3c3,2025-06-06T22:26:49.867000 CVE-2025-31028,0,0,ebad35846cd78b12d03c51b6b71e44d0624e34aa5a05101e27fce9486d87ebd4,2025-04-11T15:39:52.920000 -CVE-2025-31029,0,0,3d1107bc13319883ae22e44969fa76a5f45b7d5115727eeaebc0a49379297370,2025-11-06T19:45:09.883000 +CVE-2025-31029,0,1,b91ddbf62213f183b72705e25edf6c2971f54c03c5d501ed36cc5c262c79f56e,2025-11-10T20:15:40.613000 CVE-2025-3103,0,0,8ad41fc7f92d09e819a22a1c00386b847f612c955790b39a589fac01d444d3a9,2025-04-21T14:23:45.950000 CVE-2025-31030,0,0,67e0e597fce025a476fc384187950e06000f99caed271d5d9f39f632a8519f5a,2025-04-17T20:21:05.203000 CVE-2025-31031,0,0,151d32b9da3d458fb821a908a76d8bafa5c8bbe7678b62350f41abb290ba4283,2025-03-28T18:11:40.180000 @@ -298048,7 +298072,7 @@ CVE-2025-32219,0,0,5178f7d1f0eec6d329438940fcca9e62e3cbae62e09bfd6e58598ad17b1ab CVE-2025-3222,0,0,08f41de787a1171192196111923ea08a7c8e0ae13339b675fea6a92ffc93d9b9,2025-11-07T17:15:47.500000 CVE-2025-32220,0,0,6a8d953495545d6a3024a980335c9c91078fb8670ddb08d912ce57fb8d6e5730,2025-04-11T13:07:18.387000 CVE-2025-32221,0,0,3480dbea2226a3c5390f9d7933e70062ae4de8472c178284af5d5ea756bd1165,2025-04-11T15:39:52.920000 -CVE-2025-32222,0,0,c067f45807086d29ead2683c7b3b570857f19bd2fa1d846ea344a079a3aafe6a,2025-11-06T19:45:09.883000 +CVE-2025-32222,0,1,7e1332f018fa0dbc690304404a6302e28e66ca7f5fc2687e85d4ea325234acbe,2025-11-10T20:15:40.783000 CVE-2025-32224,0,0,2a22e5a202cb393a4d0a88c4ce7915edac0f86a32523706c76aa16c52c05dd11,2025-04-07T14:18:15.560000 CVE-2025-32225,0,0,e570d346446b004046154e47288bc751a893917eee92c67786b6e64bb03b83f4,2025-04-07T14:18:15.560000 CVE-2025-32226,0,0,fd49be414cd0aeeecaa3b2ea597d82d78d354e36f0d40bc62f460ac8afa0ce63,2025-04-07T14:18:15.560000 @@ -298893,6 +298917,7 @@ CVE-2025-33138,0,0,f3d1012b42eac58fa1f42c87b8a1dc935860a508ecaa92c1dd820b8badddd CVE-2025-3314,0,0,b0e48e6a3f8b9661934730a17a6390ace506ff9a0ff428767c25879bd6d8d360,2025-05-14T21:02:19.217000 CVE-2025-33142,0,0,464849bc5f5ad80f8ebaf3eacd9e7ac74ca41b17967da99ef88e620efef75272,2025-08-18T18:05:01.200000 CVE-2025-3315,0,0,1f847c098518c83189dbeef46d9312e1f2d8310d8f0e759ad841eee668fc10bc,2025-05-14T21:02:31.867000 +CVE-2025-33150,1,1,b3ca126cbc21e45f12ecf04e37dd378c2b71037d5ee6a909ca0991fc9b91dd18,2025-11-10T20:15:40.960000 CVE-2025-3316,0,0,3e88a15102379c98d458fd3db7b2ca0fb380819b90213305e7a63c89acf48439,2025-05-07T16:45:57.510000 CVE-2025-3317,0,0,84bed38c4aad4d99a9bce86e0f0e19796582a61c410c9b717a7aa8eff77aaffd,2025-11-04T18:56:18.017000 CVE-2025-33176,0,0,7842dad454e2280475318a1f7afdf61a9ea2e1d6c16d08f09d80467ccd4b95b0,2025-11-06T19:45:30.990000 @@ -299972,7 +299997,7 @@ CVE-2025-37795,0,0,e66eabc0cb6677335635bd31f48d959a85a65193921f535c9ca278fcada6b CVE-2025-37796,0,0,38c8365f7b77b73336b2a9f8d567134b9e7bef8ce641536ada5633088e2bd6cd,2025-11-03T20:18:35.430000 CVE-2025-37797,0,0,7d9bb3caa37f86999620d873dda037a31b4c5824cdb65e184f569c6478a44696,2025-11-06T20:48:20.637000 CVE-2025-37798,0,0,15dc847380858c61b92457bb6ee1887aa2793d87ad4e74e7a2e410b7c0c339a4,2025-11-06T20:49:48.530000 -CVE-2025-37799,0,1,8112a88cadbaa1165bbf3d930382b63d85de1e2fc7cfc5a3458c5482e8f5d809,2025-11-10T17:36:25.963000 +CVE-2025-37799,0,0,8112a88cadbaa1165bbf3d930382b63d85de1e2fc7cfc5a3458c5482e8f5d809,2025-11-10T17:36:25.963000 CVE-2025-3780,0,0,c4e9597675deaaacf939db19fc92c83e90381150e348a383411f328d9c815f5e,2025-07-17T13:34:21.007000 CVE-2025-37800,0,0,1c62fed04664d2fd62584a116d919da7b92871c162cfe5585c0233f1ae44e9c6,2025-06-05T14:32:50.747000 CVE-2025-37801,0,0,484e625cd2c02dec43e751db03cc3ed9dddb30ff3683c2dd21e1a6bc8ccc215e,2025-11-03T20:18:35.843000 @@ -299980,9 +300005,9 @@ CVE-2025-37802,0,0,fff4a555fc9c3c58b438e5fb3ae932e0cb838e2b7e82ba27163c93c0a0c1b CVE-2025-37803,0,0,d39d5e246fd11c6ba42708c50b33c17aa66315fcc73abd0a9f4831cc05f801c0,2025-11-03T20:18:36.007000 CVE-2025-37804,0,0,25dbae93ac4a7f5a1f6175492ba08239bed2984fc50bafe97d8d03747dd27ecf,2025-05-20T14:15:48.763000 CVE-2025-37805,0,0,e939d16e250add25ae85ee24e581be91a1a32268e513af26470ea68afda145fa,2025-11-03T20:18:36.177000 -CVE-2025-37806,0,1,c834cc46e2e36a7bff45205943754defa38a99cf0a96ffc036630af357622c11,2025-11-10T17:32:50.763000 -CVE-2025-37807,0,1,330a0ce04ce224e1430c0ee7c496d6be3927206c06e0b7c03f45168164814f3e,2025-11-10T17:32:35.180000 -CVE-2025-37808,0,1,940acbfdb1cfb69a376cf90fc8721053b52aadb348a0b3c3391716a754830e30,2025-11-10T17:31:43.270000 +CVE-2025-37806,0,0,c834cc46e2e36a7bff45205943754defa38a99cf0a96ffc036630af357622c11,2025-11-10T17:32:50.763000 +CVE-2025-37807,0,0,330a0ce04ce224e1430c0ee7c496d6be3927206c06e0b7c03f45168164814f3e,2025-11-10T17:32:35.180000 +CVE-2025-37808,0,0,940acbfdb1cfb69a376cf90fc8721053b52aadb348a0b3c3391716a754830e30,2025-11-10T17:31:43.270000 CVE-2025-37809,0,0,7ede16ae0c0288f5f3845e8cf5528680c7f2f3175226876039a8b22bb30a6c2d,2025-05-08T14:39:09.683000 CVE-2025-3781,0,0,cd3a61ed42f73f81f57a9b141ed4bd7e91e50c08d14da89eee2c59a57a6286ef,2025-05-21T20:24:58.133000 CVE-2025-37810,0,0,c2ad75d565e1852b8815644812eb838c884623fbde648b39863f7aef47e6d624,2025-11-03T20:18:36.533000 @@ -300108,15 +300133,15 @@ CVE-2025-3792,0,0,b63fb0df7f8a732a92eefb61e717bd5287b245f6f6fdefecee0b8a1f1aaa85 CVE-2025-37920,0,0,a19f8821aca92b84382f5f4fb63ec9413e20e91027ee4cd1955d1c0190b975e9,2025-05-21T20:25:16.407000 CVE-2025-37921,0,0,6bbd87937cc949b0516558b814845ae55b4b670f4e0cdfe867b829f6ecfe1a8f,2025-11-03T20:18:41.630000 CVE-2025-37922,0,0,fb17d6cf8e006373c474fcbd58ce4b484035afa4114963a8b9328f38a4e170ba,2025-05-21T20:25:16.407000 -CVE-2025-37923,0,0,e1c51da31083eb18cb7ecfa3ed1a78b085d1904b5d07d3de4ac2edac645c7230,2025-11-03T20:18:41.733000 -CVE-2025-37924,0,0,597641aabd51edc34514cea4d8df05bbbff478e967818c031f5c9608fc3f709f,2025-11-03T20:18:41.837000 +CVE-2025-37923,0,1,b9490316abdce7d250e1a85266d63483d8e29daafc6e52860a375d26b1d70b97,2025-11-10T20:58:04.547000 +CVE-2025-37924,0,1,3bc7a2856584eaf02658ab54c9b79596e3e0c015dc6dff0762a2bc32ce35f386,2025-11-10T20:48:10.663000 CVE-2025-37925,0,0,a3b2e653ef24f5019b686bb841e139e1102a89ebb55cb87ceb95f340fad3d3f8,2025-11-03T18:15:55.617000 -CVE-2025-37926,0,0,0db68f314498f5ce3030e6ed36c29158ffd0c1c682538766b07862045049da78,2025-05-21T20:25:16.407000 -CVE-2025-37927,0,0,478f7576d07f9af30451246c589b55f705b8bc0c1bfaa8326bed9b9c31a7df27,2025-11-03T20:18:41.930000 -CVE-2025-37928,0,0,5993ab54d6461a37d102302c5df6d99ccc0f41b5d02cec0258ba747a25e68040,2025-11-03T20:18:42.027000 -CVE-2025-37929,0,0,ab18c1ef9e59c7b81c3221e9e03e6ba4dbef1cf153ebe2e9e6c43910e181b9a5,2025-11-03T20:18:42.123000 +CVE-2025-37926,0,1,9c54d5cc369e812a92c06ef738fa589bbbc4b070566263351b26bba5e3c93dd2,2025-11-10T20:33:25.630000 +CVE-2025-37927,0,1,30a77b26c170a596701cf0e67724e1c6e6ca9629d81e0a2b0e75849b4570046b,2025-11-10T20:33:13.267000 +CVE-2025-37928,0,1,bb9f01d7bb4e66867341a626aae20cdf062159af6546a97ebb9a806eaee710e1,2025-11-10T20:32:41.360000 +CVE-2025-37929,0,1,222194e37a66624fa21d3c5e7bbecf322b3435e7ab7ec4727040d2202705a136,2025-11-10T20:24:46.587000 CVE-2025-3793,0,0,3fbdfdae3ba2312385d1e55e1013c3bba14ef84080933b19af3e5f161d0c534e,2025-04-29T13:52:47.470000 -CVE-2025-37930,0,0,699377b028110ed0cd64e48d276fa087a524198981d149ef92e453fa8fcda8db,2025-11-03T20:18:42.227000 +CVE-2025-37930,0,1,2f3fe0e65f900cd0f6197c33b18b372e4350437d97ba06c4a6801037a16d807e,2025-11-10T20:16:11.453000 CVE-2025-37931,0,0,e5b361a8a776dd4cceba25694dd9c1c7b084c6ef2f8209bd6471e3719d193174,2025-11-03T18:15:56 CVE-2025-37932,0,0,01ef76e1526d1f16c65290d5bd5a57beff080fad20d034d27c3c12c48ff0996d,2025-11-03T20:18:42.323000 CVE-2025-37933,0,0,0037f071010caedc2b8388e04a0e9494442d1c3624edc4d6fa053aebbd14388c,2025-05-21T20:25:16.407000 @@ -301204,12 +301229,12 @@ CVE-2025-3946,0,0,f25888450f97f732cb3ccd050a0b4825a5bdde5d35078aeb557091be14a207 CVE-2025-39460,0,0,daa7eee74b7c44131647afb89bb4a87c32036e4f43153a2a18b1f8adcb8785ef,2025-05-21T20:25:16.407000 CVE-2025-39461,0,0,f635ffdb93b7397c1ad6e4e3202e0bc90a8a3dff74e27b4b58a81c4198b21206,2025-04-17T20:21:05.203000 CVE-2025-39462,0,0,fe257446c6d06c76fba7e96bf7c08f5838631e37383326b4dbb2b21aef6a5308,2025-04-17T20:21:05.203000 -CVE-2025-39463,0,0,54bc0c5d2d8c12ba23ee9c2a42eb11a62c4ea680a0a83d37d0609f90b983e282,2025-11-06T19:45:09.883000 +CVE-2025-39463,0,1,7e3a29f53764761849999cbe6c58a8f41a09d17f6f93a66830c10e5c6135300c,2025-11-10T20:15:41.150000 CVE-2025-39464,0,0,5021866073b4c31242c9a7ae18259b29ce378a9b068ae11c4d8f90f0f33dfcad,2025-04-17T20:21:05.203000 -CVE-2025-39465,0,0,40a4385e03f7152a9343ebcedc5d03a38ad9fe0515f24c3687ba8fee72adf6bd,2025-11-06T19:45:09.883000 -CVE-2025-39466,0,0,618827e3480099ba419fefb1a5d2e5ba1e24451aa06a42b8a62085d2da6fe5d3,2025-11-06T19:45:09.883000 -CVE-2025-39467,0,0,c12f90ae93bec1804abca3a20e1a68ca765a8d3b17bc3e979fd36a047794f01f,2025-11-06T19:45:09.883000 -CVE-2025-39468,0,0,c676704e1f2996613e7b02eb8df85011048d2bf0034b967855ff7cf289cabb59,2025-11-06T19:45:09.883000 +CVE-2025-39465,0,1,4006520207be37c759baf300d521d676685ce413b1ffa2276f4e6426da60f47c,2025-11-10T20:15:41.360000 +CVE-2025-39466,0,1,9c4627a479cb4b273c1792d4086184ef9dfb7317e4b7813998d75a478f5a84de,2025-11-10T20:15:41.530000 +CVE-2025-39467,0,1,db322709d187129f4f44209c0670feb68e91811ea07c53e4fc69d6c6d73d9974,2025-11-10T20:15:41.693000 +CVE-2025-39468,0,1,134c40e8dca591bc29d651934b33289412a986424f7be9308fbc417037361b1d,2025-11-10T20:15:41.860000 CVE-2025-39469,0,0,e18849e95e863d0389b13542e78fc7e5370e06514982d8ca59d2eba138210f3f,2025-04-21T14:23:45.950000 CVE-2025-3947,0,0,d86d3fbacc9e44b1ba561e80077b535bf9a13cce4d3a6a00c418a158f5419c08,2025-07-15T13:14:49.980000 CVE-2025-39470,0,0,e010fc0801cd6bb4936cb1b65898bdce69bac41af3bf33793e9451cff50a9a80,2025-04-21T14:23:45.950000 @@ -302725,7 +302750,7 @@ CVE-2025-4304,0,0,6f1b91465a276129a41d4871b4c0d6efc81ef52ea3bf5203539481683a02fc CVE-2025-4305,0,0,b58ac1af9a831c4de839666746ce16b1183ed9c0a0c34755aad0f80402b5eab4,2025-05-07T14:13:35.980000 CVE-2025-4306,0,0,47922af8efefcd58c9179aa2cf214e6d147a6315a6a644b76d8c7b05770f6f85,2025-05-13T19:21:25.277000 CVE-2025-4307,0,0,968e09c51eefce90b73255eef2ef9cf3254087c66b3b8e32ef5d5e2a02eea504,2025-05-13T19:21:10.793000 -CVE-2025-43079,1,1,0edef4d3c84ff02bf376b4e1b459f197ccbece7b00b14c7c484241645baf0a48,2025-11-10T18:16:06.420000 +CVE-2025-43079,0,0,0edef4d3c84ff02bf376b4e1b459f197ccbece7b00b14c7c484241645baf0a48,2025-11-10T18:16:06.420000 CVE-2025-4308,0,0,64773d5df5c47df8e574ab96bce10ce5262699f6cf6654bab1833a7a94d6b810,2025-05-13T19:20:51.480000 CVE-2025-4309,0,0,c529fb402aad41bda7512ef22da31e7ef2a24da2d6fcd8aca0ab1ae416949061,2025-05-09T13:37:21.743000 CVE-2025-4310,0,0,a8d911a03bf6b626b015394a304b3822e0dc653949f6cbaa3ff0211b84db0d22,2025-05-13T20:21:51.787000 @@ -303125,6 +303150,7 @@ CVE-2025-43718,0,0,ac01e4a018feec31919cd9db89fac4223708be2fc99bd6186a4b4a49191ad CVE-2025-4372,0,0,b8ec8f55704f5a97bc8b4802f0ca1d30b86b81d661e4e9e6ccf4b9c1a8e6e6c4,2025-05-28T20:00:04.843000 CVE-2025-43720,0,0,8dd09db2614df9d778bb3cc5579e629c5daf282527286448b09bc37deafda296,2025-08-07T18:16:03.187000 CVE-2025-43722,0,0,14e08009e1241ec4af6afc9c0b6151f23630ef0041be58992da32d75244320bb,2025-10-09T18:29:23.237000 +CVE-2025-43723,1,1,f266141798ad5575c3e456a85bd991902ca9ed9503add0942ece9b6a4ba19eed,2025-11-10T19:15:56.880000 CVE-2025-43724,0,0,9afc57c220c4303a72bc75d79c139b57bb846778e5f2ba9217f3d01dc39ae3e3,2025-10-31T14:13:39.693000 CVE-2025-43725,0,0,71701507ab33a6cfc75f87c66ca90201c2e279f342d9a54ddb997709c60a8ec1,2025-11-04T15:26:42.623000 CVE-2025-43726,0,0,d017770f1dc0cf0cc67985aaf000ec399f0ff0ed6738301983cea60832297640,2025-11-04T15:37:09.027000 @@ -303439,7 +303465,7 @@ CVE-2025-44141,0,0,1b640fec5b67675dd6c48e39ace9ed93416eeec7d96ebdef4175bdaef84aa CVE-2025-44148,0,0,440749a71814d76edeed70dd30fc58f3e0b75eaee931968ee8c88b7d1e24e11d,2025-06-09T18:04:33.580000 CVE-2025-4415,0,0,ad03eddf6945a3abd185a8d960097016d4b62ffbf34756b693345e56021597e6,2025-06-25T15:23:59.237000 CVE-2025-4416,0,0,77b944c5bde5d5a629537074a2e3b19545d7385595eb25f86194c533d8abd6d3,2025-06-25T14:35:56.230000 -CVE-2025-44163,0,0,a03d83ace9fb14a16f43fc925fa69b5c5f7229691a55d37a024907d5655cc2ce,2025-06-30T18:38:48.477000 +CVE-2025-44163,0,1,d516b839bac50462ff0096f5f509c98b942c08faff20f67b83a62f3a7b69e53d,2025-11-10T20:38:28.663000 CVE-2025-4417,0,0,bc62e46078e8192920dbaf1b9b76f02565222568b177611f95eaef56f98ccc29,2025-06-16T12:32:18.840000 CVE-2025-44172,0,0,c78f9d9932a5093f6fd2dd92edb0ece1c73f28734d84b3772f8246b249ade2e9,2025-06-03T15:55:33.757000 CVE-2025-44175,0,0,5b6789f40968dc5ea2171c87d80e31a88f2e561b1b44c9c7141157b74ccbf57c,2025-06-13T13:39:01.420000 @@ -304864,6 +304890,7 @@ CVE-2025-47282,0,0,24f9d049533e8042e2e3afad5d987705c25738e1fc0afb5740ae55f69b013 CVE-2025-47283,0,0,af85e98483f5f1c8302a5e01b2f703378d71f37e5e705536a079adb6c4ce9c30,2025-09-04T18:37:55.813000 CVE-2025-47284,0,0,81e88263d11e786f740b0b45c6ade444dd13cb9112a266a36633f8310241bb8c,2025-09-04T18:38:28.530000 CVE-2025-47285,0,0,a4b322cfa16ac0198aad5626c2233334a81e0c8124806adefa631e6ad6b3d8e6,2025-05-16T14:43:26.160000 +CVE-2025-47286,1,1,aaf55b82ba0f05b3eadb27765b6ee22401d9ac831d5ea19aae1dec878bc3c8c5,2025-11-10T19:15:57.043000 CVE-2025-47287,0,0,4a03b7a85e9f4f1ae469c2f4edaad7e40d35a7308b2c4cacf7afd6a1813a45c3,2025-05-29T06:15:23.090000 CVE-2025-47288,0,0,6240d445f51e80c803629b9dc8b3ffd9c4606efb6ef121520c5379fe5f8a49d8,2025-05-30T16:31:03.107000 CVE-2025-47289,0,0,21262127c679cd8748d54b62f2e53659b097cc1c7c81693ae8e24c5b40a305e5,2025-07-08T17:09:14.273000 @@ -305097,7 +305124,7 @@ CVE-2025-47584,0,0,489ae1510d87f586956cebc3bf291dfa93a8716f80b6857fbb8edd79cbd23 CVE-2025-47585,0,0,470423a4100954df6f7551bcae69cda4785956e4c4ab28eb9b63a1e872aebd11,2025-06-04T14:54:33.783000 CVE-2025-47586,0,0,34a027a7c7247248d89f1a878e3c24a97cb83762b56c55719898b2574fbd669a,2025-06-06T14:06:58.193000 CVE-2025-47587,0,0,c69129af37bc8e41d28b40b1a600e9f976cf3e139ddd0ff0333903f8e74cc56f,2025-05-08T14:39:09.683000 -CVE-2025-47588,0,0,9359ebd7f38b8ef6353d92f96e3f792ac6f3f54971dba9c9db3357c377026f3e,2025-11-06T19:45:09.883000 +CVE-2025-47588,0,1,862f85cffa02de9534345f3aa78de89777d5dfa798553cf9bb4ed6b4340a0089,2025-11-10T20:15:42.140000 CVE-2025-47589,0,0,d77c0dcf400db13a9ebaf0299e125dc013f6c4414d58c98a50eaa87722aba073,2025-05-08T14:39:09.683000 CVE-2025-4759,0,0,692e47a0363707f39adcc4448402c52b3a812a567b6a3e05960dde7e6e1d11d0,2025-06-03T15:57:29.763000 CVE-2025-47590,0,0,9243ec7a75311c877a33618cc4768d246e40102b3880a9643865812318c9e620,2025-05-08T14:39:09.683000 @@ -305272,9 +305299,10 @@ CVE-2025-47769,0,0,191a2625db99bf988b4216f9a0393389195e7a62dd877407382043a09941c CVE-2025-4777,0,0,c0dc4eae42d0a5bf818cb2ada8342af24186ecc6019dc19abb8a3d472e9b301f,2025-05-21T14:31:24.410000 CVE-2025-47770,0,0,2c7f1062a80967c1f6432862f70e4d464db4eee082af6f48036a63ff6fe40b3c,2025-05-10T03:15:24.870000 CVE-2025-47771,0,0,23c2983f3220646fa4d3f6588f6e42b0a9a0fca4d3a793e13cf1ed60386d63b6,2025-06-23T20:16:40.143000 +CVE-2025-47773,1,1,861c369e9df294157c26012cf3f684c601b53fd4d4962ee47eba7d40517f8440,2025-11-10T19:15:57.207000 CVE-2025-47774,0,0,6b1fb7f6eb1a6e80bb22b1fbffd29dcff8043e23a498d4697f7ac9cb0d4a0014,2025-05-16T14:43:26.160000 CVE-2025-47775,0,0,98b178624c536547b3f6ef7efecd7b28808749004fdcd81bf5bb6967732074e6,2025-07-11T16:15:04.160000 -CVE-2025-47776,0,1,97332d4a77a7ca733821292aadb916b7d2c69ef74662a331b8d1020b74efaa39,2025-11-10T17:59:50.593000 +CVE-2025-47776,0,0,97332d4a77a7ca733821292aadb916b7d2c69ef74662a331b8d1020b74efaa39,2025-11-10T17:59:50.593000 CVE-2025-47777,0,0,9ff1655deeebf2b615e0e5960934ad4c8798e199d8ec79b0ea12430c9637b747,2025-05-16T14:43:56.797000 CVE-2025-47778,0,0,61c671eacca94293ca2114ba12192eaf080197dfb902333af98cc474e503ef28,2025-05-16T14:43:56.797000 CVE-2025-47779,0,0,e97afd4d2df5461ffa1a1c2caaf1b5d0a6c0598e8da7180920182298df1150a2,2025-11-03T20:19:05.613000 @@ -305384,6 +305412,7 @@ CVE-2025-47929,0,0,7fc15c7af26adf36cdf89018fb748ea0cea6a0ed56d6cabffa736dce44604 CVE-2025-4793,0,0,ec69064861ba117d418880947f64b864bae8e19e90fef5ea47c2be77c9ecb787,2025-05-21T21:00:12.357000 CVE-2025-47930,0,0,c00cedf459d0dda6f37b4d034ba79072c81b9f8b000bdcf6a07eee3c23d88c58,2025-08-27T02:26:59.770000 CVE-2025-47931,0,0,2ba961b15398b05238bce593e14441b257d624d47fec2eb2b7b4debf34411048,2025-05-28T13:19:14.460000 +CVE-2025-47932,1,1,d3eaf06cc0fec2f570546528c566b1b3f0977a01049aab44fd26d89c2b51ce04,2025-11-10T20:15:42.363000 CVE-2025-47933,0,0,ed29c17573d4cf044fe69ff430bceed1847a54230672f08ab114e75ff4b5bb99,2025-08-27T02:28:01.647000 CVE-2025-47934,0,0,8438c1a5883ecd980df510f4404f64469627266e683abcc00b1872291e43b364,2025-05-21T20:25:16.407000 CVE-2025-47935,0,0,406b48db633b3cd8d2acd0e043f41be378de6269ff41278863cebb17c9ea9998,2025-05-21T20:25:16.407000 @@ -305512,20 +305541,20 @@ CVE-2025-48072,0,0,4c0f1ee2a910172a5ad9b7274b445c1957ba1400ae77a7d0b71d18448491c CVE-2025-48073,0,0,0be6249cab38be3aa07bbf33bc8fff2eaf114884a9c1884c6593dc5463853863,2025-08-13T19:06:51.723000 CVE-2025-48074,0,0,cb44dc896fb72cb43d0d40952c0ee554b0121df7578027673cf1ce0d8f49b6b3,2025-08-13T19:18:13.987000 CVE-2025-48075,0,0,ceded26a477da7bdd3b4705aea0a4689aac5d500ae2c2acb800b2c72db0780d6,2025-05-30T01:18:13.397000 -CVE-2025-48076,0,1,77e30a4e9d5165f7df3a9f4830d293b1f9fb918a983df9142ff9d90161417784,2025-11-10T18:14:15.173000 -CVE-2025-48077,0,0,075f336c13268fc2ab0e07e7b1d5cae743401ae7472684cee9781c276995a3d7,2025-11-06T19:45:09.883000 -CVE-2025-48078,0,0,b40bf11214bf732286bd1d35e883a3c000f617830a55d8bd211bf480a523c27b,2025-11-06T19:45:09.883000 +CVE-2025-48076,0,0,77e30a4e9d5165f7df3a9f4830d293b1f9fb918a983df9142ff9d90161417784,2025-11-10T18:14:15.173000 +CVE-2025-48077,0,1,036c0352a101f2de992a6d84e652c0def9d7d38dcdc41e235074446bcb5d6e64,2025-11-10T20:15:42.543000 +CVE-2025-48078,0,1,72bb00837edb58bfbb9aa93bdafe5388eabaa17bb34112abce9583a6df13ac73,2025-11-10T20:15:42.707000 CVE-2025-48079,0,0,6a9c124abc87a320bc8b30f57c16bd051b25830658cd2d770da8f936d77bfc2d,2025-05-19T13:35:50.497000 CVE-2025-4808,0,0,754834e2a19df62069bc2414c3d233aae38d368529ec96cc4bed4babf3116dd2,2025-05-21T20:59:50.423000 CVE-2025-48080,0,0,3ac40a2ee2ffbe53ef86e322d55a6c979dec23087ec5d5ea5075b108588d8314,2025-05-19T13:35:50.497000 CVE-2025-48081,0,0,d598843cce99fb3ba59feef62b8c03461488076cb1fe3ce111b0e97d03039932,2025-08-29T16:24:09.860000 CVE-2025-48082,0,0,7f97480df82979930d00b48a4244ebf3dd09184a722162a5464bb5f7ad82ed80,2025-10-23T16:15:38.237000 -CVE-2025-48083,0,0,21234377257909af80ac480b0c79ed369027229dd6a21952e8fcbc14c5bb51b3,2025-11-06T19:45:09.883000 -CVE-2025-48085,0,0,efdec5c6c5b695fcdea23733322fde7fad34e6c530342a79334bd20db051ef7d,2025-11-06T19:45:09.883000 -CVE-2025-48086,0,0,3bacccffff38973d0ff27760d811c531fe448d79ca7ad6b2f6fbdd642ea47c05,2025-11-06T19:45:09.883000 +CVE-2025-48083,0,1,d6b5c98ae6e11ad42cba8d951acc8a8151648a09e4d44ff17b01b42dc41ef0a9,2025-11-10T20:15:42.873000 +CVE-2025-48085,0,1,bde9b9bf6975b33ab23828b2ea8d0e2dc7bfd6e96138d5931e375445f352468f,2025-11-10T20:15:43.040000 +CVE-2025-48086,0,1,9ad1f805533488e0d38ee10f98223e2ff05a93b18e9401ee8cc4875bfec48215,2025-11-10T20:15:43.203000 CVE-2025-48087,0,0,5e76862a7a8913d6d5622a0610ff7a597d6bb8c548e9d4fd3fb582a97db2ce17,2025-10-21T19:31:50.020000 CVE-2025-48088,0,0,57217f01ba9161445c29d4b99dba8b588a2190f5a7eb3fd80709219cc4596b3a,2025-10-27T13:19:49.063000 -CVE-2025-48089,0,0,85f09a6c7dce5716570df7721f1dde7fae11066af4ea87aacf6d28b774665c12,2025-11-06T19:45:09.883000 +CVE-2025-48089,0,1,4a0f5f6cf548e442dd4450a29996c75f9a29ab23701a5acbf026c9a4062363ef,2025-11-10T20:15:43.440000 CVE-2025-4809,0,0,e3f6cc20f5a1533fd1b852392735aed9d9901924729604ad889c6054553c7632,2025-05-24T01:11:08.893000 CVE-2025-48090,0,0,e013e95651285df2635a4b3532549458089b0ac3fda46e3f6b6ca6236028106b,2025-11-06T19:45:09.883000 CVE-2025-48091,0,0,b25a8ad0324224ad90cddccfd47514b37d4dc8c9ad47b3177a93a69a4366c99e,2025-10-23T16:15:40.763000 @@ -305702,7 +305731,7 @@ CVE-2025-48287,0,0,457e03c5ca5cd01ca6195830150b857435cd04a977813a943ae502727478c CVE-2025-48288,0,0,93f3c65d308bcc630b2ef72da05f626c3e49fdc0d230bb58746b42609b0eff66,2025-05-21T20:25:33.823000 CVE-2025-48289,0,0,16bcdb7b42c03600264ef06d9bd128539d92ebd7f3bff05c52ffead302903d4c,2025-05-23T15:54:42.643000 CVE-2025-4829,0,0,cd49ff83fc9a4be47cf39c809b43ca057e0aefb2515505ab28678e1be115c4d1,2025-05-23T15:51:37.080000 -CVE-2025-48290,0,0,772f1e910bdbe6914fbeedbd43a843334f1efc7adbdec431634b96230dac0204,2025-11-06T19:45:09.883000 +CVE-2025-48290,0,1,4f80bf93e198d6b95b15213b843beea287ccce521d79dacdd3c7f59f450624f8,2025-11-10T20:15:43.620000 CVE-2025-48291,0,0,8440d18d3433f45c0ed2b89d24649c4f7ab43bf66a4e605911308fb93020830c,2025-07-16T14:58:59.837000 CVE-2025-48292,0,0,9c085b4750f647db01b66be8d03639a5aa6a0c1f2f3e142a149c80f277fcbb7b,2025-05-23T15:54:42.643000 CVE-2025-48293,0,0,2302f757195d0b4af66394052a6be102a72485573acdf27fc9d64fb7421c2f5f,2025-08-14T13:11:53.633000 @@ -305746,7 +305775,7 @@ CVE-2025-48327,0,0,0425e50de8c888b7b425de69e35f9ef9c7e5e2962c6c0af084c10dc710997 CVE-2025-48328,0,0,17048bb7a62026f8a508465a37dd897b445dbfd7430f4937f92fd8ab7c1e379a,2025-06-06T14:06:58.193000 CVE-2025-48329,0,0,0cc07453c466449db0eb2f0279eb9cf0939be49d6e9012c00dd75c095e62d25f,2025-06-06T14:06:58.193000 CVE-2025-4833,0,0,524b74208b998ac185cb2f32a80e77b8ca0d39465baae0b1b3d7710a8e9aad50,2025-05-23T15:50:46.407000 -CVE-2025-48330,0,0,958e41296a76b0c3f9a1a5dfc2abd6019a5c87c9e709121cd6509bafc7bd6f3d,2025-11-06T19:45:09.883000 +CVE-2025-48330,0,1,971180226f8b329577e30540fc8e5e46817d22bc66a0d0e6eedb13088b674d32,2025-11-10T20:15:43.790000 CVE-2025-48331,0,0,2e293173c8bdd95f274569d90c4fc672d4dd2c84b398ba10c7c764970ea66904,2025-05-30T16:31:03.107000 CVE-2025-48332,0,0,c0e692941cb37d3cafec299169b22ad7674b53cd04a7ab9e6a67b63f2c425a6b,2025-08-14T13:11:53.633000 CVE-2025-48333,0,0,14afbc2fd3d43d5bfcfb29845b81499619ff07de315506d457b3d59f56b1ce41,2025-06-17T20:50:23.507000 @@ -306084,7 +306113,7 @@ CVE-2025-48880,0,0,e3f8b2cdd2d7e01ae05621a292349f1663c3a39c76f38840987aaac340e55 CVE-2025-48881,0,0,478c71cbb268c7668af9adbe8d9db873a15a6f0100cbc1765ad6b2fc8ccbe5e0,2025-06-04T21:15:40.263000 CVE-2025-48882,0,0,0675a44f5475635d3b90df25f21b843f71a594f25b60ebf1257710a520ba2459,2025-06-02T17:32:17.397000 CVE-2025-48883,0,0,14507842d3e0b613f4c9b8d62ad8df05d93e1c97510cf43e163a8411a419850f,2025-06-02T17:32:17.397000 -CVE-2025-48884,0,1,1c20e99131c572de80dcfc92e18281b29e9ceda7a132095874e613d4865b4f0c,2025-11-10T18:13:05.253000 +CVE-2025-48884,0,0,1c20e99131c572de80dcfc92e18281b29e9ceda7a132095874e613d4865b4f0c,2025-11-10T18:13:05.253000 CVE-2025-48885,0,0,a22cad12e847f8e3d6cac2d0c207ccbc3235380976544a38095804a3e40d9d2f,2025-06-02T17:32:17.397000 CVE-2025-48886,0,0,7eb2b460cdd5481621792992546fc8ca1333a9d23b34ee10b9d9763b53690ee9,2025-06-23T20:16:59.783000 CVE-2025-48887,0,0,d715c137954000dfa4d0fdb3ecdb8e16b928f4dac02dc271a6a5d4052e6a12f9,2025-06-19T00:55:27.710000 @@ -306486,20 +306515,20 @@ CVE-2025-49382,0,0,ba711fba3cf03833b256388968f1cd2292d8fb714919845dc6365d3d48388 CVE-2025-49383,0,0,f026006408fc938ce1d39c10dbd609a5257db677d62635bf813b3e04c3ca55d4,2025-08-29T16:24:29.730000 CVE-2025-49384,0,0,d1df0d0e2d35eeedd3bba8a918c9da1b9aae1c28af38e48d390d1463711d28c8,2025-08-26T19:39:32.237000 CVE-2025-49385,0,0,f6d6ddb7091a891fc9ff4eee7659b0bf68f30a0869302b80d07aeb0c7f62867c,2025-08-26T19:39:54.587000 -CVE-2025-49386,0,0,4904168d5e931689c339e9b9d591489ae60fbe2d089224dcfe4157166eea466a,2025-11-06T19:45:09.883000 +CVE-2025-49386,0,1,1fd898551645b1427ccff85f7fea623600324097bdcdceb0a8c071ccd0e66c33,2025-11-10T20:15:43.950000 CVE-2025-49387,0,0,e7862cd61f85e68983c9d1b8dde5d8b09a5214686273b8682f0057a575c2c4aa,2025-08-29T16:24:29.730000 CVE-2025-49388,0,0,f483abddeefaa873c5238b608de512de386fb6e978ad1dbfb910de783a1388cc,2025-08-29T16:24:29.730000 CVE-2025-49389,0,0,9f710b5677a0ae67a499ee3b0106e4a61ce5acf494ff8e062647615579208c30,2025-08-20T14:39:07.860000 CVE-2025-4939,0,0,5ec31620a920403386badd8ed8c9ad70156a6e4853cf1462dcd01754dc60b7d3,2025-05-28T01:32:20.263000 -CVE-2025-49390,0,0,80fb46f478d67a574ddaea972d3ad2fd16df1ea782ad09835e53df4197626fa2,2025-11-06T19:45:09.883000 +CVE-2025-49390,0,1,765859a753226abd129d1d832465025bec2682f8eddcf5bae45187f31e387bc5,2025-11-10T20:15:44.123000 CVE-2025-49391,0,0,dcc791dc8d47c9d5cc953698cb098dbcc5aa7c999e6d142461e80fc137575a09,2025-08-20T14:39:07.860000 CVE-2025-49392,0,0,d2b77780c967ed876f47d9cea71ad52054dec973099347875aec89eeb0295c5d,2025-08-20T14:39:07.860000 -CVE-2025-49393,0,0,46e9bd3559b28d181272c451e6efa94b640ac0ccf690317391249c3ca0d187c0,2025-11-06T19:45:09.883000 -CVE-2025-49394,0,0,26082dd57f99af9b458e44af131544faa87b83720cb85f9eac270c0725cf7c25,2025-11-06T19:45:09.883000 +CVE-2025-49393,0,1,921bb012bc12e05333c379bf0d4dc0740b87e82c1880a05a0a40c1ec7d1f63af,2025-11-10T20:15:44.320000 +CVE-2025-49394,0,1,620edae8e9334941d009082a6cf22173e47a25e103f0e91d6f375b7ec85379a0,2025-11-10T20:15:44.487000 CVE-2025-49395,0,0,9a8fdd4f04b83e60834ec8b57eede9d1cea7c91e6ef0e5a13d7258aae54631ad,2025-08-20T14:39:07.860000 CVE-2025-49396,0,0,851c69125dec076c6f28d8ff3a6b228e0bea828de4a2528df3830655a04398c0,2025-08-20T14:39:07.860000 CVE-2025-49397,0,0,dc1b16288c08a5f0a25b313517a6772a5dc2075549a7acc8273d400d0484096e,2025-08-20T14:39:07.860000 -CVE-2025-49398,0,0,f5535f31a3b43c2b810f5e915e7556e1329a3a2b4da77073b8fe925807625a0b,2025-11-06T19:45:09.883000 +CVE-2025-49398,0,1,f15469950f41386e20f713240c1f032e40e5395a9a50a60d326f9fe23a913cc0,2025-11-10T20:15:44.657000 CVE-2025-49399,0,0,d6ae942c6bdda9eccf8b15e7cc4b142ec2a4b6d12f9ab880f0f085a8b6ca804a,2025-08-20T14:39:07.860000 CVE-2025-4940,0,0,260d8b62a32cfda7d1f9cdbe4bba3d30912c7644fed6c87e919fb1700ed93983,2025-06-12T16:24:13.067000 CVE-2025-49400,0,0,9503e1efe649a2e56eea8d37f20ddeb92238af689fb4c30f67553afccf154423,2025-08-20T14:39:07.860000 @@ -306923,15 +306952,15 @@ CVE-2025-49897,0,0,06013f0afb38d7d869641b4019efaa098a3b290ebb5afe81fd5b1b0d51c4a CVE-2025-49898,0,0,0d59e72852f7060dc53c1f10bed2707a81314e0790eaafcc6c875011dc356269,2025-08-18T20:16:28.750000 CVE-2025-49899,0,0,1bc30ac553bd73da4ed915e0c943dbfc8f39152a45f7e47857675843a78e2c72,2025-10-22T21:15:39.010000 CVE-2025-4990,0,0,11128ad236ff0bbb6407ba12ca704aae39e79d15ca91d8e93c05e36bda39beb6,2025-05-30T16:31:03.107000 -CVE-2025-49900,0,0,a3c5612cecee7fa81ec1669f51f9658d5442276892017073e358f0b159afea06,2025-11-06T19:45:09.883000 +CVE-2025-49900,0,1,f203ad57c634597aa4ef94311c692c46777a9cb32c034fef7d953869cd3c9d8c,2025-11-10T20:15:44.827000 CVE-2025-49901,0,0,b30a53fc79083c6a1e251ba8d3717df54605098b2224a3ad4b71a7179b7227d3,2025-10-23T16:15:44.680000 CVE-2025-49903,0,0,de222dee6b8d9b1d4b44b8358b36438ebf73f384e679764db53d48e9b45d69cd,2025-10-22T21:15:39.330000 -CVE-2025-49904,0,0,dd5e850199325e0882906a06fcbcbe364f1e14d8eb6c6cf596d4d00b71704329,2025-11-06T19:45:09.883000 -CVE-2025-49905,0,0,002cefcabdb41887f7af23894a43356a4e6bcd69660391e6ff4e2020904fd59b,2025-11-06T19:45:09.883000 +CVE-2025-49904,0,1,5a92bbe814c08fd8a5a8f824f39dc5b060917afdbd2089af055f691870361eca,2025-11-10T20:15:44.993000 +CVE-2025-49905,0,1,bbc700ca40a9b3e245094866748aa295d57d84d9559b94c87ffbc68ce9665cd2,2025-11-10T20:15:45.157000 CVE-2025-49906,0,0,3b1d0fd57a22ef0b6d519435a9b586379149296ad6a9b124b5c5088aee18020e,2025-10-22T21:15:39.487000 CVE-2025-49907,0,0,a4c51adba33a29aab566fc005a207f5fa10cf1ed13d8d2622318a5357f45bc50,2025-10-23T16:15:45.083000 CVE-2025-49908,0,0,38dfbf5d7f3fbe1df714db8b6ba91dec63dbd6f76860213f2ec50fe234058468,2025-10-23T16:15:45.323000 -CVE-2025-49909,0,0,05d61b38ee70241259357beb9330c13b07c13080d171f542b03ba89bc12a3db0,2025-11-06T19:45:09.883000 +CVE-2025-49909,0,1,99019c5244600fc410238ed4781ab1f07399d4d6632cac824d5415802dde08a8,2025-11-10T20:15:45.323000 CVE-2025-4991,0,0,67056c54ed0af796c00b82147df15690931ae5839b2ce0ae3dfbe8c6af0dc82c,2025-05-30T16:31:03.107000 CVE-2025-49910,0,0,eec4c94b7520cb174db98bbd04f1082a104bcadfbbbf41cfbc1fee3f4285d668,2025-10-23T14:15:36.243000 CVE-2025-49911,0,0,31e1c429bcf3584ca542fcb128623f635bb98dbd53690e01f69cd7a56f3a95d7,2025-10-23T14:15:36.420000 @@ -307993,7 +308022,7 @@ CVE-2025-5276,0,0,39d67915dab7ad2300f3ccd3a288fcee1075e32b914c45ad140eb6b7725be5 CVE-2025-52760,0,0,ec711af0ebf1e2a864b21cb44a213ddbdb63f5f9357d11a42dcbe6dcb3db7c92,2025-10-23T14:15:37.390000 CVE-2025-52761,0,0,4b0a010e44a268a67fed78436c091ab5d2c24e5f0be8ffacabb261aa03f78839,2025-08-29T16:24:29.730000 CVE-2025-52763,0,0,27c203cc82adff8bd6936b622eaa5ede9b5d0f9a14caf410343939e170996f62,2025-10-23T16:16:39.837000 -CVE-2025-52764,0,0,1e285666b1993c159f90b90afc144bade9b72232883292e9f012b5f53e0da946,2025-11-06T19:45:09.883000 +CVE-2025-52764,0,1,6af889bcde75420532f5a09c83c367b4563596952b1aa85f1846924709aa20fc,2025-11-10T20:15:45.493000 CVE-2025-52765,0,0,70d426fd8a0770d7edb0f36d6962cb3a0db49a22685dee04566831b5637ef197,2025-08-15T13:12:51.217000 CVE-2025-52767,0,0,7eb6861faa67269905b177c4251c7bec3bae86933db08db9dded5b81764a7864,2025-08-15T13:12:51.217000 CVE-2025-52769,0,0,987df366583b2d3ab228f163cfaee1dc68272ea315388e0a114d0b03b739f615,2025-08-15T13:12:51.217000 @@ -308001,7 +308030,7 @@ CVE-2025-5277,0,0,ba5aa3a145e9e2e34ac18c63e7fe60e94ac49ba4d7121cc0bc36eebe3309ab CVE-2025-52770,0,0,27685bb004e951b0be1141b4b725bccba39b622acc00df1c00cdaf26830db3d8,2025-10-23T17:15:37.233000 CVE-2025-52771,0,0,56676278d220a8e272a8745c0ff32550768a705a5cf5a11c7530acf34bc0ba22,2025-08-15T13:12:51.217000 CVE-2025-52772,0,0,deb02b2d983c296f8b89a2559d4d4f189f1c6c676131c9feadcc246a08a5cc14,2025-06-23T20:16:40.143000 -CVE-2025-52773,0,0,15245a144f5a30739ab8cf922df60478fe9f434e9afff9fcc5b84e4912d744ba,2025-11-06T19:45:09.883000 +CVE-2025-52773,0,1,2efa303f097a154d837e681b740900892988a15740015b46dfe49c0a1b280eba,2025-11-10T20:15:45.667000 CVE-2025-52774,0,0,de771a5b10a99171a6970cc2eda061e856ddfde2b5144a0771c7c0ff4baad63d,2025-06-30T18:38:48.477000 CVE-2025-52775,0,0,103773d6395ae4ff9706d98a362a5f3193a12350cf62784cb61fa1ab9d96c820,2025-08-14T13:11:53.633000 CVE-2025-52776,0,0,ad7e38af0b950ab5836b78d30e80fdbef510447bf84a91f6a5a8d7084a2dd2d9,2025-07-08T16:18:53.607000 @@ -308407,7 +308436,7 @@ CVE-2025-53210,0,0,105ec1f588b31259e5af6ebf5e4879607e5a7e18b0772bd4fbebfdd08b2ef CVE-2025-53211,0,0,2abef6a3dfa316373b80998aadb9b980ebc2dc6ea27961810065342330691763,2025-06-30T18:38:48.477000 CVE-2025-53212,0,0,7d630b0913e6d5e598428f6335e6a271dd777eee1bbb325dc70c4841a3ba0a8c,2025-08-20T14:39:07.860000 CVE-2025-53213,0,0,07d1848f7042801f840a452e4e14d70c274be5c9e80192aa1a7bcd67cf26874b,2025-08-20T14:39:07.860000 -CVE-2025-53214,0,0,dc9eddbd202c0ca4d3ce6201866e48603ba387b2e82e1e38ef8fc80a294f46e0,2025-11-06T19:45:09.883000 +CVE-2025-53214,0,1,681671e35f0c448204c06193ac2e0a7f90b36cc1e9d62b4bd39e3dc60bbb38cb,2025-11-10T20:15:45.830000 CVE-2025-53215,0,0,6a37bb82a9adebc0875cf7808733b6eb557f5126a4c5ed35622e223b26a4f909,2025-08-29T16:24:29.730000 CVE-2025-53216,0,0,48e44f06601beb44b64990f3ae0afc04c1b07d8134f6813479fe5e15a2c85bea,2025-08-29T16:24:29.730000 CVE-2025-53218,0,0,f217e54b9aafd35f9a7ecb10ba0beb31ab637a2705400df3562ad8a4f646cec9,2025-10-23T18:16:05.730000 @@ -308427,21 +308456,21 @@ CVE-2025-53232,0,0,65b1dd253b164807ca0e1c33dd70040b52143a6ea886d3e2e3b5a440ce707 CVE-2025-53234,0,0,ff8e8f99459e43aec9cb48403b14d5cbdcbcd4a0e9d22a84d784417743572b67,2025-10-23T17:15:37.673000 CVE-2025-53236,0,0,54a9c0661b4ba0247f36de036d28262478d707dc927f6fc64afa9a3f2b299506,2025-10-23T17:15:37.817000 CVE-2025-53238,0,0,e746de9d776c96b13ef5b635ea990705dab83d1ac456e8f07d43b127d9dd59a3,2025-10-23T17:15:37.950000 -CVE-2025-53239,0,0,240c92ee6a0b0a99e601c8e838bbbc36163971bce3d8d09cc948fb77a0e41442,2025-11-06T19:45:09.883000 +CVE-2025-53239,0,1,36031854b63d5b77597bbdba3331a1d8f8e3cdd8ac6349339601318abecf9a4e,2025-11-10T20:15:46.003000 CVE-2025-5324,0,0,78e349d2bd14065297b1365314e2e0d4a2b731776a4275b89f97d27f39ee4fa3,2025-05-30T16:31:03.107000 CVE-2025-53241,0,0,4b488834e9f18b86b9ace08ad76550386594777f2816edbfa71fb7a54121538a,2025-08-15T13:12:51.217000 -CVE-2025-53242,0,0,59dd8c6e2016029935dffb9d9fac024c19c180b3a6384a2e1691639e6a0a96e2,2025-11-06T19:45:09.883000 +CVE-2025-53242,0,1,09278df8ae5ecb8e11265dfa8659fed4f0f4a5d2811f9d346f9d72fac7b4a2d4,2025-11-10T20:15:46.173000 CVE-2025-53243,0,0,3323bf1900e2c7782bcaf983d8ab8c968c9c9275b1576421603b8f812f7769f0,2025-08-29T16:24:29.730000 CVE-2025-53244,0,0,2670605d87af5e78ce357e7dc8526c4f83bffa69de0dd27728db15fd40cdf666,2025-08-29T16:24:29.730000 -CVE-2025-53245,0,0,198e37ded91c90954438d2f77dbb50ce58276ad1531e24865b1aa41a0a712aa3,2025-11-06T19:45:09.883000 -CVE-2025-53246,0,0,87c6975cf46820f7600dbdcaf93a5f4235aca7de38c3262ef33be61fc7f8f79c,2025-11-06T19:45:09.883000 +CVE-2025-53245,0,1,b02ad0961ff108c8b4f7114cc07fad309c8efdae873a8feb0b5a407483aa0bb5,2025-11-10T20:15:46.367000 +CVE-2025-53246,0,1,165323a896c13ef37713c0d050e56bf39298806c1d4345e56be8d98ca61541ea,2025-11-10T20:15:46.533000 CVE-2025-53247,0,0,73e73411ae70187a89fdaaa2f88e54f4542123520db0f4b8da0cc6fe27e0705f,2025-08-29T16:24:29.730000 CVE-2025-53248,0,0,a7848287d7f86137bd8e8832bdeae4c09599d3d20ef602ff94c5d928024591d4,2025-08-29T16:24:29.730000 CVE-2025-53249,0,0,fb6b579a1ec24058e25feb53b005a1c6ba0fafd40fdf3bbe0da3f32b340c6714,2025-08-15T13:12:51.217000 CVE-2025-5325,0,0,6dbc529267f2d8766dc07f82e7196a04e14d44ce526685a18c867c4a8ea7717a,2025-10-03T13:55:58.700000 CVE-2025-53250,0,0,5ea4d50bd474e88f359b864ffaf270154b4b63c56f8cf72138c2e622f8c50938,2025-08-29T16:24:29.730000 CVE-2025-53251,0,0,7e0dd3971e6ab57ae03154d0a93c521c346a4308ea00c62947d936e365f2d97e,2025-08-22T18:09:17.710000 -CVE-2025-53252,0,0,1c81c46fd5ca5506fa64c1b98c4170c22138fa7d3cbad62c738f0a9d50336503,2025-11-06T19:45:09.883000 +CVE-2025-53252,0,1,d27a47e1d48b26bb6dc3d2ee7290a8c34fb7163945161f65e758f108b4b2b272,2025-11-10T20:15:46.697000 CVE-2025-53253,0,0,214e24e64f3a68a364c0361453a4da1d0055b4e89b2079e94acddb30e59f02c0,2025-06-30T18:38:48.477000 CVE-2025-53254,0,0,8d56ffe402bb76b24185845decdc59779e8802d356487d5334398779a07bb1d1,2025-06-30T18:38:48.477000 CVE-2025-53255,0,0,ec730ac042e0abf9b2a31b64f28be2cdcae6a879850b6d271183060760548fc2,2025-06-30T18:38:48.477000 @@ -308478,7 +308507,7 @@ CVE-2025-53282,0,0,d8709923615b9079f12cbf816fa0a7ec068f7a16c7eadfc7e6b87703ad543 CVE-2025-53283,0,0,c0bfa53a8e38fa89adf8485695d7e0564d4fffde1133032012da49b7ae8096f7,2025-11-07T15:15:40.727000 CVE-2025-53284,0,0,100dd3767b47205087efe33ee516e9edbe4b0739fb0bf493fecedb78894095ed,2025-06-30T18:38:48.477000 CVE-2025-53285,0,0,ab4cb47fec42ae9f07388efe188ac6b88e8d212fecf67904bc41c1810bcf566c,2025-06-30T18:38:48.477000 -CVE-2025-53286,0,0,4fa408f6b1c9f5a2f7e524600e940c7c4fe076f6dbd07b0022ef74470083e5f0,2025-11-06T19:45:09.883000 +CVE-2025-53286,0,1,935047cb9a83eb043da6533d38670f2fbd84ebc293a57fc7fa55c5f33120db73,2025-11-10T20:15:46.860000 CVE-2025-53287,0,0,536b182f5b9c173a6da6f82fb2b465a7681c3af5a33541dfcc251fa6aea124ff,2025-06-30T18:38:48.477000 CVE-2025-53288,0,0,b53f28a243c621c536954162fb98cb20a7c2d578e12685cbb4612ffb48beae9a,2025-06-30T18:38:48.477000 CVE-2025-53289,0,0,aba868d8523579518e0af2ccc8dbc5b832cd461464ae04ee12e30fb894035202,2025-08-29T16:24:29.730000 @@ -308509,7 +308538,7 @@ CVE-2025-53312,0,0,3a5170d7f8c5d539e292f2a73d4bf6ad12016ba13599c410c1c2ab91fbd3c CVE-2025-53313,0,0,7e76de46c5da42582fe2eeb1f17a75c59aec23b3dd44de11a264a94e410b6a42,2025-06-30T18:38:48.477000 CVE-2025-53314,0,0,549a135e32065a263d308ebbe2d5fe243e29ba980b3cc74379ec19d5497f76d8,2025-06-30T18:38:48.477000 CVE-2025-53315,0,0,d000dd9a9259240095676775c3f45f3b9c3c3e6cb257e222fcb2cc6354386169,2025-06-30T18:38:48.477000 -CVE-2025-53316,0,0,0203d6e9aea33c5cc8a62851fdba84dac587e49c25e787a0573490109b82d5a5,2025-11-06T19:45:09.883000 +CVE-2025-53316,0,1,f85bd0534875607df67d36551de5b6b28414cc1d071fb1973fbcd639337be798,2025-11-10T20:15:47.027000 CVE-2025-53317,0,0,442eadf984bd04b5e5ddaf3230df91e027af8911e980d034cfef7daf2e247ce3,2025-06-30T18:38:48.477000 CVE-2025-53318,0,0,17691f621f2850d26af6254631a003d93275a620dedfb0430944d5a30e6c9842,2025-06-30T18:38:48.477000 CVE-2025-53319,0,0,4a869410f06716b59743408a9bdc0cb7684f5d1348ab66fd8c5bc7d713b50d2a,2025-08-20T14:39:07.860000 @@ -308518,7 +308547,7 @@ CVE-2025-53320,0,0,cde29a29486c9167f8a56481ff12f7849c0e5d0c65ac5c29006d68783c347 CVE-2025-53321,0,0,1a958bbb0309b2cd6e35c5e45afcc79ef758c432a5330d382910ccfc287fc797,2025-06-30T18:38:48.477000 CVE-2025-53322,0,0,3af89947669bdce2e880d598d6a9d06679b35f7054696bfee5e6014d0c1f6084,2025-06-30T18:38:48.477000 CVE-2025-53323,0,0,c4bb0bce8eaeeae0db595028fd06fce5fb3a56400cef98de937a1c28dbf5b0b6,2025-06-30T18:38:48.477000 -CVE-2025-53324,0,0,ed8eccf1be2ad82731e46020383b89e3517a66905f9cf2bcdd3031df8dc07e71,2025-11-06T19:45:09.883000 +CVE-2025-53324,0,1,8302a8fc6ebc50080be17af380c1330cb4adcf30b646e6d89c5e8fd26c974eed,2025-11-10T20:15:47.197000 CVE-2025-53325,0,0,8e3e8e26e4dbd5c8412e01ff791fe5a4fb9f0769d9c65e9c6d332a118a91ffa1,2025-06-30T18:38:48.477000 CVE-2025-53326,0,0,1f020947c1a419f6a487ffc0d5d1177671534ab43a707df81a65c69b62d70384,2025-08-29T16:24:29.730000 CVE-2025-53327,0,0,71efca1e67fedd0f62622f35091acee6852d8d1a47c1510c3872a11834b47c9f,2025-06-30T18:38:48.477000 @@ -308540,7 +308569,7 @@ CVE-2025-53342,0,0,375c88545a6926542ffcae7264f8202499d04d1c9aacbda00a80b349bcd15 CVE-2025-53343,0,0,e96562afdeeb373e1cfb8f00d2141f32dec2761098e10230dfaf9026a4b1bbe4,2025-08-15T13:12:51.217000 CVE-2025-53347,0,0,2bca1f3fe1d2e77d74927047b2b9fbeb7b192a3386aa577d0d0bfb43513a6dd4,2025-08-15T13:12:51.217000 CVE-2025-53348,0,0,d4fe714c911fa075f3c7d18dcea167e0dec0bb03f2ca20d0a12b1a1b22548de6,2025-09-11T17:14:36.413000 -CVE-2025-53349,0,0,6075e4fdb81d967f4ded688693d15b743b7ffb1105096b27f16a8ac12663e1ea,2025-11-06T19:45:09.883000 +CVE-2025-53349,0,1,a8281a078da536e53970767fe42a72e6e19a1dcda777d9afd25c4ebbd666158e,2025-11-10T20:15:47.437000 CVE-2025-5335,0,0,ac23836a336f6543872e1a0155b1cafdab35c5a72752926e0759c62e88e98c82,2025-08-19T14:15:41.633000 CVE-2025-53350,0,0,35f0dd796e8b91d493966a1d11ddfe045aafae86c4a781df94fec9a453033c4e,2025-10-23T16:16:40.070000 CVE-2025-53351,0,0,190cbbd0d07687434d9366d2798d0948432a07dc4c53a9aa103f3b087228da60,2025-10-23T16:16:40.300000 @@ -308734,7 +308763,7 @@ CVE-2025-53570,0,0,db537830bf9e54f0d74acabb53148c3a024a3f339be01d597e7c38625bfb8 CVE-2025-53571,0,0,ee45d1ff02ec46564d54d247060d434d6d7006c27454dfc54440a1d0317d1337,2025-09-05T17:47:10.303000 CVE-2025-53572,0,0,4e8e988358042705bac850d834241809b1b63fd143dfffa419efa90da9ef7792,2025-08-29T16:24:29.730000 CVE-2025-53573,0,0,5c8bfe5c720d7714d75f802870779366b35c6a3a680410ca2ba02515e9410b02,2025-11-07T14:15:50.227000 -CVE-2025-53574,0,0,9f2eadced962b929e6b72c4cbe10dedf8e607c139dec5d68b7e7a04dc20ae64b,2025-11-06T19:45:09.883000 +CVE-2025-53574,0,1,3250dfbf2d14060a70360586a75fece5fcbdcfe86d0c7526b00635c712f56ca8,2025-11-10T20:15:47.660000 CVE-2025-53575,0,0,0afb28da46a431fa307ba84f45043d8751862e9b2a87bea42ff6ad918a1db8eb,2025-08-15T13:12:51.217000 CVE-2025-53576,0,0,105453ef94c6838779e5873319de0f573f5a8fb01d58d20ed0f9a7ddee0b8c31,2025-08-29T16:24:29.730000 CVE-2025-53577,0,0,cf8bbf8681cbf05a80d56ef471ae5be5234163dfe62594671b3f30381d33de23,2025-08-20T14:39:07.860000 @@ -308747,7 +308776,7 @@ CVE-2025-53582,0,0,06453f0a1662a498038522138e84c569d25df319eb5da700f3303111ae980 CVE-2025-53583,0,0,735636d4829f475dc8d542010f490976198d5bff550c622aade31633df728ecd,2025-08-29T16:24:29.730000 CVE-2025-53584,0,0,70a3baea7101a113597c4a2e521e40dff94e56f160f3f6195330a7b6535a68ea,2025-08-29T16:24:29.730000 CVE-2025-53585,0,0,a2aab937690aa0e3dfd4173da7dfca2a3a25eb05e7e00d93617912457fd3438d,2025-11-07T20:15:37.630000 -CVE-2025-53586,0,0,25e41238b9b599471ca42c2a6f7d338833e2695596bf5404ae5b139c2ef4e652,2025-11-06T19:45:09.883000 +CVE-2025-53586,0,1,55f60d0d60f62927ba333bcb4e5b41827b141c7fce7a06944f56f3a524552070,2025-11-10T20:15:47.827000 CVE-2025-53587,0,0,ff0a92b3d189e2f9758dad1160962251d39ec4b13a3e4d6d6ea642f3c19d4a71,2025-08-15T13:12:51.217000 CVE-2025-53588,0,0,94ea25729a8fad0db06755a8fb8776466b610f5ed9a3e3b236edcc381cbf2e97,2025-08-29T16:24:29.730000 CVE-2025-5359,0,0,fbaee83932976cabc2c375b7182ecd49a378426f554e3965400f3dd72ff93c16,2025-06-10T15:14:30.460000 @@ -309107,12 +309136,12 @@ CVE-2025-53995,0,0,212f6954726c5e2aa7e123505a1b2088e970eae87e010b12424a6bcde80ce CVE-2025-53996,0,0,32af0d56dd551c04dbc783a01d34a91d223bae18667bb17189b6ab095e33024d,2025-07-16T14:58:59.837000 CVE-2025-53997,0,0,df91d0d0349b5737b98d2705bff3769283d3596ffbebad69d6043561ff4edeb1,2025-07-16T14:58:59.837000 CVE-2025-53998,0,0,522792b310014a35fb9069634b3f1f452a908451f00ee0a8199636f1662b9705,2025-08-20T14:39:07.860000 -CVE-2025-5400,0,0,464c948cc80a18d394b55c8ac0aaf7c655bf2c37ae84193f6b857a57f8b2ff80,2025-06-02T17:32:17.397000 +CVE-2025-5400,0,1,9b5efce7a75f84a039c951b37c19cb80ae2bb5b9049ae8ed9320a918a948dd4f,2025-11-10T20:15:07.957000 CVE-2025-54006,0,0,ec64d09b55f8319c5202e187cca6133691e69d923b2015ab1035c4b4abea6b37,2025-07-16T14:58:59.837000 CVE-2025-54007,0,0,722c873b50d97dc690e84bb226ef491cea7aa535e931d60a9427f5c74e29050f,2025-08-20T14:39:07.860000 CVE-2025-54008,0,0,08cb1178a6d7bdef61f88f929c361e5c09d581494f0edc29ec13c09ea489b8a1,2025-08-20T14:39:07.860000 CVE-2025-54009,0,0,a24dc2394ce4a48667f91c31b49ecce32fba8392c530d81b89ce3d373c968ae5,2025-07-16T14:58:59.837000 -CVE-2025-5401,0,0,2ed3920c2449283074b77dafa580073cf093e64d63161eef30569803706bd4d8,2025-06-02T17:32:17.397000 +CVE-2025-5401,0,1,32573dacf3d35ecc2ea06e5a39d3cab1336c0d80cc1674fef4953f84474a5bb3,2025-11-10T20:13:09.790000 CVE-2025-54010,0,0,ff6abc0d59fafc9b8e5098e196c6ef21d7917c0851cfce71d47708332ad0a16f,2025-07-16T14:58:59.837000 CVE-2025-54011,0,0,eaa3c6fa558299aff2725abdc0370e1abdc6b760c96359d0b79f4d6d79a9306f,2025-07-16T14:58:59.837000 CVE-2025-54012,0,0,0a462c9f507a09010eded373075e9e8a3c5b238c493c9895b30e6b086df89d7a,2025-08-20T14:39:07.860000 @@ -309123,7 +309152,7 @@ CVE-2025-54016,0,0,9f011928501846aea3e9377646ea99a4d5da8522801842b6d3505cac0f5c0 CVE-2025-54017,0,0,9bcba61712b135ffb0ed43961fb82acbcb2a32b91bbba23920512a0647202e0d,2025-08-20T14:39:07.860000 CVE-2025-54018,0,0,dd045c7b62bb677f8a61c9fb8c0a8624d03695b02f2539809e055da681c28c0a,2025-07-16T14:58:59.837000 CVE-2025-54019,0,0,e6aad1cf7ad4366380061e735c5a10aa1eca30e16b1bae5e82c7750fffb20b10,2025-08-20T14:39:07.860000 -CVE-2025-5402,0,0,073ebe1e57801201986bc53a47f755bd4ecbf5f26c486d2105b67da38e96e764,2025-06-02T17:32:17.397000 +CVE-2025-5402,0,1,850b1218972b9134ff5e521d4a4c658f339802e4bf3171cc2f7f3bcc6509b267,2025-11-10T20:11:11.940000 CVE-2025-54020,0,0,5bdcb670e1f0b80b1e490d62b09f3037178882fde1d81594ff64cd6470926d1f,2025-07-16T14:58:59.837000 CVE-2025-54021,0,0,5132b34c2211b400068ef9d784ef41a115431b116750b3b2de96ad0770882887,2025-08-20T14:39:07.860000 CVE-2025-54022,0,0,efbce81dfb6b3c26cf2dbd04f279de62b967b294831882df1fdb2d05a56242a7,2025-07-16T14:58:59.837000 @@ -309134,7 +309163,7 @@ CVE-2025-54026,0,0,957d00de626936f1c93ab9407798503a211d5dbe42b04ca2ad0977c9ce580 CVE-2025-54027,0,0,a108eb730d514fc5021b458b668817ca5f0a247e2d53267fd531dbfa5a4b89f3,2025-08-20T14:39:07.860000 CVE-2025-54028,0,0,3ebaddb182502c46390e9cbc40a762c945936e28f7e6fa3cd70c1be25db32264,2025-08-20T14:39:07.860000 CVE-2025-54029,0,0,14b352c5ade6cd8629595ff64673b7d8b1a6769756607cef73cd563d833389c6,2025-08-29T16:24:29.730000 -CVE-2025-5403,0,0,38ca458c625bc4a7eab1246ca88295a4121c9feaf8ca1a4ac18d89f855a6905b,2025-06-02T17:32:17.397000 +CVE-2025-5403,0,1,61f891239984b8c25036c1fa348c3ba22183c122d13d64a4864b2308fc38390a,2025-11-10T20:07:40.007000 CVE-2025-54030,0,0,32d82ddff97589076583a387b1d02056619b6938f9d44748b0d44f3cd78f22b6,2025-07-16T14:58:59.837000 CVE-2025-54031,0,0,8fbb063350858fb4b084cd0bf0422910582c5e7b158016e7a15b5cae959fd580,2025-08-20T14:39:07.860000 CVE-2025-54032,0,0,4cd4a87f9a643b31bac3d440e2401870e489fe9b968f7b0e9ae5e49a2176198c,2025-08-20T14:39:07.860000 @@ -309145,7 +309174,7 @@ CVE-2025-54036,0,0,4932b84aa6fd5a597bb85df0b7ee10a7b4bbd8ef6163ed4710cf6beb7707e CVE-2025-54037,0,0,eeccbd876f9664418941c82e9dfdf70b64ccdd7f9e7d5ddb14a69c551b23de60,2025-07-16T14:58:59.837000 CVE-2025-54038,0,0,70bfb5bd0b10d22bc41ae296a87d0fb8cd47dd578fc699b14fc5b72dad169a67,2025-07-16T14:58:59.837000 CVE-2025-54039,0,0,4ae55fc0a5b75db1f4fa3c961025b92d1c6c04f58a718ea26d466169ee8ab503,2025-07-16T14:58:59.837000 -CVE-2025-5404,0,0,2a3753a4699c347d1d0c6b51c8139b8e4f4856f80f2b8ca6706327b50195fec9,2025-06-02T17:32:17.397000 +CVE-2025-5404,0,1,f70222825d2be826c279897ed43cd41ddf1a4082c582aaafaadf43cca21df0fd,2025-11-10T20:06:32.143000 CVE-2025-54040,0,0,96c39e6fe2e1f3f620ade873d7e16ef8b95e6dda73192194b115204c1063f4dc,2025-08-20T14:39:07.860000 CVE-2025-54041,0,0,b25576e7c5b7a2866a739abb7efb23847ee0acfdc6a5fb87c37ced436f96924d,2025-07-16T14:58:59.837000 CVE-2025-54042,0,0,1db909e0b15cd7d7976175cf4e659e23901d2da541bc8ecc965c8c00902dc94e,2025-07-16T14:58:59.837000 @@ -309155,7 +309184,7 @@ CVE-2025-54046,0,0,d10cd4a62c495733bd91a21e94be84d4bb0568f0c1c013feacdb8b6efc29a CVE-2025-54047,0,0,3ae364d16913ef3e08d7c9b8826511752104590e7b2d6dc390617611e7828174,2025-07-16T14:58:59.837000 CVE-2025-54048,0,0,96bd3909dd7cd1416c99e5fa98f00154b2264d97ed4e07a615afe3310a666abe,2025-08-20T14:39:07.860000 CVE-2025-54049,0,0,1167d8aa4d3788b6bf0243e2f1f0a20921f66456cfcfad14bdaa8f83c6f6e81e,2025-08-20T14:39:07.860000 -CVE-2025-5405,0,0,de4a564759bc24c406ab7cbc0c7df4bb3516b4240cf41416628dc87160082d01,2025-06-02T17:32:17.397000 +CVE-2025-5405,0,1,77118d1392c418d554f0a1a6bde466b033119477e1f0a26fb93be2f8bd9ea77d,2025-11-10T20:04:10.697000 CVE-2025-54050,0,0,b37058656076c6703e3ed77d30104b61027ec43efcf19d805ff03af1a2169b04,2025-08-11T19:18:27.353000 CVE-2025-54051,0,0,fc66e178f8a004756cf424dac600246286c1666555d9aa403355fdd1de2394bb,2025-07-16T14:58:59.837000 CVE-2025-54052,0,0,aea2ca2f524db5f236ea923306cacd7728ec6123d7aeb8dd62bd62eb640da87b,2025-08-20T14:39:07.860000 @@ -309165,7 +309194,7 @@ CVE-2025-54055,0,0,47384fbb326a4a0000a75f3776efb052f4e07d4a72d80c10f2b26b455b745 CVE-2025-54056,0,0,ab5ae4acbb7d3cbab42b0598214f8fbdfd6a34b1f29cb0e3f3c6cd69a05eafc8,2025-08-20T14:39:07.860000 CVE-2025-54058,0,0,54551bc905d08b35a9b59ff13f5d0f99cd06faa4c1f52db375d128cc426401f4,2025-07-30T19:57:36.920000 CVE-2025-54059,0,0,e7521325b784a60b8cf1ab44bee4a9338b70e573bec3931de470ea881a7e4eaa,2025-07-22T13:06:27.983000 -CVE-2025-5406,0,0,c395217120454a84e0941a7d002cd6465af0a68245d4c6fe950555cc895551fe,2025-06-02T17:32:17.397000 +CVE-2025-5406,0,1,509a344dc50e4611e2c15df30ada69259995c2180af6d40ea08b78d9fd22fed5,2025-11-10T20:43:07.087000 CVE-2025-54060,0,0,52091c9e401b531a85b01bcf2514310439afaba233d5e2a73187a8ae564c5811,2025-07-30T19:57:48.837000 CVE-2025-54061,0,0,3c879c5cc1b97d4cd7138fefaee2251beb8a8980ce3be362fbfdaf16d9f61607,2025-07-30T19:57:59.433000 CVE-2025-54062,0,0,1321d67073edbb0869b8d8b7d06b79687f116a0c6d8f7cf766577f712dd801af,2025-07-30T19:58:29.140000 @@ -309173,7 +309202,7 @@ CVE-2025-54063,0,0,35d38500b39670c78dba4aa1120a84cfed2d557ee6fb67f5827e5705f419e CVE-2025-54064,0,0,e9a83d0f3a778c8f1c00100306d78a5872efac55852c9cec8e1c534ce5db8ae9,2025-07-17T21:15:50.197000 CVE-2025-54066,0,0,38ca277636d85af2ff1b4a29f626f3aa593ece79371a1471291e5b33d7f49982,2025-07-17T21:15:50.197000 CVE-2025-54068,0,0,042d2ff99fa72f4a7401374163ce46798a91b85e263ebaa39c417fe47163e6c1,2025-08-27T14:36:24.613000 -CVE-2025-5407,0,0,75063f3239d4236a6c55a725a582a255ed473843393df55ba95135c9842e9a3b,2025-06-02T17:32:17.397000 +CVE-2025-5407,0,1,838886aafb781f1a9cbe1025ad57b8da63954c7a7ade34b8284921a967ef9e9f,2025-11-10T20:40:57.120000 CVE-2025-54070,0,0,06d964c92691346b61960e0da18167c2de8c6d74567cf02bfb206c2e189a3038,2025-07-17T21:15:50.197000 CVE-2025-54071,0,0,71693da9276922686c225d217dd2ee5dd7c649a8413a7e8cf01e95c27d7be420,2025-07-22T13:05:40.573000 CVE-2025-54072,0,0,6e0bfcd8cc3dc1cd2773a0d9b95ffbfcfad287e8f2ea34646506c6fb7242271c,2025-10-09T15:59:25.873000 @@ -309871,7 +309900,7 @@ CVE-2025-54862,0,0,b87847b47575ae39b87257227929370ae5ba2220757baff41efa25e9c44ce CVE-2025-54863,0,0,0576ef1779ee7120c95e3c3f198ff8d86da4784ab20e0c6d45065b502cdece93,2025-11-06T19:45:30.990000 CVE-2025-54864,0,0,22a6a6ff0d1b1c53065ed758e060bab03f5820d098792ac92cda284e4943a9ae,2025-09-22T14:58:23.957000 CVE-2025-54865,0,0,dbfb2b324d48a2d6cae9cc20d5cb66a7b7944599845cd47b2ab6cd1d76b667ad,2025-10-09T17:33:12.850000 -CVE-2025-54867,0,1,e19a2fdeafaead1bd059f99ef15e5f11bfed63d17552a7419dfb6d0659eaec91,2025-11-10T17:50:01.987000 +CVE-2025-54867,0,0,e19a2fdeafaead1bd059f99ef15e5f11bfed63d17552a7419dfb6d0659eaec91,2025-11-10T17:50:01.987000 CVE-2025-54868,0,0,eaad59cc49b6510db3632a217f7e04794481e3d618183a0a74961baf292171de,2025-08-26T13:41:36.950000 CVE-2025-54869,0,0,23144f1d3ca7475d7d81467df8d9374a1b11ccc18593272704fa4d29da9f0dd9,2025-08-06T20:23:52.133000 CVE-2025-5487,0,0,a2325d70b19f1faa0bb78067f87ae57fb5952acc710d0b21151f32c03c4f828a,2025-06-16T12:32:18.840000 @@ -310107,7 +310136,7 @@ CVE-2025-55151,0,0,b498069ebb2c1faf78e8296e2129dac246a57be6a0bcb839f9b6670110f3f CVE-2025-55152,0,0,62d9934bb0847575202b1df7c3ae088a033accd8d51560e29d4a3d128cb35b64,2025-08-11T18:32:48.867000 CVE-2025-55153,0,0,5bfa030ccf80307ede653e10297e148fcbdcb3c2c5d75df88e475ca99ab69267,2025-08-19T18:15:29.040000 CVE-2025-55154,0,0,237787aebfbf147c52094e9b53e45bed0ca96caaf177c4ca7b5c5771f14abaf2,2025-11-03T19:16:12.043000 -CVE-2025-55155,0,1,47f4a18824864e3638715141295fc0a5e87b6d62261db96ad96c36d1693e0c1a,2025-11-10T18:02:32.813000 +CVE-2025-55155,0,0,47f4a18824864e3638715141295fc0a5e87b6d62261db96ad96c36d1693e0c1a,2025-11-10T18:02:32.813000 CVE-2025-55156,0,0,e9a8981acb77284d447983d1aee656398823d09cc543c1448140066e0702c72c,2025-08-12T14:25:33.177000 CVE-2025-55157,0,0,34b397e0f3169df9f045aa08c137f3855f71f93aec9680a893eaea8fd1bfc672,2025-08-12T18:50:20.100000 CVE-2025-55158,0,0,3274dad494faadc2d88315b05ab9154f07a74b7d2bd7de797fff11acbc2a786f,2025-08-12T18:49:05.347000 @@ -310618,6 +310647,7 @@ CVE-2025-5648,0,0,8d8a946a9691d84bd632207adec092a07f5e621bdddce363a223111a1e12ac CVE-2025-5649,0,0,8d1f3267e39f86a1983625a80d2b4086de30c2bb535ef4e2d4852137479dd55a,2025-06-10T15:05:56.120000 CVE-2025-56498,0,0,174f73636877cc0f6583ac98d876f9097aecf0c506b0a033d10885e6ff6a5cc9,2025-09-09T15:58:46.043000 CVE-2025-5650,0,0,c41210387d1002531a8860804a9f5e98813d1f3f1969221163975f35d5b4da41,2025-06-10T15:05:23.553000 +CVE-2025-56503,1,1,c2d637b3dd602575e6ebb667bc134086556afa3a77ab2dfa13c3c6c947eacaa0,2025-11-10T20:15:47.990000 CVE-2025-5651,0,0,f99e51780416a06de1bb6158138e45a2fd946eb9bd56bfba7816f6881196e6ac,2025-06-10T15:05:12.920000 CVE-2025-56513,0,0,6a976a01f4257bfa909a6b270fdd9f7e03ab41d364cb2650d351d9bd14e302fc,2025-10-15T18:39:09.800000 CVE-2025-56514,0,0,4482f71c1d8ca23c138073d6af7feb89ed548879dfeab98abda9787d645099c0,2025-10-21T20:20:49.560000 @@ -311233,7 +311263,7 @@ CVE-2025-58026,0,0,eaae68668eaceefc96d49c43709d3e6adb6517c0d439293301f124c2515ca CVE-2025-58027,0,0,01380d7c5fb97c4f7d99517f90cdeb0c077940f221d9d705a0bd731897b8242a,2025-09-22T21:22:16.313000 CVE-2025-58028,0,0,46e5b3baa4bee4e289869e805e5ed2fb684bbc0a3eeb634daa79ef4388ebb97c,2025-09-22T21:22:16.313000 CVE-2025-58029,0,0,fefceddfee04c6a5a2e05e17767396fed14c20987cf51917545d3abddc42c6ec,2025-09-22T21:22:16.313000 -CVE-2025-5803,0,0,f35e2e41fde425ab1b862ba2223d58e0ebafec95ca946b06e06666515fc1b729,2025-11-06T19:45:09.883000 +CVE-2025-5803,0,1,2564faf513224ca1605625d9b50cdbda1a1ccaa502a030f86cea9cb8b4621ad3,2025-11-10T20:15:48.473000 CVE-2025-58030,0,0,4e43f682673d1202c22c350c09836764e20e374a3d0f7626c8a804f30e7b5719,2025-09-22T21:22:16.313000 CVE-2025-58031,0,0,67df86bb8b1e73abbb936d2a0fd8982c15627697fa43f2321684dc1dc549a391,2025-09-22T21:22:16.313000 CVE-2025-58032,0,0,87d4be683cea8a7de9a4025f14f6161d1ce5e80d1af2365516e9f502cf2b4c9b,2025-09-22T21:22:16.313000 @@ -311599,7 +311629,7 @@ CVE-2025-58591,0,0,c7b327df89fc426fc2fb061294aa660f0c8fce457aee85f00c712b1199349 CVE-2025-58592,0,0,85647be0031f02b764c65afaa6403a256c1f286f4a0d089005060f628bc487a3,2025-11-07T16:15:41.563000 CVE-2025-58593,0,0,7fd21f870b8d85cd58cbacc29c055f4e4501c021afd801d4f47c2e584f0a4641,2025-09-04T15:35:29.497000 CVE-2025-58594,0,0,7a00f437ce3601f0dbd1082607d5b64d0bfcc50563ef4a53bb75166200d1f3c8,2025-09-04T15:35:29.497000 -CVE-2025-58595,0,0,7454e26ab8a24b2b090d9f3c2ba9aaf81d65e6b55cb8064d39486887fb7c7d48,2025-11-06T19:45:09.883000 +CVE-2025-58595,0,1,490e8cf03a6d23e9bf3e9e58be6e68ee5f2a4898e7b529a223cdb813b268d00f,2025-11-10T20:15:48.183000 CVE-2025-58596,0,0,7fddd7520be88b8087d73734a7fa0a9723047d67d35d2c28473c7959336468db,2025-09-04T15:35:29.497000 CVE-2025-58597,0,0,c7dcb4085da666272db4e450881b59d5d2c94f8e4060a2f851daf1c76af9dee5,2025-09-04T15:35:29.497000 CVE-2025-58598,0,0,9f935fa1381dffd5e8baa08c35124cf92b9f9ee4277151a64117aebdbab24f6b,2025-09-04T15:35:29.497000 @@ -312973,6 +313003,7 @@ CVE-2025-6086,0,0,5fe71f700a5db4748b73456874508af7453c8bbdad176612b1ae063647fd5c CVE-2025-60868,0,0,95c982ab8e0ca0ccdd9d37ac2822154aa0502eb90eeb5b85347e23681b37639d,2025-10-14T19:36:59.730000 CVE-2025-60869,0,0,6bb062dac2b21d6c5e284aac0762e9c8194360c08da47b11b998d9dfdd14651e,2025-10-14T19:36:59.730000 CVE-2025-6087,0,0,262762a2ff1171ba22253082b0473c34c801e87448d83e2fa6cced2838216eff,2025-08-06T17:21:28.460000 +CVE-2025-60876,1,1,e06c573cbb2a747df5c292401b83834014c0efd51a699473babec4133630dac8,2025-11-10T20:15:48.683000 CVE-2025-6088,0,0,bb74840d06f1a9455cb83ff770796b02c67af5ccbacb4a09b6d7acf1a9109e18,2025-10-16T16:00:19.400000 CVE-2025-60880,0,0,11a04089e12bc9c16769a9631f11aa42edc9038938eac08379d53b2400af748c,2025-10-17T17:15:48.497000 CVE-2025-6089,0,0,aa83c2709521312e3401dbda2e76aa38d9a30d639029a9e31a096547472bfbf3,2025-06-16T12:32:18.840000 @@ -313479,7 +313510,7 @@ CVE-2025-62157,0,0,e2ebd743d28b176a2fef12f9b9db4df6a1b3444eb3c49813bfc24638393f5 CVE-2025-62158,0,0,90fdd42e825c07c96e2c606e81455f13d51e4343e68b7aff6b8a8900502e72a6,2025-10-20T17:18:16.573000 CVE-2025-62159,0,0,e050beb5cc761d3ebdda530d6ac33d545f6c0f141db64421d6f0d851a3f36e28,2025-10-14T19:36:59.730000 CVE-2025-6216,0,0,ff9c6160e7c4687e5f1cb323c03235f5b257ac60ca98b4aa515651b9371e247d,2025-08-18T15:58:41.927000 -CVE-2025-62161,0,1,4809353d4ed3e8ea672243f4277310d96aa8ef9a829b843cd2d0213f3654b8a0,2025-11-10T18:13:27.723000 +CVE-2025-62161,0,0,4809353d4ed3e8ea672243f4277310d96aa8ef9a829b843cd2d0213f3654b8a0,2025-11-10T18:13:27.723000 CVE-2025-62162,0,0,25558927703137065bf8d63a48967237f0464830cb995db06bf6db0fac64edb1,2025-10-14T19:36:59.730000 CVE-2025-62168,0,0,de273ab07e32779d8a85f87ddcb41c950374503a978d982c364438cdcce98b9e,2025-11-05T17:15:45.087000 CVE-2025-62169,0,0,47beb0f3a5050bbb83cff4ac9dff98beb7d5283e94709803e1dccfe560cd6864,2025-10-27T13:20:15.637000 @@ -313536,10 +313567,10 @@ CVE-2025-62260,0,0,be3dcd7fef441b15d3eda9485767800287b9f7d757a18c4a1ffe9278c551d CVE-2025-62261,0,0,db6e061bc27ec8ce0213a9585befe77090ef553ca3a4e1fe899e910a1918de4a,2025-10-30T15:05:32.197000 CVE-2025-62262,0,0,e047b37e4f0ec0197ad38d2e65622fab26b0e0c736cfe8a3b08876dbd288da4b,2025-10-30T15:05:32.197000 CVE-2025-62263,0,0,7900aa8393f90ac6ee08ab311e345987d9b177e62d1409218fae6b2398265f02,2025-10-30T15:05:32.197000 -CVE-2025-62264,0,1,f3b9ece32d07d78d714fde4c078cc6e814602aebb0e77508d740c23652e8eaae,2025-11-10T17:11:02.387000 +CVE-2025-62264,0,0,f3b9ece32d07d78d714fde4c078cc6e814602aebb0e77508d740c23652e8eaae,2025-11-10T17:11:02.387000 CVE-2025-62265,0,0,a6cf76784c1d64b690dcef32c2c4f088ff889d29549400a8a6240c7319e57ed5,2025-11-04T15:41:56.843000 CVE-2025-62266,0,0,47eda55f48e575f69761a1cda293f532c1e7c0447f166a5fbe05d32612b9232b,2025-11-04T15:41:56.843000 -CVE-2025-62267,0,1,7b70a4f9d2f9a2574eb41b8bd695640301f9ba8fee667dea334f9dc1f012bf96,2025-11-10T17:04:42.033000 +CVE-2025-62267,0,0,7b70a4f9d2f9a2574eb41b8bd695640301f9ba8fee667dea334f9dc1f012bf96,2025-11-10T17:04:42.033000 CVE-2025-6227,0,0,086081aeb0bb6a762e7165aff7a305387d000eb9835a2892a7baf67d157b5ff8,2025-10-14T14:32:24.033000 CVE-2025-62275,0,0,1115dbab0ffb04a80aff0dc8a4ef34d69049a86669947e6a2d06753d763c646f,2025-11-10T16:20:40.737000 CVE-2025-62276,0,0,52ad2be1d06c25207997c02c38c277489416c64d2a5572d37963facc1762dff3,2025-11-10T16:29:02.813000 @@ -313621,13 +313652,13 @@ CVE-2025-6242,0,0,23cc3372da6ad0e16da005088a5ec5b8d1124ccbf6891a21f5eb2b496a1791 CVE-2025-62420,0,0,bb83252eb95753c75234ebec2ce3d202cf3f493d90ae7585c7a2fdf35bbcd8ff,2025-10-24T15:56:16.570000 CVE-2025-62421,0,0,c1ef3253ca4a071299f8fde496318c01fc808de36440e05fdef965c5ba8840a5,2025-10-24T13:10:14.197000 CVE-2025-62422,0,0,fb3f97e74e694737922fe04babd6df1bad4accf05608c419eae307dd3eb982f1,2025-10-24T13:14:29.553000 -CVE-2025-62423,0,0,e919fc95cf2c06726068dbefd71fd18f5001eea8f4c06d65e3198aa718a2cb21,2025-11-07T17:41:34.633000 -CVE-2025-62424,0,0,ca2ecf2e1395a78d0b046cb1b0b5a6278f2f7e91901cbe566fa2a1ddb19dec17,2025-11-07T17:32:04.460000 +CVE-2025-62423,0,1,1edafb32f8622294c14c9d4c57958dfea072063cc69c9d1809406fe73358c2ad,2025-11-10T19:58:10.237000 +CVE-2025-62424,0,1,b82aaf49f4155db4242d15e1f73e9514990409ffdcd81b2fb0a7a28374d6167c,2025-11-10T19:58:14.303000 CVE-2025-62425,0,0,bb6661eb1b05f413d1dd27f981c4d2a56e2731e1b3e4fd1cd99a727a4ba6dfef,2025-10-21T19:31:50.020000 CVE-2025-62427,0,0,78fa18bbe1dfccc4c110b3a7b5ce39c6000c5c285fa1a07b54ac037d179ba958,2025-10-21T19:31:50.020000 CVE-2025-62428,0,0,eaca2b80d06a24fac6aba46bad80909fad5fd211d5902f6916f81d2d995ef550,2025-10-21T19:31:50.020000 -CVE-2025-62429,0,0,ac9a7411334cc19fd9a42b204de3f3e74907de20477a7b077dfbea13bd44b194,2025-11-07T16:59:54.857000 -CVE-2025-62430,0,0,d7073526f91731f699a4bf10af0a4ba8a82f96236d1219e6f17ee397e6e6d288,2025-11-07T17:23:00.983000 +CVE-2025-62429,0,1,54e46dfcf95375a6811e799f0a9e3cc562de8e3a69893ccf13fe20c5b03adb13,2025-11-10T19:58:23.353000 +CVE-2025-62430,0,1,c1644d7357e0797ec21cf78d79c252cb890eb562bcdddb90f03b5b8161f58c1e,2025-11-10T19:58:19.593000 CVE-2025-6244,0,0,964622be99b8929ae714b5f1186a8bb5aa1dacdc93d9c545b15c83bc6ba93e76,2025-07-09T13:52:15.010000 CVE-2025-62440,0,0,4405d1c7b0b35d30fee189ef455777fef0dc3145ab6a662798835ab1d8b2978a,2025-10-15T03:15:33.580000 CVE-2025-62441,0,0,d93a3e30058a3f57946b1280892a394d1ca1e2b35501fc7a3bc4d4f486722cf2,2025-10-15T03:15:33.667000 @@ -313673,7 +313704,7 @@ CVE-2025-62516,0,0,8f8964cf075462c74a47e3d005c989c7d5b195961be257aae50ef9cf45692 CVE-2025-62517,0,0,8aad3e8fe9ba962559b072f15291db5654baa0a4c3a18583849793895112d350,2025-10-27T13:20:15.637000 CVE-2025-62518,0,0,e3f305fc2a4cb905da6ee78928396ae0201532fdfc6b8b3cc163daec2839d05e,2025-10-21T19:31:25.450000 CVE-2025-6252,0,0,04266fde32de91a19cd75afe711753a0e9f9154bece1418589e4e14bad3b2599,2025-07-07T14:51:20.410000 -CVE-2025-62520,0,1,a3991f87238019d4e13734cf9d71ec90db75c7e219226497378f1a1b805575a8,2025-11-10T17:55:42.480000 +CVE-2025-62520,0,0,a3991f87238019d4e13734cf9d71ec90db75c7e219226497378f1a1b805575a8,2025-11-10T17:55:42.480000 CVE-2025-62522,0,0,98beebf8c12272d6e9509df6ddeddaaeebca90f3ceeee0593874463deb396f18,2025-10-21T19:31:25.450000 CVE-2025-62523,0,0,917e665594b9cd17ea65d3529640c4ab193505c253d94526f525988e76ced9a3,2025-11-04T18:35:45.133000 CVE-2025-62524,0,0,48bb0924a5e5f21eb7a28f0ab8d4c25f7a1fdfe709f23793bee18637830dfe8e,2025-11-04T18:36:37.193000 @@ -313702,7 +313733,7 @@ CVE-2025-62591,0,0,516d58ffc099eee87218be925fbc0f602cafb6182dc9f6ca34aa6a5393ea1 CVE-2025-62592,0,0,0a914513e3fddece9f9c22859628d4678b32e6ae12442e0ebefe3a86d8a517fe,2025-10-23T16:00:45.680000 CVE-2025-62594,0,0,0c3388a74aad1d0e1246a798fc91e15febeb1101b6ae96df120e62aaa66c2529,2025-11-03T19:42:36.100000 CVE-2025-62595,0,0,e00ef1096cde2ef474100abac53c55eb3f02c17b43bb9b554ce59e805c15ae33,2025-10-21T19:31:25.450000 -CVE-2025-62596,0,1,11f39ac7fb34c2d7dec3d737033b304a0309139c5b9a9d495fd12ee1ff598507,2025-11-10T17:58:27.753000 +CVE-2025-62596,0,0,11f39ac7fb34c2d7dec3d737033b304a0309139c5b9a9d495fd12ee1ff598507,2025-11-10T17:58:27.753000 CVE-2025-62597,0,0,599516fb5e4182c3a840c451b3bd88579cd7fa85528c5943a0a42fad0f390b74,2025-10-24T15:43:55.920000 CVE-2025-62598,0,0,4f6e9447c8ea842a700ae84a8ab137dd21cda8a5685703b4e9e64d79f013872d,2025-10-22T14:19:55.570000 CVE-2025-6260,0,0,31d8a8fe623c3eb38350582f7b8664017a796cede476db64c602981f5d92a0b2,2025-07-25T15:29:19.837000 @@ -313797,13 +313828,13 @@ CVE-2025-62711,0,0,3283f27a68ad04be55c9994d4a606e5a98401b10f409851fdb06b8020c274 CVE-2025-62712,0,0,cb041bf24928f60177bf70a93f0d4c62fb1dd79d92fabf1e72f064c662b3bc21,2025-11-04T15:41:56.843000 CVE-2025-62713,0,0,c9c6a7a8eb81ad65ab9bf88692a8073ab8d787b190ed5675b573bde3d35fc028,2025-10-27T13:20:15.637000 CVE-2025-62714,0,0,3f040d1c9d2b009a5bc77a4f4892f25c55175194f87f67cd9a061fbe3c4967fe,2025-10-27T13:20:15.637000 -CVE-2025-62715,0,0,d40e15859324e33919c7839727f71d21cb8b26c81456c17c558dbc2efce7873b,2025-11-07T18:20:29.597000 +CVE-2025-62715,0,1,b27a16d07e23480d78c8802a84e9392bfa2f3e0870b554663e50d1552a533162,2025-11-10T19:58:06.520000 CVE-2025-62716,0,0,44959b4e6c5ebf75cb6a621fe29493726d6a963d190a8824e5423d37d1fe4aea,2025-10-27T13:20:15.637000 CVE-2025-62717,0,0,b48a408634b4308bcf5480ca6e32425ce8c4de7a70e0127fd562bf7fc32e3b87,2025-10-28T14:15:50.700000 -CVE-2025-62719,0,0,617617b995305bc0a3cbddefa838297ef028a11bc096175810513c6853edb3cc,2025-11-06T19:45:30.990000 +CVE-2025-62719,0,1,7547d93ac0b43fe04437deab29535ac0b98bcd94c8c5516fddaef251632971ac,2025-11-10T19:57:35.260000 CVE-2025-6272,0,0,69aacf1933584e6c697bffc9f4ef45990c895ad88679eb28f0e65dbaf6d7a0d5,2025-07-02T19:04:23.387000 -CVE-2025-62720,0,0,c651a7db8f899393ada97b0a9ef5e808cee8e7c2356525bb698c0c5a4de4be56,2025-11-06T19:45:30.990000 -CVE-2025-62721,0,0,939467bd21d83a283f2de97050e062482f1e3fd1cf7ee6acf614d38a39babd24,2025-11-06T19:45:30.990000 +CVE-2025-62720,0,1,227f86b148c70ca6ed944000b36f95e8c36f505c91108c32ab53b03cad624f0e,2025-11-10T19:57:02.250000 +CVE-2025-62721,0,1,1f3f58212cadb8c4fd8e1296e48d4fc1e14fc14594320ea65f0868cf474f31b9,2025-11-10T19:56:06.980000 CVE-2025-62722,0,0,8b7c86967cac4114c555af7e5806c7b8f3dd79a27bd8571c1decc169d3971197,2025-11-06T19:45:30.990000 CVE-2025-62723,0,0,8d90a8cfdd65404903e7ca0790b1f97750194f96f3f654679ab2c34f58612a6c,2025-10-31T19:31:48.540000 CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000 @@ -314003,7 +314034,8 @@ CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b93173 CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000 CVE-2025-6313,0,0,1562d4a1d7af34d5663a11ccca3c18498c794bf589f4002eb9f8648b22c4c20d,2025-07-11T15:51:05.223000 CVE-2025-6314,0,0,85263aadad702e79e29fb879ab737e30de52ac79d67682e5f45540c096d4466e,2025-07-11T15:51:18.450000 -CVE-2025-63147,1,1,fc599b72ec65b02b70d9538bdd69e52c51e96251cca4f657423f93c8c820c28b,2025-11-10T17:15:34.637000 +CVE-2025-63147,0,0,fc599b72ec65b02b70d9538bdd69e52c51e96251cca4f657423f93c8c820c28b,2025-11-10T17:15:34.637000 +CVE-2025-63149,1,1,bc68135f23aedec55a3e3c4e59cb21f3fcd10c751277892b30e6cbee6f897ae4,2025-11-10T20:15:48.863000 CVE-2025-6315,0,0,af65062d3a83820b00b6d86c3f2fcfd8c6f95503b5307720deb757d1fce33557,2025-06-26T21:10:39.227000 CVE-2025-63152,0,0,4b52dfa376457c4770558890e552990cdc7f53dd8216500d11da6bfb672b6dc5,2025-11-10T16:15:45.043000 CVE-2025-63153,0,0,ac071315738e5ea705491432de46183719f267c2f66e46e7c40c3ace4d4b69a4,2025-11-10T16:15:45.253000 @@ -314020,6 +314052,7 @@ CVE-2025-63248,0,0,a90a1aa279b743a232025cfaefdd22c8e8f25922acb5116f9391db1f458d6 CVE-2025-6325,0,0,f3c972f98a1c23aa683cb26d2d0dff7867ebb136a7db2835d1261ce78a5fa92e,2025-11-06T19:45:09.883000 CVE-2025-6327,0,0,df731aaaf2c4a0f0577c0682af0477569805323f5d687d61f51e8a8d0230caca,2025-11-06T19:45:09.883000 CVE-2025-6328,0,0,63de09c1b6d4168f841e3ee35db39bcbc388058f6d7e6132f1ca750dac04ea71,2025-07-11T15:52:09.140000 +CVE-2025-63288,1,1,1ec768edecae92f2127b33b48e1eb59b2c19a1b6f7b2481355e4a9343e7c2565,2025-11-10T19:15:57.490000 CVE-2025-6329,0,0,a7011e5bc2b5e58711262f4b75aef2100fd96b5a3e212f68f2e8d88a24c40180,2025-07-18T12:40:46.277000 CVE-2025-63293,0,0,724c690d70f53f02d2da601a7b432dad356c029359de5fef4cb54a0ca78b9356,2025-11-04T15:41:31.450000 CVE-2025-63294,0,0,fce41f2cf55433fdc31167bfb0253f28f3a40e1f06401427f9b7d59e2a49acc8,2025-11-06T19:45:30.990000 @@ -314035,6 +314068,7 @@ CVE-2025-6335,0,0,5b8214517b4e2328705628c07c57cad7dcf339f56383ed25d7611a220d052c CVE-2025-6336,0,0,c2ae3339f7f556d7f8479109d39981c789e75e2a76c15e57531c64e864f48049,2025-06-26T18:28:59.800000 CVE-2025-6337,0,0,20ffa5ad97e2fb5de859648c4c2bd5cf249ca44b435fa5f7c3de6344b086ac2d,2025-08-01T22:18:15.433000 CVE-2025-6338,0,0,d5c800ed34d59ce85516e9843ed463eb9c8b7acbef325ec9a754b0076681afc3,2025-10-16T15:28:59.610000 +CVE-2025-63384,1,1,0a1a479854caec7786797912f47ec0d5c7052f0ddeaa938ec3ebcb344c80f8c3,2025-11-10T20:15:49.013000 CVE-2025-6339,0,0,d659745c6a334711cbc431df03386a2313fb48b99d869c823cc1ffa19c8751b4,2025-10-31T20:12:25.937000 CVE-2025-6340,0,0,dacb53e17fd0fb578d899283d6d11eb80ece027ae37caccbd0442a6f52974b5a,2025-06-26T18:16:01.950000 CVE-2025-6341,0,0,6eb97d536857f3ed3053b28a0b496ad883570be814c5c64c307e1ec4c95a4991,2025-06-26T17:31:18.840000 @@ -314060,9 +314094,9 @@ CVE-2025-63451,0,0,fc2a89c12d73e97c4b8244bd211574e2deb0bcdebaacf6b096d5ed76fc385 CVE-2025-63452,0,0,80ded5c011c7a189fcedf63a17752b52f65cab539bc6401b41c6b9639db17f63,2025-11-07T20:46:42.993000 CVE-2025-63453,0,0,65ec3e84ec1dc3b14d1173db053c7edab368bd7f128d99b325e5406feccba198,2025-11-07T20:46:33.640000 CVE-2025-63454,0,0,fc308e95fe2714524e00bb0c486e8ee71dc646551e54a5bac6342bef541ec9b7,2025-11-05T17:29:08.600000 -CVE-2025-63455,1,1,c993efb6ef415de938f914b240e59a3657d692153964911e94ea411f0e95f393,2025-11-10T17:15:34.803000 -CVE-2025-63456,1,1,7aca755ac5ce5aa1cffb2ce44a95c355d96289a64e892c7cd216353c9724c3a4,2025-11-10T17:15:34.957000 -CVE-2025-63457,1,1,d5310080a56b2f0a1b15d55ba59d07a1acbc50d3952f5813b19ca96ecf2071fc,2025-11-10T17:15:35.100000 +CVE-2025-63455,0,1,9b58203648ef9bbba4d4428d0a075590672cdc8790e50f6c34b66f622c0336a3,2025-11-10T19:15:57.640000 +CVE-2025-63456,0,0,7aca755ac5ce5aa1cffb2ce44a95c355d96289a64e892c7cd216353c9724c3a4,2025-11-10T17:15:34.957000 +CVE-2025-63457,0,0,d5310080a56b2f0a1b15d55ba59d07a1acbc50d3952f5813b19ca96ecf2071fc,2025-11-10T17:15:35.100000 CVE-2025-63458,0,0,c47f4a636e88405048a40f1d3b801588601d316481054e42e8373f492503f4e4,2025-11-05T17:28:58.980000 CVE-2025-63459,0,0,c0cd9ccfb71b7691adcd08d383fe8b3dfc20bf2068c4227fe9cb6570cb016a7c,2025-11-05T17:29:18.877000 CVE-2025-6346,0,0,60adff065c15ee37ac94dab3cf86c7439ef9e78c708c480099857f05e535c99f,2025-06-26T14:44:35.813000 @@ -314078,7 +314112,7 @@ CVE-2025-63468,0,0,a94c21ad6eda661a717e8fd9c46224524fbdf0364f2665024bd0cc4c94198 CVE-2025-63469,0,0,8d859a03a1ef84840ac3ce34b51ca48224df775ff6252e01b067797dc96382f4,2025-11-05T17:30:23.953000 CVE-2025-6347,0,0,c4585203a879f9683683f765c15c8bf49754bc877d8a784b47893f930829bd1e,2025-07-11T12:24:57.650000 CVE-2025-6348,0,0,9e42f8c7e366619532860c7cd5bbe1d98918b912d4a7739385dee9f89f381c4f,2025-07-31T18:42:37.870000 -CVE-2025-63497,1,1,22283c5fab29ebdff9a11a17bcc4118c056f07dd12a101e178a0fbe57e9f793c,2025-11-10T17:15:35.250000 +CVE-2025-63497,0,0,22283c5fab29ebdff9a11a17bcc4118c056f07dd12a101e178a0fbe57e9f793c,2025-11-10T17:15:35.250000 CVE-2025-6350,0,0,a86ee8e77b19eb2905a6818fe7d360409130293abf6abafd272b9012f376c67f,2025-07-07T15:28:10.050000 CVE-2025-6351,0,0,58d9ebbc99a1fb6475be804d7a4fe745e483538a102155a9e63fef3060dd4f15,2025-06-26T14:05:27.120000 CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000 @@ -314089,19 +314123,19 @@ CVE-2025-63544,0,0,e61a731876975a33f90c5d1fec5992f53609350b137c1b076bb158fdeb702 CVE-2025-6355,0,0,b9a2c6240bcee837befcd99c3072f09de30a7862de2fff8d81a072921a1e132c,2025-06-26T13:25:42.487000 CVE-2025-63551,0,0,c2986090c46f5449f7b09ffc42d22fd779d747524584a792c0a6c7e01b05db6a,2025-11-07T16:15:42.077000 CVE-2025-6356,0,0,761cd0ad99957f2e0c9e007ddb509923b5d31be3535a0aa240f06ebfbe76fede,2025-06-26T13:17:37.473000 -CVE-2025-63560,0,1,d21dfb278c3e64cdd89703b8c0bd8120b7bb8091f39ea346f52ad777add109df,2025-11-10T17:15:35.413000 +CVE-2025-63560,0,0,d21dfb278c3e64cdd89703b8c0bd8120b7bb8091f39ea346f52ad777add109df,2025-11-10T17:15:35.413000 CVE-2025-63561,0,0,8d364999e2a10332de8aa866e08819d633a0b7ef3e30eafdb1b05b629604e961,2025-11-05T19:32:00.983000 CVE-2025-63562,0,0,36d3ca9887d6d45c89417245d2c2626d730106cdb2b22c877783190801910a1d,2025-11-05T19:24:12.850000 CVE-2025-63563,0,0,3a3952d942d6d5562a54edb31c93b66dc12f9c02a49ac107c3811b9d1807fe79,2025-11-05T19:10:38.197000 CVE-2025-6357,0,0,d5588ad4e25e1b2b823de5512a21009640a1b05467799f68a81f2448bf8cd2ab,2025-06-26T13:10:38.540000 CVE-2025-6358,0,0,e3ae463d2ac1773151451d366ab85d1d8dfcdf17ef41453f2202072b1b028458,2025-06-26T13:04:08.447000 CVE-2025-63585,0,0,a75cb9b04aac9380125eb8a9ee687eeae457979960a31549fb81f9c865da887f,2025-11-06T22:15:43.203000 -CVE-2025-63588,0,1,954714ae8448464030db79c3037da489821fc4edf109f763da410477dd179d4e,2025-11-10T17:29:28.327000 -CVE-2025-63589,0,1,c4fd4631d1f920b6b3b02f975efd34e78e785f22d9984d5b64f37c0217e34361,2025-11-10T17:29:33.603000 +CVE-2025-63588,0,0,954714ae8448464030db79c3037da489821fc4edf109f763da410477dd179d4e,2025-11-10T17:29:28.327000 +CVE-2025-63589,0,0,c4fd4631d1f920b6b3b02f975efd34e78e785f22d9984d5b64f37c0217e34361,2025-11-10T17:29:33.603000 CVE-2025-6359,0,0,4c6b3a89015ba9383cd0f30179b8f5c4de98d22d2446e398ba201465b8f64821,2025-06-26T12:59:46.793000 CVE-2025-63593,0,0,73cba8fc4b3c191f0e6a87e4bf025f9b648698d6a725a50e4a8db1b82d338409,2025-11-07T18:33:34.427000 CVE-2025-6360,0,0,cd47aa26c5ecbd48de29b33b9fb52e4ccfc785bed014ddf3d7b77089b3be3045,2025-06-26T15:35:49.490000 -CVE-2025-63601,0,1,a9aaad4c2ec16e08f794ee422b03c50a32421538037da46f9529c32a824db980,2025-11-10T17:15:35.603000 +CVE-2025-63601,0,0,a9aaad4c2ec16e08f794ee422b03c50a32421538037da46f9529c32a824db980,2025-11-10T17:15:35.603000 CVE-2025-63608,0,0,e958e593af9bc02b3d721e38f2c301060cffaf6161eaba950bb44aeacf054795,2025-10-30T15:15:44.690000 CVE-2025-6361,0,0,69dfed4b6ee28f48f4584674801cbba5191a06ac465e39fa526b231064a630aa,2025-06-26T15:33:24.173000 CVE-2025-6362,0,0,ed837364dd32376dc1cfdf8d173bec48f29c4e974fad65f0c43a106ea3f3894b,2025-06-26T15:30:56.573000 @@ -314142,14 +314176,14 @@ CVE-2025-6377,0,0,ba3054fbb65a50a5d08a5d5b714d5d1e90e671230206993f7c04c49b605588 CVE-2025-6378,0,0,c9f832cbc4a58e4712b3be36fa473dbfb776e558d71ae65da6d05b8879aaf667,2025-07-07T17:15:44.053000 CVE-2025-63783,0,0,69f74fd0edfecb70b04b179f6826c5aca1d9ba2798403fefaa9152fa27a8848f,2025-11-07T16:15:42.943000 CVE-2025-63784,0,0,ee3390aeb81d17f96f1a0b5e38ea9bbe2a6ca24e934c4b8b6937095606924520,2025-11-07T17:15:47.777000 -CVE-2025-63785,0,0,717b9277784f27eee4ea7b9582022135eea3ec07c1e32a8ee108f5d8a53b4cdf,2025-11-07T17:15:47.887000 +CVE-2025-63785,0,1,a12babbfbbd9d789fe23a5f6696cf097af25aaf0729bfa58f40388221e38c513,2025-11-10T20:15:49.180000 CVE-2025-6379,0,0,a573d0789f74e2940a233e26e5770bd43ee83276728b28e7918a6f6c0e9e28bc,2025-07-07T15:24:31.510000 CVE-2025-6380,0,0,8038af934fb98ec6cb1fd37b6f439a7d7ffbe43ae5c1a00c7e81bd72f09813f4,2025-07-25T15:29:19.837000 CVE-2025-6381,0,0,bcb772a2599dc7010241cc7bbab88371a6f4c6ca137948aff05aab6ef1ed3e85,2025-07-07T15:24:28.070000 CVE-2025-6382,0,0,efd8750cb574f4b8ddeed5e07b9915e567566e97e99b145524009524920bff34,2025-07-25T15:29:19.837000 CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000 -CVE-2025-63834,1,1,b0a37a664108d49f804a54195e3ba850ad0c1bf3b0dfff7bac397df2c1f23ba4,2025-11-10T17:15:35.810000 -CVE-2025-63835,1,1,c923463e864c323df36fe3fdfac04f404f04d6a58e5aa748da60c8a0ef70961d,2025-11-10T17:15:35.960000 +CVE-2025-63834,0,0,b0a37a664108d49f804a54195e3ba850ad0c1bf3b0dfff7bac397df2c1f23ba4,2025-11-10T17:15:35.810000 +CVE-2025-63835,0,0,c923463e864c323df36fe3fdfac04f404f04d6a58e5aa748da60c8a0ef70961d,2025-11-10T17:15:35.960000 CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000 CVE-2025-6385,0,0,464badea5b662001b494c98ff4f924b7b5edadd5780086f421fd9e2a4d9d1971,2025-07-25T15:29:19.837000 CVE-2025-6386,0,0,36273686c966a96e6687737cbcaf18f7573e7dd2a4ed9617fdf7c38b7cac9900,2025-07-08T16:18:34.923000 @@ -314185,13 +314219,13 @@ CVE-2025-64102,0,0,1df615ed6c683b39edf58757662a22a34822d3a0ae651fd328b5e3a4ca9e8 CVE-2025-64103,0,0,cb99e58dd580d5243efc8885d5b88c24de593adde2cd983bd7dda52d2ec3ace5,2025-11-04T13:17:27.277000 CVE-2025-64104,0,0,76e01e5ec2741e99868382ab244e157ae3e008ce3739ce1f1370b3ec045df2a1,2025-10-30T16:15:36.777000 CVE-2025-64106,0,0,8d0d0da341c8b442027d8166520640f24b9a05dc2fdad57a4aa861464de70c83,2025-11-07T17:48:28.413000 -CVE-2025-64107,0,0,001f015e85ba4bab09340650b41f2f5ff1083d40eb098f4917948d1960ebb5f8,2025-11-06T19:45:30.990000 -CVE-2025-64108,0,1,72347f86b202e01bb8b02e7e4022ed10e87ecb41d6313ed68752e79828f97619,2025-11-10T18:38:51.153000 +CVE-2025-64107,0,1,0f28aab7fde5f8417937b9bb449169c337c894bdba79c5ad3b84a3886b43ea42,2025-11-10T19:54:02.790000 +CVE-2025-64108,0,0,72347f86b202e01bb8b02e7e4022ed10e87ecb41d6313ed68752e79828f97619,2025-11-10T18:38:51.153000 CVE-2025-64109,0,0,e6bc5c7b9f00a4995c67f05b3ffe7fbd006d3f6d0e51b75e8fb6bf15c9ef462b,2025-11-06T19:45:30.990000 CVE-2025-6411,0,0,0e09e6bd75e65ae7b58d0e0820c1abe7bd7d437f8f8a3059af1dd0350f51a6eb,2025-06-24T14:51:00.910000 CVE-2025-64110,0,0,6d35e3ee7dc5b2db4c42c80022c80472515ca060ef7711077840c0df7a8ec1f2,2025-11-07T13:04:09.867000 CVE-2025-64112,0,0,b4283814a637ab37f3a969db665d1b5e5d049ba1daf6949e56e81119454af0db,2025-11-04T15:41:56.843000 -CVE-2025-64114,0,1,bdfd6c45f47eff0499e98d203499ce6a114bcb0b15053599d3ce2961591b8b16,2025-11-10T17:26:24.800000 +CVE-2025-64114,0,0,bdfd6c45f47eff0499e98d203499ce6a114bcb0b15053599d3ce2961591b8b16,2025-11-10T17:26:24.800000 CVE-2025-64115,0,0,a0aeadfa5dd6a653fe125b489233dfa63db91b245fedeb62eb8b683df3e3c179,2025-11-04T15:41:56.843000 CVE-2025-64116,0,0,77064deeb9efb63b2a86fb2dc2bcad53b0bc226ce19af5534e6fdbc1917f2513,2025-11-04T15:41:56.843000 CVE-2025-64118,0,0,7ee60135c6c675127334ff309c04568152510afba30a328baecabeb60388a02f,2025-11-04T15:41:56.843000 @@ -314364,8 +314398,8 @@ CVE-2025-64454,0,0,5ba67ec3e05265328e78c5c20da3383e039ef9335dfeb604dc9d730d177c9 CVE-2025-64455,0,0,78d5e89d360486d82ec519f08bd749f1aa350127a11da8d22bf0f8110a68bba2,2025-11-05T04:15:33.703000 CVE-2025-64456,0,0,3449aa08b0efc26eff0766895e8ca0eb967381bd50cce3eb80824e21ce0dfe40,2025-11-10T14:15:43.083000 CVE-2025-64457,0,0,868373153fe11bc1aea8de2150dbeff5e518a532453867ba2287977f6d335ed4,2025-11-10T14:15:43.280000 -CVE-2025-64458,0,1,93f0deff87755d90f4fb4a57a71ece98ab382b1bb568ddf4419727602e7f2aae,2025-11-10T18:33:02.957000 -CVE-2025-64459,0,1,3984a2cb3dd030fa97d86e4b0194627c28647a85de9df549c9258466955d583b,2025-11-10T18:25:59.883000 +CVE-2025-64458,0,0,93f0deff87755d90f4fb4a57a71ece98ab382b1bb568ddf4419727602e7f2aae,2025-11-10T18:33:02.957000 +CVE-2025-64459,0,0,3984a2cb3dd030fa97d86e4b0194627c28647a85de9df549c9258466955d583b,2025-11-10T18:25:59.883000 CVE-2025-6446,0,0,c840c23b9a5844f104de8c17bfe6725789f2827a65d2e186e72427b82676ca3d,2025-10-29T16:32:50.873000 CVE-2025-6447,0,0,e271acf2bd065000d8c208e24c6de28016b98462b53bd886e58c2cb8af847e74,2025-10-23T20:06:00.793000 CVE-2025-64472,0,0,133c4443d2bbcf1ec5e29f76cee1bcef2461003c3c1154bb7964290e786b0564,2025-11-06T04:15:32.657000 @@ -316508,7 +316542,7 @@ CVE-2025-8845,0,0,8c89f882ea1fe4b26ef3cd6bc49d94e00f5f5cbb76bb487972f0b30cdd5dc1 CVE-2025-8846,0,0,97b48124ed7e5916fe3cd28822323eb4e4b9c3ac315328880a3919e66bc6cda3,2025-09-15T14:59:51.370000 CVE-2025-8847,0,0,9dc75db6b8a15cb558c17cebcb7250b2751bb0d2a2cd438f2977bc9d8eba98b6,2025-09-11T15:32:32.850000 CVE-2025-8848,0,0,61a71362f8e1414faa2e056962e21818afc4e167e8af41a1a88e977aa2c0ac14,2025-10-30T17:34:52.680000 -CVE-2025-8849,0,1,f505270bf9b42502d2c374b05a400df9f1f8263dc45ead974b40a3554ab159ac,2025-11-10T17:14:43.587000 +CVE-2025-8849,0,0,f505270bf9b42502d2c374b05a400df9f1f8263dc45ead974b40a3554ab159ac,2025-11-10T17:14:43.587000 CVE-2025-8850,0,0,82b8bea52a2a7d3c2f962026e21929fc045fca1b67000fa1b5d7be07e18330f2,2025-11-04T15:41:56.843000 CVE-2025-8851,0,0,0f7c27aa050a66a7724015ce7de68549782b983dd86356b15a5dcdf8b06855c9,2025-10-30T21:10:36.717000 CVE-2025-8852,0,0,c6d0218e3de8c72ea53e144096effa5d82542f91a23f9750511191cf8b9b298d,2025-09-16T18:45:36.473000