diff --git a/CVE-2023/CVE-2023-227xx/CVE-2023-22701.json b/CVE-2023/CVE-2023-227xx/CVE-2023-22701.json index 34a0140b380..71b406f2367 100644 --- a/CVE-2023/CVE-2023-227xx/CVE-2023-22701.json +++ b/CVE-2023/CVE-2023-227xx/CVE-2023-22701.json @@ -2,8 +2,8 @@ "id": "CVE-2023-22701", "sourceIdentifier": "audit@patchstack.com", "published": "2024-12-09T13:15:20.060", - "lastModified": "2025-02-27T21:07:24.037", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:16:16.717", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2023/CVE-2023-530xx/CVE-2023-53058.json b/CVE-2023/CVE-2023-530xx/CVE-2023-53058.json index 176a0357265..4a2fcd3962e 100644 --- a/CVE-2023/CVE-2023-530xx/CVE-2023-53058.json +++ b/CVE-2023/CVE-2023-530xx/CVE-2023-53058.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53058", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-02T16:15:24.867", - "lastModified": "2025-05-05T20:54:45.973", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-07T16:29:08.673", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,132 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: E-Switch. Se corrige un error en el c\u00f3digo de gesti\u00f3n de errores. El c\u00f3digo de gesti\u00f3n de errores desreferencia \"vport\". Si se trata de un puntero de error, no podemos hacer nada m\u00e1s que devolver el c\u00f3digo de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.177", + "matchCriteriaId": "11E0728E-0696-40AD-8E07-534CDDEBFB51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.105", + "matchCriteriaId": "0888AE70-CB0A-45C0-B9BD-A5371244C8DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.22", + "matchCriteriaId": "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.9", + "matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*", + "matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*", + "matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a9853a7437a22fd849347008fb3c85087906b56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/388188fb58bef9e7f3ca4f8970f03d493b66909f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5eadc80328298ef7beaaf0cd96791667d3b485ca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/640fcdbcf27fc62de9223f958ceb4e897a00e791", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c4c977935b2fc60084b3735737d17a06e7ba1bd0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-530xx/CVE-2023-53060.json b/CVE-2023/CVE-2023-530xx/CVE-2023-53060.json index 23803d0e46c..e66c5f3f8c7 100644 --- a/CVE-2023/CVE-2023-530xx/CVE-2023-53060.json +++ b/CVE-2023/CVE-2023-530xx/CVE-2023-53060.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53060", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-02T16:15:25.060", - "lastModified": "2025-05-05T20:54:45.973", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-07T16:32:03.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,216 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: igb: revertir rtnl_lock() que causa un bloqueo el commit 6faee3d4ee8b (\"igb: Agregar bloqueo para evitar ejecuci\u00f3n de datos\") agrega rtnl_lock para eliminar una ejecuci\u00f3n de datos falsa que se muestra a continuaci\u00f3n (GRATIS de la desconexi\u00f3n del dispositivo) | (USO desde el n\u00facleo netdev) igb_remove | igb_ndo_get_vf_config igb_disable_sriov | vf >= adapter->vfs_allocated_count? kfree(adapter->vf_data) | adapter->vfs_allocated_count = 0 | | memcpy(... adapter->vf_data[vf] La ejecuci\u00f3n anterior nunca ocurrir\u00e1 y el rtnl_lock adicional provoca un bloqueo a continuaci\u00f3n [ 141.420169] [ 141.420672] __schedule+0x2dd/0x840 [ 141.421427] schedule+0x50/0xc0 [ 141.422041] schedule_preempt_disabled+0x11/0x20 [ 141.422678] __mutex_lock.isra.13+0x431/0x6b0 [ 141.423324] unregister_netdev+0xe/0x20 [ 141.423578] igbvf_remove+0x45/0xe0 [igbvf] [ 141.423791] pci_device_remove+0x36/0xb0 [ 141.423990] device_release_driver_internal+0xc1/0x160 [ 141.424270] pci_stop_bus_device+0x6d/0x90 [ 141.424507] pci_stop_and_remove_bus_device+0xe/0x20 [ 141.424789] pci_iov_remove_virtfn+0xba/0x120 [ 141.425452] sriov_disable+0x2f/0xf0 [ 141.425679] igb_disable_sriov+0x4e/0x100 [igb] [ 141.426353] igb_remove+0xa0/0x130 [igb] [ 141.426599] pci_device_remove+0x36/0xb0 [ 141.426796] device_release_driver_internal+0xc1/0x160 [ 141.427060] driver_detach+0x44/0x90 [ 141.427253] bus_remove_driver+0x55/0xe0 [ 141.427477] pci_unregister_driver+0x2a/0xa0 [ 141.428296] __x64_sys_delete_module+0x141/0x2b0 [ 141.429126] ? mntput_no_expire+0x4a/0x240 [ 141.429363] ? syscall_trace_enter.isra.19+0x126/0x1a0 [ 141.429653] ? do_syscall_64+0x5b/0x80 [ 141.429847] ? salir_al_modo_usuario_prepare+0x14d/0x1c0 [ 141.430109] ? syscall_salir_al_modo_usuario+0x12/0x30 [ 141.430849] ? do_syscall_64+0x67/0x80 [ 141.431083] ? syscall_exit_to_user_mode_prepare+0x183/0x1b0 [141.431770] ? syscall_exit_to_user_mode+0x12/0x30 [141.432482] ? do_syscall_64+0x67/0x80 [141.432714] ? exc_page_fault+0x64/0x140 [141.432911] entry_SYSCALL_64_after_hwframe+0x72/0xdc. Dado que igb_disable_sriov() llamar\u00e1 a pci_disable_sriov() antes de liberar recursos, el n\u00facleo netdev sincronizar\u00e1 la limpieza para evitar ejecuci\u00f3ns. Este parche elimina el bloqueo rtnl_(un)lock innecesario para garantizar la correcci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.291", + "versionEndExcluding": "4.14.312", + "matchCriteriaId": "CA749B60-7D58-4154-8FB0-28AEB1542EEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.256", + "versionEndExcluding": "4.19.280", + "matchCriteriaId": "170F78DD-9E89-443E-9387-7185FF6C19EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.211", + "versionEndExcluding": "5.4.240", + "matchCriteriaId": "6164D3F0-6F6A-4DCE-A05A-EC68BEFD8C9D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.138", + "versionEndExcluding": "5.10.177", + "matchCriteriaId": "E49EB1DC-9767-439B-9D37-00FA3B7370D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.63", + "versionEndExcluding": "5.15.105", + "matchCriteriaId": "961FF060-5666-4498-81F4-221E302851B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19.4", + "versionEndExcluding": "6.0", + "matchCriteriaId": "041C9938-2EFF-4AE9-B438-38D759D96F2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.1", + "versionEndExcluding": "6.1.22", + "matchCriteriaId": "466DE3CE-7826-4545-BA4B-B7D2AB757C92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.9", + "matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*", + "matchCriteriaId": "7BE551E5-89CF-47A8-9B26-03CE727FBA37" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*", + "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*", + "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*", + "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc7:*:*:*:*:*:*", + "matchCriteriaId": "E6DE049A-ABA8-41DD-988C-8C088358EE9B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*", + "matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*", + "matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0dabb72b923e17cb3b4ac99ea1adc9ef35116930", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4d2626e10709ff8474ffd1a9db3cf4647569e89c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62a64645749926f9d75af82a96440941f22b046f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65f69851e44d71248b952a687e44759a7abb5016", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66e5577cabc3d463eea540332727929d0ace41c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7d845e9a485f287181ff81567c3900a8e7ad1e28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd1e320ac0958298c2774605ad050483f33a21f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de91528d8ba274c614a2265077d695c61e31fd43", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-530xx/CVE-2023-53061.json b/CVE-2023/CVE-2023-530xx/CVE-2023-53061.json index e11a641fde9..6c0a42ffa6e 100644 --- a/CVE-2023/CVE-2023-530xx/CVE-2023-53061.json +++ b/CVE-2023/CVE-2023-530xx/CVE-2023-53061.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53061", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-02T16:15:25.163", - "lastModified": "2025-05-05T20:54:45.973", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-07T16:45:04.213", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,118 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige una posible fuga de recuento de referencias en smb2_open(). El recuento de referencias de las ACL se filtra cuando falla la asignaci\u00f3n de memoria. Se soluciona a\u00f1adiendo la funci\u00f3n posix_acl_release() que faltaba." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.105", + "matchCriteriaId": "D300E512-537B-4C7B-B1D9-89DAD05AFE27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.22", + "matchCriteriaId": "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.9", + "matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*", + "matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*", + "matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2624b445544ffc1472ccabfb6ec867c199d4c95c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/303f8e58cc3ace744801dcdcabfc06ffc72ed62d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a22c49a05e5e7aa2c414fbc42c49c4c01a5c9a78", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c33344b7972225b232966f95d31f6312dcc6273d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-301xx/CVE-2024-30145.json b/CVE-2024/CVE-2024-301xx/CVE-2024-30145.json index d5f61627d23..6176aebc3fb 100644 --- a/CVE-2024/CVE-2024-301xx/CVE-2024-30145.json +++ b/CVE-2024/CVE-2024-301xx/CVE-2024-30145.json @@ -2,8 +2,8 @@ "id": "CVE-2024-30145", "sourceIdentifier": "psirt@hcl.com", "published": "2025-04-30T22:15:16.590", - "lastModified": "2025-11-03T20:16:46.847", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:17:38.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -81,8 +81,9 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:hcltech:domino_leap:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.1", "versionEndExcluding": "1.1.5", - "matchCriteriaId": "16207A89-6EEA-4654-84F8-0F556492E199" + "matchCriteriaId": "447D5847-378A-429C-BC63-F27883200AA9" } ] } diff --git a/CVE-2024/CVE-2024-423xx/CVE-2024-42384.json b/CVE-2024/CVE-2024-423xx/CVE-2024-42384.json index a5eaaaf6d2c..9b13e483228 100644 --- a/CVE-2024/CVE-2024-423xx/CVE-2024-42384.json +++ b/CVE-2024/CVE-2024-423xx/CVE-2024-42384.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42384", "sourceIdentifier": "prodsec@nozominetworks.com", "published": "2024-11-18T10:15:06.943", - "lastModified": "2025-01-13T11:15:07.020", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:15:22.730", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -92,7 +92,10 @@ "references": [ { "url": "https://www.nozominetworks.com/blog", - "source": "prodsec@nozominetworks.com" + "source": "prodsec@nozominetworks.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-48xx/CVE-2024-4841.json b/CVE-2024/CVE-2024-48xx/CVE-2024-4841.json index 2c18d05143d..51a7707deda 100644 --- a/CVE-2024/CVE-2024-48xx/CVE-2024-4841.json +++ b/CVE-2024/CVE-2024-48xx/CVE-2024-4841.json @@ -2,8 +2,8 @@ "id": "CVE-2024-4841", "sourceIdentifier": "security@huntr.dev", "published": "2024-06-23T15:15:09.233", - "lastModified": "2025-07-07T17:23:31.907", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:19:44.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -82,8 +82,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:parisneo:lollms-webui:9.6:*:*:*:*:*:*:*", - "matchCriteriaId": "8A3CF797-E28D-4E5D-B025-383EED5EF2EB" + "criteria": "cpe:2.3:a:lollms:lollms-webui:9.6:*:*:*:*:*:*:*", + "matchCriteriaId": "8161B4F7-AE3F-4A7D-9B47-131C1AA3EC6F" } ] } diff --git a/CVE-2024/CVE-2024-523xx/CVE-2024-52316.json b/CVE-2024/CVE-2024-523xx/CVE-2024-52316.json index 5f76772adac..1a122a547e9 100644 --- a/CVE-2024/CVE-2024-523xx/CVE-2024-52316.json +++ b/CVE-2024/CVE-2024-523xx/CVE-2024-52316.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52316", "sourceIdentifier": "security@apache.org", "published": "2024-11-18T12:15:18.600", - "lastModified": "2025-11-03T21:17:21.307", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:15:59.050", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -215,6 +215,21 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] } ], "references": [ @@ -236,7 +251,10 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20250124-0003/", diff --git a/CVE-2024/CVE-2024-94xx/CVE-2024-9444.json b/CVE-2024/CVE-2024-94xx/CVE-2024-9444.json index 8b2323b2577..b6de15de3e0 100644 --- a/CVE-2024/CVE-2024-94xx/CVE-2024-9444.json +++ b/CVE-2024/CVE-2024-94xx/CVE-2024-9444.json @@ -2,8 +2,8 @@ "id": "CVE-2024-9444", "sourceIdentifier": "security@wordfence.com", "published": "2024-10-16T10:15:02.620", - "lastModified": "2025-03-06T17:04:37.537", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:10:14.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11212.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11212.json index 83bb9451564..36d347399a2 100644 --- a/CVE-2025/CVE-2025-112xx/CVE-2025-11212.json +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11212.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11212", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-06T22:15:39.210", - "lastModified": "2025-11-06T22:15:39.210", + "lastModified": "2025-11-07T15:15:37.940", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html", diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11213.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11213.json index 705a68a1dfb..e884c0a22e2 100644 --- a/CVE-2025/CVE-2025-112xx/CVE-2025-11213.json +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11213.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11213", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-06T22:15:39.317", - "lastModified": "2025-11-06T22:15:39.317", + "lastModified": "2025-11-07T15:15:39.213", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html", diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11215.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11215.json index 6fceddadd57..80236755527 100644 --- a/CVE-2025/CVE-2025-112xx/CVE-2025-11215.json +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11215.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11215", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-06T22:15:39.420", - "lastModified": "2025-11-06T22:15:39.420", + "lastModified": "2025-11-07T15:15:39.410", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", @@ -22,6 +45,16 @@ "value": "CWE-193" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-193" + } + ] } ], "references": [ diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json index e5a6829ba7f..0192ef04150 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12855", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-07T14:15:49.167", - "lastModified": "2025-11-07T14:15:49.167", + "lastModified": "2025-11-07T16:15:37.393", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://vuldb.com/?submit.679743", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/newsletterdel-sql-injection/report.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12859.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12859.json new file mode 100644 index 00000000000..f0e74eebc81 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12859.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-12859", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-07T15:15:39.873", + "lastModified": "2025-11-07T15:15:39.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ZZCTD/zz_test/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331506", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331506", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.679106", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12860.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12860.json new file mode 100644 index 00000000000..6380bb0ef77 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12860.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-12860", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-07T15:15:40.110", + "lastModified": "2025-11-07T15:15:40.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderby results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ZZCTD/zz_test/issues/2", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331507", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331507", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.679111", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12861.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12861.json new file mode 100644 index 00000000000..88c842b4d19 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12861.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-12861", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-07T16:15:38.023", + "lastModified": "2025-11-07T16:15:38.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipulation of the argument flags[] causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ZZCTD/zz_test/issues/3", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331508", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331508", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.679692", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20354.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20354.json index 101c8a6793d..ddf45d54a83 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20354.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20354.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20354", "sourceIdentifier": "psirt@cisco.com", "published": "2025-11-05T17:15:37.743", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T15:44:35.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,36 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*", + "versionEndExcluding": "12.5\\(1\\)_su03_es07", + "matchCriteriaId": "6EF18C21-6E70-4748-99FA-884754F44D1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:15.0:*:*:*:*:*:*:*", + "matchCriteriaId": "124C88AE-ED0C-4CBC-A84D-200EDB776C8C" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-unauth-rce-QeN8h7mQ", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20358.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20358.json index 63fc6c4ee75..1ac1ae45ebf 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20358.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20358.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20358", "sourceIdentifier": "psirt@cisco.com", "published": "2025-11-05T17:15:38.120", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T15:43:44.413", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -47,10 +67,36 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*", + "versionEndExcluding": "12.5\\(1\\)_su03_es07", + "matchCriteriaId": "6EF18C21-6E70-4748-99FA-884754F44D1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:unified_contact_center_express:15.0:*:*:*:*:*:*:*", + "matchCriteriaId": "124C88AE-ED0C-4CBC-A84D-200EDB776C8C" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-unauth-rce-QeN8h7mQ", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21078.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21078.json index 3f608a149d3..01099363394 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21078.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21078.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21078", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-11-05T06:15:34.103", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T15:46:38.130", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.7.68.6", + "matchCriteriaId": "147D1C7F-B40F-4638-84B9-8132366F7323" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21079.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21079.json index 51537d2174e..985d5865bf8 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21079.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21079.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21079", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-11-05T06:15:34.227", - "lastModified": "2025-11-06T19:45:30.990", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T15:46:21.677", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.8, "impactScore": 4.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.5.01.3", + "matchCriteriaId": "24656E89-FEB3-4A82-BC26-DFE849A75DDF" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23239.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23239.json index 71d5ebb6506..eb7b3df6230 100644 --- a/CVE-2025/CVE-2025-232xx/CVE-2025-23239.json +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23239.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23239", "sourceIdentifier": "f5sirt@f5.com", "published": "2025-02-05T18:15:31.373", - "lastModified": "2025-08-06T16:23:09.107", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:16:26.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -86,19 +86,19 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", - "baseScore": 9.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", - "privilegesRequired": "HIGH", + "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 2.3, + "exploitabilityScore": 3.1, "impactScore": 6.0 } ] diff --git a/CVE-2025/CVE-2025-242xx/CVE-2025-24252.json b/CVE-2025/CVE-2025-242xx/CVE-2025-24252.json index a627e49a070..8107456bd90 100644 --- a/CVE-2025/CVE-2025-242xx/CVE-2025-24252.json +++ b/CVE-2025/CVE-2025-242xx/CVE-2025-24252.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24252", "sourceIdentifier": "product-security@apple.com", "published": "2025-04-29T03:15:34.600", - "lastModified": "2025-04-29T20:10:47.467", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-07T16:15:38.217", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,10 +22,10 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", @@ -34,7 +34,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 2.8, "impactScore": 5.9 } ] @@ -170,6 +170,10 @@ "Release Notes", "Vendor Advisory" ] + }, + { + "url": "https://github.com/cakescats/airborn-IOS-CVE-2025-24252/blob/main/airborn_arts_CVE-2025-24252_extractor.sh", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-242xx/CVE-2025-24263.json b/CVE-2025/CVE-2025-242xx/CVE-2025-24263.json index ce86c4f69a2..db42ea150ae 100644 --- a/CVE-2025/CVE-2025-242xx/CVE-2025-24263.json +++ b/CVE-2025/CVE-2025-242xx/CVE-2025-24263.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24263", "sourceIdentifier": "product-security@apple.com", "published": "2025-03-31T23:15:23.247", - "lastModified": "2025-11-03T22:18:37.877", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:17:12.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -74,13 +74,15 @@ "url": "https://support.apple.com/en-us/122373", "source": "product-security@apple.com", "tags": [ - "Release Notes", "Vendor Advisory" ] }, { "url": "http://seclists.org/fulldisclosure/2025/Apr/8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-242xx/CVE-2025-24269.json b/CVE-2025/CVE-2025-242xx/CVE-2025-24269.json index b4d089712c8..060aa53ea56 100644 --- a/CVE-2025/CVE-2025-242xx/CVE-2025-24269.json +++ b/CVE-2025/CVE-2025-242xx/CVE-2025-24269.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24269", "sourceIdentifier": "product-security@apple.com", "published": "2025-03-31T23:15:23.717", - "lastModified": "2025-11-03T22:18:38.633", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:17:22.333", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -74,13 +74,15 @@ "url": "https://support.apple.com/en-us/122373", "source": "product-security@apple.com", "tags": [ - "Release Notes", "Vendor Advisory" ] }, { "url": "http://seclists.org/fulldisclosure/2025/Apr/8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-29xx/CVE-2025-2915.json b/CVE-2025/CVE-2025-29xx/CVE-2025-2915.json index 41b86430075..6e4f82df6ba 100644 --- a/CVE-2025/CVE-2025-29xx/CVE-2025-2915.json +++ b/CVE-2025/CVE-2025-29xx/CVE-2025-2915.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2915", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-28T17:15:30.750", - "lastModified": "2025-07-24T10:15:25.193", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:16:35.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { diff --git a/CVE-2025/CVE-2025-396xx/CVE-2025-39663.json b/CVE-2025/CVE-2025-396xx/CVE-2025-39663.json index fc9a2e41a5c..51be600611d 100644 --- a/CVE-2025/CVE-2025-396xx/CVE-2025-39663.json +++ b/CVE-2025/CVE-2025-396xx/CVE-2025-39663.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39663", "sourceIdentifier": "security@checkmk.com", "published": "2025-10-30T11:15:32.400", - "lastModified": "2025-10-30T15:03:13.440", + "lastModified": "2025-11-07T16:15:38.440", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -78,6 +78,10 @@ "url": "https://github.com/sbaresearch/advisories/tree/82fd27e4570433464c30b35150b197db9a850f4e/2025/SBA-ADV-20250729-01_Checkmk_Cross_Site_Scripting", "source": "security@checkmk.com" }, + { + "url": "http://seclists.org/fulldisclosure/2025/Nov/0", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, { "url": "https://github.com/sbaresearch/advisories/tree/82fd27e4570433464c30b35150b197db9a850f4e/2025/SBA-ADV-20250729-01_Checkmk_Cross_Site_Scripting", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" diff --git a/CVE-2025/CVE-2025-438xx/CVE-2025-43878.json b/CVE-2025/CVE-2025-438xx/CVE-2025-43878.json index 071ee9e1c89..1e9c1ef306b 100644 --- a/CVE-2025/CVE-2025-438xx/CVE-2025-43878.json +++ b/CVE-2025/CVE-2025-438xx/CVE-2025-43878.json @@ -2,8 +2,8 @@ "id": "CVE-2025-43878", "sourceIdentifier": "f5sirt@f5.com", "published": "2025-05-07T22:15:20.867", - "lastModified": "2025-05-08T14:39:09.683", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-07T16:54:44.003", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -99,10 +99,101 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.5.1", + "versionEndExcluding": "1.8.0", + "matchCriteriaId": "C4745016-45DE-4276-8281-95A6CE81DC46" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.6.0", + "versionEndIncluding": "1.6.2", + "matchCriteriaId": "CF2910A9-DD68-4E44-8805-3392DA88A297" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4B494DEE-B373-4B3F-95C1-2E0997F32B6E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5BC625D5-C59F-4D20-BA92-0EC85DAB8AFA" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4233544A-999C-42CD-9B61-E639AAA460B9" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r12600-ds:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C6219686-1E3F-4CDE-9FC4-F73BD955673B" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r12800-ds:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A18BFB9A-11E7-4E9B-BF73-2A87EBE778BE" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r12900-ds:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7E078C9F-98BC-42D4-9876-06952239EE17" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:*", + "matchCriteriaId": "24DA75BA-A4B7-46BD-887D-03CDFAF22791" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:*", + "matchCriteriaId": "52B4EBB6-BEEB-42DA-A146-10E401226BED" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:*", + "matchCriteriaId": "55433400-8996-44B8-94D7-81690145EF94" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:velos_cx1610:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E8C75C91-81A8-455B-AF36-8DF24C0365FB" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:h:f5:velos_cx410:-:*:*:*:*:*:*:*", + "matchCriteriaId": "495302C5-8C7D-4D2C-985C-B18E26D8C7DC" + } + ] + } + ] + } + ], "references": [ { "url": "https://my.f5.com/manage/s/article/K000139502", - "source": "f5sirt@f5.com" + "source": "f5sirt@f5.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-472xx/CVE-2025-47207.json b/CVE-2025/CVE-2025-472xx/CVE-2025-47207.json new file mode 100644 index 00000000000..998a0141cfb --- /dev/null +++ b/CVE-2025/CVE-2025-472xx/CVE-2025-47207.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-47207", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:38.580", + "lastModified": "2025-11-07T16:15:38.580", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-524xx/CVE-2025-52425.json b/CVE-2025/CVE-2025-524xx/CVE-2025-52425.json new file mode 100644 index 00000000000..d19dfc75b29 --- /dev/null +++ b/CVE-2025/CVE-2025-524xx/CVE-2025-52425.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-52425", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:38.753", + "lastModified": "2025-11-07T16:15:38.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.\n\nWe have already fixed the vulnerability in the following versions:\nQuMagie 2.7.0 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.5, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-33", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-528xx/CVE-2025-52865.json b/CVE-2025/CVE-2025-528xx/CVE-2025-52865.json new file mode 100644 index 00000000000..0571e72b30e --- /dev/null +++ b/CVE-2025/CVE-2025-528xx/CVE-2025-52865.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-52865", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:38.920", + "lastModified": "2025-11-07T16:15:38.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 1.3, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json index b986c9b96c0..a6eee9d5807 100644 --- a/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53283.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53283", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:56.180", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:40.727", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File Uploader Addon: from n/a through <= 2.4.1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53408.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53408.json new file mode 100644 index 00000000000..30a25c5251c --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53408.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53408", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.093", + "lastModified": "2025-11-07T16:15:39.093", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 1.3, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53409.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53409.json new file mode 100644 index 00000000000..68b3c1b3f81 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53409.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53409", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.247", + "lastModified": "2025-11-07T16:15:39.247", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53410.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53410.json new file mode 100644 index 00000000000..01e12af52e0 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53410.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53410", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.410", + "lastModified": "2025-11-07T16:15:39.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53411.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53411.json new file mode 100644 index 00000000000..65844ecae3d --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53411.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53411", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.563", + "lastModified": "2025-11-07T16:15:39.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 1.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53412.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53412.json new file mode 100644 index 00000000000..0faa314482b --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53412.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53412", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.727", + "lastModified": "2025-11-07T16:15:39.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 0.6, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53413.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53413.json new file mode 100644 index 00000000000..a1bce89d7bc --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53413.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-53413", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:39.930", + "lastModified": "2025-11-07T16:15:39.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54167.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54167.json new file mode 100644 index 00000000000..979c0d3f346 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54167.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-54167", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:40.100", + "lastModified": "2025-11-07T16:15:40.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following versions:\nNotification Center 2.1.0.3443 and later\nNotification Center 1.9.2.3163 and later\nNotification Center 3.0.0.3466 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-40", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54168.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54168.json new file mode 100644 index 00000000000..27441014339 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54168.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-54168", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:40.273", + "lastModified": "2025-11-07T16:15:40.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following version:\nQuLog Center 1.8.2.923 ( 2025/08/27 ) and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-42", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json index 69b80be90fc..4238ea1bc12 100644 --- a/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54604", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-28T17:15:37.337", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-07T15:07:13.490", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,18 +51,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*", + "versionEndExcluding": "30.0", + "matchCriteriaId": "73AD311B-8660-4E8B-BBE7-CCF01AA6ECD8" + } + ] + } + ] + } + ], "references": [ { "url": "https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-54604/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Not Applicable" + ] }, { "url": "https://github.com/bitcoin/bitcoin/releases", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-577xx/CVE-2025-57706.json b/CVE-2025/CVE-2025-577xx/CVE-2025-57706.json new file mode 100644 index 00000000000..fd27283b32e --- /dev/null +++ b/CVE-2025/CVE-2025-577xx/CVE-2025-57706.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-57706", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:40.430", + "lastModified": "2025-11-07T16:15:40.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5018 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-38", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-577xx/CVE-2025-57712.json b/CVE-2025/CVE-2025-577xx/CVE-2025-57712.json new file mode 100644 index 00000000000..c382ad7ddf6 --- /dev/null +++ b/CVE-2025/CVE-2025-577xx/CVE-2025-57712.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-57712", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:40.593", + "lastModified": "2025-11-07T16:15:40.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQsync Central 5.0.0.3 ( 2025/08/28 ) and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-41", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58463.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58463.json new file mode 100644 index 00000000000..6f37a57149a --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58463.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58463", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:40.780", + "lastModified": "2025-11-07T16:15:40.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following versions:\nDownload Station 5.10.0.305 ( 2025/09/16 ) and later\nDownload Station 5.10.0.304 ( 2025/09/08 ) and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.3, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-23" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-37", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58464.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58464.json new file mode 100644 index 00000000000..759c44c6939 --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58464.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58464", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:41.063", + "lastModified": "2025-11-07T16:15:41.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQuMagie 2.7.3 and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-23" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-43", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58465.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58465.json new file mode 100644 index 00000000000..945a0ae5ba5 --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58465.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58465", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:41.230", + "lastModified": "2025-11-07T16:15:41.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following versions:\nDownload Station 5.10.0.305 ( 2025/09/16 ) and later\nDownload Station 5.10.0.304 ( 2025/09/08 ) and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-37", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58469.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58469.json new file mode 100644 index 00000000000..696703e60e1 --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58469.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58469", + "sourceIdentifier": "security@qnapsecurity.com.tw", + "published": "2025-11-07T16:15:41.387", + "lastModified": "2025-11-07T16:15:41.387", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities.\n\nWe have already fixed the vulnerability in the following version:\nQuLog Center 1.8.2.927 ( 2025/09/17 ) and later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 1.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@qnapsecurity.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://www.qnap.com/en/security-advisory/qsa-25-42", + "source": "security@qnapsecurity.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json b/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json index f4119b78275..1c5b027db8f 100644 --- a/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json +++ b/CVE-2025/CVE-2025-585xx/CVE-2025-58592.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58592", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.080", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T16:15:41.563", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.10.2." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json index fda8d854c75..37e2b3398db 100644 --- a/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58619.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58619", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.400", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T16:15:41.730", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through <= 1.3.65." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-593xx/CVE-2025-59396.json b/CVE-2025/CVE-2025-593xx/CVE-2025-59396.json index 272f9906230..e8b360d6f69 100644 --- a/CVE-2025/CVE-2025-593xx/CVE-2025-59396.json +++ b/CVE-2025/CVE-2025-593xx/CVE-2025-59396.json @@ -2,7 +2,7 @@ "id": "CVE-2025-59396", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-06T17:15:44.163", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:40.973", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 with the readwrite password for the admin account." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1188" + } + ] + } + ], "references": [ { "url": "https://github.com/cyberbyte000/CVE-2025-59396/blob/main/CVE-2025-59396.txt", diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json index d82da358cdb..7f8c06395aa 100644 --- a/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60239.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60239", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:06.463", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:41.203", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL Injection.This issue affects CoSchool LMS: from n/a through <= 1.4.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 6.0 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json index b614dda01c7..45d9fb95b75 100644 --- a/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60240.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60240", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:06.613", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:41.420", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json index c069b66dea1..feef098608e 100644 --- a/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60241.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60241", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:06.767", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:41.603", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce premmerce allows PHP Local File Inclusion.This issue affects Premmerce: from n/a through <= 1.3.19." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json index d2e09b3e257..b3a2d180976 100644 --- a/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60247.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60247", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:07.520", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:41.780", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bux Woocommerce: from n/a through <= 1.2.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 4.2 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json index 810196e8d1f..fa4dbcbedc5 100644 --- a/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60248.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60248", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:07.667", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:41.997", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for WooCommerce: from n/a through <= 1.8.6." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-605xx/CVE-2025-60541.json b/CVE-2025/CVE-2025-605xx/CVE-2025-60541.json index b5fa953e46f..840f9f6004f 100644 --- a/CVE-2025/CVE-2025-605xx/CVE-2025-60541.json +++ b/CVE-2025/CVE-2025-605xx/CVE-2025-60541.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60541", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-06T19:15:41.790", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T16:15:41.900", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], "references": [ { "url": "https://github.com/linshenkx/prompt-optimizer", diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json index e60b7e08fe0..cfa13d74490 100644 --- a/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62010.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62010", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:07.820", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:42.207", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Famita famita allows PHP Local File Inclusion.This issue affects Famita: from n/a through <= 1.54." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json index 0dac26ef66f..56797932f58 100644 --- a/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62011.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62011", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:07.970", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:42.427", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json index 81f9b41a675..6162247b4e5 100644 --- a/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62012.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62012", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:08.130", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T15:15:42.643", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json index 36391e970db..5a72912d893 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62429.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62429", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-20T17:15:38.433", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-07T16:59:54.857", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.5.2-147", + "matchCriteriaId": "4F90AE10-9C84-4BC3-90C5-9E3E99132359" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/MacWarrior/clipbucket-v5/commit/e81bac602c871bb1ad971884003a3a496a2ab50b", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.2-%23147", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmq", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmq", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63551.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63551.json index 3d2e93cbb80..ae2ab793de5 100644 --- a/CVE-2025/CVE-2025-635xx/CVE-2025-63551.json +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63551.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63551", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-06T19:15:43.433", - "lastModified": "2025-11-06T19:45:09.883", + "lastModified": "2025-11-07T16:15:42.077", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,46 @@ "value": "A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to construct a malicious XML entity that forces the server to initiate an HTTP request to an arbitrary internal or external network address. Successful exploitation could lead to internal network reconnaissance, port scanning, or the retrieval of sensitive information. The vulnerability may be present in the backend API called by or associated with the path `/admin/#/webset/?head_tab_active=0`, where user-provided XML data is processed." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-611" + }, + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], "references": [ { "url": "https://github.com/sh4ll0t/SSRF-Vulnerability-in-MetInfo-via-XXE-Injection", diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63686.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63686.json new file mode 100644 index 00000000000..a2be840ab64 --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63686.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63686", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.247", + "lastModified": "2025-11-07T16:15:42.247", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 (2020-11-23) in the document query function under the Download Center menu in the PersonManage system." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/LockeTom/95b2a47f2dcb27e62690754993a4c7cd", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/GuoMinJim/PersonManage/issues/10", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63687.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63687.json new file mode 100644 index 00000000000..6be36193ab3 --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63687.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63687", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.383", + "lastModified": "2025-11-07T16:15:42.383", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/LockeTom/564d5be6b75bb64d120daed96d74ec9c", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/rymcu/forest/issues/193", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63689.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63689.json new file mode 100644 index 00000000000..1688acb3d67 --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63689.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-63689", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.503", + "lastModified": "2025-11-07T16:15:42.503", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the orderby parameter" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://gist.github.com/LockeTom/2ed0f3751c88542f48b7c230468d2a46", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/ycf1998/money-pos/issues/3", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63690.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63690.json new file mode 100644 index 00000000000..8c6218a146d --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63690.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63690", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.690", + "lastModified": "2025-11-07T16:15:42.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor and its methods with parameter type String through reflection. At this time, the eval method in Tomcat's built-in class jakarta.el.ELProcessor can be used to execute commands, leading to a remote code execution vulnerability." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/LockeTom/vulnerability/blob/main/md/pig_Remote_Code_Execution_Vulnerability.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pig-mesh/pig/issues/1199", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63691.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63691.json new file mode 100644 index 00000000000..356ea59d03e --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63691.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63691", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.820", + "lastModified": "2025-11-07T16:15:42.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who has completed login authentication, and it returns the plaintext authentication Tokens of all users currently logged in to the system. As a result, ordinary users can obtain the administrator's authentication Token through this interface, thereby forging an administrator account, gaining the system's management permissions, and taking over the system." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/LockeTom/vulnerability/blob/main/md/pig_Information_disclosure_vulnerability.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pig-mesh/pig/issues/1202", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63783.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63783.json new file mode 100644 index 00000000000..00c4ad9d5d4 --- /dev/null +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63783.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63783", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-07T16:15:42.943", + "lastModified": "2025-11-07T16:15:42.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for the requested project ID. An authenticated attacker can send a malicious request containing another user's project ID to unlawfully modify, delete, or manipulate tags on that project, which can severely compromise data integrity and availability." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://blog.soohyun.tech/CVE-2025-63783-IDOR-in-Onlook-27a557175d2e8061a3dbc931da53f095", + "source": "cve@mitre.org" + }, + { + "url": "https://tossbank.notion.site/IDOR-in-onlook-27a557175d2e8061a3dbc931da53f095", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 02b84b92cdd..75f1cbaf6bd 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-07T15:00:13.360376+00:00 +2025-11-07T17:00:11.504318+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-07T14:58:30.450000+00:00 +2025-11-07T16:59:54.857000+00:00 ``` ### Last Data Feed Release @@ -33,51 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -113777 +113817 ``` ### CVEs added in the last Commit -Recently added CVEs: `7` +Recently added CVEs: `26` -- [CVE-2025-10968](CVE-2025/CVE-2025-109xx/CVE-2025-10968.json) (`2025-11-07T13:15:38.397`) -- [CVE-2025-12853](CVE-2025/CVE-2025-128xx/CVE-2025-12853.json) (`2025-11-07T13:15:38.783`) -- [CVE-2025-12854](CVE-2025/CVE-2025-128xx/CVE-2025-12854.json) (`2025-11-07T13:15:39.167`) -- [CVE-2025-12855](CVE-2025/CVE-2025-128xx/CVE-2025-12855.json) (`2025-11-07T14:15:49.167`) -- [CVE-2025-12856](CVE-2025/CVE-2025-128xx/CVE-2025-12856.json) (`2025-11-07T14:15:49.420`) -- [CVE-2025-12857](CVE-2025/CVE-2025-128xx/CVE-2025-12857.json) (`2025-11-07T14:15:49.680`) -- [CVE-2025-34299](CVE-2025/CVE-2025-342xx/CVE-2025-34299.json) (`2025-11-07T14:15:49.920`) +- [CVE-2025-12860](CVE-2025/CVE-2025-128xx/CVE-2025-12860.json) (`2025-11-07T15:15:40.110`) +- [CVE-2025-12861](CVE-2025/CVE-2025-128xx/CVE-2025-12861.json) (`2025-11-07T16:15:38.023`) +- [CVE-2025-47207](CVE-2025/CVE-2025-472xx/CVE-2025-47207.json) (`2025-11-07T16:15:38.580`) +- [CVE-2025-52425](CVE-2025/CVE-2025-524xx/CVE-2025-52425.json) (`2025-11-07T16:15:38.753`) +- [CVE-2025-52865](CVE-2025/CVE-2025-528xx/CVE-2025-52865.json) (`2025-11-07T16:15:38.920`) +- [CVE-2025-53408](CVE-2025/CVE-2025-534xx/CVE-2025-53408.json) (`2025-11-07T16:15:39.093`) +- [CVE-2025-53409](CVE-2025/CVE-2025-534xx/CVE-2025-53409.json) (`2025-11-07T16:15:39.247`) +- [CVE-2025-53410](CVE-2025/CVE-2025-534xx/CVE-2025-53410.json) (`2025-11-07T16:15:39.410`) +- [CVE-2025-53411](CVE-2025/CVE-2025-534xx/CVE-2025-53411.json) (`2025-11-07T16:15:39.563`) +- [CVE-2025-53412](CVE-2025/CVE-2025-534xx/CVE-2025-53412.json) (`2025-11-07T16:15:39.727`) +- [CVE-2025-53413](CVE-2025/CVE-2025-534xx/CVE-2025-53413.json) (`2025-11-07T16:15:39.930`) +- [CVE-2025-54167](CVE-2025/CVE-2025-541xx/CVE-2025-54167.json) (`2025-11-07T16:15:40.100`) +- [CVE-2025-54168](CVE-2025/CVE-2025-541xx/CVE-2025-54168.json) (`2025-11-07T16:15:40.273`) +- [CVE-2025-57706](CVE-2025/CVE-2025-577xx/CVE-2025-57706.json) (`2025-11-07T16:15:40.430`) +- [CVE-2025-57712](CVE-2025/CVE-2025-577xx/CVE-2025-57712.json) (`2025-11-07T16:15:40.593`) +- [CVE-2025-58463](CVE-2025/CVE-2025-584xx/CVE-2025-58463.json) (`2025-11-07T16:15:40.780`) +- [CVE-2025-58464](CVE-2025/CVE-2025-584xx/CVE-2025-58464.json) (`2025-11-07T16:15:41.063`) +- [CVE-2025-58465](CVE-2025/CVE-2025-584xx/CVE-2025-58465.json) (`2025-11-07T16:15:41.230`) +- [CVE-2025-58469](CVE-2025/CVE-2025-584xx/CVE-2025-58469.json) (`2025-11-07T16:15:41.387`) +- [CVE-2025-63686](CVE-2025/CVE-2025-636xx/CVE-2025-63686.json) (`2025-11-07T16:15:42.247`) +- [CVE-2025-63687](CVE-2025/CVE-2025-636xx/CVE-2025-63687.json) (`2025-11-07T16:15:42.383`) +- [CVE-2025-63689](CVE-2025/CVE-2025-636xx/CVE-2025-63689.json) (`2025-11-07T16:15:42.503`) +- [CVE-2025-63690](CVE-2025/CVE-2025-636xx/CVE-2025-63690.json) (`2025-11-07T16:15:42.690`) +- [CVE-2025-63691](CVE-2025/CVE-2025-636xx/CVE-2025-63691.json) (`2025-11-07T16:15:42.820`) +- [CVE-2025-63783](CVE-2025/CVE-2025-637xx/CVE-2025-63783.json) (`2025-11-07T16:15:42.943`) ### CVEs modified in the last Commit -Recently modified CVEs: `36` +Recently modified CVEs: `40` -- [CVE-2025-12424](CVE-2025/CVE-2025-124xx/CVE-2025-12424.json) (`2025-11-07T14:45:20.907`) -- [CVE-2025-12425](CVE-2025/CVE-2025-124xx/CVE-2025-12425.json) (`2025-11-07T14:41:22.743`) -- [CVE-2025-12476](CVE-2025/CVE-2025-124xx/CVE-2025-12476.json) (`2025-11-07T14:36:37.570`) -- [CVE-2025-12477](CVE-2025/CVE-2025-124xx/CVE-2025-12477.json) (`2025-11-07T14:34:09.533`) -- [CVE-2025-12478](CVE-2025/CVE-2025-124xx/CVE-2025-12478.json) (`2025-11-07T13:51:33.857`) -- [CVE-2025-12479](CVE-2025/CVE-2025-124xx/CVE-2025-12479.json) (`2025-11-07T13:45:44.610`) -- [CVE-2025-12485](CVE-2025/CVE-2025-124xx/CVE-2025-12485.json) (`2025-11-07T14:15:48.520`) -- [CVE-2025-12808](CVE-2025/CVE-2025-128xx/CVE-2025-12808.json) (`2025-11-07T14:15:48.973`) -- [CVE-2025-21071](CVE-2025/CVE-2025-210xx/CVE-2025-21071.json) (`2025-11-07T13:03:49.420`) -- [CVE-2025-21073](CVE-2025/CVE-2025-210xx/CVE-2025-21073.json) (`2025-11-07T13:03:29.800`) -- [CVE-2025-21074](CVE-2025/CVE-2025-210xx/CVE-2025-21074.json) (`2025-11-07T13:03:03.920`) -- [CVE-2025-21075](CVE-2025/CVE-2025-210xx/CVE-2025-21075.json) (`2025-11-07T13:02:47.623`) -- [CVE-2025-21076](CVE-2025/CVE-2025-210xx/CVE-2025-21076.json) (`2025-11-07T13:02:25.600`) -- [CVE-2025-21077](CVE-2025/CVE-2025-210xx/CVE-2025-21077.json) (`2025-11-07T13:02:01.790`) -- [CVE-2025-27374](CVE-2025/CVE-2025-273xx/CVE-2025-27374.json) (`2025-11-07T13:00:04.273`) -- [CVE-2025-52910](CVE-2025/CVE-2025-529xx/CVE-2025-52910.json) (`2025-11-07T13:00:22.963`) -- [CVE-2025-53573](CVE-2025/CVE-2025-535xx/CVE-2025-53573.json) (`2025-11-07T14:15:50.227`) -- [CVE-2025-54335](CVE-2025/CVE-2025-543xx/CVE-2025-54335.json) (`2025-11-07T13:00:31.390`) -- [CVE-2025-54605](CVE-2025/CVE-2025-546xx/CVE-2025-54605.json) (`2025-11-07T14:58:30.450`) -- [CVE-2025-59171](CVE-2025/CVE-2025-591xx/CVE-2025-59171.json) (`2025-11-07T14:15:50.477`) -- [CVE-2025-62014](CVE-2025/CVE-2025-620xx/CVE-2025-62014.json) (`2025-11-07T14:15:50.723`) -- [CVE-2025-62016](CVE-2025/CVE-2025-620xx/CVE-2025-62016.json) (`2025-11-07T14:15:50.993`) -- [CVE-2025-62034](CVE-2025/CVE-2025-620xx/CVE-2025-62034.json) (`2025-11-07T14:15:51.220`) -- [CVE-2025-62630](CVE-2025/CVE-2025-626xx/CVE-2025-62630.json) (`2025-11-07T14:15:51.467`) -- [CVE-2025-64110](CVE-2025/CVE-2025-641xx/CVE-2025-64110.json) (`2025-11-07T13:04:09.867`) +- [CVE-2025-21078](CVE-2025/CVE-2025-210xx/CVE-2025-21078.json) (`2025-11-07T15:46:38.130`) +- [CVE-2025-21079](CVE-2025/CVE-2025-210xx/CVE-2025-21079.json) (`2025-11-07T15:46:21.677`) +- [CVE-2025-23239](CVE-2025/CVE-2025-232xx/CVE-2025-23239.json) (`2025-11-07T16:16:26.277`) +- [CVE-2025-24252](CVE-2025/CVE-2025-242xx/CVE-2025-24252.json) (`2025-11-07T16:15:38.217`) +- [CVE-2025-24263](CVE-2025/CVE-2025-242xx/CVE-2025-24263.json) (`2025-11-07T16:17:12.090`) +- [CVE-2025-24269](CVE-2025/CVE-2025-242xx/CVE-2025-24269.json) (`2025-11-07T16:17:22.333`) +- [CVE-2025-2915](CVE-2025/CVE-2025-29xx/CVE-2025-2915.json) (`2025-11-07T16:16:35.980`) +- [CVE-2025-39663](CVE-2025/CVE-2025-396xx/CVE-2025-39663.json) (`2025-11-07T16:15:38.440`) +- [CVE-2025-43878](CVE-2025/CVE-2025-438xx/CVE-2025-43878.json) (`2025-11-07T16:54:44.003`) +- [CVE-2025-53283](CVE-2025/CVE-2025-532xx/CVE-2025-53283.json) (`2025-11-07T15:15:40.727`) +- [CVE-2025-54604](CVE-2025/CVE-2025-546xx/CVE-2025-54604.json) (`2025-11-07T15:07:13.490`) +- [CVE-2025-58592](CVE-2025/CVE-2025-585xx/CVE-2025-58592.json) (`2025-11-07T16:15:41.563`) +- [CVE-2025-58619](CVE-2025/CVE-2025-586xx/CVE-2025-58619.json) (`2025-11-07T16:15:41.730`) +- [CVE-2025-59396](CVE-2025/CVE-2025-593xx/CVE-2025-59396.json) (`2025-11-07T15:15:40.973`) +- [CVE-2025-60239](CVE-2025/CVE-2025-602xx/CVE-2025-60239.json) (`2025-11-07T15:15:41.203`) +- [CVE-2025-60240](CVE-2025/CVE-2025-602xx/CVE-2025-60240.json) (`2025-11-07T15:15:41.420`) +- [CVE-2025-60241](CVE-2025/CVE-2025-602xx/CVE-2025-60241.json) (`2025-11-07T15:15:41.603`) +- [CVE-2025-60247](CVE-2025/CVE-2025-602xx/CVE-2025-60247.json) (`2025-11-07T15:15:41.780`) +- [CVE-2025-60248](CVE-2025/CVE-2025-602xx/CVE-2025-60248.json) (`2025-11-07T15:15:41.997`) +- [CVE-2025-60541](CVE-2025/CVE-2025-605xx/CVE-2025-60541.json) (`2025-11-07T16:15:41.900`) +- [CVE-2025-62010](CVE-2025/CVE-2025-620xx/CVE-2025-62010.json) (`2025-11-07T15:15:42.207`) +- [CVE-2025-62011](CVE-2025/CVE-2025-620xx/CVE-2025-62011.json) (`2025-11-07T15:15:42.427`) +- [CVE-2025-62012](CVE-2025/CVE-2025-620xx/CVE-2025-62012.json) (`2025-11-07T15:15:42.643`) +- [CVE-2025-62429](CVE-2025/CVE-2025-624xx/CVE-2025-62429.json) (`2025-11-07T16:59:54.857`) +- [CVE-2025-63551](CVE-2025/CVE-2025-635xx/CVE-2025-63551.json) (`2025-11-07T16:15:42.077`) ## Download and Usage diff --git a/_state.csv b/_state.csv index ff45505f151..311cbaee350 100644 --- a/_state.csv +++ b/_state.csv @@ -106751,6 +106751,7 @@ CVE-2023-22067,0,0,00494a276a8676e10ef8c4eed93f764f709269bc64fe67a8d4019e2440dd9 CVE-2023-22081,0,0,6ad0337c5d267596875fc3a5dd5bcff5369767118d00729228da98fd7e06dbeb,2025-11-03T22:16:04.550000 CVE-2023-22332,0,0,90bb8cfa44f879b988af16eeff50c4180e862af64cc6911ea82fc2ae5e4483c4,2025-11-03T22:16:04.730000 CVE-2023-22351,0,0,2ea6e90f35997aaf4ba78549ae630f9855ee6d233c0394765ac0a793b50f2c87,2025-11-03T22:16:04.907000 +CVE-2023-22701,0,1,397d63cc1cd8ff9edab01f5ce73941bab7f3f0277d2dee21f0a93e40804a9d41,2025-11-07T16:16:16.717000 CVE-2023-2283,0,0,f3247f10d4e58a47524dcb98f1f17f0737261909551fddc8efcbe92878102f7a,2025-11-03T21:15:57.297000 CVE-2023-22952,0,0,3eed702b1e2685a5f36fe514d42afb8c41450b6e5d3a108796985427e5fd23bd,2025-11-03T18:50:19.817000 CVE-2023-23495,0,0,b07f936dfc9e525cc89901d380376d2d70350e898a9b78e6c69ad0fe3f3f94ad,2025-11-04T20:16:16.990000 @@ -107662,6 +107663,9 @@ CVE-2023-52935,0,0,23b2bb1ff1d8aea0aa5c08c2a9ea9f4c0414eda67825fc59baf364be12ea8 CVE-2023-52969,0,0,37eab6f68cad70ae98d75e5611b02557c13859ee38e58da7fc17ed2fdd3cb130,2025-11-03T20:16:06.087000 CVE-2023-52970,0,0,e0925325d9ea0e4144098a127276d4ff4b7a48f9db10b57f1d152a67ea8ff35d,2025-11-03T20:16:06.217000 CVE-2023-53034,0,0,61389e1977123c043f56b8fb72eac60919aa02ab7829ed17834f1de9af0d03c9,2025-11-03T20:16:06.333000 +CVE-2023-53058,0,1,a52d6fdeb8c20a97f7e964f3928148b41172aa93d3d4df63f101b7e39119c82a,2025-11-07T16:29:08.673000 +CVE-2023-53060,0,1,b2c157b41af8090473690eeca5d3ba4164382c064e73a3810ccf352e280ffcd4,2025-11-07T16:32:03.883000 +CVE-2023-53061,0,1,ca31d9f1523b28cde5bc36814b79187ced20667b3e415c18ec2ab53835400461,2025-11-07T16:45:04.213000 CVE-2023-53062,0,0,43df9db1dac7fa44057ffc030ff410b5b301a0def350ca19823096391412b3d3,2025-11-07T02:23:30.780000 CVE-2023-53064,0,0,a8fcf9ba518527a02a30c71d6984d5e1140b9ce7f3bfc6ebc7d1457b6fa09a5e,2025-11-07T01:51:05.127000 CVE-2023-53154,0,0,0d8eda03b55d5db406c4887e0526482ae60efa16751c62e1682ebe6ee2fd811a,2025-11-03T20:16:06.467000 @@ -108281,7 +108285,7 @@ CVE-2024-29214,0,0,4c5662641503608c98dd5e4bb0487b5db9eb1d1eaf7aadea1ffc33f6f2f4b CVE-2024-2955,0,0,d2dd6701bdb313b5ddc21c1038cba19c68771f5c340916da43af22cf063554b2,2025-11-03T22:16:51.067000 CVE-2024-29978,0,0,7426ef55ab3710543ccb1864b1c929f90cfaac22a433da49dc69fc627893f8b9,2025-11-04T18:16:18.600000 CVE-2024-30115,0,0,e1bef5b4c360452d6db6494f637497327e0e52aac3295d1cb5066e491499f2e0,2025-11-04T01:41:39.123000 -CVE-2024-30145,0,0,212e2aef0e6c0d41f55cb42ec368237b74dbacbaf955ecf16a04b753c7ed748f,2025-11-03T20:16:46.847000 +CVE-2024-30145,0,1,21c477f54dd6332add49f33ea8b6316dbba76538063927fa30a31b219ac974b3,2025-11-07T16:17:38.547000 CVE-2024-30146,0,0,2273b85a461639d3df7677b3a38698babb6da5c3fa1afbd615f973a613d2e533,2025-11-04T01:41:42.530000 CVE-2024-30251,0,0,8d999add4e2a176df90d6f2408a38095eb43c3abf4e7e2507fc804e503312c61,2025-11-03T21:16:09.360000 CVE-2024-30255,0,0,f78b8d62d935b7d04787b2560cdbcc11e769138033e6b5bc8ef6069c3e4dd446,2025-11-04T19:17:06.190000 @@ -108969,6 +108973,7 @@ CVE-2024-42331,0,0,73a6c8cf7badae41fd81ce1447ebaf45b2d0bda1830c0f7d2ee03d803bd95 CVE-2024-42332,0,0,4038e9ba383c874f32d9ed9f8bb6b9beeb222fd072f116760415e721a73e96d0,2025-11-03T22:18:05.137000 CVE-2024-42333,0,0,d128b25e81448a70f89d66bb8189bc0839809d2c8ab7da1b97abcb904aa6cd6a,2025-11-03T22:18:05.277000 CVE-2024-42365,0,0,62b539140eef91a9ccb0f2f4222227c0aa84a9c2c0996aef2717b0755b2936b3,2025-11-03T22:18:05.417000 +CVE-2024-42384,0,1,c908258ba8070ca47e3eda48ec2ce3053c16db61191091d808a9ae42760c9178,2025-11-07T16:15:22.730000 CVE-2024-42415,0,0,dbc6eaeed33fd885b0bb44e780f26de01d0cb833969d517b9d22def06c18c022,2025-11-03T22:18:05.960000 CVE-2024-42416,0,0,bf31b6a7a8cd6715debeb06e0c3337d5cf02fb0dfd634b2f561e4843278f3ec9,2025-11-04T17:16:04.713000 CVE-2024-42459,0,0,cbd77135364129c5876feecf17bcfc71ca0fcd1bed573296b6de721f421e6ce7,2025-11-03T22:18:06.177000 @@ -109500,6 +109505,7 @@ CVE-2024-47945,0,0,35218a18a179462619167589aa629cb8e426afdaf2481b981c00d79a700d3 CVE-2024-47946,0,0,45744f151ac4704172669162487f0e94ab67579deea43b91963c9d4951509b69,2025-11-03T23:16:23.807000 CVE-2024-47947,0,0,87da5be1ed42299ba8c1ef9c1be58a7c6e733893de3048273e15bb03177a2ef4,2025-11-03T23:16:23.970000 CVE-2024-48248,0,0,9e6fefb04d68732eb63683789cbb078228bc62c9548deb03052d74ab93497362,2025-11-05T19:11:07.743000 +CVE-2024-4841,0,1,60a4322c313510614f345e99634e4647446785e338beefb62641371970da393e,2025-11-07T16:19:44.657000 CVE-2024-4853,0,0,87409435848dd064f56b029edff78414a937fca786f3caf2dad5084612d41c8e,2025-11-03T23:16:38.393000 CVE-2024-4854,0,0,b116a065d9e01cb5eb5cd9b7fa5293909ecef8f472da07441da9e483b9161a85,2025-11-03T23:16:38.747000 CVE-2024-48651,0,0,1c490017461ada4cf10c7fa0c39ec19ee505d5557c1a1650e6db5cca90bd33c7,2025-11-03T23:16:24.123000 @@ -109825,7 +109831,7 @@ CVE-2024-52035,0,0,4c52ef800ea0db2be498eff262612c7464de7d1f9ed06d2c9e24bb0060861 CVE-2024-5217,0,0,a5a7fa1e5357b87ddb65468333ae1fdf852cc48cbcd4449affb5280a25088161,2025-11-03T18:58:17.937000 CVE-2024-52279,0,0,9f10db8c987ccf702b78872758b711f38e6bb9230b6ead4548d566bc138fc2db,2025-11-04T22:16:04.523000 CVE-2024-52304,0,0,50a0948dd3ea999999702c996fe7d09349050bbeda793fb86cf12d081c551e22,2025-11-03T21:17:21.180000 -CVE-2024-52316,0,0,ea27e824743f768c496908034e9945534274658fd78d02222e5b28004494f386,2025-11-03T21:17:21.307000 +CVE-2024-52316,0,1,393dc511ed5b6ff43c25f0f7ac4b8c7880217f4c18590703f4c07885dbefe182,2025-11-07T16:15:59.050000 CVE-2024-52332,0,0,9da65611fea7b38aec76a3c4ad4146a745759ec6bc2b9497bf1c1be78ab30573,2025-11-03T21:17:21.527000 CVE-2024-52333,0,0,826f0fbd1414914085027834f59cd0a823ccba98cc6fe67a91908a24562939e7,2025-11-03T21:17:21.663000 CVE-2024-52506,0,0,92233cca2fd6558ad1b9d0c0b8972fa11dfb9820ca0581b07ab12d9031d63c11,2025-11-03T19:31:27.140000 @@ -110346,6 +110352,7 @@ CVE-2024-9392,0,0,f874f9f123c638ef7278d3aef80e6cd9be2198229f92e69a58e6d989f00d59 CVE-2024-9393,0,0,2138d0deafc77c916d9b99b40f4112d2f79436f73248578ed29a0d9ac230d51c,2025-11-03T23:17:33.923000 CVE-2024-9394,0,0,8db4eb1e6627f6745d93454a727641765a6ddbf3e67f408e3f888c5a6cc72ef7,2025-11-03T23:17:34.097000 CVE-2024-9401,0,0,e722384c598c37ad9f054e17786fdefdba4a19e1ffa7c3491bb21a3a7f270e35,2025-11-03T23:17:34.280000 +CVE-2024-9444,0,1,cd7204f1b9df3638056d82f97abd5d1181082b8881f1f684d61b9fd9783d15d6,2025-11-07T16:10:14.930000 CVE-2024-9463,0,0,a7c9359fb919b1bb46a01b92266c6b09a2dbcb712ff60db3721e27c5682da4e2,2025-11-04T16:48:57.193000 CVE-2024-9465,0,0,42fffc6283617ec5d06c3a8f420893c8f815f835d6a3abbf456ba96812c6c6eb,2025-11-04T16:49:01.677000 CVE-2024-9474,0,0,c312b9f70ba3c4c41c7fdc749403e31c1e9a322e1b347550aceb4d840ffc89d4,2025-11-04T16:49:14.807000 @@ -110435,7 +110442,7 @@ CVE-2025-10925,0,0,b42d4c36874cb1f425be3ff0b2c073b801fbab5bb1ee5b870b5ace3c7b117 CVE-2025-10934,0,0,4b019042e3c9bce43c9ad5c429cbb2d54039455926e6570e0a952388238e5823,2025-11-04T13:12:43.120000 CVE-2025-10955,0,0,53ec56b944f9de9381576b1b3861c3f6353c1497caf52bd0b1e66728c0b16e3d,2025-11-07T09:15:37.630000 CVE-2025-10966,0,0,92c0516a22357148b63e251408d10aa4acaf3012a9d4f0da004bf81257c69f0f,2025-11-07T08:15:39.617000 -CVE-2025-10968,1,1,3e2cc58714b203b0c8699e4b69903ec7942e079c60f5685254bbbcc81236a0ea,2025-11-07T13:15:38.397000 +CVE-2025-10968,0,0,3e2cc58714b203b0c8699e4b69903ec7942e079c60f5685254bbbcc81236a0ea,2025-11-07T13:15:38.397000 CVE-2025-1097,0,0,5680e85d18ec5605fb88a2924264a43c54978cedd997e744589d4016687bf829,2025-11-03T21:18:52.093000 CVE-2025-1098,0,0,0ecfae677f996d8c5821e8dbcd60de24300eac5289bd8151b98959d9aecc8269,2025-11-03T21:18:52.230000 CVE-2025-11007,0,0,1e4fb842967631b06527606b33454c6affa0e13f74a0c90a0c74c4e15b0e90ef,2025-11-04T15:40:45.533000 @@ -110454,18 +110461,18 @@ CVE-2025-11191,0,0,02594eb3d9acb53a64582d1c3b1a90c488cfdda2e1e11a00157e30dc3ef0f CVE-2025-11193,0,0,75138023d7c695c139aae63020a257b2be7001352b217749d9004002a3543785,2025-11-04T15:41:31.450000 CVE-2025-11200,0,0,f479f9d2e00907f01c90311c64f4fd563210654c7961457284e9d61651ef7209,2025-11-04T21:18:26.650000 CVE-2025-11201,0,0,12f4deb6429572c50e292d8b585bb8311acaa4d9b85ccffab0256716983d80b1,2025-11-04T21:22:41.407000 -CVE-2025-11205,0,1,ee11e25d7eaab6dc44a265f19f4b2a018ab68c41c21ea65c53361cfc960fb817,2025-11-07T14:15:45.767000 -CVE-2025-11206,0,1,0bb6e5189b573026306203db8be96604c1b308273c2ee8cfb64e19924751a392,2025-11-07T14:15:46.627000 +CVE-2025-11205,0,0,ee11e25d7eaab6dc44a265f19f4b2a018ab68c41c21ea65c53361cfc960fb817,2025-11-07T14:15:45.767000 +CVE-2025-11206,0,0,0bb6e5189b573026306203db8be96604c1b308273c2ee8cfb64e19924751a392,2025-11-07T14:15:46.627000 CVE-2025-11207,0,0,2cc4e3fdcb8e048703a23bf983719ecc54615f09f063f6ac00dd31bad0c7e257,2025-11-06T22:15:38.607000 -CVE-2025-11208,0,1,5dc305ab0a9a5822a656900c91615315bcd485920b1c2f72d088b672f4d7adae,2025-11-07T14:15:46.843000 +CVE-2025-11208,0,0,5dc305ab0a9a5822a656900c91615315bcd485920b1c2f72d088b672f4d7adae,2025-11-07T14:15:46.843000 CVE-2025-11209,0,0,c2bacaba6559b1ea46600ade5bc1b082afbf31e64bd6aafed602cb44783712e9,2025-11-06T22:15:38.850000 -CVE-2025-11210,0,1,8db2743b15315388617a9890db9906a7f55b14cfb9f8c959a986e422795d5696,2025-11-07T14:15:47.060000 +CVE-2025-11210,0,0,8db2743b15315388617a9890db9906a7f55b14cfb9f8c959a986e422795d5696,2025-11-07T14:15:47.060000 CVE-2025-11211,0,0,9e6ccf03f08716f9183dfb98deb619975eb9544562d923415167f7a80017ab02,2025-11-06T22:15:39.083000 -CVE-2025-11212,0,0,8131911a9b9f806680c25c55c0786c9b92888c9a8be2def36e010ab3f15a0d3f,2025-11-06T22:15:39.210000 -CVE-2025-11213,0,0,6fe21210bacde872e607ffa2c732f25adf1c991e35cac8eb3545b81dc4b0f1ca,2025-11-06T22:15:39.317000 -CVE-2025-11215,0,0,c272743efc67fbe40862f509a9b78a4ee1d1a17f754b1f5c0941203676161cd7,2025-11-06T22:15:39.420000 -CVE-2025-11216,0,1,e8ff7eb5b121900d045abeb90c1b1061ba5ba1dd7403c6a10f641c7c71f40e8b,2025-11-07T14:15:47.317000 -CVE-2025-11219,0,1,9aaaae7356602f030bee6a27f9c11cc5db577ebb9d3251e02c2f44a7b882638f,2025-11-07T14:15:47.543000 +CVE-2025-11212,0,1,eef12e4f0e97ee08382dbcb7f302829f22c07f19c8f61378739516f8c2087dd9,2025-11-07T15:15:37.940000 +CVE-2025-11213,0,1,f22345a98ab2f58a068429e05612c7e2683f5f4e263abc5280188c0e9bd349a2,2025-11-07T15:15:39.213000 +CVE-2025-11215,0,1,9324054bfdc8f430c5de698fb76a0712ba434d68db6492c08661891289977eb4,2025-11-07T15:15:39.410000 +CVE-2025-11216,0,0,e8ff7eb5b121900d045abeb90c1b1061ba5ba1dd7403c6a10f641c7c71f40e8b,2025-11-07T14:15:47.317000 +CVE-2025-11219,0,0,9aaaae7356602f030bee6a27f9c11cc5db577ebb9d3251e02c2f44a7b882638f,2025-11-07T14:15:47.543000 CVE-2025-11232,0,0,e151dc036c8b59d77490d6909784f0cd6ae17ddb30121751c719c0f9fcf06cfe,2025-11-04T22:16:05.600000 CVE-2025-11268,0,0,c553e800bdc49c1c23b9f84090d3b913eec5f45072bc223e555b5287fb5871c2,2025-11-06T19:45:09.883000 CVE-2025-11271,0,0,d162edde098a62134cfdb7f2847cd60bdd08e48943c6a6f6dbf6889f272ac664,2025-11-06T19:45:09.883000 @@ -110484,7 +110491,7 @@ CVE-2025-11371,0,0,c1add0ec26ba6b4ba6f56096c0664bb7dbe12aa76e7df560efe470ad4a740 CVE-2025-11373,0,0,fb9b8a6f28c61f9abf62f8e0473b10fe1c4d0b16c26f2e0e6b866e8692498102,2025-11-06T19:45:30.990000 CVE-2025-11377,0,0,4689ab6e4ffb0b8c536e9020588877fb5800f9ca63c80dca471bdc43411df849,2025-11-04T15:41:31.450000 CVE-2025-11411,0,0,a482eb63630e8440639d3524afdb6fa57810749cc7154d151040e6984403ce82,2025-11-06T01:15:37.560000 -CVE-2025-11458,0,1,d52e01056a11c37124ba52e2d2d9e8b87204f89745c56638fa79a105c89bab6a,2025-11-07T14:15:47.777000 +CVE-2025-11458,0,0,d52e01056a11c37124ba52e2d2d9e8b87204f89745c56638fa79a105c89bab6a,2025-11-07T14:15:47.777000 CVE-2025-11460,0,0,fbdd0dd7b3e2ec58438d6268858d9aa0c3c2d23cb93a8be0bd7dd6803d59f808,2025-11-06T23:15:35.347000 CVE-2025-11463,0,0,630e8a4def0aa468c9cab7ad2ec0a4d44bd30174304aa320d0b6a5841f78bdd0,2025-11-04T21:25:09.353000 CVE-2025-11464,0,0,de15389d458e3699a0500286cf771aa3bce38fc2fc3ebfefeb55c86ea75a1c1b,2025-11-04T21:27:41.163000 @@ -110512,7 +110519,7 @@ CVE-2025-11745,0,0,5e375b7e01a992036a63fab3266cbd88753f4bb96e33c2669f54170738220 CVE-2025-11749,0,0,f28e1536684c624d00558990824ee358c789bb39f0b79c6b541c87eaa7beda3a,2025-11-06T19:45:30.990000 CVE-2025-11753,0,0,efb2fc3659d0a1d464df056937c66b22958ad3eb0a440f727e5abc0c791d0288,2025-11-04T15:40:45.533000 CVE-2025-11755,0,0,e5baa99e43a4ddc9310a3a7b11a9886eb0253e6d3147e723d3be66ed08104da1,2025-11-04T15:41:31.450000 -CVE-2025-11756,0,1,9c413816fcd83f0828c2a82264d7995482d5b7e0a664c1f10da69d816adfa410,2025-11-07T14:15:48.060000 +CVE-2025-11756,0,0,9c413816fcd83f0828c2a82264d7995482d5b7e0a664c1f10da69d816adfa410,2025-11-07T14:15:48.060000 CVE-2025-11758,0,0,fdd1d7b0c5468cb75e3652535ac7087c51b1246e9da95d3194efd265c455c087,2025-11-04T15:40:45.533000 CVE-2025-11761,0,0,f6e39bd9482657942879edd0b2a1b17b4e754913cb6b1c42f5608d25f9fcf9db,2025-11-04T15:41:31.450000 CVE-2025-11806,0,0,08d65701390e43b2f7f03f89f91aab6f7e850ca93ddff0ab1e6d4bedda40a405,2025-11-04T15:41:56.843000 @@ -110538,7 +110545,7 @@ CVE-2025-11983,0,0,bc7fb32e029694302396f8cd3f019a19b9640e3f29521eb8cdc75f2a72adc CVE-2025-11987,0,0,5f075ac4a2454fb926f2866639bb4f71f7c834ea0e6ac91e4d06ad777e261f82,2025-11-06T19:45:30.990000 CVE-2025-11995,0,0,6f8958ce899f0704a85806bb10326db23bb70663c3cd48669a3dcf953846ff97,2025-11-04T15:41:31.450000 CVE-2025-11998,0,0,cc4ee38171b43db578c92dfe8077240d6a33ecae0069eac25ccf4b6743123739,2025-11-04T15:41:56.843000 -CVE-2025-12036,0,1,b6a29705c8a44e57b4487b4354bc17cb6f4a696c287ddc20eb60a0072c264058,2025-11-07T14:15:48.290000 +CVE-2025-12036,0,0,b6a29705c8a44e57b4487b4354bc17cb6f4a696c287ddc20eb60a0072c264058,2025-11-07T14:15:48.290000 CVE-2025-12038,0,0,5e68deca7bb2d572b14281f601c9046d7f4e12cddc4a86070cd881007401f674,2025-11-04T15:41:31.450000 CVE-2025-12041,0,0,04b3f5eb88f064d9ed579375abd8f4adff37d58c9430cbd2dccc1d119d6df551,2025-11-04T15:41:31.450000 CVE-2025-12045,0,0,bf97e5c8fba4d4a0684e0f7c806ce57e2994b106567564c2b0f09bae97437c1b,2025-11-04T15:40:45.533000 @@ -110632,10 +110639,10 @@ CVE-2025-12412,0,0,7ca7ab82f5456740837dbfa39a61e5a75051cf165d485d144537ce310e1a9 CVE-2025-12413,0,0,5d7fe3a7e47a475a9c0ef94ac93fed937f84f5c66411a28364a8806394690eb4,2025-11-04T15:40:45.533000 CVE-2025-12415,0,0,81c866442fb9fd46706f21c98259794a7fcc8b091f645ddfb160f6da0ea0b137,2025-11-04T15:40:45.533000 CVE-2025-12416,0,0,ec35b538eb8dc521ad393c983756c4acf2a7d587acce4aede1c3f6348a585ec8,2025-11-04T15:40:45.533000 -CVE-2025-12422,0,1,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72561,2025-11-07T14:55:47.233000 -CVE-2025-12423,0,1,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000 -CVE-2025-12424,0,1,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000 -CVE-2025-12425,0,1,43aaac0b175aaa195986cd5a730bc223ba21fabd755ab85853fa015b598f9b6a,2025-11-07T14:41:22.743000 +CVE-2025-12422,0,0,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72561,2025-11-07T14:55:47.233000 +CVE-2025-12423,0,0,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000 +CVE-2025-12424,0,0,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000 +CVE-2025-12425,0,0,43aaac0b175aaa195986cd5a730bc223ba21fabd755ab85853fa015b598f9b6a,2025-11-07T14:41:22.743000 CVE-2025-1244,0,0,511fd9716249718f9e2af8c639e9da9d69840e0db63e4ab656a288d391609d08,2025-11-03T21:18:52.620000 CVE-2025-12452,0,0,6ea268cff271e13f387b1be76ffd534dfb3563554cec29c13cc965ba6f9f97fb,2025-11-04T15:40:45.533000 CVE-2025-12456,0,0,14eee47b68d992143ad17e685afafe2ffbf679d13bdb1d15aee71f9bca67a8dc,2025-11-04T15:40:45.533000 @@ -110645,11 +110652,11 @@ CVE-2025-12464,0,0,b46fa64dfa8982985a4b0c97363287615507209fa18d74a17a9cc2d8dfc82 CVE-2025-12468,0,0,d80077e189c8e0cc0a32b8f6e608ba02c69fbb8b7dd97f1114324f6851a67200,2025-11-06T19:45:30.990000 CVE-2025-12469,0,0,bf34663df120650e33384d04131816ee59060471728069689522848ce1599261,2025-11-06T19:45:30.990000 CVE-2025-12471,0,0,982e1366d58cceda0f9b997acb6704eec333e7df9672e057955230305e310024,2025-11-06T19:45:09.883000 -CVE-2025-12476,0,1,dffaa2e4dbd01c83376644a843f4245a697ac382398dfb55bc5b4b8b4adfbdfe,2025-11-07T14:36:37.570000 -CVE-2025-12477,0,1,f12e80549d779a6e980baf733313369f2db5bb11de1ef108361d64bf96db0579,2025-11-07T14:34:09.533000 -CVE-2025-12478,0,1,86d75984b85ef16075ffd33fa7417d24390ad83231afc9f9b8559d8c45eb835d,2025-11-07T13:51:33.857000 -CVE-2025-12479,0,1,fe8242385f09d0774f835e18925f65eb24a1fdbc24290a5c51a30b97325ea6f6,2025-11-07T13:45:44.610000 -CVE-2025-12485,0,1,b145f0b167c7a350e5a9b0c6d06f4018b5012d5d4ee0076a8acb84c140d21715,2025-11-07T14:15:48.520000 +CVE-2025-12476,0,0,dffaa2e4dbd01c83376644a843f4245a697ac382398dfb55bc5b4b8b4adfbdfe,2025-11-07T14:36:37.570000 +CVE-2025-12477,0,0,f12e80549d779a6e980baf733313369f2db5bb11de1ef108361d64bf96db0579,2025-11-07T14:34:09.533000 +CVE-2025-12478,0,0,86d75984b85ef16075ffd33fa7417d24390ad83231afc9f9b8559d8c45eb835d,2025-11-07T13:51:33.857000 +CVE-2025-12479,0,0,fe8242385f09d0774f835e18925f65eb24a1fdbc24290a5c51a30b97325ea6f6,2025-11-07T13:45:44.610000 +CVE-2025-12485,0,0,b145f0b167c7a350e5a9b0c6d06f4018b5012d5d4ee0076a8acb84c140d21715,2025-11-07T14:15:48.520000 CVE-2025-12486,0,0,d91d2c4e4915515e341fd5b5d07bb0b900a17a39892430b3c74d613502d68591,2025-11-06T21:15:39.340000 CVE-2025-12487,0,0,e5b0433ee13809e8540a400455cba7801ba14d14947c383b1cdbc65a374e9186,2025-11-06T21:15:39.500000 CVE-2025-12488,0,0,874553df759073cd4e57d960e28103618f24a5019a28a30b143a289ace6f8d2c,2025-11-06T21:15:39.657000 @@ -110723,13 +110730,16 @@ CVE-2025-12745,0,0,98d6e6a936cfb7cbdefe188b4d47f3ebc52d27fa109ac61e902bd54f45f48 CVE-2025-12779,0,0,d679c19534f4078ee0931f920982f0a21ebc24e8cec4bd1a3b50e0f9cc4354ec,2025-11-06T19:45:09.883000 CVE-2025-12789,0,0,c657ab39209f892875643469446090d521427a48631a9b4be35dead962e78e88,2025-11-07T00:15:53.117000 CVE-2025-12790,0,0,316836afc66b51b3fb755c26369b8fbd10d842ba46a095c7e591ff465b95a7d8,2025-11-06T21:15:40 -CVE-2025-12808,0,1,791a70f27f0cea997fc2d5a8807dfb3e012d5d7f9ff681fec40be2735deaed68,2025-11-07T14:15:48.973000 +CVE-2025-12808,0,0,791a70f27f0cea997fc2d5a8807dfb3e012d5d7f9ff681fec40be2735deaed68,2025-11-07T14:15:48.973000 CVE-2025-12815,0,0,f2a9fecaa52901be55f696803952d09bedd901fcfdb47f693ebcf6393f6d9fab,2025-11-06T19:45:09.883000 -CVE-2025-12853,1,1,a5eaf9d32a20be924d9563e1ddf333dab1652f9969baa07ac56bac552a10ff54,2025-11-07T13:15:38.783000 -CVE-2025-12854,1,1,edbdda86ed68d93929a948e5a92b7db316e19f149335a6410a66c542d0d525af,2025-11-07T13:15:39.167000 -CVE-2025-12855,1,1,c6a550b8b14d3d68ef48a61fe3871bbc3eea48cb7373d85962f25267a00908cf,2025-11-07T14:15:49.167000 -CVE-2025-12856,1,1,6b00963c3c97c2d26d536acc2fdf4d85fd3864a96af5eb3e726b0501aa5cb86d,2025-11-07T14:15:49.420000 -CVE-2025-12857,1,1,8cba6b6b6594b9c71b1d7bb78a70df68a880b5b2e810ac15f368c0ad4f0e175a,2025-11-07T14:15:49.680000 +CVE-2025-12853,0,0,a5eaf9d32a20be924d9563e1ddf333dab1652f9969baa07ac56bac552a10ff54,2025-11-07T13:15:38.783000 +CVE-2025-12854,0,0,edbdda86ed68d93929a948e5a92b7db316e19f149335a6410a66c542d0d525af,2025-11-07T13:15:39.167000 +CVE-2025-12855,0,1,8d7a455f61c8396c85e83eb2b84d686b7dbc40c8d080faaa98d19d4187e1c5fc,2025-11-07T16:15:37.393000 +CVE-2025-12856,0,0,6b00963c3c97c2d26d536acc2fdf4d85fd3864a96af5eb3e726b0501aa5cb86d,2025-11-07T14:15:49.420000 +CVE-2025-12857,0,0,8cba6b6b6594b9c71b1d7bb78a70df68a880b5b2e810ac15f368c0ad4f0e175a,2025-11-07T14:15:49.680000 +CVE-2025-12859,1,1,ab3bf21f781a3ea6f43798747412855ce142e522f384ed894c75091ee8b8a9da,2025-11-07T15:15:39.873000 +CVE-2025-12860,1,1,4d40c960c5aedc1b0142650fc08684189b41d77236b00b95fe62bae6670e5d0f,2025-11-07T15:15:40.110000 +CVE-2025-12861,1,1,ac3198d17f9b373838155c80d7d1e38ecac115e87984cf9c36ddc377af5e027d,2025-11-07T16:15:38.023000 CVE-2025-1352,0,0,468e4165c1fbc1f238500ed696137c4d06d5e55cbc9edf2b4912378bc89bb127,2025-11-03T20:34:23.890000 CVE-2025-1365,0,0,55f7dfa0bade2739abc462d0dd1be32537a6360e2a69511b23a5767e8c117cb7,2025-11-04T20:07:34.117000 CVE-2025-1371,0,0,b0b7a9879ee015862f2a61f044d93f38b089289c09729ba7f8126646ae3c35b8,2025-11-04T20:13:36.377000 @@ -110768,8 +110778,8 @@ CVE-2025-20303,0,0,6de0fca25cc91cd49b79cddcdd423f1e86770a4622a76f115da3780cbae38 CVE-2025-20304,0,0,427cdec7cbf09e1c509d86da28c9d8bedbb9cba5ede77be9c748a242c0b8c3ca,2025-11-06T19:45:30.990000 CVE-2025-20305,0,0,de6fe9e599676fa5e64a5642477558cf69619cfc0aa6d0549f939e81bc89b3a7,2025-11-06T19:45:30.990000 CVE-2025-20343,0,0,fca736b081bf214e328954b998b3e3fe007950fb30d0e684ba59d1c456bddcff,2025-11-06T19:45:30.990000 -CVE-2025-20354,0,0,235b30791e2a46687d298b5a9270bbfc81283af1006db9f0318dbd033fdfa0d6,2025-11-06T19:45:30.990000 -CVE-2025-20358,0,0,f63c89cb82bb280eee0777224daa9036ba7e473eb1393aa58dc11683657cf40d,2025-11-06T19:45:30.990000 +CVE-2025-20354,0,1,d1a731fb6fb5acf181c732806c41bdc55af4aafdb48d40aa43ea90bd9cb6ad2b,2025-11-07T15:44:35.293000 +CVE-2025-20358,0,1,b3640640c8402527098abbb61a38ae7c1ba914ddb4db0227b70a30d4f676f843,2025-11-07T15:43:44.413000 CVE-2025-20362,0,0,06cf786ef72ebd5e6334ee4aa6bfb4e7ddc250c8983d0d4627a2fd93eea21209,2025-11-06T14:51:19.950000 CVE-2025-20374,0,0,f118d6cc8428434a56e228295be9ea591d344f1d2cba0d35bc357cbb3f01df5b,2025-11-06T19:45:30.990000 CVE-2025-20375,0,0,f8a94d20be323a1c3944e9be76c3ec4564fbc6a13489c57476d5c0cb9e987c18,2025-11-06T19:45:30.990000 @@ -110801,14 +110811,14 @@ CVE-2025-20746,0,0,4ac6eb00c9f839b7e4887b21da50623761b2e498f73a2c58f04134ace6cf3 CVE-2025-20747,0,0,95538d003f02f99574e9e2d8a9505eda9877f65b55ffe149f98dd1b1d0805057,2025-11-05T17:11:25.263000 CVE-2025-20748,0,0,cd905e02deb1e7af1bf337f5b5262597188675e84264dff24cc608856bfcd1e5,2025-11-05T17:11:14.503000 CVE-2025-20749,0,0,2b6a872edd2bf98d126f05aa1804a670ec9e7462b9449b3285106d43adbf0d0e,2025-11-05T17:10:55.500000 -CVE-2025-21071,0,1,9e132eb8bb584ba31f4ee7dfae78f9b19d405ccc8717a0ef4dbc14bd0a3095b1,2025-11-07T13:03:49.420000 -CVE-2025-21073,0,1,c674f285003182e28499e53f73fd2e165707f2297635a3a5ccbd45fac78d7675,2025-11-07T13:03:29.800000 -CVE-2025-21074,0,1,634dec861db3295ff4700f52a8ba6ea0a91395ab195693ab2da80ddd53063e70,2025-11-07T13:03:03.920000 -CVE-2025-21075,0,1,3d617d96990323bbf9de849dfe5ce33588cb90ec46ecb756c61e14f8a6cfbe20,2025-11-07T13:02:47.623000 -CVE-2025-21076,0,1,d3ae0bd76d5c729264ba3975f67a497a7f448147d9a56f7e329717287275e383,2025-11-07T13:02:25.600000 -CVE-2025-21077,0,1,3e9d73e43a3fd055e19df017b3d1e94a8ab6bac3cda93189a27e82ff5e7f9bd6,2025-11-07T13:02:01.790000 -CVE-2025-21078,0,0,31bfa89077124bcb8ebad3dc9239c08dc024d21313e31ecb226ab825552c3e36,2025-11-06T19:45:30.990000 -CVE-2025-21079,0,0,12ab3ace999cdd1e785201fd060ce4e8f5a2f891e2a7d46e5519050a3de35ae7,2025-11-06T19:45:30.990000 +CVE-2025-21071,0,0,9e132eb8bb584ba31f4ee7dfae78f9b19d405ccc8717a0ef4dbc14bd0a3095b1,2025-11-07T13:03:49.420000 +CVE-2025-21073,0,0,c674f285003182e28499e53f73fd2e165707f2297635a3a5ccbd45fac78d7675,2025-11-07T13:03:29.800000 +CVE-2025-21074,0,0,634dec861db3295ff4700f52a8ba6ea0a91395ab195693ab2da80ddd53063e70,2025-11-07T13:03:03.920000 +CVE-2025-21075,0,0,3d617d96990323bbf9de849dfe5ce33588cb90ec46ecb756c61e14f8a6cfbe20,2025-11-07T13:02:47.623000 +CVE-2025-21076,0,0,d3ae0bd76d5c729264ba3975f67a497a7f448147d9a56f7e329717287275e383,2025-11-07T13:02:25.600000 +CVE-2025-21077,0,0,3e9d73e43a3fd055e19df017b3d1e94a8ab6bac3cda93189a27e82ff5e7f9bd6,2025-11-07T13:02:01.790000 +CVE-2025-21078,0,1,c251cc073e044bd146ce4266bc88b45b6913592d44f458fd8f3dee4fb726b746,2025-11-07T15:46:38.130000 +CVE-2025-21079,0,1,8bb04ed04a6edef3bfd3be71a80a3fe689a93898a07c71f843313b881fb2b221,2025-11-07T15:46:21.677000 CVE-2025-21090,0,0,2063892e6a741f598cbe1d790c0c0d54f68bc55d7de8af0b3b692b3b53787ea1,2025-11-03T18:15:49.330000 CVE-2025-21333,0,0,3c071312b446d4fcdad14b672e305f91f6afb7278db017d1a252a251214c75ef,2025-11-03T15:08:08.450000 CVE-2025-21490,0,0,550eabecccba82c61250e18212f678f8d9c56e65cc8c827edafc6ca4378b6e7b,2025-11-03T21:18:55.383000 @@ -111165,6 +111175,7 @@ CVE-2025-23160,0,0,ff7c3405e2e89a090f59a020715ee1903f5a3740a491e9dc17971730b245f CVE-2025-23161,0,0,776e58492abf18d796125f4ec7f9ea21b87dfff08f02bcf064548828c075b479,2025-11-05T17:51:58.023000 CVE-2025-23162,0,0,8cc213c1863538a4077ee4987a930b9732257622ce27b683ac81778ec041c471,2025-11-05T15:32:30.347000 CVE-2025-23163,0,0,7dda56651470be2fc2ae543dd8bd5a454475649dea4333ec688d387070f72499,2025-11-05T17:50:57.807000 +CVE-2025-23239,0,1,c04f9c8fbc8832308752d7d85a90dbca1ead749334d77c49faa7a2b9fd27b7c8,2025-11-07T16:16:26.277000 CVE-2025-23267,0,0,39331289cd0ac430eda3de6f8a0290c0a00fa7b85f68ed4cd7039d5201dce127,2025-11-04T22:16:07.227000 CVE-2025-23271,0,0,a4a693d59915e65268a843da1a9d336559c2bc582ff1696db7f3c9138a5bd805,2025-11-03T19:15:47.817000 CVE-2025-23308,0,0,5f25c77cbce3f197187c0a8ca1f997b6fb22dfb29ebafb04cc288503dbf697f6,2025-11-03T19:15:47.953000 @@ -111320,6 +111331,7 @@ CVE-2025-24247,0,0,5bfb810b6c281dd07561736c9f9ef16f2730a7e8d8c57d2888fc1c94d55c7 CVE-2025-24248,0,0,58efa7e506cc38d2bf3c713e71a2b0b39c1b482b63d32ec5a7a0f3d0811fbaa5,2025-11-03T22:18:36.117000 CVE-2025-24249,0,0,8a243eeaabd5c69cca9f462654684f567f41d1110bb31a3d2c4b2c92d5edefc2,2025-11-03T22:18:36.260000 CVE-2025-24250,0,0,2b8c8dad923b3e6ee42832af40d8f33a570d64c7b9e0d7930ce129c5f68cc656,2025-11-03T22:18:36.403000 +CVE-2025-24252,0,1,b98cf9aab7489ab00fced668e5d941b6aab55fd428ef6d59f009aeaa2c658c3e,2025-11-07T16:15:38.217000 CVE-2025-24253,0,0,84451eba0e9d96047d0e6a1ac917853919887fd0342ef50ce913b7351c602d16,2025-11-03T22:18:36.553000 CVE-2025-24254,0,0,7c8fa373979eb7a914d13747560691faeb777f4e5472c62afac3ec56b8185353,2025-11-03T22:18:36.703000 CVE-2025-24255,0,0,4a16abf98460a3607795455170bf410085b25aceecbca7daf66ccef363c5c671,2025-11-03T22:18:36.847000 @@ -111330,12 +111342,12 @@ CVE-2025-24259,0,0,f68dbc699933cf1a46fba5f37a75adff987177ab2600aae4313e1043ca071 CVE-2025-24260,0,0,0635d2b3b172c996b175e3fb81daaf9f66c583a5c607c84306bc2cc3caf48b0a,2025-11-03T22:18:37.440000 CVE-2025-24261,0,0,ed702cf4083c1b1d8c357fff3a5f9a01b423a0be0b8587e53f2cf7d28b828970,2025-11-03T22:18:37.597000 CVE-2025-24262,0,0,60c91ca501a3ad3740b7bdfb38a1b6945300ae35640f405e5e2ba6beb881070f,2025-11-03T22:18:37.743000 -CVE-2025-24263,0,0,9a1c85601171cdd1d40b6a4013d18afd151dd23788831e50ca48439628abf64f,2025-11-03T22:18:37.877000 +CVE-2025-24263,0,1,c24ed8eac120b05e6038b11a0fa131e7d9c17ec5bd994de587888eebd7d65a10,2025-11-07T16:17:12.090000 CVE-2025-24264,0,0,4bdcccc9bae1e59d8e29ff87ee6bb25114159cf5bb4bda5864c184718dddd86d,2025-11-03T22:18:38.050000 CVE-2025-24265,0,0,a90f573a0d82b8514d6b3bcc39c5a4e45d0ea9372efdb989471bb7ee2f4566fb,2025-11-03T22:18:38.190000 CVE-2025-24266,0,0,555de7c7312a3272b39f51ba6d6b71aa79f2c61bcc565033833c6622a50d156d,2025-11-03T22:18:38.350000 CVE-2025-24267,0,0,58c6fbeb319e01e1298b5dd77194f070061f70b3913cff14fabd76ae35824a9d,2025-11-03T22:18:38.490000 -CVE-2025-24269,0,0,10743423ac9f88aef04c03be1890e4cc78f6d22501a98306b60bdbcbe644481e,2025-11-03T22:18:38.633000 +CVE-2025-24269,0,1,d76ca57ae19f7853c56bad0a63b2a4758ccc05566e9eab152dc9fe5a9a86a39b,2025-11-07T16:17:22.333000 CVE-2025-24272,0,0,fe3da2c2c4f102eb40747b0a5c68b94992988340764c825dcdd6d25155bd6c0b,2025-11-03T22:18:38.807000 CVE-2025-24273,0,0,9aa611332e8aa387cc878b824cb787db91babc4db4153becf4db23d6d4e4e5a9,2025-11-03T22:18:38.997000 CVE-2025-24274,0,0,682e972d4eaa78c45ec9c30ac894c30b69739395d4f939c2d2d7c927e7d8d6c7,2025-11-03T20:17:55.777000 @@ -111430,7 +111442,7 @@ CVE-2025-27219,0,0,02ee9cae6733c9744433f009dec1cd258f0dc2489ed8bc948bc9584c2fdaa CVE-2025-27220,0,0,3af98bb7edb383a25d86ae7175a76229b60e2d123a0d9a6bb113fa7309c7be6b,2025-11-03T22:18:43.610000 CVE-2025-27221,0,0,dfeb3d694dc340ac61a9de4f88a8be2b71cb65cdc0a5118d4597d4a5ed3a3802,2025-11-03T22:18:43.737000 CVE-2025-27222,0,0,c3a16103a1b68b3345060e3aa1e3e777b48c9a7589b0a5168c4fef1a1915a88f,2025-11-03T16:57:43.870000 -CVE-2025-27374,0,1,fc9fe1cbdd55b53433ffc2ccc9cd1c27b55aa6a7906d09e946207bd29a0c85b4,2025-11-07T13:00:04.273000 +CVE-2025-27374,0,0,fc9fe1cbdd55b53433ffc2ccc9cd1c27b55aa6a7906d09e946207bd29a0c85b4,2025-11-07T13:00:04.273000 CVE-2025-27407,0,0,f0a7f39635abdb57b1da8a3a93a995ceccb02a0f48836c10786c5a7df7c61f8a,2025-11-03T20:18:01.937000 CVE-2025-27446,0,0,a553d5dc14c57bf369c630038c09ceb34c2e38380835001e62161d6a27a15f62,2025-11-04T22:16:08.380000 CVE-2025-2746,0,0,f36a303ac02ebd0f1e52ff5acb6d93b268fcc1af064f885d164e1d152260ad93,2025-11-06T13:58:06.383000 @@ -111502,6 +111514,7 @@ CVE-2025-2794,0,0,19cf7f4282e9055bf05816c72268cd1da32f43fa151c881fef07b92932c27f CVE-2025-2817,0,0,98dc3ba37ec64ff7af46874df4144ecf6e542a253a0fe7af1c733bb92de0e963,2025-11-03T20:18:09.403000 CVE-2025-2866,0,0,5c62feadc48c017a3746b464fad78e8b4127437243199e8cdb3c9242bb5f22bc,2025-11-03T20:18:09.580000 CVE-2025-28953,0,0,d955f51f3d8749c1628c2e2ecefe47ec1b197ab148273f3edcac230aa4b9197b,2025-11-06T19:45:09.883000 +CVE-2025-2915,0,1,a8b7abf779a597860d4f17300514b7d80e562ade8e2d3ba194ac8f822379e7cd,2025-11-07T16:16:35.980000 CVE-2025-29270,0,0,07d250f6b0456523b8e1fd21bd4380f500c2092fa70dfabd23a2e37400019f8a,2025-11-04T15:41:31.450000 CVE-2025-29699,0,0,442706411d7497a0fe767a200dbb6e334c7323fa7784a6de4350c7926801a160,2025-11-05T18:18:43.340000 CVE-2025-2975,0,0,d908f1bcf8d468ddea22826a438fe4e8e5e66f83bdf6f3aac4d2b0e6177fad1e,2025-11-04T19:37:59.867000 @@ -111779,7 +111792,7 @@ CVE-2025-34284,0,0,3913b409c7233cd539de68cf5c201968436a4d017a88ba00682503b627f42 CVE-2025-34286,0,0,c981c7620408221a713b2f3c6b1bf6a282e7dcecf25586cd44ed5608dea8bf7f,2025-11-06T18:13:04.890000 CVE-2025-34287,0,0,62ca434050900f0b01d0cf957d1775c060c9d6e5ff0fd023153806f8494415a5,2025-11-06T18:12:41.207000 CVE-2025-34298,0,0,7794cda8b7a546bc2c75cad122bc0c18f88ef91ff907c81fd0fd1d02cb6d7468,2025-11-06T16:27:12.660000 -CVE-2025-34299,1,1,a6002c4c5155f95be0295be327c12457f405df17f30848757c1be568d22cba41,2025-11-07T14:15:49.920000 +CVE-2025-34299,0,0,a6002c4c5155f95be0295be327c12457f405df17f30848757c1be568d22cba41,2025-11-07T14:15:49.920000 CVE-2025-34300,0,0,a24bf1473444b39e4b6828f88d14960f9ba21ad9ea1f1f0b04cd254200ed41a6,2025-11-04T23:15:36.700000 CVE-2025-34301,0,0,390abbe4498953c9fb66589e24271211093eff2c8d46c949366a235eb47782b0,2025-11-03T17:00:46.467000 CVE-2025-34302,0,0,a2c27aab91fed2b545f99fdf65cb493f7de937502408fd213f99ca54baa6738c,2025-11-03T17:01:01.010000 @@ -112349,6 +112362,7 @@ CVE-2025-39465,0,0,40a4385e03f7152a9343ebcedc5d03a38ad9fe0515f24c3687ba8fee72adf CVE-2025-39466,0,0,618827e3480099ba419fefb1a5d2e5ba1e24451aa06a42b8a62085d2da6fe5d3,2025-11-06T19:45:09.883000 CVE-2025-39467,0,0,c12f90ae93bec1804abca3a20e1a68ca765a8d3b17bc3e979fd36a047794f01f,2025-11-06T19:45:09.883000 CVE-2025-39468,0,0,c676704e1f2996613e7b02eb8df85011048d2bf0034b967855ff7cf289cabb59,2025-11-06T19:45:09.883000 +CVE-2025-39663,0,1,5d0378a8eb163f5057a32a8417404ccb4aefb7f3358ea7d5846fcb638a868dd7,2025-11-07T16:15:38.440000 CVE-2025-39664,0,0,2815cfee12ad981096034bfe2280fba4abfa5faad08f87b79c376feaa8625bc5,2025-11-03T18:16:38.477000 CVE-2025-39673,0,0,2dd14ea2cb39cd093cc685363959b4ce4b96eba4b242ed526f026e04af37b2a0,2025-11-03T18:16:38.580000 CVE-2025-39675,0,0,3ed8d0b88fe35fd7f9c18faeb6cc3933eb2a5d1cbc61429fde4cba1e8023613e,2025-11-03T18:16:38.677000 @@ -112782,6 +112796,7 @@ CVE-2025-4352,0,0,fc87e690387e7eea2583e5e47dfa9ef48e61ffd05b55d04606758513442e82 CVE-2025-4353,0,0,aea92bd360baaf04ade1f4f5309a50298b10bc84204998ff934c3fed186effdb,2025-11-06T19:59:39.890000 CVE-2025-43725,0,0,71701507ab33a6cfc75f87c66ca90201c2e279f342d9a54ddb997709c60a8ec1,2025-11-04T15:26:42.623000 CVE-2025-43726,0,0,d017770f1dc0cf0cc67985aaf000ec399f0ff0ed6738301983cea60832297640,2025-11-04T15:37:09.027000 +CVE-2025-43878,0,1,5b24141213a906c654c3a07951db661054238c5f041fc4f924b09ad48d43fa64,2025-11-07T16:54:44.003000 CVE-2025-43939,0,0,2ef0408bbfac39a524620f2088cc85b1cc74d847da3b9e5c02b41d91af6bf2c6,2025-11-03T19:57:59.767000 CVE-2025-43940,0,0,c42f5d9aa7357e1b4c79d35c5cda5e25042742d7ad074cbde5ab1a6578e4c1d1,2025-11-03T19:58:17.303000 CVE-2025-43941,0,0,fd579d8b34d800eb8bc3ffb2afa8a774f47569979d20b1a43b674ab12175c5a9,2025-11-03T19:58:33.730000 @@ -112845,6 +112860,7 @@ CVE-2025-46827,0,0,fd5de29875a4167c7e07a5689a241f789ad4749a16cc3ba3463580206b2c2 CVE-2025-46835,0,0,eb93b3c955743198a23679ac7fbd0c9cbaa06cf79a670fd441edfe7d8ed423dd,2025-11-04T22:16:15.913000 CVE-2025-47151,0,0,76d981e064ef953174d7ce0fe5de7b3113f3a2cc257a3b7a0b447b6943b7e2cc,2025-11-06T19:45:30.990000 CVE-2025-47152,0,0,2b038ea1b9db2f16c2125320616dc5191997373205fb82ca6ccc37bfcdba941b,2025-11-03T20:19:05.503000 +CVE-2025-47207,1,1,b7014c05851a66090dcd01d3423d49c851bc1de743e4b4e9289a0cfb73110b29,2025-11-07T16:15:38.580000 CVE-2025-47338,0,0,e0c508ea3dda929848402cfb83084cd2c8cb1e5ac324d000fe6b1de477241fb1,2025-11-05T18:30:14.310000 CVE-2025-47340,0,0,c0fdf25b78cb2c7e41cf30b598dd8789b72187901e55f6ff5c690ff6e4b6fe17,2025-11-05T18:30:03.523000 CVE-2025-47341,0,0,8ac7f8114d21adf004ed4278e144f2379d0aa517c61e398fee42da67730d2175,2025-11-05T18:29:53.360000 @@ -112985,6 +113001,7 @@ CVE-2025-52179,0,0,bd480c03cad425b88845a1827fd029c055bb144f1f941c29877f622a2d917 CVE-2025-52180,0,0,1c1539ecde1e6c0f5a77e6424a7d9b55b3625fbe2e462874ac4e9e3d7187c3b1,2025-11-04T15:41:56.843000 CVE-2025-52187,0,0,b3f291f7d0d100186cbc12eaef54e334993facf829ff09311677c6919d0e354e,2025-11-03T20:19:12.643000 CVE-2025-52361,0,0,4c0eb00f988805ff05c363c5e91bebfd61f1dee33e7415e0dd7a3ade1f491200,2025-11-03T20:19:12.770000 +CVE-2025-52425,1,1,51a994ca1b02b603f9be092949bc96d8f472a285d4e077769990d5c5dc8226dc,2025-11-07T16:15:38.753000 CVE-2025-52434,0,0,12327b3d4bd02e0c6f3e8c1b1ca6999d985dcdba6d0b2877cbb0bfeef6f4d1f5,2025-11-04T22:16:20.287000 CVE-2025-52456,0,0,24897b1719c38258d62aa3df652bf76151ebd81b0ebe564ee1103bce479afa38,2025-11-03T19:16:07.243000 CVE-2025-52461,0,0,c233f8ecfff3c9d8d58046358dffe74bbb38488c4acf12d655a2a902b2b19eb2,2025-11-03T19:16:07.363000 @@ -113010,10 +113027,11 @@ CVE-2025-5269,0,0,203e5e46c30c1f25d2e9caa4aed3444db43ba957ad29134a6683ec60cf4ab4 CVE-2025-52764,0,0,1e285666b1993c159f90b90afc144bade9b72232883292e9f012b5f53e0da946,2025-11-06T19:45:09.883000 CVE-2025-52773,0,0,15245a144f5a30739ab8cf922df60478fe9f434e9afff9fcc5b84e4912d744ba,2025-11-06T19:45:09.883000 CVE-2025-5283,0,0,4445ee7db0ad281b38d8f2e047de0d8bac04ab05b7b7a19a55eb794127210018,2025-11-03T20:19:16.893000 +CVE-2025-52865,1,1,705df092f0c95ce324e7d6261a6ab83aac547e6ebaea712745b056f03ff7a1b9,2025-11-07T16:15:38.920000 CVE-2025-52881,0,0,2db972cc2e457cfc3f34e5373cd523ab451818ffb806d63ab3d346e43fbc2b86,2025-11-06T21:15:42.817000 CVE-2025-52885,0,0,c870ea8579a25e936f9212fb6d89507598277d3bd91b3554077e2ee555427695,2025-11-04T22:16:20.757000 CVE-2025-52886,0,0,a8573897070fe0ec1473ee87d4fd80a657b22fa663b711aba3e224c6a81f97c2,2025-11-04T22:16:20.887000 -CVE-2025-52910,0,1,25ef9efe078f280119fb99a0391d567c9540360a34bf8a964c66baacce1e2a82,2025-11-07T13:00:22.963000 +CVE-2025-52910,0,0,25ef9efe078f280119fb99a0391d567c9540360a34bf8a964c66baacce1e2a82,2025-11-07T13:00:22.963000 CVE-2025-52930,0,0,e472a528db3cc3ad9457d5e98820e297f880814bf3d7eb849a82845ca6fbfe62,2025-11-03T19:16:07.777000 CVE-2025-52936,0,0,28fcf0a07838b793ad431f4b11073c01ea545023276a8b2dad9d48bf724e312c,2025-11-03T20:19:13.340000 CVE-2025-53012,0,0,5ecff4f02e07c373bbaa052af832e511cd2f50d37d6e4be0d04a40a42007e5e7,2025-11-06T22:03:49.210000 @@ -113033,13 +113051,19 @@ CVE-2025-53242,0,0,59dd8c6e2016029935dffb9d9fac024c19c180b3a6384a2e1691639e6a0a9 CVE-2025-53245,0,0,198e37ded91c90954438d2f77dbb50ce58276ad1531e24865b1aa41a0a712aa3,2025-11-06T19:45:09.883000 CVE-2025-53246,0,0,87c6975cf46820f7600dbdcaf93a5f4235aca7de38c3262ef33be61fc7f8f79c,2025-11-06T19:45:09.883000 CVE-2025-53252,0,0,1c81c46fd5ca5506fa64c1b98c4170c22138fa7d3cbad62c738f0a9d50336503,2025-11-06T19:45:09.883000 -CVE-2025-53283,0,0,b616020b01fbc15791c45b4040529b62668f2ef7b59bd7ddf5fec12f6155447c,2025-11-06T19:45:09.883000 +CVE-2025-53283,0,1,c0bfa53a8e38fa89adf8485695d7e0564d4fffde1133032012da49b7ae8096f7,2025-11-07T15:15:40.727000 CVE-2025-53286,0,0,4fa408f6b1c9f5a2f7e524600e940c7c4fe076f6dbd07b0022ef74470083e5f0,2025-11-06T19:45:09.883000 CVE-2025-53316,0,0,0203d6e9aea33c5cc8a62851fdba84dac587e49c25e787a0573490109b82d5a5,2025-11-06T19:45:09.883000 CVE-2025-53324,0,0,ed8eccf1be2ad82731e46020383b89e3517a66905f9cf2bcdd3031df8dc07e71,2025-11-06T19:45:09.883000 CVE-2025-53349,0,0,6075e4fdb81d967f4ded688693d15b743b7ffb1105096b27f16a8ac12663e1ea,2025-11-06T19:45:09.883000 CVE-2025-53367,0,0,79579ffd3d7c5b9eb04fbb9c228da59a9687ed0511e0e2fce8a7ccd5268c2e84,2025-11-04T22:16:21.577000 CVE-2025-53399,0,0,833012ecd12be1ff0afb12b657a3be368f8693a3aefc9fd94acf976ab1554747,2025-11-04T22:16:21.687000 +CVE-2025-53408,1,1,8f45336140a948b63602be050a683a38fed32cc91d070333ccac88d02ce93d71,2025-11-07T16:15:39.093000 +CVE-2025-53409,1,1,3f1072ec02745f5d8fd15e869b68729ab8b122d8874b0d5d426b5fd0c8d10815,2025-11-07T16:15:39.247000 +CVE-2025-53410,1,1,2753f32d3379bdc825c829e50241241b3e234ddff6e2852c7ae0e45152876736,2025-11-07T16:15:39.410000 +CVE-2025-53411,1,1,8ccdcbac64d10d366cc2b5e676e8ce2fb7334f0cf7fc3faecd33b9dffb13806a,2025-11-07T16:15:39.563000 +CVE-2025-53412,1,1,ac05b82c1dd334f1f699d00e070b86297598c923626c05de4a4387f60c1cd282,2025-11-07T16:15:39.727000 +CVE-2025-53413,1,1,da76d42aa762462ce084e4d461b9b26d01b2fa05322d1ba13c873331a83ff721,2025-11-07T16:15:39.930000 CVE-2025-5342,0,0,3c3787d257c9e3a784bf0647ed90a63d762796ab636f776db26f45b0e35549dd,2025-11-07T01:43:59.147000 CVE-2025-5343,0,0,b4fcf19e30b6a0296df904d3915421f7967fc080f499d124abf89e1a7c1b5e10,2025-11-07T01:43:04.710000 CVE-2025-5347,0,0,46ec26d5921c9ac382e6129edb715a2f5debf98ac7b8991aa67b446a6a97a0e7,2025-11-07T01:46:11.683000 @@ -113049,7 +113073,7 @@ CVE-2025-53510,0,0,b7729b683f0845869c076e0eb2c76162ec18d3162b196d6b9e2d1dc6d5431 CVE-2025-53511,0,0,4fc647940e5d1ce108f9845c600515f40d786467fc2cf921b603d69ab81229d6,2025-11-03T19:16:08.583000 CVE-2025-53518,0,0,52ddf2d841429d03fc0e20df5e2ac415924510f8d92d7a928d9dff0576fed053,2025-11-03T19:16:08.713000 CVE-2025-53557,0,0,e9ab3f67172f3eaf40813e29fd9a6cef6227f93d971ac9c8b8ad9349fd8b66ac,2025-11-03T19:16:08.830000 -CVE-2025-53573,0,1,5c8bfe5c720d7714d75f802870779366b35c6a3a680410ca2ba02515e9410b02,2025-11-07T14:15:50.227000 +CVE-2025-53573,0,0,5c8bfe5c720d7714d75f802870779366b35c6a3a680410ca2ba02515e9410b02,2025-11-07T14:15:50.227000 CVE-2025-53574,0,0,9f2eadced962b929e6b72c4cbe10dedf8e607c139dec5d68b7e7a04dc20ae64b,2025-11-06T19:45:09.883000 CVE-2025-53585,0,0,623823e0361476ae47a74fe2f1ab02cfb5227ee86de3cfd1d8eaf2078d7760bb,2025-11-06T19:45:09.883000 CVE-2025-53586,0,0,25e41238b9b599471ca42c2a6f7d338833e2695596bf5404ae5b139c2ef4e652,2025-11-06T19:45:09.883000 @@ -113101,6 +113125,8 @@ CVE-2025-53964,0,0,60346e61dfb171a70ac76d0fc48344d27635a5bfea3feedf943b9a0193e0f CVE-2025-5397,0,0,304b49b755c43f83aa2978db7d2c964df0fca29d29763ce14fe05fc6d223fe0f,2025-11-04T15:41:56.843000 CVE-2025-54090,0,0,b10468a6f9ebfe3e54222f12bda9bcfd91a88ee576f681d67222d81be959e260,2025-11-04T22:16:27.417000 CVE-2025-54119,0,0,ae9d51ee91d29f55bf10923d55e008652f982b98901e3b2e533e9f4ad75aac8f,2025-11-03T18:16:58.843000 +CVE-2025-54167,1,1,50364de571e8cff76dfd8a73b43c88b3eef7f7c07340b0d7a248ee0c94c528f6,2025-11-07T16:15:40.100000 +CVE-2025-54168,1,1,d09a4cf9dadf2c87a416cea080bbe3982b13560bdf347d8a13da9fdeb47fc78d,2025-11-07T16:15:40.273000 CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000 CVE-2025-54236,0,0,b7445d6dfd8597ec8137cf8068a5186afd2e57b30342781e6fb12854a8baef2c,2025-11-07T02:00:02.453000 CVE-2025-54257,0,0,3121d16878fbac09d1bbdbad7515c9d519cefe6e8e3f9b3adf7db556ceb8cf18,2025-11-03T19:16:09.190000 @@ -113114,7 +113140,7 @@ CVE-2025-54331,0,0,914b806c408578d14d8f565740cff72550c51454a3bc95a792728a5a371cf CVE-2025-54332,0,0,d61427fca0a9d0afe33c4cede4fde8c9a3727edc2f022de8f5b496054be4d1cf,2025-11-07T12:56:37.587000 CVE-2025-54333,0,0,4c4bfe67cffc7a0bb25366bdd7ceee2adc1339b0aeab6d188c6f3e140ad160ca,2025-11-07T12:56:49.760000 CVE-2025-54334,0,0,35fb19c8bf1a93fbf66918ab5b49fa6b8182dc8dcf7ca0ee2be240e0440af0af,2025-11-07T12:57:07.680000 -CVE-2025-54335,0,1,8384810af377edffb36f8757dd8e5b8c0a46fe35ba54151bba12ea732d66e615,2025-11-07T13:00:31.390000 +CVE-2025-54335,0,0,8384810af377edffb36f8757dd8e5b8c0a46fe35ba54151bba12ea732d66e615,2025-11-07T13:00:31.390000 CVE-2025-54349,0,0,e3f44f46661794a56b335681f9c84ea1c8613857be0794e5ac46914a11fbd7a1,2025-11-03T19:16:09.340000 CVE-2025-54350,0,0,14c46474213faba3a1cf00f2f444073ef64bb63790f350f8dd69d08a66e3ee68,2025-11-03T19:16:09.533000 CVE-2025-54389,0,0,954533da3d5046527826bfe5e3e0d0fdab876de75d511831864fdd0c3573d658,2025-11-04T22:16:27.897000 @@ -113153,7 +113179,8 @@ CVE-2025-54539,0,0,c38aa8ecf982a6370abe3887cd65ebf6c6137b4ff2e85e4b71453f9e08a7d CVE-2025-54571,0,0,bcde77ab4ce095e2ed24f279b78d0be50f98c75cf3c546e412e91241d7a52af4,2025-11-03T19:16:11.533000 CVE-2025-54572,0,0,d8eed55a8193a9c083d38fb6881e7c365d03d0fe98c6636b8b803fc99ce2a9ba,2025-11-03T19:16:11.673000 CVE-2025-54574,0,0,87d9ee79ac41e503b5c77d8a9b135e6a737468cbcf2de55ce6a51b9b17b4ff52,2025-11-05T17:15:43.620000 -CVE-2025-54605,0,1,a5aa734352c4c8fcb15310f099ffcc819509cff43afe268afc12733fc281d5c4,2025-11-07T14:58:30.450000 +CVE-2025-54604,0,1,8ea98cf7e021243158a23ed099c9cbd95fd655686d3dfcd03eb93031f9b24ac6,2025-11-07T15:07:13.490000 +CVE-2025-54605,0,0,a5aa734352c4c8fcb15310f099ffcc819509cff43afe268afc12733fc281d5c4,2025-11-07T14:58:30.450000 CVE-2025-54656,0,0,94f1ada77914a32dc0858e83185b1adbab01cd91dcbe4d17058ce48cb5b85473,2025-11-04T22:16:29.117000 CVE-2025-54711,0,0,8bb9308632dc593428fe5f4d04ba31bceb89c882f84d5c5af2ca3163ab8e1cab,2025-11-06T19:45:09.883000 CVE-2025-54718,0,0,2c3c22a7f53f1d26a5540b87a2c2a9b10a4ba56e41abf16de5deff3db3ab150c,2025-11-06T20:15:49.427000 @@ -113217,6 +113244,8 @@ CVE-2025-57109,0,0,fe5571991397b652462106b8f6afa5cd63513e59ccba7f3f8aa5a37ad7ecb CVE-2025-57130,0,0,19b99e25471324e74213822299279947b6fdca5d6f45e1fdc98c8a9c8e8db7a7,2025-11-06T19:45:30.990000 CVE-2025-57244,0,0,4d26f4413484699ffefa63f26af96352483425ca30e95b47db5d16804bb3794f,2025-11-06T19:45:30.990000 CVE-2025-5770,0,0,64b2abbbe6cb2fc575ed17b0561d7db4902aeb6f72211c58821e7fdbcc3aea29,2025-11-06T19:45:09.883000 +CVE-2025-57706,1,1,cec520febe94a14a1835a96991ffa078bb59dd5f184ceb043577b971a0ce8666,2025-11-07T16:15:40.430000 +CVE-2025-57712,1,1,87aaba8a80908c0676ee7fd7250f2b55c891cda0aa5418e6165fff6d05390054,2025-11-07T16:15:40.593000 CVE-2025-57738,0,0,d4dc432ff0d7ac7708c60fa702e89a98c0f6a20effdb4e9ed7d2210e839a9ada,2025-11-04T22:16:31.757000 CVE-2025-57803,0,0,6a654dca0d98186f754aee1e1d4ca8eba38c0a1a9cf912e2b244479f285abedd,2025-11-03T19:16:12.657000 CVE-2025-57804,0,0,5c4e986888e63d8c2c6ac02ac29a5e754e455a65bbdb44a898736ed99cca980d,2025-11-03T19:16:12.777000 @@ -113252,9 +113281,13 @@ CVE-2025-58457,0,0,c45c4ccccc70b6710e1cc7394d0f4f590a1e9a16d473495f50ad68d5b0239 CVE-2025-58458,0,0,c84258aa71dc527b70d0427dd5490aed7f5dcdc9188c9cb840d5352bb43d9d86,2025-11-04T22:16:34.240000 CVE-2025-58459,0,0,04d58661879863aad31ef53eb4ac168f9adfb2fbdf761fff6df2ba0392b07fda,2025-11-04T22:16:34.370000 CVE-2025-58460,0,0,29a71523a5fd14b79b24bd36d2f7ab0c6d2daa0e5bad9c03cdb91a9c1de88402,2025-11-04T22:16:34.507000 -CVE-2025-58592,0,0,72108a843393ab84466aaf82bf9adaa1884542c898843abe6b073cb8f8d5cfe4,2025-11-06T19:45:09.883000 +CVE-2025-58463,1,1,74565094e294973d55925fcc864ac186e2b96efb8100d489769e00321a34137c,2025-11-07T16:15:40.780000 +CVE-2025-58464,1,1,2f4121ad070080916697f5b531a8148c1e64d2a79ff4e38d89a08b243620aba2,2025-11-07T16:15:41.063000 +CVE-2025-58465,1,1,5c078f841d12ec54d17e2850dab61887ac679bdd161e7367a62a35a275bc44f7,2025-11-07T16:15:41.230000 +CVE-2025-58469,1,1,1df86f8f2afad859bb79d7394106ddf59f2660856822c3fdd1d2dfd229e5046f,2025-11-07T16:15:41.387000 +CVE-2025-58592,0,1,85647be0031f02b764c65afaa6403a256c1f286f4a0d089005060f628bc487a3,2025-11-07T16:15:41.563000 CVE-2025-58595,0,0,7454e26ab8a24b2b090d9f3c2ba9aaf81d65e6b55cb8064d39486887fb7c7d48,2025-11-06T19:45:09.883000 -CVE-2025-58619,0,0,617ba640c768204b1c9d75f3029851f667e48a8f8cada72d7f484106a8fe34a1,2025-11-06T19:45:09.883000 +CVE-2025-58619,0,1,60d1955f00781418a736bf0548570ebbed43b321c6e14f8ade59b670f7e8e640,2025-11-07T16:15:41.730000 CVE-2025-58627,0,0,fbc80e1d90535aca32fdd331ff8d47c79b6bd90041e8aa5683096df9a07c899b,2025-11-06T19:45:09.883000 CVE-2025-58629,0,0,fbc2796e2aad891c058d25b7d41d5b7335c666a973f19903d341045e54e787fc,2025-11-06T19:45:09.883000 CVE-2025-58636,0,0,32670ab47c5086b12191582ebae69b30a9df2c483ee8dbbdc7e9624143803793,2025-11-06T19:45:09.883000 @@ -113272,7 +113305,7 @@ CVE-2025-58994,0,0,0aa1f3a24924410afe306dd43fc6855d549d17a811e5795fb7c5ee1327335 CVE-2025-58995,0,0,bcdca4b904c1266eeaf10cd9249d6dc54778f208635291ff01d18a15b85b039c,2025-11-06T19:45:09.883000 CVE-2025-58996,0,0,52e14dfcab62647654b7e26c7675e3b01fd53b0bf15886c68ee2282b695988ad,2025-11-06T19:45:09.883000 CVE-2025-58998,0,0,25ba0d197cfec3e5856a5f205d2cb82d98954d0289373cbcdb770d4dcc617c92,2025-11-06T19:45:09.883000 -CVE-2025-59171,0,1,0e0857f3c931c0ddc7128431711807adfa1c0c751fb4333016be4d44385886ae,2025-11-07T14:15:50.477000 +CVE-2025-59171,0,0,0e0857f3c931c0ddc7128431711807adfa1c0c751fb4333016be4d44385886ae,2025-11-07T14:15:50.477000 CVE-2025-59185,0,0,09ba92af99d6a4068debdd6fa2a729901a650161c9755ee3d6a31b7abfc4849e,2025-11-05T21:15:35.803000 CVE-2025-59186,0,0,244d8166a5817cacf772ec7e41c0ff4911860683db55ecb23169c58a7992a597,2025-11-05T21:12:05.187000 CVE-2025-59187,0,0,34c577c78afe6982281806c09b4f10ddb16f4359b6a648d92e5646c8f7bc5252,2025-11-05T21:09:26.217000 @@ -113282,7 +113315,7 @@ CVE-2025-59328,0,0,b0977814c7beb6e5bd0aeb963c146171d9ccd45e32d703931e206a2571a31 CVE-2025-59343,0,0,1e3342723272218ef05a92ca5696c24a51e91b61611183f8fd04d0f8211aa612,2025-11-03T19:16:14.317000 CVE-2025-59375,0,0,8683928718e83a75d76ab27793c7857a5bcaf2ca1ec27ca46261d95b345f6308,2025-11-04T22:16:34.927000 CVE-2025-59392,0,0,97d41f111ef331a37fbb5b65d41bd253cfbe81eef38a28d510cc4b9bd40bdd0c,2025-11-06T19:45:09.883000 -CVE-2025-59396,0,0,7b9cc47e98b2ac7a8ec0de4209016e3b49b3789c3827a97cba451cc4dc73e4f9,2025-11-06T19:45:09.883000 +CVE-2025-59396,0,1,2d929168e1ae0f69058bd21854e91f7ee4e0a9ef90d818c1ca8b02727b63d48b,2025-11-07T15:15:40.973000 CVE-2025-59397,0,0,b43c63789bdc165da79e61b73954c241435b8c1c1b068003c2f30af1d7375741,2025-11-03T18:17:00.883000 CVE-2025-59420,0,0,520e13fc9f59ef13d18b0e6ea454626b3e24e41138d27279a40d80b9eb0de4d7,2025-11-03T18:17:01.017000 CVE-2025-59459,0,0,8f0fbcb631d001f235e39b196a25849c24c88145c4ad451190d0894f71ffdaf8,2025-11-03T19:53:46.460000 @@ -113332,22 +113365,22 @@ CVE-2025-60204,0,0,760f0272011741b155335fe0a396a5987196d020dcecb19baffc72fb28d3d CVE-2025-60207,0,0,02b9704c974ed256f02cc0fb45500cfe68da05db280c71f1c6c3df46325fcb01,2025-11-06T19:45:09.883000 CVE-2025-6021,0,0,69f6756381abbbdae35f2a8cd749d3af3f78806538d929e49f3ff98102b99e68,2025-11-03T20:19:17.717000 CVE-2025-60235,0,0,30db92e2a5094b925e49257790d9940bf23ce3ba11f26f42e663620eecb9fa52,2025-11-06T19:45:09.883000 -CVE-2025-60239,0,0,466461946c5cdd82a2ac84011aa5e4122aed37ccede1097244d2d73c1b5c2ecf,2025-11-06T19:45:09.883000 -CVE-2025-60240,0,0,2a5def191b5c528f8bb9e158960805ac74d1e21bd6a46ccf91a3fe748b29beaa,2025-11-06T19:45:09.883000 -CVE-2025-60241,0,0,9f1c44ffc13ab7f5682a74da8c64c1534f1e5dc5f8fa05a3112ed2fcd438e125,2025-11-06T19:45:09.883000 +CVE-2025-60239,0,1,a9d2ced0504d3c021b692fe5e96c3eaa6b30af73ba60bfa4ea387f67e8aebd8d,2025-11-07T15:15:41.203000 +CVE-2025-60240,0,1,71e7ded1af2110bee52c5f70c671e3813783ac740f49d5373a2f91e7031e8ad3,2025-11-07T15:15:41.420000 +CVE-2025-60241,0,1,39acbc16a526471f5e0df4f08ceb0bd5a5cca8ada863bc81606301760eba49ef,2025-11-07T15:15:41.603000 CVE-2025-60242,0,0,59f87b6e185a4a20a83d70cdd216fe6081d75fa24c4cbfda1c0fc15f1af3f016,2025-11-06T19:45:09.883000 CVE-2025-60243,0,0,419180a1d785b017d6d117016dc813441c0eb99f1d36ed82718061c34d5c2852,2025-11-06T19:45:09.883000 CVE-2025-60244,0,0,a2eea1c0762ee2118b132da8ca7b98d7697fb4be6d7e977823027e8422a187fd,2025-11-06T19:45:09.883000 CVE-2025-60245,0,0,253e546011e45b4515f9719b8fb0e18a37e949c00e8de8ecf6a61195947d28d0,2025-11-06T19:45:09.883000 -CVE-2025-60247,0,0,9e4d4df9f62a0aebca6d383f266b4ade8393fc357c04a2e50beb0442ac7bb95d,2025-11-06T19:45:09.883000 -CVE-2025-60248,0,0,4f47cd0bd0f15bf7d20a4920f2bd4dd72dd5db5a7fb9df38f305d58a666732c2,2025-11-06T19:45:09.883000 +CVE-2025-60247,0,1,a1e176a4170bf9466581876f43d353c3939398c1b7d6e0e619caaedad26770d1,2025-11-07T15:15:41.780000 +CVE-2025-60248,0,1,4925ef60f158db6aec53fa583dc83218d18f0c101e92af53398d17b3ae4f23b0,2025-11-07T15:15:41.997000 CVE-2025-6027,0,0,d34c138436c9a6d3dca3ebef64509b441e26d728ae3868b526f8a5c0424350de,2025-11-06T19:45:30.990000 CVE-2025-60319,0,0,65af61ef6b0c707fdf80ae8c27fd804a17f2c78dd1322235f46b8ca47247c1df,2025-11-04T15:41:56.843000 CVE-2025-6035,0,0,97dbedb41fbf6e422e6140022ad5b7a6c84336e1bed78790ceee857a2d7d72b6,2025-11-03T18:17:02.127000 CVE-2025-60424,0,0,588f871d95f3e9512394df288f3f9f16b4e2892e9150d5fd2b7d26ddafb674ef,2025-11-05T21:00:24.500000 CVE-2025-60425,0,0,99793cdbad06f284133bd4a8e60d71ef637c465c99a3d6fb04a595e75d7e7366,2025-11-05T20:55:29.997000 CVE-2025-60503,0,0,078b3feb98774430b8660c0a63d485d36da0b85f0b75c8f79bc1ca988527876d,2025-11-04T15:41:31.450000 -CVE-2025-60541,0,0,af96b7d6c22c6beecef540e6901dd66dfbf5ff498104c5038b8ecaa1a17b5e14,2025-11-06T19:45:09.883000 +CVE-2025-60541,0,1,8e638a230ebe86884e6800414a611b11417fdfb27be7b973bbbd329c87d44138,2025-11-07T16:15:41.900000 CVE-2025-60711,0,0,ae7e916fb63a5267753916f39a410675756bbe402a9d7053daab7b2ebb9ac07c,2025-11-05T19:34:07.253000 CVE-2025-60749,0,0,cb6eff06b3c969716cbd50b62ca268ccadd09b2dc6ddbd4cbc884dd540525813,2025-11-04T15:41:31.450000 CVE-2025-6075,0,0,b3bc7794878d92e6cdb7a824f270ad5c28af39c5415573ef7588df9bc7eaf7bd,2025-11-04T15:41:31.450000 @@ -113405,11 +113438,11 @@ CVE-2025-61962,0,0,4b3a12daa2c37fbd6d050c193fdfe187c26cd5fa6ef297cedb17962ca4c2d CVE-2025-61984,0,0,a22fbf9a4e0776982c9ec483b295b32930bd5397020608dcac69f945ebf2d59b,2025-11-04T22:16:37.567000 CVE-2025-6199,0,0,4cfff2929d4191f0ea2e897ad77718f1879f8d62a9ee03b5298a6efca64faca7,2025-11-03T20:19:18.417000 CVE-2025-61994,0,0,4c93762266b153a7f0aae6626513efe7675cf438515f222a60d2e682a3c7eb60,2025-11-06T19:45:09.883000 -CVE-2025-62010,0,0,9af69c13e75d8420a27cee777477cdf6de5500d714d7f6125998c4e7382a19b2,2025-11-06T19:45:09.883000 -CVE-2025-62011,0,0,c597abad10f1ef372959cb9ad2ead64a9712af2b8c098c481983c31cfbdd2e5f,2025-11-06T19:45:09.883000 -CVE-2025-62012,0,0,460f7c290e697a03ba230b6f3092c92e95fb7374fbae8ef178d0cd0621bfcc05,2025-11-06T19:45:09.883000 -CVE-2025-62014,0,1,1dab2ebd6e53be75f13d64bc652c3cd2870bbf89c064f641a1aabbf42bf91ad8,2025-11-07T14:15:50.723000 -CVE-2025-62016,0,1,21e4cea460d8974395f6338d6627a72762a93b221e349a8f3fc24142f80e3932,2025-11-07T14:15:50.993000 +CVE-2025-62010,0,1,17bc85e5bd1125fbfb26877c2032a3233e09d4f9f927c6a0fdd9b3e86ccc2057,2025-11-07T15:15:42.207000 +CVE-2025-62011,0,1,1b9c3f28336f8e7e647714ace2df54bc26d983e9bf95601a60b3d53248d306d1,2025-11-07T15:15:42.427000 +CVE-2025-62012,0,1,6c63dfa378dd179d4b71a76fe96bdb11b2c802094d03f1c0f877dd222dd4e4ed,2025-11-07T15:15:42.643000 +CVE-2025-62014,0,0,1dab2ebd6e53be75f13d64bc652c3cd2870bbf89c064f641a1aabbf42bf91ad8,2025-11-07T14:15:50.723000 +CVE-2025-62016,0,0,21e4cea460d8974395f6338d6627a72762a93b221e349a8f3fc24142f80e3932,2025-11-07T14:15:50.993000 CVE-2025-62017,0,0,02d640fc925463e62a6a6d8534b400ace09c6202236518bfc18292cc80171751,2025-11-06T19:45:09.883000 CVE-2025-62018,0,0,bf38dbb06b1c78972d50199d67e9e732fde21e2e64121e8c18f755173b1a2668,2025-11-06T19:45:09.883000 CVE-2025-62028,0,0,4fe225933540799c61ad537c4744b806a28a80c3ece4aac2ab6c1d07318614cb,2025-11-06T19:45:09.883000 @@ -113417,7 +113450,7 @@ CVE-2025-62030,0,0,6af6b13fffef54ea69660f7c7e351e1dbc69541fbb36f111f3e8a46359c71 CVE-2025-62031,0,0,464b592ed87c4d9fc16f0dcac760e7f2642aa17ecaa887db0cc7c05319255d41,2025-11-06T19:45:09.883000 CVE-2025-62032,0,0,8cf5b852b42b3d9b8064ac4e3be7eecc46c54c264c7cfb799e82f461ffbdd320,2025-11-06T19:45:09.883000 CVE-2025-62033,0,0,81d104da1202f20d198cda20a9dd02e93981656ce99c9a2fd0bd48bd5bfb2ab0,2025-11-06T19:45:09.883000 -CVE-2025-62034,0,1,2966f926dd5cc9dbb41a053c2681d26904cf89494be63936c93a94fe3d62cd49,2025-11-07T14:15:51.220000 +CVE-2025-62034,0,0,2966f926dd5cc9dbb41a053c2681d26904cf89494be63936c93a94fe3d62cd49,2025-11-07T14:15:51.220000 CVE-2025-62035,0,0,cd54732a30b245c090d155a5c5a12b16952892a7e0b427dea4d66b90adf1d22b,2025-11-06T19:45:09.883000 CVE-2025-62036,0,0,0d7e9393cb1e25661a006f3b3dd1558008500af99065214d823d392e41430803,2025-11-06T19:45:09.883000 CVE-2025-62037,0,0,70715b26f89df8022fbcc291e85d4abc678c0ff1942005f4224b3b4ed5bc3d24,2025-11-06T19:45:09.883000 @@ -113460,6 +113493,7 @@ CVE-2025-62276,0,0,0f8d935bfe323c94f1365bfd3a6720a4f9a9d2073dd316712cb9ff10f3426 CVE-2025-62369,0,0,0f28ec63113671e3f8369723c5ca32e20155d59e5827a405e6da502d8905b51d,2025-11-06T19:45:30.990000 CVE-2025-62402,0,0,cfc3376891a6a51cbd9cee820aca2fe58d8b03c0ff49bd9383e61720c17bd9d7,2025-11-04T16:51:02.057000 CVE-2025-6241,0,0,86ba6ff22762f960bedb3e38ee328807386ae2f20971d79de8fbc101c0d9704c,2025-11-03T20:19:18.537000 +CVE-2025-62429,0,1,ac9a7411334cc19fd9a42b204de3f3e74907de20477a7b077dfbea13bd44b194,2025-11-07T16:59:54.857000 CVE-2025-62503,0,0,53c3726a3743ddee7cfcb386e8225af9fff6a3bba436a3ef2fe0cb9c8cadc9c8,2025-11-04T16:52:01.157000 CVE-2025-62507,0,0,25db095e53325490395b08ccb2261af97b8e7b56eefd0f1e418560ac72073f4c,2025-11-06T19:45:30.990000 CVE-2025-62520,0,0,b2908cc94804a2b777936a39a49f2eb14e5fc09f5bda43334b433a30cd3e8759,2025-11-06T19:45:30.990000 @@ -113469,7 +113503,7 @@ CVE-2025-62577,0,0,29a2a9c88450d737e701605a9cde39ebd2a1e308e1518e1ed8546317cc610 CVE-2025-62594,0,0,0c3388a74aad1d0e1246a798fc91e15febeb1101b6ae96df120e62aaa66c2529,2025-11-03T19:42:36.100000 CVE-2025-62596,0,0,87c844ad93030efd769b3556ac8e7c05d9e6ad4d6348ebad3959650e539d20d1,2025-11-06T19:45:09.883000 CVE-2025-62618,0,0,9812ee364f1428f1773496de427b035a4554dd15d01dcc916f354fbba28fe374,2025-11-04T15:41:31.450000 -CVE-2025-62630,0,1,8ca3462cb3423ef3d4d6c1cc244f7daac050e23b484f6350648b68076ef8580f,2025-11-07T14:15:51.467000 +CVE-2025-62630,0,0,8ca3462cb3423ef3d4d6c1cc244f7daac050e23b484f6350648b68076ef8580f,2025-11-07T14:15:51.467000 CVE-2025-62645,0,0,b811b067d462dbf314cb9f09e0bd4295790d1d5030990d6ffe9f62409aa9d711,2025-11-04T15:13:52.277000 CVE-2025-62649,0,0,56cbfc733a64d0f87f023dedd6d0cd7727721d93d9c1f1a603e1f20070f499bb,2025-11-06T22:20:53.027000 CVE-2025-62706,0,0,ac590367e28321208d66b3cdc818f8459c94d9ee09c641a7cdf2171cc9df731e,2025-11-03T18:17:02.010000 @@ -113539,7 +113573,7 @@ CVE-2025-63466,0,0,fffb92eb4a9416616b23a0b6040da557f2202c607d9fcf545823a67182e6b CVE-2025-63467,0,0,dce87e25fb8fdd62d4ed4ec61ba363869a75066ee7e5cd01f36d88973456052c,2025-11-05T17:30:37 CVE-2025-63468,0,0,a94c21ad6eda661a717e8fd9c46224524fbdf0364f2665024bd0cc4c94198402,2025-11-05T17:30:55.617000 CVE-2025-63469,0,0,8d859a03a1ef84840ac3ce34b51ca48224df775ff6252e01b067797dc96382f4,2025-11-05T17:30:23.953000 -CVE-2025-63551,0,0,43a0dddfabacf33d5c16645b8b7b8640e92be00772b57b4b5a6ba6c64b475668,2025-11-06T19:45:09.883000 +CVE-2025-63551,0,1,c2986090c46f5449f7b09ffc42d22fd779d747524584a792c0a6c7e01b05db6a,2025-11-07T16:15:42.077000 CVE-2025-63560,0,0,042ec97e7a0490b86ae8e66551d2988502c66b03e6bc65d1f87035d06156ffbe,2025-11-06T19:45:09.883000 CVE-2025-63561,0,0,8d364999e2a10332de8aa866e08819d633a0b7ef3e30eafdb1b05b629604e961,2025-11-05T19:32:00.983000 CVE-2025-63562,0,0,36d3ca9887d6d45c89417245d2c2626d730106cdb2b22c877783190801910a1d,2025-11-05T19:24:12.850000 @@ -113551,6 +113585,12 @@ CVE-2025-63593,0,0,58d4a6edf8b600ff1b44a5c01cb29b3b90739c31e8b9b280373fc55032591 CVE-2025-63601,0,0,c36acf397fd527e3e08b889011f0fd8c429f0c59f416ba11fadddd910db127c3,2025-11-06T19:45:30.990000 CVE-2025-63622,0,0,e7330fde3c1785920f20a1bef5d00328fe6a554fc277c370dea6273484d710dc,2025-11-03T18:35:04.287000 CVE-2025-63675,0,0,5fc4e6601be7f71fb20e8f41c9c3dbb888fb6a16b342fd88cc7a3158743452e5,2025-11-04T15:41:56.843000 +CVE-2025-63686,1,1,cd81525b1f67f91250b4b53b376909b237937f3952e871ddaf2ad1121cd1d268,2025-11-07T16:15:42.247000 +CVE-2025-63687,1,1,80dd6063376d0de94fd3720922ee30b1406edf4ec419f4cb86bab407b2642d51,2025-11-07T16:15:42.383000 +CVE-2025-63689,1,1,3c907f791c6f766e071da2e7a40dc8d48ef757a8eb1ef2a22bfdde12267239d7,2025-11-07T16:15:42.503000 +CVE-2025-63690,1,1,1e15a86d7a5776e1d086c9e6d3c86926baf0c82c9324696574d6144944cc3a33,2025-11-07T16:15:42.690000 +CVE-2025-63691,1,1,dd2ff6fef7abb81058d56934fdb88d3d56ef6f12e20fad9f5d43c1610a806d08,2025-11-07T16:15:42.820000 +CVE-2025-63783,1,1,69f74fd0edfecb70b04b179f6826c5aca1d9ba2798403fefaa9152fa27a8848f,2025-11-07T16:15:42.943000 CVE-2025-63885,0,0,12c6f95cbe8095c93fc90e41bd7e68c1f40301c95e3edc50862766fa954ae56e,2025-11-04T15:41:56.843000 CVE-2025-6395,0,0,cb3c0c913443d3dc2f885a3f5cc382abf9dce52bfd5d3e81f83b6ebd90077743,2025-11-07T00:15:55.290000 CVE-2025-64094,0,0,39661f21079b94d55b2d9802f58d866c8d50bab5c773b7fd3760abda8b19f220,2025-11-03T19:38:46.660000 @@ -113563,7 +113603,7 @@ CVE-2025-64106,0,0,b2483f623c88571e2be4843894b2dc59606eb7b354d455d338bd1dfb4e3a9 CVE-2025-64107,0,0,001f015e85ba4bab09340650b41f2f5ff1083d40eb098f4917948d1960ebb5f8,2025-11-06T19:45:30.990000 CVE-2025-64108,0,0,f5c0dad733aef05674060339e2c0971a163903f4d0ba65e29594ac017340029c,2025-11-06T19:45:30.990000 CVE-2025-64109,0,0,e6bc5c7b9f00a4995c67f05b3ffe7fbd006d3f6d0e51b75e8fb6bf15c9ef462b,2025-11-06T19:45:30.990000 -CVE-2025-64110,0,1,6d35e3ee7dc5b2db4c42c80022c80472515ca060ef7711077840c0df7a8ec1f2,2025-11-07T13:04:09.867000 +CVE-2025-64110,0,0,6d35e3ee7dc5b2db4c42c80022c80472515ca060ef7711077840c0df7a8ec1f2,2025-11-07T13:04:09.867000 CVE-2025-64112,0,0,b4283814a637ab37f3a969db665d1b5e5d049ba1daf6949e56e81119454af0db,2025-11-04T15:41:56.843000 CVE-2025-64114,0,0,c3972cbe55423a75559dec9c0f1ba3b21d8c490a539af9e855a4a9158c8ccd9f,2025-11-06T19:45:09.883000 CVE-2025-64115,0,0,a0aeadfa5dd6a653fe125b489233dfa63db91b245fedeb62eb8b683df3e3c179,2025-11-04T15:41:56.843000