admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 01:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-08-14T20:00:11.906294+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-08-14 20:03:54 +00:00
1 parent 748ca955d0
commit 49c95dd54a
90 files changed
+5331 -371
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2023/CVE-2023-382xx/CVE-2023-38264.json
+64 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-38264",
"sourceIdentifier": "[email protected]",
"published": "2024-05-14T13:21:29.417",
"lastModified": "2024-11-21T08:13:12.620",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:34:02.877",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,22 +71,60 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:java_software_development_kit:*:*:*:*:java_technology:*:*:*",
"versionStartIncluding": "7.1.0.0",
"versionEndExcluding": "7.1.5.22",
"matchCriteriaId": "E8938691-65D6-4371-87D1-561E26B6E20E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:java_software_development_kit:*:*:*:*:java_technology:*:*:*",
"versionStartIncluding": "8.0.0.0",
"versionEndExcluding": "8.0.8.25",
"matchCriteriaId": "7C65BC78-5E46-4231-A63C-3187B980E969"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/260578",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7150727",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/260578",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7150727",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-430xx/CVE-2023-43040.json
+57 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-43040",
"sourceIdentifier": "[email protected]",
"published": "2024-05-14T13:46:23.767",
"lastModified": "2024-11-21T08:23:38.423",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:30:51.017",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -51,22 +71,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:storage_fusion_hci:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.5.2",
"versionEndExcluding": "2.8.0",
"matchCriteriaId": "AFB9D65D-60C4-40B6-86A0-E2D2CDFCDF3A"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/266807",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7151040",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/266807",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7151040",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-436xx/CVE-2023-43687.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2023-43687",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:26.270",
"lastModified": "2025-08-14T18:15:26.270",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). There is a Race condition that leads to code execution because of a lack of locks between file verification and execution."
}
],
"metrics": {},
"references": [
{
"url": "https://www.malwarebytes.com/secure/cves/cve-2023-43687",
"source": "[email protected]"
}
]
}
CVE-2023/CVE-2023-436xx/CVE-2023-43694.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-43694",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T16:15:27.103",
"lastModified": "2025-08-14T16:15:27.103",
"lastModified": "2025-08-14T19:15:27.783",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later). An Out of bounds read in several disassembling utilities causes stability issues and denial of service."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.5,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"references": [
{
"url": "https://www.malwarebytes.com/secure/cves/cve-2023-43694",
CVE-2023/CVE-2023-516xx/CVE-2023-51636.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-51636",
"sourceIdentifier": "[email protected]",
"published": "2024-05-22T20:15:08.407",
"lastModified": "2024-11-21T08:38:31.923",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:29:24.620",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avira:avira_prime:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.27.19",
"matchCriteriaId": "6258B9CC-A222-4CA5-9302-31FC56B2D74E"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-469/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-469/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-516xx/CVE-2023-51637.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-51637",
"sourceIdentifier": "[email protected]",
"published": "2024-05-22T20:15:08.713",
"lastModified": "2024-11-21T08:38:32.047",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:28:44.907",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:santesoft:sante_pacs_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.7",
"matchCriteriaId": "1354EFE9-EF1A-4848-BAD2-8FACFA64AE08"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-468/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-468/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-103xx/CVE-2024-10383.json
+90 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-10383",
"sourceIdentifier": "[email protected]",
"published": "2025-02-07T15:15:16.703",
"lastModified": "2025-02-07T15:15:16.703",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-14T19:24:54.723",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 5.8
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
@@ -51,18 +71,83 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"versionStartIncluding": "15.11.0",
"versionEndExcluding": "17.3.0",
"matchCriteriaId": "62E96CBC-9933-4126-BFE1-6FD6D04707CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"versionStartIncluding": "15.11.0",
"versionEndExcluding": "17.3.0",
"matchCriteriaId": "E500AEAA-4822-421F-81D7-9ED5443C4ED8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.4.0:*:*:*:community:*:*:*",
"matchCriteriaId": "4FEBC1F7-0AAA-4CA2-B099-3F4218900FB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.4.0:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "3AC3130C-A3AA-403A-85D9-92FD2B8BC091"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.5.0:*:*:*:community:*:*:*",
"matchCriteriaId": "97618D0B-B13A-4111-A78E-3BCB4F023382"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.5.0:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "603F1273-E30C-4EBB-AFEA-6713D273C4F3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.6.0:*:*:*:community:*:*:*",
"matchCriteriaId": "3A39B04B-D109-467A-82E1-3FE6CBA48FEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gitlab:gitlab:17.6.0:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "1212AE23-98AB-4E7A-AAB5-0AD266DFC7D4"
}
]
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/500785",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://hackerone.com/reports/2765778",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/500785",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Broken Link"
]
}
]
}
CVE-2024/CVE-2024-125xx/CVE-2024-12552.json
+49 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12552",
"sourceIdentifier": "[email protected]",
"published": "2024-12-13T23:15:05.553",
"lastModified": "2024-12-13T23:15:05.553",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:53:45.197",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -16,6 +16,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
@@ -51,14 +73,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wacom:center:6.4.7.5003:*:*:*:*:*:*:*",
"matchCriteriaId": "09E95A0C-03B1-40E7-A7E3-577F5A0CCFBC"
}
]
}
]
}
],
"references": [
{
"url": "https://cdn.wacom.com/u/productsupport/drivers/win/professional/releasenotes/Windows_6.4.8-2.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1683/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-125xx/CVE-2024-12553.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12553",
"sourceIdentifier": "[email protected]",
"published": "2024-12-13T23:15:06.310",
"lastModified": "2024-12-13T23:15:06.310",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:47:20.423",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:geovision:gv-asmanager:6.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9A576DA7-0427-4984-AFA2-8072661CDBCB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1682/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-127xx/CVE-2024-12754.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12754",
"sourceIdentifier": "[email protected]",
"published": "2024-12-30T17:15:07.127",
"lastModified": "2024-12-30T17:15:07.127",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:46:10.360",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:anydesk:anydesk:8.0.9:*:*:*:*:windows:*:*",
"matchCriteriaId": "CA257560-5E79-445F-8981-ABB95257E30E"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1711/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-128xx/CVE-2024-12828.json
+49 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12828",
"sourceIdentifier": "[email protected]",
"published": "2024-12-30T17:15:07.717",
"lastModified": "2024-12-30T17:15:07.717",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:41:57.413",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -16,6 +16,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
@@ -51,14 +73,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webmin:webmin:2.104:*:*:*:*:*:*:*",
"matchCriteriaId": "168F9572-2109-460B-B422-D0DCBF85A144"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/webmin/authentic-theme/commit/61e5b10227b50407e3c6ac494ffbd4385d1b59df",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1725/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-223xx/CVE-2024-22338.json
+67 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-22338",
"sourceIdentifier": "[email protected]",
"published": "2024-05-31T11:15:09.180",
"lastModified": "2024-11-21T08:56:05.150",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:18:53.540",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -49,24 +69,65 @@
"value": "CWE-20"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:security_verify_access_oidc_provider:*:*:*:*:*:*:*:*",
"versionStartIncluding": "22.09",
"versionEndIncluding": "23.03",
"matchCriteriaId": "CC2E06DE-EF89-4F0B-8828-8E25ECCAD869"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/279978",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7155340",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/279978",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7155340",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-287xx/CVE-2024-28782.json
+64 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-28782",
"sourceIdentifier": "[email protected]",
"published": "2024-04-03T12:15:12.747",
"lastModified": "2024-11-21T09:06:55.783",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:52:19.970",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 4.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -51,22 +71,60 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.10.0.0",
"versionEndIncluding": "1.10.11.0",
"matchCriteriaId": "8FA89838-3E05-4778-9323-DE51CC10FD18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.10.12.0",
"versionEndIncluding": "1.10.18.0",
"matchCriteriaId": "EDAE0504-D072-446E-AF1D-D86C300A64F4"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/285698",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7145683",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/285698",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7145683",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-287xx/CVE-2024-28787.json
+64 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-28787",
"sourceIdentifier": "[email protected]",
"published": "2024-04-04T18:15:14.200",
"lastModified": "2024-11-21T09:06:56.043",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:54:13.063",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.8
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.8
}
]
},
@@ -51,22 +71,60 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:application_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.01",
"versionEndIncluding": "24.03",
"matchCriteriaId": "4519FAA7-A9FF-4531-A079-2E95054F508E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndIncluding": "10.0.7",
"matchCriteriaId": "59753637-31E8-4A8A-8C65-6F0D7746F217"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/286584",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7145828",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/286584",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7145828",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-319xx/CVE-2024-31906.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-31906",
"sourceIdentifier": "[email protected]",
"published": "2025-01-26T15:15:22.770",
"lastModified": "2025-01-26T15:15:22.770",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:05:15.953",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:automation_decision_services:23.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1631CFA8-328C-4059-BBB4-01EBC8D15D64"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7150662",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-373xx/CVE-2024-37312.json
+76 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-37312",
"sourceIdentifier": "[email protected]",
"published": "2024-06-14T15:15:51.197",
"lastModified": "2024-11-21T09:23:35.253",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:18:22.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
]
},
@@ -49,32 +69,80 @@
"value": "CWE-284"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.0.0",
"matchCriteriaId": "4F447BAA-1F43-49B3-BF3F-50EEB0D569D8"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw7g-959g-vj6q",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/nextcloud/user_oidc/commit/9f68a716ecd264160a7c098b8840313f1ac855f2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://hackerone.com/reports/2376929",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw7g-959g-vj6q",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/nextcloud/user_oidc/commit/9f68a716ecd264160a7c098b8840313f1ac855f2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://hackerone.com/reports/2376929",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-378xx/CVE-2024-37886.json
+66 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-37886",
"sourceIdentifier": "[email protected]",
"published": "2024-06-14T16:15:13.800",
"lastModified": "2024-11-21T09:24:28.280",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:03:04.897",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
@@ -51,30 +71,68 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.3.5",
"matchCriteriaId": "52E0C5D0-082E-4B38-B5BD-2BC9AFC844FC"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw5h-29xf-g55g",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/nextcloud/user_oidc/pull/715",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Patch"
]
},
{
"url": "https://hackerone.com/reports/1878391",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw5h-29xf-g55g",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/nextcloud/user_oidc/pull/715",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Patch"
]
},
{
"url": "https://hackerone.com/reports/1878391",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking"
]
}
]
}
CVE-2024/CVE-2024-379xx/CVE-2024-37945.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2024-37945",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:28.400",
"lastModified": "2025-08-14T18:15:28.400",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBits WPBITS Addons For Elementor Page Builder allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through 1.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wpbits-addons-for-elementor/vulnerability/wordpress-wpbits-addons-for-elementor-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-383xx/CVE-2024-38325.json
+46 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-38325",
"sourceIdentifier": "[email protected]",
"published": "2025-01-27T16:15:31.117",
"lastModified": "2025-01-27T16:15:31.117",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:10:41.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:storage_defender:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndExcluding": "2.0.8",
"matchCriteriaId": "C8CB2BC3-353A-43AF-83D7-EA9A62CE7A7B"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7168640",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-383xx/CVE-2024-38335.json
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-38335",
"sourceIdentifier": "[email protected]",
"published": "2025-07-22T18:15:35.180",
"lastModified": "2025-07-25T15:29:44.523",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:49:03.423",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_network_threat_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.0.0",
"versionEndIncluding": "1.3.1",
"matchCriteriaId": "D236EFAF-DA8A-4408-BD0E-B8308486A54F"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7240244",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-417xx/CVE-2024-41739.json
+28 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-41739",
"sourceIdentifier": "[email protected]",
"published": "2025-01-24T14:15:31.397",
"lastModified": "2025-01-24T14:15:31.397",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:57:34.287",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,35 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:cognos_dashboards_on_cloud_pak_for_data:4.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "77CF563B-BE6E-4FEE-AD91-8CCFE36EED01"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:cognos_dashboards_on_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FE8E73A9-DD45-4D81-8AE0-121A85CC9C2C"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7177766",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-44xx/CVE-2024-4454.json
+76 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-4454",
"sourceIdentifier": "[email protected]",
"published": "2024-05-22T20:15:10.130",
"lastModified": "2024-11-21T09:42:51.820",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-08-14T19:28:08.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -16,6 +16,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
@@ -51,14 +73,64 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*",
"matchCriteriaId": "1755AB17-E9C9-4616-98B4-843B75668CA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:withsecure:elements_endpoint_protection:17:*:*:*:*:*:*:*",
"matchCriteriaId": "3A96B0F0-1713-4621-A463-8FB513490F3B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:withsecure:email_and_server_security:15:*:*:*:*:*:*:*",
"matchCriteriaId": "2E1B31DD-3C88-4826-8E24-588FED197C5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:withsecure:server_security:15:*:*:*:*:*:*:*",
"matchCriteriaId": "015D02AD-F46F-46DF-9CD8-E0DB78CE17DD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-491/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-491/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-498xx/CVE-2024-49822.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-49822",
"sourceIdentifier": "[email protected]",
"published": "2025-03-18T15:15:56.283",
"lastModified": "2025-03-18T15:15:56.283",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:12:54.283",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,6 +19,26 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
@@ -51,10 +71,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_advisor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.0.0",
"versionEndExcluding": "2.6.5",
"matchCriteriaId": "2E625780-B323-41AE-99BB-BF405F32A6CB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7186424",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-514xx/CVE-2024-51461.json
+46 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-51461",
"sourceIdentifier": "[email protected]",
"published": "2025-04-11T02:15:17.250",
"lastModified": "2025-04-11T15:39:52.920",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:21:39.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_wincollect:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0",
"versionEndExcluding": "10.1.14",
"matchCriteriaId": "9D717106-F041-45EF-A7E1-47EEF7DD6DE9"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7230614",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-539xx/CVE-2024-53945.json
+1 -5
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-53945",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T14:15:30.237",
"lastModified": "2025-08-14T16:15:30.883",
"lastModified": "2025-08-14T19:15:30.927",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -43,10 +43,6 @@
{
"lang": "en",
"value": "CWE-77"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
CVE-2024/CVE-2024-558xx/CVE-2024-55889.json
+54 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-55889",
"sourceIdentifier": "[email protected]",
"published": "2024-12-13T14:15:22.653",
"lastModified": "2024-12-13T21:15:13.483",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:56:50.060",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
@@ -51,18 +71,47 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.10",
"matchCriteriaId": "17583C51-6485-4F89-BCE0-538A0F2793B0"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/thorsten/phpMyFAQ/commit/fa0f7368dc3288eedb1915def64ef8fb270f711d",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-m3r7-8gw7-qwvc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-m3r7-8gw7-qwvc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-19xx/CVE-2025-1997.json
+79 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1997",
"sourceIdentifier": "[email protected]",
"published": "2025-03-27T15:15:54.550",
"lastModified": "2025-03-27T16:45:12.210",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:13:08.933",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
}
]
},
@@ -51,10 +71,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0.0",
"versionEndExcluding": "8.0.1.5",
"matchCriteriaId": "3D02CEF4-E668-46C3-B136-9FBB0D1F1B65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FFD6AB40-6302-4B11-809C-907ABBEDF7DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.0.0.0",
"versionEndExcluding": "7.0.5.26",
"matchCriteriaId": "79421241-7D68-4B82-A53D-A47986F05FE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.1.0.0",
"versionEndExcluding": "7.1.2.22",
"matchCriteriaId": "5225DF4D-BDFD-4ECE-843E-6E51B00D0DCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.0.0",
"versionEndExcluding": "7.2.3.15",
"matchCriteriaId": "19CB1BD1-C6C2-4B72-9FF2-6463F76E8E5F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.0.0",
"versionEndExcluding": "7.3.2.10",
"matchCriteriaId": "7FB1D16B-E73A-4004-AD8D-B1E8238CA502"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7229035",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-19xx/CVE-2025-1998.json
+51 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1998",
"sourceIdentifier": "[email protected]",
"published": "2025-03-27T15:15:54.707",
"lastModified": "2025-03-27T16:45:12.210",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:13:16.593",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,58 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0.0",
"versionEndExcluding": "8.0.1.5",
"matchCriteriaId": "3D02CEF4-E668-46C3-B136-9FBB0D1F1B65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:devops_deploy:8.1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FFD6AB40-6302-4B11-809C-907ABBEDF7DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.1.0.0",
"versionEndExcluding": "7.1.2.22",
"matchCriteriaId": "5225DF4D-BDFD-4ECE-843E-6E51B00D0DCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.0.0",
"versionEndExcluding": "7.2.3.15",
"matchCriteriaId": "19CB1BD1-C6C2-4B72-9FF2-6463F76E8E5F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:urbancode_deploy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.0.0",
"versionEndExcluding": "7.3.2.10",
"matchCriteriaId": "7FB1D16B-E73A-4004-AD8D-B1E8238CA502"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7229034",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-211xx/CVE-2025-21110.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-21110",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:29.607",
"lastModified": "2025-08-14T18:15:29.607",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Dell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.5,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-250"
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-us/000356822/dsa-2025-313-security-update-for-dell-data-lakehouse-multiple-vulnerabilities",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-26xx/CVE-2025-2670.json
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2670",
"sourceIdentifier": "[email protected]",
"published": "2025-07-09T15:15:24.370",
"lastModified": "2025-07-10T13:17:30.017",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:48:18.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:openpages:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0.0",
"versionEndExcluding": "9.0.0.5",
"matchCriteriaId": "A4D7EA3D-F8C3-48AB-942A-11919C0B7687"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7239153",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-28xx/CVE-2025-2824.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2824",
"sourceIdentifier": "[email protected]",
"published": "2025-08-01T18:15:51.587",
"lastModified": "2025-08-04T15:06:15.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:49:21.380",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,6 +19,26 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 4.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
@@ -51,10 +71,50 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operational_decision_manager:8.11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "354E0F39-CA38-4A27-973B-7415C7A40FC2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operational_decision_manager:8.11.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E4E8894F-E7F5-4514-873A-C63CB8DFCC6C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operational_decision_manager:8.12.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "60B60CD2-D71D-43FE-B9AD-A11FE5FC132E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operational_decision_manager:9.0.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9DCB5F24-4C9B-4D1F-85BE-08708EFB777A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operational_decision_manager:9.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD731C1-390A-401C-A2BC-931445381424"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7241286",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-331xx/CVE-2025-33118.json
+105 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-33118",
"sourceIdentifier": "[email protected]",
"published": "2025-08-01T18:15:51.797",
"lastModified": "2025-08-04T15:06:15.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:49:42.193",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -12,14 +12,14 @@
},
{
"lang": "es",
"value": "IBM QRadar SIEM 7.5 a 7.5.0 Update Pack 12 es vulnerable a Cross-Site Scripting almacenadas. Esta vulnerabilidad permite a los usuarios autenticados incrustar c\u00f3digo JavaScript arbitrario en la interfaz web, alterando as\u00ed la funcionalidad prevista y pudiendo provocar la divulgaci\u00f3n de credenciales en una sesi\u00f3n de confianza."
"value": "IBM QRadar SIEM 7.5 a 7.5.0 Update Pack 12 es vulnerable a Cross-Site Scripting almacenado. Esta vulnerabilidad permite a los usuarios autenticados incrustar c\u00f3digo JavaScript arbitrario en la interfaz web, alterando as\u00ed la funcionalidad prevista y pudiendo provocar la divulgaci\u00f3n de credenciales en una sesi\u00f3n de confianza."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -51,10 +71,90 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*",
"matchCriteriaId": "DACA17CC-8B71-4E71-B075-BFFB65AD989C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:*:*:*:*:*:*",
"matchCriteriaId": "BA60FDE5-8C40-4C7A-97CF-BA2A64BF307D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_10:*:*:*:*:*:*",
"matchCriteriaId": "3D6ADD3A-99BC-495F-9835-92D16DF18FC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_11:*:*:*:*:*:*",
"matchCriteriaId": "5C899CFD-26F5-43FA-A39E-7196E2929AD9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_12:*:*:*:*:*:*",
"matchCriteriaId": "0C534E65-D418-4A5E-B326-F449337C0408"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:*:*:*:*:*:*",
"matchCriteriaId": "AB518E06-00BA-48F3-8AEC-6E1E97CAA2CC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:*",
"matchCriteriaId": "289027A2-178C-45DE-A86F-1207F23D13B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:*:*:*:*:*:*",
"matchCriteriaId": "5047AECF-879B-427A-ACF7-ECB10965E1B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:*:*:*:*:*:*",
"matchCriteriaId": "CD448AB8-E3CC-41A1-9D32-B1B35C68FA5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:*:*:*:*:*:*",
"matchCriteriaId": "9F4014E8-42E2-4B76-B2DA-8B50929A4AB5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7:*:*:*:*:*:*",
"matchCriteriaId": "BD0A459A-C74A-4E18-83B3-4C29D47D2C2B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8:*:*:*:*:*:*",
"matchCriteriaId": "721EFDD7-EE35-430C-AF17-C54BDB10434E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_9:*:*:*:*:*:*",
"matchCriteriaId": "4C3D4D7E-0B57-47E3-BD16-5BBCE05063F5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7241303",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-35xx/CVE-2025-3528.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-3528",
"sourceIdentifier": "[email protected]",
"published": "2025-05-09T12:15:33.223",
"lastModified": "2025-05-12T17:32:32.760",
"lastModified": "2025-08-14T18:15:29.800",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -52,6 +52,10 @@
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHBA-2025:9645",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-3528",
"source": "[email protected]"
CVE-2025/CVE-2025-489xx/CVE-2025-48913.json
+53 -3
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-48913",
"sourceIdentifier": "[email protected]",
"published": "2025-08-08T10:15:25.663",
"lastModified": "2025-08-08T20:30:18.180",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:46:03.753",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility.\n\nUsers are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue."
},
{
"lang": "es",
"value": "Si se permite a usuarios no confiables configurar JMS para Apache CXF, anteriormente pod\u00edan usar URL RMI o LDAP, lo que podr\u00eda generar capacidades de ejecuci\u00f3n de c\u00f3digo. Esta interfaz ahora est\u00e1 restringida para rechazar dichos protocolos, eliminando esta posibilidad. Se recomienda a los usuarios actualizar a las versiones 3.6.8, 4.0.9 o 4.1.3, que solucionan este problema."
}
],
"metrics": {
@@ -45,12 +49,58 @@
"value": "CWE-20"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.6.8",
"matchCriteriaId": "9DBCF1F5-333E-4307-ACC5-928C778200FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.0.0",
"versionEndExcluding": "4.0.9",
"matchCriteriaId": "326D5496-A8EB-4B4B-B489-CCD4936B6E3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.0",
"versionEndExcluding": "4.1.3",
"matchCriteriaId": "737DD9AE-43EC-4D4E-89C6-C84A3FF1A260"
}
]
}
]
}
],
"references": [
{
"url": "https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-506xx/CVE-2025-50609.json
+42 -3
View File
@@ -2,16 +2,55 @@
"id": "CVE-2025-50609",
"sourceIdentifier": "[email protected]",
"published": "2025-08-13T16:15:31.480",
"lastModified": "2025-08-13T17:33:46.673",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T18:15:29.967",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack."
},
{
"lang": "es",
"value": "Se ha descubierto una vulnerabilidad de desbordamiento de b\u00fafer en Netis WF2880 v2.1.40207 en la funci\u00f3n Function_00465620 del archivo cgitest.cgi. Los atacantes pueden activar esta vulnerabilidad controlando el valor de specific_parame en el payload, lo que puede provocar un bloqueo del programa y, potencialmente, un ataque de denegaci\u00f3n de servicio (DoS)."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/2",
CVE-2025/CVE-2025-506xx/CVE-2025-50692.json
+34 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-50692",
"sourceIdentifier": "[email protected]",
"published": "2025-08-07T19:15:28.707",
"lastModified": "2025-08-08T19:15:36.910",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:48:25.637",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,47 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:foxcms:foxcms:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.2.6",
"matchCriteriaId": "D1386727-CEBC-4045-A7B4-53C0F2CD8240"
}
]
}
]
}
],
"references": [
{
"url": "https://gist.github.com/cyb3res3c/ceacf7d560d2c8cd5ffd158abf0bfba9",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://reference1.example.com/index.php/admin/template_file/editFile.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://gist.github.com/cyb3res3c/ceacf7d560d2c8cd5ffd158abf0bfba9",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-519xx/CVE-2025-51986.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-51986",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:30.373",
"lastModified": "2025-08-14T18:15:30.373",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet."
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/jyjsunny/a9743a718ed3081b034c11201803f6b4",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-523xx/CVE-2025-52335.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52335",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:30.543",
"lastModified": "2025-08-14T18:15:30.543",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information."
}
],
"metrics": {},
"references": [
{
"url": "http://eyoucms.com",
"source": "[email protected]"
},
{
"url": "https://sour-burglar-bfe.notion.site/CVE-2025-52335-24e2b2fd021080da9667e7608c801180",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-527xx/CVE-2025-52765.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52765",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:33.513",
"lastModified": "2025-08-14T19:15:33.513",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in lisensee NetInsight Analytics Implementation Plugin allows Stored XSS. This issue affects NetInsight Analytics Implementation Plugin: from n/a through 1.0.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress-netinsight-analytics-implementation-plugin-plugin-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-527xx/CVE-2025-52767.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52767",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:33.697",
"lastModified": "2025-08-14T19:15:33.697",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in lisensee NetInsight Analytics Implementation Plugin allows Cross Site Request Forgery. This issue affects NetInsight Analytics Implementation Plugin: from n/a through 1.0.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress-netinsight-analytics-implementation-plugin-plugin-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-527xx/CVE-2025-52769.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52769",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:33.870",
"lastModified": "2025-08-14T19:15:33.870",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in flexostudio flexo-social-gallery allows Cross Site Request Forgery. This issue affects flexo-social-gallery: from n/a through 1.0006."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/flexo-social-gallery/vulnerability/wordpress-flexo-social-gallery-plugin-plugin-1-0006-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-527xx/CVE-2025-52771.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52771",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:34.057",
"lastModified": "2025-08-14T19:15:34.057",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bcupham Video Expander allows Stored XSS. This issue affects Video Expander: from n/a through 1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/video-expander/vulnerability/wordpress-video-expander-plugin-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-527xx/CVE-2025-52797.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-52797",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:34.250",
"lastModified": "2025-08-14T19:15:34.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap allows SQL Injection. This issue affects StoryMap: from n/a through 2.1."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-storymap/vulnerability/wordpress-storymap-plugin-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-529xx/CVE-2025-52970.json
+7 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-52970",
"sourceIdentifier": "[email protected]",
"published": "2025-08-12T19:15:32.277",
"lastModified": "2025-08-13T17:33:46.673",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:15:34.430",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -55,6 +55,10 @@
{
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448",
"source": "[email protected]"
},
{
"url": "https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-532xx/CVE-2025-53219.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53219",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:34.590",
"lastModified": "2025-08-14T19:15:34.590",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in pl4g4 WP-Database-Optimizer-Tools allows Cross Site Request Forgery. This issue affects WP-Database-Optimizer-Tools: from n/a through 0.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-database-optimizer-tools/vulnerability/wordpress-wp-database-optimizer-tools-plugin-plugin-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-532xx/CVE-2025-53221.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53221",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:34.773",
"lastModified": "2025-08-14T19:15:34.773",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in codeablepress CodeablePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CodeablePress: from n/a through 1.0.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/codeablepress-simple-frontend-profile-picture-upload/vulnerability/wordpress-codeablepress-plugin-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-532xx/CVE-2025-53241.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53241",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.060",
"lastModified": "2025-08-14T19:15:35.060",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Server-Side Request Forgery (SSRF) vulnerability in kodeshpa Simplified allows Server Side Request Forgery. This issue affects Simplified: from n/a through 1.0.9."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/simplified/vulnerability/wordpress-simplified-plugin-plugin-1-0-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-532xx/CVE-2025-53249.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53249",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.230",
"lastModified": "2025-08-14T19:15:35.230",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online allows Cross Site Request Forgery. This issue affects Build App Online: from n/a through 1.0.23."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/build-app-online/vulnerability/wordpress-build-app-online-plugin-plugin-1-0-23-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-533xx/CVE-2025-53330.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53330",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.397",
"lastModified": "2025-08-14T19:15:35.397",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate WP Rentals allows Stored XSS. This issue affects WP Rentals: from n/a through 3.13.1."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/wprentals/vulnerability/wordpress-wp-rentals-theme-theme-3-13-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-533xx/CVE-2025-53341.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53341",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.597",
"lastModified": "2025-08-14T19:15:35.597",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in Themovation Stratus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Stratus: from n/a through 4.2.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/stratus/vulnerability/wordpress-stratus-theme-theme-4-2-5-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-533xx/CVE-2025-53342.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53342",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.800",
"lastModified": "2025-08-14T19:15:35.800",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Modernize allows Stored XSS. This issue affects Modernize: from n/a through 3.4.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/modernize/vulnerability/wordpress-modernize-theme-theme-3-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-533xx/CVE-2025-53343.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53343",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:35.977",
"lastModified": "2025-08-14T19:15:35.977",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in GoodLayers Modernize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Modernize: from n/a through 3.4.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/modernize/vulnerability/wordpress-modernize-theme-theme-3-4-0-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-533xx/CVE-2025-53347.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53347",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:36.157",
"lastModified": "2025-08-14T19:15:36.157",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Laborator Kalium allows Cross Site Request Forgery. This issue affects Kalium: from n/a through 3.18.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/kalium/vulnerability/wordpress-kalium-theme-plugin-3-18-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53575.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53575",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:36.320",
"lastModified": "2025-08-14T19:15:36.320",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in primersoftware Primer MyData for Woocommerce allows Reflected XSS. This issue affects Primer MyData for Woocommerce: from n/a through 4.2.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/primer-mydata/vulnerability/wordpress-primer-mydata-for-woocommerce-plugin-plugin-4-2-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53581.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53581",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:36.510",
"lastModified": "2025-08-14T19:15:36.510",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artiosmedia RSS Feed Pro allows Stored XSS. This issue affects RSS Feed Pro: from n/a through 1.1.8."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.7,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/rss-feed-pro/vulnerability/wordpress-rss-feed-pro-plugin-plugin-1-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53582.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53582",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:36.693",
"lastModified": "2025-08-14T19:15:36.693",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordLift WordLift allows Stored XSS. This issue affects WordLift: from n/a through 3.54.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wordlift/vulnerability/wordpress-wordlift-plugin-plugin-3-54-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53587.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53587",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:36.860",
"lastModified": "2025-08-14T19:15:36.860",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo allows Cross Site Request Forgery. This issue affects Findgo: from n/a through 1.3.57."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/findgo/vulnerability/wordpress-findgo-theme-theme-1-3-57-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-540xx/CVE-2025-54054.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54054",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:37.043",
"lastModified": "2025-08-14T19:15:37.043",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Web Servant 12 Step Meeting List allows Stored XSS. This issue affects 12 Step Meeting List: from n/a through 3.18.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/12-step-meeting-list/vulnerability/wordpress-12-step-meeting-list-plugin-plugin-3-18-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54708.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54708",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:37.420",
"lastModified": "2025-08-14T19:15:37.420",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks allows DOM-Based XSS. This issue affects B Blocks: from n/a through 2.0.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/b-blocks/vulnerability/wordpress-b-blocks-plugin-plugin-2-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54712.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54712",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:37.590",
"lastModified": "2025-08-14T19:15:37.590",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in hashthemes Easy Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Easy Elementor Addons: from n/a through 2.2.7."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/easy-elementor-addons/vulnerability/wordpress-easy-elementor-addons-plugin-plugin-2-2-7-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54715.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54715",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:37.787",
"lastModified": "2025-08-14T19:15:37.787",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory & Order Manager allows Path Traversal. This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.9.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-with-inventory-order-manager-plugin-plugin-1-9-0-arbitrary-file-download-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54717.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54717",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:37.950",
"lastModified": "2025-08-14T19:15:37.950",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in e-plugins WP Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Membership: from n/a through 1.6.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-membership/vulnerability/wordpress-wp-membership-plugin-plugin-1-6-3-settings-change-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54727.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54727",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:38.133",
"lastModified": "2025-08-14T19:15:38.133",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Stored XSS. This issue affects CM On Demand Search And Replace: from n/a through 1.5.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.7,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/cm-on-demand-search-and-replace/vulnerability/wordpress-cm-on-demand-search-and-replace-plugin-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54728.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54728",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:38.310",
"lastModified": "2025-08-14T19:15:38.310",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Cross Site Request Forgery. This issue affects CM On Demand Search And Replace: from n/a through 1.5.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/cm-on-demand-search-and-replace/vulnerability/wordpress-cm-on-demand-search-and-replace-plugin-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54729.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54729",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:38.483",
"lastModified": "2025-08-14T19:15:38.483",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webba Appointment Booking Webba Booking allows Stored XSS. This issue affects Webba Booking: from n/a through 6.0.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.7,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/webba-booking-lite/vulnerability/wordpress-webba-booking-plugin-plugin-6-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54730.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54730",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:38.650",
"lastModified": "2025-08-14T19:15:38.650",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in PARETO Digital Embedder for Google Reviews allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embedder for Google Reviews: from n/a through 1.7.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/embedder-for-google-reviews/vulnerability/wordpress-embedder-for-google-reviews-plugin-plugin-1-7-3-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54732.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54732",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:40.440",
"lastModified": "2025-08-14T19:15:40.440",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM \u2013 Premium Packages allows Cross Site Request Forgery. This issue affects WPDM \u2013 Premium Packages: from n/a through 6.0.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wpdm-premium-packages/vulnerability/wordpress-wpdm-premium-packages-plugin-plugin-6-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54736.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54736",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:41.543",
"lastModified": "2025-08-14T19:15:41.543",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy allows Retrieve Embedded Sensitive Data. This issue affects Savoy: from n/a through 3.0.8."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-497"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/savoy/vulnerability/wordpress-savoy-theme-plugin-3-0-8-sensitive-data-exposure-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54739.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54739",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:41.730",
"lastModified": "2025-08-14T19:15:41.730",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexter Blocks: from n/a through 4.5.4."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/the-plus-addons-for-block-editor/vulnerability/wordpress-nexter-blocks-plugin-plugin-4-5-4-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54740.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54740",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:41.923",
"lastModified": "2025-08-14T19:15:41.923",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Nelson Print My Blog allows Stored XSS. This issue affects Print My Blog: from n/a through 3.27.9."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/print-my-blog/vulnerability/wordpress-print-my-blog-plugin-plugin-3-27-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54746.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54746",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:42.120",
"lastModified": "2025-08-14T19:15:42.120",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj Shortcode Redirect allows Stored XSS. This issue affects Shortcode Redirect: from n/a through 1.0.02."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/shortcode-redirect/vulnerability/wordpress-shortcode-redirect-plugin-plugin-1-0-02-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54747.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54747",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:42.300",
"lastModified": "2025-08-14T19:15:42.300",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbakery Templatera allows DOM-Based XSS. This issue affects Templatera: from n/a through 2.3.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/templatera/vulnerability/wordpress-templatera-plugin-plugin-2-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54749.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54749",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:42.490",
"lastModified": "2025-08-14T19:15:42.490",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery allows Stored XSS. This issue affects JetProductGallery: from n/a through 2.2.0.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/jet-woo-product-gallery/vulnerability/wordpress-jetproductgallery-plugin-plugin-2-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55708.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55708",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:42.677",
"lastModified": "2025-08-14T19:15:42.677",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master allows SQL Injection. This issue affects Quiz And Survey Master: from n/a through 10.2.4."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.1,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-plugin-10-2-4-sql-injection-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55709.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55709",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:42.840",
"lastModified": "2025-08-14T19:15:42.840",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through n/a."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/visualcomposer/vulnerability/wordpress-visual-composer-website-builder-plugin-plugin-45-15-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55710.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55710",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:43.027",
"lastModified": "2025-08-14T19:15:43.027",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress allows Retrieve Embedded Sensitive Data. This issue affects TaxoPress: from n/a through 3.37.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-201"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/simple-tags/vulnerability/wordpress-taxopress-plugin-plugin-3-37-2-sensitive-data-exposure-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55711.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55711",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:43.193",
"lastModified": "2025-08-14T19:15:43.193",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Table Builder WP Table Builder allows Stored XSS. This issue affects WP Table Builder: from n/a through 2.0.12."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-plugin-plugin-2-0-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55712.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55712",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:43.753",
"lastModified": "2025-08-14T19:15:43.753",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.3.13."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/the-plus-addons-for-elementor-page-builder/vulnerability/wordpress-the-plus-addons-for-elementor-page-builder-lite-plugin-plugin-6-3-13-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55713.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55713",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:44.103",
"lastModified": "2025-08-14T19:15:44.103",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeThemes Blocksy allows Stored XSS. This issue affects Blocksy: from n/a through 2.1.6."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.7,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/theme/blocksy/vulnerability/wordpress-blocksy-theme-theme-2-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55714.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55714",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:44.307",
"lastModified": "2025-08-14T19:15:44.307",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor allows Stored XSS. This issue affects JetElements For Elementor: from n/a through 2.7.9."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-plugin-2-7-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55716.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-55716",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:44.510",
"lastModified": "2025-08-14T19:15:44.510",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in VeronaLabs WP Statistics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Statistics: from n/a through 14.15."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-statistics/vulnerability/wordpress-wp-statistics-plugin-plugin-14-15-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-70xx/CVE-2025-7054.json
+47 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-7054",
"sourceIdentifier": "[email protected]",
"published": "2025-08-07T16:15:31.460",
"lastModified": "2025-08-07T21:26:37.453",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-08-14T19:58:57.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -73,10 +95,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cloudflare:quiche:*:*:*:*:*:rust:*:*",
"versionStartIncluding": "0.15.0",
"versionEndExcluding": "0.24.5",
"matchCriteriaId": "A953884D-FE8D-4510-BCC3-5B30E3D66F34"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/cloudflare/quiche/security/advisories/GHSA-m3hh-f9gh-74c2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8972.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-8972",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:31.533",
"lastModified": "2025-08-14T18:15:31.533",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/zzb1388/cve/issues/31",
"source": "[email protected]"
},
{
"url": "https://itsourcecode.com/",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319967",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319967",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628168",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8973.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-8973",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:31.800",
"lastModified": "2025-08-14T18:15:31.800",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/zzb1388/cve/issues/30",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319968",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319968",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628169",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8974.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-8974",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T18:15:32.070",
"lastModified": "2025-08-14T18:15:32.070",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some unknown functionality of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.java of the component JSON Web Token Handler. The manipulation of the argument SECRET with the input X-Litemall-Token leads to hard-coded credentials. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"baseScore": 2.6,
"accessVector": "NETWORK",
"accessComplexity": "HIGH",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 4.9,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-259"
},
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"references": [
{
"url": "https://github.com/linlinjava/litemall/issues/568",
"source": "[email protected]"
},
{
"url": "https://github.com/linlinjava/litemall/issues/568#issue-3289860066",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319970",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319970",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628233",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8975.json
+153
View File
@@ -0,0 +1,153 @@
{
"id": "CVE-2025-8975",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:45.057",
"lastModified": "2025-08-14T19:15:45.057",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The patch is named 84c11d69df8452dc378feecd17e2a62ac10dac66. It is recommended to upgrade the affected component."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/0xHamy/b2674eeffd1f73af96d29f152c47bcbd",
"source": "[email protected]"
},
{
"url": "https://github.com/givanz/Vvveb/commit/84c11d69df8452dc378feecd17e2a62ac10dac66",
"source": "[email protected]"
},
{
"url": "https://github.com/givanz/Vvveb/releases/tag/1.0.6",
"source": "[email protected]"
},
{
"url": "https://hkohi.ca/vulnerability/6",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319971",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319971",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628296",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8976.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-8976",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:45.323",
"lastModified": "2025-08-14T19:15:45.323",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/index.php?module=content/post&type=post of the component Endpoint. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. It is recommended to upgrade the affected component."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/givanz/Vvveb/releases/tag/1.0.6",
"source": "[email protected]"
},
{
"url": "https://hkohi.ca/vulnerability/7",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319972",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319972",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628297",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-89xx/CVE-2025-8978.json
+148
View File
@@ -0,0 +1,148 @@
{
"id": "CVE-2025-8978",
"sourceIdentifier": "[email protected]",
"published": "2025-08-14T19:15:45.547",
"lastModified": "2025-08-14T19:15:45.547",
"vulnStatus": "Received",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
"tags": [
"unsupported-when-assigned"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.7,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:H/Au:M/C:C/I:C/A:C",
"baseScore": 6.8,
"accessVector": "NETWORK",
"accessComplexity": "HIGH",
"authentication": "MULTIPLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 3.2,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-345"
}
]
}
],
"references": [
{
"url": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR619L.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.319974",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.319974",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.628599",
"source": "[email protected]"
},
{
"url": "https://www.dlink.com/",
"source": "[email protected]"
}
]
}
README.md
+55 -55
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-08-14T18:00:11.791352+00:00
2025-08-14T20:00:11.906294+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-08-14T17:54:26.950000+00:00
2025-08-14T19:58:57.683000+00:00
```
### Last Data Feed Release
@@ -33,69 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
305573
305626
```
### CVEs added in the last Commit
Recently added CVEs: `52`
Recently added CVEs: `53`
- [CVE-2025-20265](CVE-2025/CVE-2025-202xx/CVE-2025-20265.json) (`2025-08-14T17:15:39.723`)
- [CVE-2025-20268](CVE-2025/CVE-2025-202xx/CVE-2025-20268.json) (`2025-08-14T17:15:39.903`)
- [CVE-2025-20301](CVE-2025/CVE-2025-203xx/CVE-2025-20301.json) (`2025-08-14T17:15:40.107`)
- [CVE-2025-20302](CVE-2025/CVE-2025-203xx/CVE-2025-20302.json) (`2025-08-14T17:15:40.310`)
- [CVE-2025-20306](CVE-2025/CVE-2025-203xx/CVE-2025-20306.json) (`2025-08-14T17:15:40.503`)
- [CVE-2025-33142](CVE-2025/CVE-2025-331xx/CVE-2025-33142.json) (`2025-08-14T16:15:31.863`)
- [CVE-2025-36047](CVE-2025/CVE-2025-360xx/CVE-2025-36047.json) (`2025-08-14T16:15:32.787`)
- [CVE-2025-50515](CVE-2025/CVE-2025-505xx/CVE-2025-50515.json) (`2025-08-14T17:15:40.733`)
- [CVE-2025-50518](CVE-2025/CVE-2025-505xx/CVE-2025-50518.json) (`2025-08-14T16:15:35.417`)
- [CVE-2025-50817](CVE-2025/CVE-2025-508xx/CVE-2025-50817.json) (`2025-08-14T17:15:40.947`)
- [CVE-2025-53631](CVE-2025/CVE-2025-536xx/CVE-2025-53631.json) (`2025-08-14T16:15:36.840`)
- [CVE-2025-54389](CVE-2025/CVE-2025-543xx/CVE-2025-54389.json) (`2025-08-14T16:15:37.993`)
- [CVE-2025-54409](CVE-2025/CVE-2025-544xx/CVE-2025-54409.json) (`2025-08-14T16:15:39.397`)
- [CVE-2025-54867](CVE-2025/CVE-2025-548xx/CVE-2025-54867.json) (`2025-08-14T16:15:39.933`)
- [CVE-2025-55192](CVE-2025/CVE-2025-551xx/CVE-2025-55192.json) (`2025-08-14T17:15:41.173`)
- [CVE-2025-55195](CVE-2025/CVE-2025-551xx/CVE-2025-55195.json) (`2025-08-14T17:15:41.330`)
- [CVE-2025-8965](CVE-2025/CVE-2025-89xx/CVE-2025-8965.json) (`2025-08-14T16:15:41.523`)
- [CVE-2025-8966](CVE-2025/CVE-2025-89xx/CVE-2025-8966.json) (`2025-08-14T16:15:42.197`)
- [CVE-2025-8967](CVE-2025/CVE-2025-89xx/CVE-2025-8967.json) (`2025-08-14T16:15:42.837`)
- [CVE-2025-8968](CVE-2025/CVE-2025-89xx/CVE-2025-8968.json) (`2025-08-14T17:15:41.500`)
- [CVE-2025-8969](CVE-2025/CVE-2025-89xx/CVE-2025-8969.json) (`2025-08-14T17:15:41.700`)
- [CVE-2025-8970](CVE-2025/CVE-2025-89xx/CVE-2025-8970.json) (`2025-08-14T17:15:41.920`)
- [CVE-2025-8971](CVE-2025/CVE-2025-89xx/CVE-2025-8971.json) (`2025-08-14T17:15:42.157`)
- [CVE-2025-9039](CVE-2025/CVE-2025-90xx/CVE-2025-9039.json) (`2025-08-14T17:15:42.393`)
- [CVE-2025-9043](CVE-2025/CVE-2025-90xx/CVE-2025-9043.json) (`2025-08-14T17:15:42.610`)
- [CVE-2025-54727](CVE-2025/CVE-2025-547xx/CVE-2025-54727.json) (`2025-08-14T19:15:38.133`)
- [CVE-2025-54728](CVE-2025/CVE-2025-547xx/CVE-2025-54728.json) (`2025-08-14T19:15:38.310`)
- [CVE-2025-54729](CVE-2025/CVE-2025-547xx/CVE-2025-54729.json) (`2025-08-14T19:15:38.483`)
- [CVE-2025-54730](CVE-2025/CVE-2025-547xx/CVE-2025-54730.json) (`2025-08-14T19:15:38.650`)
- [CVE-2025-54732](CVE-2025/CVE-2025-547xx/CVE-2025-54732.json) (`2025-08-14T19:15:40.440`)
- [CVE-2025-54736](CVE-2025/CVE-2025-547xx/CVE-2025-54736.json) (`2025-08-14T19:15:41.543`)
- [CVE-2025-54739](CVE-2025/CVE-2025-547xx/CVE-2025-54739.json) (`2025-08-14T19:15:41.730`)
- [CVE-2025-54740](CVE-2025/CVE-2025-547xx/CVE-2025-54740.json) (`2025-08-14T19:15:41.923`)
- [CVE-2025-54746](CVE-2025/CVE-2025-547xx/CVE-2025-54746.json) (`2025-08-14T19:15:42.120`)
- [CVE-2025-54747](CVE-2025/CVE-2025-547xx/CVE-2025-54747.json) (`2025-08-14T19:15:42.300`)
- [CVE-2025-54749](CVE-2025/CVE-2025-547xx/CVE-2025-54749.json) (`2025-08-14T19:15:42.490`)
- [CVE-2025-55708](CVE-2025/CVE-2025-557xx/CVE-2025-55708.json) (`2025-08-14T19:15:42.677`)
- [CVE-2025-55709](CVE-2025/CVE-2025-557xx/CVE-2025-55709.json) (`2025-08-14T19:15:42.840`)
- [CVE-2025-55710](CVE-2025/CVE-2025-557xx/CVE-2025-55710.json) (`2025-08-14T19:15:43.027`)
- [CVE-2025-55711](CVE-2025/CVE-2025-557xx/CVE-2025-55711.json) (`2025-08-14T19:15:43.193`)
- [CVE-2025-55712](CVE-2025/CVE-2025-557xx/CVE-2025-55712.json) (`2025-08-14T19:15:43.753`)
- [CVE-2025-55713](CVE-2025/CVE-2025-557xx/CVE-2025-55713.json) (`2025-08-14T19:15:44.103`)
- [CVE-2025-55714](CVE-2025/CVE-2025-557xx/CVE-2025-55714.json) (`2025-08-14T19:15:44.307`)
- [CVE-2025-55716](CVE-2025/CVE-2025-557xx/CVE-2025-55716.json) (`2025-08-14T19:15:44.510`)
- [CVE-2025-8972](CVE-2025/CVE-2025-89xx/CVE-2025-8972.json) (`2025-08-14T18:15:31.533`)
- [CVE-2025-8973](CVE-2025/CVE-2025-89xx/CVE-2025-8973.json) (`2025-08-14T18:15:31.800`)
- [CVE-2025-8974](CVE-2025/CVE-2025-89xx/CVE-2025-8974.json) (`2025-08-14T18:15:32.070`)
- [CVE-2025-8975](CVE-2025/CVE-2025-89xx/CVE-2025-8975.json) (`2025-08-14T19:15:45.057`)
- [CVE-2025-8976](CVE-2025/CVE-2025-89xx/CVE-2025-8976.json) (`2025-08-14T19:15:45.323`)
- [CVE-2025-8978](CVE-2025/CVE-2025-89xx/CVE-2025-8978.json) (`2025-08-14T19:15:45.547`)
### CVEs modified in the last Commit
Recently modified CVEs: `86`
Recently modified CVEs: `35`
- [CVE-2025-55188](CVE-2025/CVE-2025-551xx/CVE-2025-55188.json) (`2025-08-14T17:28:05.067`)
- [CVE-2025-55346](CVE-2025/CVE-2025-553xx/CVE-2025-55346.json) (`2025-08-14T16:15:41.183`)
- [CVE-2025-8355](CVE-2025/CVE-2025-83xx/CVE-2025-8355.json) (`2025-08-14T16:19:37.380`)
- [CVE-2025-8356](CVE-2025/CVE-2025-83xx/CVE-2025-8356.json) (`2025-08-14T16:19:49.740`)
- [CVE-2025-8747](CVE-2025/CVE-2025-87xx/CVE-2025-8747.json) (`2025-08-14T16:24:41.287`)
- [CVE-2025-8810](CVE-2025/CVE-2025-88xx/CVE-2025-8810.json) (`2025-08-14T16:29:26.347`)
- [CVE-2025-8921](CVE-2025/CVE-2025-89xx/CVE-2025-8921.json) (`2025-08-14T17:53:30.840`)
- [CVE-2025-8922](CVE-2025/CVE-2025-89xx/CVE-2025-8922.json) (`2025-08-14T17:53:21.920`)
- [CVE-2025-8923](CVE-2025/CVE-2025-89xx/CVE-2025-8923.json) (`2025-08-14T17:53:12.243`)
- [CVE-2025-8924](CVE-2025/CVE-2025-89xx/CVE-2025-8924.json) (`2025-08-14T17:53:05.250`)
- [CVE-2025-8925](CVE-2025/CVE-2025-89xx/CVE-2025-8925.json) (`2025-08-14T17:52:54.223`)
- [CVE-2025-8928](CVE-2025/CVE-2025-89xx/CVE-2025-8928.json) (`2025-08-14T17:42:10.467`)
- [CVE-2025-8929](CVE-2025/CVE-2025-89xx/CVE-2025-8929.json) (`2025-08-14T17:42:03.427`)
- [CVE-2025-8930](CVE-2025/CVE-2025-89xx/CVE-2025-8930.json) (`2025-08-14T17:41:55.863`)
- [CVE-2025-8931](CVE-2025/CVE-2025-89xx/CVE-2025-8931.json) (`2025-08-14T17:41:47.873`)
- [CVE-2025-8946](CVE-2025/CVE-2025-89xx/CVE-2025-8946.json) (`2025-08-14T17:41:38.477`)
- [CVE-2025-8947](CVE-2025/CVE-2025-89xx/CVE-2025-8947.json) (`2025-08-14T17:41:26.367`)
- [CVE-2025-8948](CVE-2025/CVE-2025-89xx/CVE-2025-8948.json) (`2025-08-14T17:41:12.750`)
- [CVE-2025-8950](CVE-2025/CVE-2025-89xx/CVE-2025-8950.json) (`2025-08-14T17:41:00.603`)
- [CVE-2025-8951](CVE-2025/CVE-2025-89xx/CVE-2025-8951.json) (`2025-08-14T17:36:24.093`)
- [CVE-2025-8952](CVE-2025/CVE-2025-89xx/CVE-2025-8952.json) (`2025-08-14T17:36:12.397`)
- [CVE-2025-8954](CVE-2025/CVE-2025-89xx/CVE-2025-8954.json) (`2025-08-14T17:36:01.200`)
- [CVE-2025-8955](CVE-2025/CVE-2025-89xx/CVE-2025-8955.json) (`2025-08-14T17:35:34.973`)
- [CVE-2025-8957](CVE-2025/CVE-2025-89xx/CVE-2025-8957.json) (`2025-08-14T17:35:19.370`)
- [CVE-2025-8960](CVE-2025/CVE-2025-89xx/CVE-2025-8960.json) (`2025-08-14T17:33:06.557`)
- [CVE-2024-22338](CVE-2024/CVE-2024-223xx/CVE-2024-22338.json) (`2025-08-14T19:18:53.540`)
- [CVE-2024-28782](CVE-2024/CVE-2024-287xx/CVE-2024-28782.json) (`2025-08-14T18:52:19.970`)
- [CVE-2024-28787](CVE-2024/CVE-2024-287xx/CVE-2024-28787.json) (`2025-08-14T18:54:13.063`)
- [CVE-2024-31906](CVE-2024/CVE-2024-319xx/CVE-2024-31906.json) (`2025-08-14T19:05:15.953`)
- [CVE-2024-37312](CVE-2024/CVE-2024-373xx/CVE-2024-37312.json) (`2025-08-14T19:18:22.133`)
- [CVE-2024-37886](CVE-2024/CVE-2024-378xx/CVE-2024-37886.json) (`2025-08-14T19:03:04.897`)
- [CVE-2024-38325](CVE-2024/CVE-2024-383xx/CVE-2024-38325.json) (`2025-08-14T19:10:41.307`)
- [CVE-2024-38335](CVE-2024/CVE-2024-383xx/CVE-2024-38335.json) (`2025-08-14T18:49:03.423`)
- [CVE-2024-41739](CVE-2024/CVE-2024-417xx/CVE-2024-41739.json) (`2025-08-14T18:57:34.287`)
- [CVE-2024-4454](CVE-2024/CVE-2024-44xx/CVE-2024-4454.json) (`2025-08-14T19:28:08.170`)
- [CVE-2024-49822](CVE-2024/CVE-2024-498xx/CVE-2024-49822.json) (`2025-08-14T19:12:54.283`)
- [CVE-2024-51461](CVE-2024/CVE-2024-514xx/CVE-2024-51461.json) (`2025-08-14T19:21:39.917`)
- [CVE-2024-53945](CVE-2024/CVE-2024-539xx/CVE-2024-53945.json) (`2025-08-14T19:15:30.927`)
- [CVE-2024-55889](CVE-2024/CVE-2024-558xx/CVE-2024-55889.json) (`2025-08-14T18:56:50.060`)
- [CVE-2025-1997](CVE-2025/CVE-2025-19xx/CVE-2025-1997.json) (`2025-08-14T19:13:08.933`)
- [CVE-2025-1998](CVE-2025/CVE-2025-19xx/CVE-2025-1998.json) (`2025-08-14T19:13:16.593`)
- [CVE-2025-2670](CVE-2025/CVE-2025-26xx/CVE-2025-2670.json) (`2025-08-14T18:48:18.750`)
- [CVE-2025-2824](CVE-2025/CVE-2025-28xx/CVE-2025-2824.json) (`2025-08-14T18:49:21.380`)
- [CVE-2025-33118](CVE-2025/CVE-2025-331xx/CVE-2025-33118.json) (`2025-08-14T18:49:42.193`)
- [CVE-2025-3528](CVE-2025/CVE-2025-35xx/CVE-2025-3528.json) (`2025-08-14T18:15:29.800`)
- [CVE-2025-48913](CVE-2025/CVE-2025-489xx/CVE-2025-48913.json) (`2025-08-14T19:46:03.753`)
- [CVE-2025-50609](CVE-2025/CVE-2025-506xx/CVE-2025-50609.json) (`2025-08-14T18:15:29.967`)
- [CVE-2025-50692](CVE-2025/CVE-2025-506xx/CVE-2025-50692.json) (`2025-08-14T19:48:25.637`)
- [CVE-2025-52970](CVE-2025/CVE-2025-529xx/CVE-2025-52970.json) (`2025-08-14T19:15:34.430`)
- [CVE-2025-7054](CVE-2025/CVE-2025-70xx/CVE-2025-7054.json) (`2025-08-14T19:58:57.683`)
## Download and Usage
_state.csv
+224 -171
View File
File diff suppressed because it is too large. Load diff