From 4ecf14aa6ecac59ed06f4a2b44d1fca380145d27 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Tue, 18 Nov 2025 19:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-11-18T19:00:11.494150+00:00 --- CVE-2016/CVE-2016-150xx/CVE-2016-15056.json | 14 +- CVE-2018/CVE-2018-48xx/CVE-2018-4878.json | 21 +- CVE-2018/CVE-2018-50xx/CVE-2018-5002.json | 21 +- CVE-2021/CVE-2021-44xx/CVE-2021-4465.json | 14 +- CVE-2021/CVE-2021-44xx/CVE-2021-4467.json | 10 +- CVE-2021/CVE-2021-44xx/CVE-2021-4470.json | 6 +- CVE-2022/CVE-2022-49xx/CVE-2022-4985.json | 10 +- CVE-2022/CVE-2022-501xx/CVE-2022-50112.json | 130 ++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50113.json | 82 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50114.json | 94 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50115.json | 82 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50116.json | 82 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50117.json | 70 +++- CVE-2022/CVE-2022-501xx/CVE-2022-50118.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50119.json | 95 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50120.json | 94 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50121.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50122.json | 142 +++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50123.json | 167 ++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50124.json | 130 ++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50125.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50126.json | 172 ++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50127.json | 142 +++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50129.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50130.json | 87 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50131.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50132.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50133.json | 70 +++- CVE-2022/CVE-2022-501xx/CVE-2022-50134.json | 142 +++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50135.json | 70 +++- CVE-2022/CVE-2022-501xx/CVE-2022-50136.json | 118 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50137.json | 94 ++++- CVE-2023/CVE-2023-322xx/CVE-2023-32246.json | 106 +++++- CVE-2023/CVE-2023-322xx/CVE-2023-32249.json | 106 +++++- CVE-2023/CVE-2023-38xx/CVE-2023-3865.json | 129 ++++++- CVE-2023/CVE-2023-38xx/CVE-2023-3866.json | 129 ++++++- CVE-2023/CVE-2023-38xx/CVE-2023-3867.json | 94 ++++- CVE-2023/CVE-2023-41xx/CVE-2023-4130.json | 119 +++++- CVE-2023/CVE-2023-45xx/CVE-2023-4515.json | 131 ++++++- CVE-2023/CVE-2023-73xx/CVE-2023-7328.json | 10 +- CVE-2024/CVE-2024-251xx/CVE-2024-25189.json | 35 +- CVE-2024/CVE-2024-321xx/CVE-2024-32122.json | 8 +- CVE-2024/CVE-2024-35xx/CVE-2024-3566.json | 8 +- CVE-2025/CVE-2025-127xx/CVE-2025-12760.json | 33 ++ CVE-2025/CVE-2025-127xx/CVE-2025-12761.json | 33 ++ CVE-2025/CVE-2025-128xx/CVE-2025-12864.json | 32 +- CVE-2025/CVE-2025-128xx/CVE-2025-12865.json | 32 +- CVE-2025/CVE-2025-128xx/CVE-2025-12871.json | 38 +- CVE-2025/CVE-2025-129xx/CVE-2025-12926.json | 83 ++++- CVE-2025/CVE-2025-129xx/CVE-2025-12929.json | 86 ++++- CVE-2025/CVE-2025-129xx/CVE-2025-12930.json | 88 ++++- CVE-2025/CVE-2025-129xx/CVE-2025-12931.json | 83 ++++- CVE-2025/CVE-2025-130xx/CVE-2025-13080.json | 33 ++ CVE-2025/CVE-2025-130xx/CVE-2025-13081.json | 66 ++++ CVE-2025/CVE-2025-130xx/CVE-2025-13082.json | 33 ++ CVE-2025/CVE-2025-130xx/CVE-2025-13083.json | 33 ++ CVE-2025/CVE-2025-133xx/CVE-2025-13303.json | 10 +- CVE-2025/CVE-2025-133xx/CVE-2025-13304.json | 10 +- CVE-2025/CVE-2025-133xx/CVE-2025-13306.json | 10 +- CVE-2025/CVE-2025-133xx/CVE-2025-13325.json | 10 +- CVE-2025/CVE-2025-23xx/CVE-2025-2395.json | 32 +- CVE-2025/CVE-2025-23xx/CVE-2025-2396.json | 32 +- CVE-2025/CVE-2025-249xx/CVE-2025-24990.json | 15 +- CVE-2025/CVE-2025-302xx/CVE-2025-30225.json | 29 +- CVE-2025/CVE-2025-303xx/CVE-2025-30350.json | 29 +- CVE-2025/CVE-2025-331xx/CVE-2025-33183.json | 64 ++++ CVE-2025/CVE-2025-331xx/CVE-2025-33184.json | 64 ++++ CVE-2025/CVE-2025-343xx/CVE-2025-34324.json | 90 +++++ CVE-2025/CVE-2025-381xx/CVE-2025-38196.json | 80 +++- CVE-2025/CVE-2025-381xx/CVE-2025-38199.json | 70 +++- CVE-2025/CVE-2025-382xx/CVE-2025-38201.json | 82 ++++- CVE-2025/CVE-2025-382xx/CVE-2025-38205.json | 70 +++- CVE-2025/CVE-2025-382xx/CVE-2025-38207.json | 70 +++- CVE-2025/CVE-2025-382xx/CVE-2025-38264.json | 82 ++++- CVE-2025/CVE-2025-382xx/CVE-2025-38265.json | 106 +++++- CVE-2025/CVE-2025-382xx/CVE-2025-38266.json | 70 +++- CVE-2025/CVE-2025-382xx/CVE-2025-38267.json | 82 ++++- CVE-2025/CVE-2025-385xx/CVE-2025-38526.json | 139 ++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38531.json | 111 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38532.json | 124 ++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38533.json | 124 ++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38534.json | 100 ++++- CVE-2025/CVE-2025-385xx/CVE-2025-38536.json | 100 ++++- CVE-2025/CVE-2025-385xx/CVE-2025-38537.json | 124 ++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38541.json | 107 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38544.json | 119 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38545.json | 107 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38547.json | 112 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38549.json | 112 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38551.json | 112 +++++- CVE-2025/CVE-2025-385xx/CVE-2025-38554.json | 82 ++++- CVE-2025/CVE-2025-385xx/CVE-2025-38556.json | 94 ++++- CVE-2025/CVE-2025-462xx/CVE-2025-46215.json | 56 +++ CVE-2025/CVE-2025-463xx/CVE-2025-46373.json | 56 +++ CVE-2025/CVE-2025-467xx/CVE-2025-46775.json | 56 +++ CVE-2025/CVE-2025-467xx/CVE-2025-46776.json | 56 +++ CVE-2025/CVE-2025-477xx/CVE-2025-47761.json | 56 +++ CVE-2025/CVE-2025-488xx/CVE-2025-48839.json | 56 +++ CVE-2025/CVE-2025-533xx/CVE-2025-53360.json | 68 ++++ CVE-2025/CVE-2025-538xx/CVE-2025-53843.json | 56 +++ CVE-2025/CVE-2025-546xx/CVE-2025-54660.json | 56 +++ CVE-2025/CVE-2025-548xx/CVE-2025-54821.json | 56 +++ CVE-2025/CVE-2025-549xx/CVE-2025-54971.json | 56 +++ CVE-2025/CVE-2025-549xx/CVE-2025-54972.json | 56 +++ CVE-2025/CVE-2025-557xx/CVE-2025-55796.json | 64 ++++ CVE-2025/CVE-2025-55xx/CVE-2025-5552.json | 11 +- CVE-2025/CVE-2025-564xx/CVE-2025-56413.json | 6 +- CVE-2025/CVE-2025-565xx/CVE-2025-56526.json | 68 ++++ CVE-2025/CVE-2025-565xx/CVE-2025-56527.json | 68 ++++ CVE-2025/CVE-2025-566xx/CVE-2025-56643.json | 21 ++ CVE-2025/CVE-2025-580xx/CVE-2025-58034.json | 56 +++ CVE-2025/CVE-2025-584xx/CVE-2025-58413.json | 56 +++ CVE-2025/CVE-2025-586xx/CVE-2025-58692.json | 56 +++ CVE-2025/CVE-2025-596xx/CVE-2025-59669.json | 56 +++ CVE-2025/CVE-2025-617xx/CVE-2025-61713.json | 56 +++ CVE-2025/CVE-2025-631xx/CVE-2025-63147.json | 34 +- CVE-2025/CVE-2025-632xx/CVE-2025-63258.json | 29 ++ CVE-2025/CVE-2025-632xx/CVE-2025-63292.json | 39 +- CVE-2025/CVE-2025-634xx/CVE-2025-63408.json | 43 ++- CVE-2025/CVE-2025-634xx/CVE-2025-63456.json | 34 +- CVE-2025/CVE-2025-634xx/CVE-2025-63457.json | 34 +- CVE-2025/CVE-2025-635xx/CVE-2025-63512.json | 56 +++ CVE-2025/CVE-2025-635xx/CVE-2025-63513.json | 25 ++ CVE-2025/CVE-2025-635xx/CVE-2025-63514.json | 25 ++ CVE-2025/CVE-2025-636xx/CVE-2025-63602.json | 39 +- CVE-2025/CVE-2025-636xx/CVE-2025-63603.json | 39 +- CVE-2025/CVE-2025-636xx/CVE-2025-63604.json | 39 +- CVE-2025/CVE-2025-636xx/CVE-2025-63694.json | 25 ++ CVE-2025/CVE-2025-636xx/CVE-2025-63695.json | 25 ++ CVE-2025/CVE-2025-637xx/CVE-2025-63709.json | 24 +- CVE-2025/CVE-2025-637xx/CVE-2025-63712.json | 34 +- CVE-2025/CVE-2025-638xx/CVE-2025-63800.json | 39 +- CVE-2025/CVE-2025-638xx/CVE-2025-63828.json | 25 ++ CVE-2025/CVE-2025-638xx/CVE-2025-63829.json | 60 +++ CVE-2025/CVE-2025-638xx/CVE-2025-63834.json | 24 +- CVE-2025/CVE-2025-638xx/CVE-2025-63835.json | 34 +- CVE-2025/CVE-2025-639xx/CVE-2025-63918.json | 39 +- CVE-2025/CVE-2025-639xx/CVE-2025-63994.json | 21 ++ CVE-2025/CVE-2025-640xx/CVE-2025-64076.json | 52 +++ CVE-2025/CVE-2025-647xx/CVE-2025-64756.json | 10 +- README.md | 110 +++--- _state.csv | 382 +++++++++++--------- 142 files changed, 8883 insertions(+), 776 deletions(-) create mode 100644 CVE-2025/CVE-2025-127xx/CVE-2025-12760.json create mode 100644 CVE-2025/CVE-2025-127xx/CVE-2025-12761.json create mode 100644 CVE-2025/CVE-2025-130xx/CVE-2025-13080.json create mode 100644 CVE-2025/CVE-2025-130xx/CVE-2025-13081.json create mode 100644 CVE-2025/CVE-2025-130xx/CVE-2025-13082.json create mode 100644 CVE-2025/CVE-2025-130xx/CVE-2025-13083.json create mode 100644 CVE-2025/CVE-2025-331xx/CVE-2025-33183.json create mode 100644 CVE-2025/CVE-2025-331xx/CVE-2025-33184.json create mode 100644 CVE-2025/CVE-2025-343xx/CVE-2025-34324.json create mode 100644 CVE-2025/CVE-2025-462xx/CVE-2025-46215.json create mode 100644 CVE-2025/CVE-2025-463xx/CVE-2025-46373.json create mode 100644 CVE-2025/CVE-2025-467xx/CVE-2025-46775.json create mode 100644 CVE-2025/CVE-2025-467xx/CVE-2025-46776.json create mode 100644 CVE-2025/CVE-2025-477xx/CVE-2025-47761.json create mode 100644 CVE-2025/CVE-2025-488xx/CVE-2025-48839.json create mode 100644 CVE-2025/CVE-2025-533xx/CVE-2025-53360.json create mode 100644 CVE-2025/CVE-2025-538xx/CVE-2025-53843.json create mode 100644 CVE-2025/CVE-2025-546xx/CVE-2025-54660.json create mode 100644 CVE-2025/CVE-2025-548xx/CVE-2025-54821.json create mode 100644 CVE-2025/CVE-2025-549xx/CVE-2025-54971.json create mode 100644 CVE-2025/CVE-2025-549xx/CVE-2025-54972.json create mode 100644 CVE-2025/CVE-2025-557xx/CVE-2025-55796.json create mode 100644 CVE-2025/CVE-2025-565xx/CVE-2025-56526.json create mode 100644 CVE-2025/CVE-2025-565xx/CVE-2025-56527.json create mode 100644 CVE-2025/CVE-2025-566xx/CVE-2025-56643.json create mode 100644 CVE-2025/CVE-2025-580xx/CVE-2025-58034.json create mode 100644 CVE-2025/CVE-2025-584xx/CVE-2025-58413.json create mode 100644 CVE-2025/CVE-2025-586xx/CVE-2025-58692.json create mode 100644 CVE-2025/CVE-2025-596xx/CVE-2025-59669.json create mode 100644 CVE-2025/CVE-2025-617xx/CVE-2025-61713.json create mode 100644 CVE-2025/CVE-2025-632xx/CVE-2025-63258.json create mode 100644 CVE-2025/CVE-2025-635xx/CVE-2025-63512.json create mode 100644 CVE-2025/CVE-2025-635xx/CVE-2025-63513.json create mode 100644 CVE-2025/CVE-2025-635xx/CVE-2025-63514.json create mode 100644 CVE-2025/CVE-2025-636xx/CVE-2025-63694.json create mode 100644 CVE-2025/CVE-2025-636xx/CVE-2025-63695.json create mode 100644 CVE-2025/CVE-2025-638xx/CVE-2025-63828.json create mode 100644 CVE-2025/CVE-2025-638xx/CVE-2025-63829.json create mode 100644 CVE-2025/CVE-2025-639xx/CVE-2025-63994.json create mode 100644 CVE-2025/CVE-2025-640xx/CVE-2025-64076.json diff --git a/CVE-2016/CVE-2016-150xx/CVE-2016-15056.json b/CVE-2016/CVE-2016-150xx/CVE-2016-15056.json index ba285fc83ee..9709a29d826 100644 --- a/CVE-2016/CVE-2016-150xx/CVE-2016-15056.json +++ b/CVE-2016/CVE-2016-150xx/CVE-2016-15056.json @@ -2,7 +2,7 @@ "id": "CVE-2016-15056", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:41.687", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:56.507", "vulnStatus": "Awaiting Analysis", "cveTags": [ { @@ -96,6 +96,18 @@ { "url": "https://www.vulncheck.com/advisories/ubee-evw3226-unauthenticated-backup-file-disclosure", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://seclists.org/fulldisclosure/2016/Jul/66", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://web.archive.org/web/20160726145043/http://www.search-lab.hu/advisories/122-ubee-evw3226-modem-router-multiple-vulnerabilities", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/40156", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2018/CVE-2018-48xx/CVE-2018-4878.json b/CVE-2018/CVE-2018-48xx/CVE-2018-4878.json index 0912869e459..7cd621acb83 100644 --- a/CVE-2018/CVE-2018-48xx/CVE-2018-4878.json +++ b/CVE-2018/CVE-2018-48xx/CVE-2018-4878.json @@ -2,8 +2,8 @@ "id": "CVE-2018-4878", "sourceIdentifier": "psirt@adobe.com", "published": "2018-02-06T21:29:00.347", - "lastModified": "2025-11-17T20:15:48.083", - "vulnStatus": "Modified", + "lastModified": "2025-11-18T17:03:20.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -22,19 +22,19 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", - "userInteraction": "NONE", + "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 1.8, "impactScore": 5.9 }, { @@ -468,7 +468,10 @@ }, { "url": "https://github.com/cisagov/vulnrichment/issues/196", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4878", diff --git a/CVE-2018/CVE-2018-50xx/CVE-2018-5002.json b/CVE-2018/CVE-2018-50xx/CVE-2018-5002.json index 9374c519afb..0547f2a03e5 100644 --- a/CVE-2018/CVE-2018-50xx/CVE-2018-5002.json +++ b/CVE-2018/CVE-2018-50xx/CVE-2018-5002.json @@ -2,8 +2,8 @@ "id": "CVE-2018-5002", "sourceIdentifier": "psirt@adobe.com", "published": "2018-07-09T19:29:03.750", - "lastModified": "2025-11-17T21:15:50.467", - "vulnStatus": "Modified", + "lastModified": "2025-11-18T17:03:08.343", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -22,19 +22,19 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", - "userInteraction": "NONE", + "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 1.8, "impactScore": 5.9 }, { @@ -340,7 +340,10 @@ }, { "url": "https://github.com/cisagov/vulnrichment/issues/196", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-5002", diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4465.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4465.json index 462fb88bd6c..0882ed2f90d 100644 --- a/CVE-2021/CVE-2021-44xx/CVE-2021-4465.json +++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4465.json @@ -2,7 +2,7 @@ "id": "CVE-2021-4465", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:42.177", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:57.000", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -97,6 +97,18 @@ { "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5601.php", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://cxsecurity.com/issue/WLB-2020100122", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/48951", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5601.php", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4467.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4467.json index 31e94cc1db5..234e2f2dd0d 100644 --- a/CVE-2021/CVE-2021-44xx/CVE-2021-4467.json +++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4467.json @@ -2,7 +2,7 @@ "id": "CVE-2021-4467", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:42.557", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:57.190", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -85,6 +85,14 @@ { "url": "https://www.vulncheck.com/advisories/positive-technologies-maxpatrol-8-and-xspider-remote-dos", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://cxsecurity.com/issue/WLB-2021090114", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://vulners.com/zdt/1337DAY-ID-36775", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4470.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4470.json index 9cd4c22b3f5..892896019e8 100644 --- a/CVE-2021/CVE-2021-44xx/CVE-2021-4470.json +++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4470.json @@ -2,7 +2,7 @@ "id": "CVE-2021-4470", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:43.087", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:57.330", "vulnStatus": "Awaiting Analysis", "cveTags": [ { @@ -88,6 +88,10 @@ { "url": "https://www.vulncheck.com/advisories/tg8-firewall-unauthenticated-rce-via-runphpcmd-php", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-49xx/CVE-2022-4985.json b/CVE-2022/CVE-2022-49xx/CVE-2022-4985.json index a4e553651ef..5a0d7fb6836 100644 --- a/CVE-2022/CVE-2022-49xx/CVE-2022-4985.json +++ b/CVE-2022/CVE-2022-49xx/CVE-2022-4985.json @@ -2,7 +2,7 @@ "id": "CVE-2022-4985", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:43.447", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:57.493", "vulnStatus": "Awaiting Analysis", "cveTags": [ { @@ -92,6 +92,14 @@ { "url": "https://www.vulncheck.com/advisories/vodafone-h500s-wifi-password-disclosure-via-activation-json", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://cxsecurity.com/issue/WLB-2022010024", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/50636", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50112.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50112.json index 24509a2f25c..96e57543764 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50112.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50112.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50112", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:40.793", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:14:26.363", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rpmsg: qcom_smd: se corrige la p\u00e9rdida de refcount en qcom_smd_parse_edge of_parse_phandle() devuelve un puntero de nodo con refcount incrementado, debemos usar of_node_put() en \u00e9l cuando termine." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "A7691C46-A3E8-471D-AA27-90A3522DB32D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/43e42c25a232a6862e7d2f292a069ac828559030", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65382585f067d4256ba087934f30f85c9b6984de", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ee5d40ae29e63f6fd6cbf9dcfc0a48c474013db", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9715809b9eeb85b3f9b083857a2f29a9e2351125", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae7fdbab97df6a2115eed6b7e39c278b805c9c7d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb50423e46ea585620a6be307d7f7b71587936b7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ece6cfe62a103cc6032664983be557f1b5a1ff7e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50113.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50113.json index 44281d6964b..262a274b281 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50113.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50113.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50113", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:40.917", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:14:16.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoc: audio-graph-card2: Se corrige el error de fuga de recuento de referencias en __graph_get_type(). Deber\u00edamos llamar a of_node_put() para la referencia antes de reemplazarla, ya que la devolvi\u00f3 of_get_parent(), lo que increment\u00f3 el recuento de referencias. Adem\u00e1s, tambi\u00e9n deber\u00edamos llamar a of_node_put() antes del retorno." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3bb0c0b5f0f866fc3785380e0860dc37ceacf342", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a63a8c253bf57dfd9fa3ee2a7f1a3727505f947", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eda26893dabfc6da7a1e1ff5f8628ed9faab3ab9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50114.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50114.json index e7ee0f3a731..dd13008d86e 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50114.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50114.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50114", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.030", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:14:06.050", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: 9p: se corrige la fuga de recuento de referencias en el manejo de errores de p9_read_work(). Es necesario llamar a p9_req_put cuando m->rreq->rc.sdata es NULL para evitar una fuga temporal de recuento de referencias. [Dominique: ajustes en la redacci\u00f3n de las confirmaciones, correcciones del argumento p9_req_put para la rebase]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.57", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "F63355E3-6959-4C52-8B44-F29EE9C74FE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/34b9a188557c1d5a50e07cf228d054101aee0af3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4ac7573e1f9333073fa8d303acc941c9b7ab7f61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8324649b0035cbb30ebc3ca901540cb392e89041", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50115.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50115.json index fb0267695c2..139a1b8fb2a 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50115.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50115.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50115", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.140", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:13:58.527", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: SOF: ipc3-topology: Impide la doble liberaci\u00f3n de ipc_control_data mediante load_bytes. Se han realizado comprobaciones de seguridad para los controles de bytes y, si alguna falla, se libera el archivo scontrol->ipc_control_data asignado localmente, pero no se establece en NULL. En una ruta de reversi\u00f3n del error, el c\u00f3digo de nivel superior tambi\u00e9n intentar\u00e1 liberar scontrol->ipc_control_data, lo que eventualmente provocar\u00e1 corrupci\u00f3n de memoria, ya que la doble liberaci\u00f3n de memoria no es recomendable." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "28A3BD94-A9B1-461A-9325-1B7EF7D364B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/8463986b54295e6b65ddf2b7c65627d01ce7643b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c2eddfcafcffaf1b9245ea0dde9143bbfb47d5d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5bd47f3ca124058a8e87eae4508afeda2132611", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50116.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50116.json index 5b550ca2974..92069388ecc 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50116.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50116.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50116", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.257", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:13:48.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: n_gsm: corrige el bloqueo y la inanici\u00f3n del enlace en la ruta de datos de salida La implementaci\u00f3n actual pone en cola nuevos paquetes de control y de usuario seg\u00fan sea necesario y procesa esta cola hasta el ldisc en la misma ruta de c\u00f3digo. Eso significa que las capas superior e inferior est\u00e1n acopladas r\u00edgidamente en el c\u00f3digo. Debido a esto, pueden ocurrir bloqueos como se ve a continuaci\u00f3n mientras se transmiten datos, especialmente durante la congesti\u00f3n del ldisc. Adem\u00e1s, los canales de datos privan al canal de control en una carga de transmisi\u00f3n alta en el ldisc. Introduzca una cola de datos de canal de control adicional para evitar tiempos de espera y cuelgues de enlace durante la congesti\u00f3n del ldisc. Esto se procesa antes que la cola de datos del canal de usuario en gsm_data_kick(), es decir, con la m\u00e1xima prioridad. Coloque la cola a la ruta de datos del ldisc en una cola de trabajo y act\u00edvela siempre que se hayan incluido nuevos datos en la cola de transmisi\u00f3n. Modifique gsm_dlci_data_sweep() seg\u00fan corresponda para llenar la cola de transmisi\u00f3n hasta TX_THRESH_HI. Esto soluciona el problema de bloqueo, mantiene baja la latencia y proporciona un buen rendimiento con una carga de datos alta. Tenga en cuenta que ahora todos los paquetes de un DLCI se eliminan de la cola interna si el DLCI asociado estaba cerrado. Esto garantiza que la tarea de escritura introducida no env\u00ede datos a un DLCI ya cerrado. ERROR: recursi\u00f3n de spinlock en CPU#0, test_v24_loop/124 bloqueo: serial8250_ports+0x3a8/0x7500, .magic: dead4ead, .owner: test_v24_loop/124, .owner_cpu: 0 CPU: 0 PID: 124 Comm: test_v24_loop Contaminado: GO 5.18.0-rc2 #3 Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 01/04/2014 Rastreo de llamadas: dump_stack_lvl+0x34/0x44 do_raw_spin_lock+0x76/0xa0 _raw_spin_lock_irqsave+0x72/0x80 uart_write_room+0x3b/0xc0 gsm_data_kick+0x14b/0x240 [n_gsm] gsmld_write_wakeup+0x35/0x70 [n_gsm] tty_wakeup+0x53/0x60 tty_port_default_wakeup+0x1b/0x30 serial8250_tx_chars+0x12f/0x220 serial8250_handle_irq.part.0+0xfe/0x150 serial8250_default_handle_irq+0x48/0x80 serial8250_interrupt+0x56/0xa0 __handle_irq_event_percpu+0x78/0x1f0 handle_irq_event+0x34/0x70 handle_fasteoi_irq+0x90/0x1e0 __common_interrupt+0x69/0x100 common_interrupt+0x48/0xc0 asm_common_interrupt+0x1e/0x40 RIP: 0010:__do_softirq+0x83/0x34e Code: 2a 0a ff 0f b7 ed c7 44 24 10 0a 00 00 00 48 c7 c7 51 2a 64 82 e8 2d e2 d5 ff 65 66 c7 05 83 af 1e 7e 00 00 fb b8 ff ff ff ff <49> c7 c2 40 61 80 82 0f bc c5 41 89 c4 41 83 c4 01 0f 84 e6 00 00 RSP: 0018:ffffc90000003f98 EFLAGS: 00000286 RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff82642a51 RDI: ffffffff825bb5e7 RBP: 0000000000000200 R08: 00000008de3271a8 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000030 R14: 0000000000000000 R15: 0000000000000000 ? __do_softirq+0x73/0x34e irq_exit_rcu+0xb5/0x100 common_interrupt+0xa4/0xc0 asm_common_interrupt+0x1e/0x40 RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x50 Code: 00 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 85 28 36 ff 48 89 ef e8 cd 58 36 ff 80 e7 02 74 01 fb bf 01 00 00 00 3d 97 33 ff 65 8b 05 96 23 2b 7e 85 c0 74 03 5b 5d c3 0f 1f 44 RSP: 0018:ffffc9000020fd08 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000246 RCX: 0000000000000000 RDX: 0000000000000004 RSI: ffffffff8257fd74 RDI: 0000000000000001 RBP: ffff8880057de3a0 R08: 00000008de233000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000100 R14: 0000000000000202 R15: ffff8880057df0b8 ? _raw_spin_unlock_irqrestore+0x23/0x50 gsmtty_write+0x65/0x80 [n_gsm] n_tty_write+0x33f/0x530 ? swake_up_all+0xe0/0xe0 file_tty_write.constprop.0+0x1b1/0x320 ? n_tty_flush_buffer+0xb0/0xb0 new_sync_write+0x10c/0x190 vfs_write+0x282/0x310 ksys_write+0x68/0xe0 do_syscall_64+0x3b/0x90 entry_SYSCALL ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.35", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "D85A2140-5A58-48E8-BB38-4918B0EB5E8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0af021678d5d30c31f5a6b631f404ead3575212a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7962a4b900099cf90e02859bb297f2c618d8d940", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c165698c9919b000bdbe73859d3bb7b33bdb9223", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50117.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50117.json index 6cb62169c22..7a3fe18ba41 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50117.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50117.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50117", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.370", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:13:37.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vfio: Dividir operaciones de migraci\u00f3n de las operaciones del dispositivo principal El n\u00facleo vfio verifica si el controlador establece alguna operaci\u00f3n de migraci\u00f3n (por ejemplo, set_state/get_state) y, en consecuencia, llama a su operaci\u00f3n. Sin embargo, actualmente el controlador mlx5 establece las operaciones anteriores sin tener en cuenta sus l\u00edmites de migraci\u00f3n. Esto puede llevar a un uso inesperado/Oops si el espacio de usuario puede llamar a las operaciones anteriores incluso si el controlador no admite la migraci\u00f3n. Como por ejemplo, el state_mutex de migraci\u00f3n no se inicializa en ese caso. La forma m\u00e1s limpia de gestionar eso parece dividir las operaciones de migraci\u00f3n de las operaciones del dispositivo principal, esto permitir\u00e1 que el controlador las configure por separado de las operaciones principales cuando sea aplicable. Como parte de eso, valide la construcci\u00f3n de las operaciones en el registro e incluya una comprobaci\u00f3n para VFIO_MIGRATION_STOP_COPY ya que la uAPI afirma que debe establecerse en migration_flags. El controlador HISI tambi\u00e9n se cambi\u00f3 para que coincida con este esquema. Este esquema puede permitir en el futuro contar con alg\u00fan grupo adicional de operaciones (por ejemplo, registro DMA) que se pueden configurar sin tener en cuenta las otras opciones en funci\u00f3n de las capacidades del controlador." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "9DDA808D-1762-4306-BFCC-F1E9219F4F14" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6e97eba8ad8748fabb795cffc5d9e1a7dcfd7367", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bba6b12d73d36e0ddbc2c3ac5668a667b00d4345", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50118.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50118.json index 82487029bac..12796685e02 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50118.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50118.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50118", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.477", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:13:26.477", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/perf: Optimizar la limpieza del PMI pendiente y eliminar WARN_ON para la comprobaci\u00f3n de PMI en power_pmu_disable, confirmaci\u00f3n 2c9ac51b850d (\"powerpc/perf: Corregir las devoluciones de llamada de PMU para limpiar el PMI pendiente antes de restablecer un PMC desbordado\"). Se a\u00f1adi\u00f3 la funci\u00f3n \"pmi_irq_pending\" en hw_irq.h. Esta funci\u00f3n comprueba si hay un PMI marcado como pendiente en Paca (PACA_IRQ_PMI). Se utiliza en power_pmu_disable en un WARN_ON. El objetivo es emitir una advertencia si hay un PMI pendiente, pero no se encuentra ning\u00fan contador desbordado. Durante algunas ejecuciones de rendimiento, se muestra la siguiente advertencia: ADVERTENCIA: CPU: 36 PID: 0 en arch/powerpc/perf/core-book3s.c:1332 power_pmu_disable+0x25c/0x2c0 M\u00f3dulos vinculados: ----- NIP [c000000000141c3c] power_pmu_disable+0x25c/0x2c0 LR [c000000000141c8c] power_pmu_disable+0x2ac/0x2c0 Rastreo de llamadas: [c000000baffcfb90] [c000000000141c8c] power_pmu_disable+0x2ac/0x2c0 (unreliable) [c000000baffcfc10] [c0000000003e2f8c] perf_pmu_disable+0x4c/0x60 [c000000baffcfc30] [c0000000003e3344] group_sched_out.part.124+0x44/0x100 [c000000baffcfc80] [c0000000003e353c] __perf_event_disable+0x13c/0x240 [c000000baffcfcd0] [c0000000003dd334] event_function+0xc4/0x140 [c000000baffcfd20] [c0000000003d855c] remote_function+0x7c/0xa0 [c000000baffcfd50] [c00000000026c394] flush_smp_call_function_queue+0xd4/0x300 [c000000baffcfde0] [c000000000065b24] smp_ipi_demux_relaxed+0xa4/0x100 [c000000baffcfe20] [c0000000000cb2b0] xive_muxed_ipi_action+0x20/0x40 [c000000baffcfe40] [c000000000207c3c] __handle_irq_event_percpu+0x8c/0x250 [c000000baffcfee0] [c000000000207e2c] handle_irq_event_percpu+0x2c/0xa0 [c000000baffcff10] [c000000000210a04] handle_percpu_irq+0x84/0xc0 [c000000baffcff40] [c000000000205f14] generic_handle_irq+0x54/0x80 [c000000baffcff60] [c000000000015740] __do_irq+0x90/0x1d0 [c000000baffcff90] [c000000000016990] __do_IRQ+0xc0/0x140 [c0000009732f3940] [c000000bafceaca8] 0xc000000bafceaca8 [c0000009732f39d0] [c000000000016b78] do_IRQ+0x168/0x1c0 [c0000009732f3a00] [c0000000000090c8] hardware_interrupt_common_virt+0x218/0x220 Esto significa que no hay ning\u00fan PMC desbordado entre los eventos activos en la PMU, pero hay una PMU pendiente en Paca. La funci\u00f3n \"any_pmc_overflown\" comprueba los PMC en los eventos activos en cpuhw->n_events. Fragmento de c\u00f3digo: <<>> if (any_pmc_overflown(cpuhw)) clear_pmi_irq_pending(); else WARN_ON(pmi_irq_pending()); <<>> Aqu\u00ed, el PMC desbordado no proviene del evento activo. Ejemplo: Al realizar un registro de rendimiento, los ciclos e instrucciones predeterminados se ejecutar\u00e1n en PMC6 y PMC5 respectivamente. Podr\u00eda ocurrir que el evento desbordado no est\u00e9 activo y que el PMI pendiente corresponda al evento inactivo. Registros de depuraci\u00f3n de trace_printk: <<>> any_pmc_overflown: idx es 5: el valor de pmc es 0xd9a power_pmu_disable: PMC1: 0x0, PMC2: 0x0, PMC3: 0x0, PMC4: 0x0, PMC5: 0xd9a, PMC6: 0x80002011 <<>> Aqu\u00ed, el PMC activo (de idx) es PMC5, pero el PMC desbordado es PMC6(0x80002011). Cuando manejamos la interrupci\u00f3n de PMI para tales casos, si el PMC desbordado proviene de un evento inactivo, ser\u00e1 ignorado. Referencia de confirmaci\u00f3n: confirmaci\u00f3n bc09c219b2e6 (\"powerpc/perf: Correcci\u00f3n de encontrar PMC desbordado en la interrupci\u00f3n\") El parche aborda dos cambios: 1) Correcci\u00f3n 1: Eliminaci\u00f3n de la advertencia ( WARN_ON(pmi_irq_pending()); ) Est\u00e1bamos imprimiendo una advertencia si no se encontraba ning\u00fan PMC desbordado entre los eventos PMU activos, pero s\u00ed PMI pendiente en PACA. Pero esto podr\u00eda suceder en casos donde el PMC desbordado no est\u00e1 en el PMC activo. Un evento inactivo podr\u00eda haber causado el desbordamiento. Por lo tanto, la advertencia no es necesaria. Para saber si el PMI pendiente proviene de un evento inactivo, necesitamos recorrer todos los PMC, lo que causar\u00e1 m\u00e1s lecturas de SPR a trav\u00e9s de mfspr y aumentar\u00e1 el cambio de contexto. Adem\u00e1s, en la funci\u00f3n existente: --- trunca" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-674" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.94", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "AF5E4720-08E8-42EB-86CB-782DBBF530C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.17", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "5A332B68-7C0D-42EE-A633-3F72C143E2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16.3", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "2035EB48-3F69-499F-A541-48B3877AB6F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a24ea26c3278216642a43291df7976a73a0a7ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e83af3dd4a3afca8f83ffde518cafd52f45b830", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/875b2bf469d094754ac2ba9af91dcd529eb12bf6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/87b1a9175f08313f40fcb6d6dc536dbe451090eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/890005a7d98f7452cfe86dcfb2aeeb7df01132ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50119.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50119.json index 61403539004..d3ab7338730 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50119.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50119.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50119", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.573", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:47.267", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,110 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rpmsg: Se corrige una posible fuga de recuento en rpmsg_register_device_override(). rpmsg_register_device_override necesita llamar a put_device para liberar vch cuando driver_set_override falla. Se soluciona a\u00f1adiendo put_device() a la ruta de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/01e6885b75e25a2dd0726455ef18ef9ce5e7dc87", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/280ae5a028ef5d14ef9277746a3026a30aaebe4f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3fdd5b2bb09fc2b5bf3504778f51c89bb48c097f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c29335612ff44df979678a38e1f55c62004f421c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c449b28e437d18ae807479c4ac6b69d87b287c79", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d4c8bf5635c4bedaf2470761ced1f502b2d5434e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7bd416d35121c95fe47330e09a5c04adbc5f928", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50120.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50120.json index d458670391f..d53b018bcba 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50120.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50120.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50120", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.683", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:38.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: remoteproc: imx_rproc: Se corrige la fuga de refcount en imx_rproc_addr_init. of_parse_phandle() devuelve un puntero de nodo con refcount incrementado; debemos usar of_node_put() cuando ya no sea necesario. Esta funci\u00f3n tiene dos rutas que faltan en of_node_put()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "42F001E2-7640-42CA-B214-F831D103620F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0dc1663e3fc22c72e1ab33be7701a0d51cca84ef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/16da9f84e26f89e58cac194ff19fefd9de27d975", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/61afafe8b938bc74841cf4b1a73dd08b9d287c5a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8ac68927856c3a6d197a95be73c92ec0bd4b012", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50121.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50121.json index 8e28397095f..7d557f643c9 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50121.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50121.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50121", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.797", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:31.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: remoteproc: k3-r5: Se corrige la fuga de recuento de referencias en k3_r5_cluster_of_init. Cada iteraci\u00f3n de for_each_available_child_of_node() disminuye el recuento de referencias del nodo anterior. Al interrumpir un bucle for_each_available_child_of_node() antes de tiempo, debemos llamar expl\u00edcitamente a of_node_put() en el nodo hijo. A\u00f1ada la falta de of_node_put() para evitar la fuga de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "E3D278FB-386F-4B27-8369-B089C2C76B38" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3f83c4cf1b78331c23876977aa7b9151aff2f9e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/61cd8cd3b6b33c7eae3b45cf783b114f2ae53528", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/75358732af9b26acfe3e609943290bcba13330fc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf112a52d758092ca3d5ebdad51dd17bda5ba3e5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa220c05d282e7479abe08b54e3bdffd06c25e97", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50122.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50122.json index e6695f71649..d0420d662d8 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50122.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50122.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50122", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:41.900", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:23.230", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mediatek: mt8173-rt5650: Se corrige la fuga de recuento de referencias en mt8173_rt5650_dev_probe. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se corrige la fuga de recuento de referencias en algunas rutas de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.6", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "6C773FCB-AE4F-4DE8-84CD-2026A3160032" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/06ace427953f5036b64aed658f0055f65d76fd27", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/403d46971936f9f704b91cecffe66e44aa39e915", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5ec83aa7a9e5bcca80ccd49978916feb4e0ffc07", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79f566907d27abbd7600cebe51def5081d5796b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/994f2edeeb2114bb22b62741cb8fb030fc7e5441", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e024a24fb264523149658c10c76bb363b3d0004d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e38e4952ac7a316c9002af30980d6aa850214474", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/efe2178d1a32492f99e7f1f2568eea5c88a85729", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50123.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50123.json index fb1130eff78..1f260c0dc57 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50123.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50123.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50123", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.017", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:15.123", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,184 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mediatek: mt8173: Se corrige la fuga de refcount en mt8173_rt5650_rt5676_dev_probe. of_parse_phandle() devuelve un puntero de nodo con refcount incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se corrige la ausencia de of_node_put() en las rutas de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2.1", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "CD156D09-688D-4845-AE6C-65CE13338B1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.2:-:*:*:*:*:*:*", + "matchCriteriaId": "37D5F2FA-B7D0-4F9D-BC97-F450E5839C7B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "130E1C2A-45DE-4C16-8FFA-06E9C9F7F175" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "78F0CC21-E28A-4B83-B65B-94AB9242F345" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc7:*:*:*:*:*:*", + "matchCriteriaId": "AED16DC6-6364-4B57-92A1-F14F347DADF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.2:rc8:*:*:*:*:*:*", + "matchCriteriaId": "03A4BCF1-5A7D-4E74-948F-134F0E57D73B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/540c7b7385fb110740703888b4b2bbfa06c7f79c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58567ed2878f70e0ded242cb529fb4a7618ea9f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/769399bce8825e1dcc5050dab78e15ab578baf4f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa1214ece37944e4dbbb5cfb1d02bf37e4d89b02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa668f8e93199cda8fa1612eb49ff70f5ecd8c92", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae4f11c1ed2d67192fdf3d89db719ee439827c11", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d6d41f04640db0f946e2c3f7963bb2774afc7a0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fab5eb31819a2693b0c3d6f3df6a0d193af9a089", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50124.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50124.json index da39c9f26ce..75369a202a6 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50124.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50124.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50124", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.133", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:07.753", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mt6797-mt6351: Se corrige la fuga de recuento de referencias en mt6797_mt6351_dev_probe. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha a\u00f1adido la funci\u00f3n of_node_put() que falta para evitar la fuga de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.18", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "391490DF-4817-4041-9754-CA6263D7D95A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1042353bb67cd1c9109d7481ea182c7794336458", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/38dc6faef05f33b4c889be8b7d65878e465c1c4b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67a28402a9e8c229c7588f214d81d52903ea06ea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7472eb8d7dd12b6b9b1a4f4527719cc9c7f5965f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7dee72b1bcecb26bfff8d6360f2169f8656dbaf6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a0381a9f3e595988e83bac4c4dd1e45ed2b3c744", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b488ceb2336905f071f80627bc8a7d657274e5de", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50125.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50125.json index 7c4db5c5cb1..9df55884a4d 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50125.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50125.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50125", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.250", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:12:00.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: cros_ec_codec: Se corrige la fuga de recuento de referencias en cros_ec_codec_platform_probe. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha a\u00f1adido la funci\u00f3n of_node_put() que falta para evitar la fuga de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a034d93ee929a9ea89f3fa5f1d8492435b9ee6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1065c385325845c88350c765cc6e449f46741984", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3e64b5562c077218295f2230fb5cf181193cb06", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bae95c5aee1f67da6608ceaebfb744d900e5ffbf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ca6c9244e6c9827a0b2fe8808c5e7b1ee8ab7104", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50126.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50126.json index c07ad602bf6..44340a0010e 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50126.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50126.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50126", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.360", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:11:46.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,189 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: jbd2: se corrige el error de aserci\u00f3n 'jh->b_frozen_data == NULL' cuando se aborta el diario El siguiente proceso fallar\u00e1 la aserci\u00f3n 'jh->b_frozen_data == NULL' en jbd2_journal_dirty_metadata(): jbd2_journal_commit_transaction unlink(dir/a) jh->b_transaction = trans1 jh->b_jlist = BJ_Metadata journal->j_running_transaction = NULL trans1->t_state = T_COMMIT unlink(dir/b) handle->h_trans = trans2 do_get_write_access jh->b_modified = 0 jh->b_frozen_data = frozen_buffer jh->b_next_transaction = trans2 jbd2_journal_dirty_metadata is_handle_aborted is_journal_aborted // devuelve falso --> jbd2 abort <-- while (commit_transaction->t_buffers) if (is_journal_aborted) jbd2_journal_refile_buffer __jbd2_journal_refile_buffer WRITE_ONCE(jh->b_transaction, jh->b_next_transaction) WRITE_ONCE(jh->b_next_transaction, NULL) __jbd2_journal_file_buffer(jh, BJ_Reserved) J_ASSERT_JH(jh, jh->b_frozen_data == NULL) // \u00a1Fallo de aserci\u00f3n! El reproductor (ver detalles en [Enlace]) informa: ------------[ cortar aqu\u00ed ]------------ \u00a1ERROR del kernel en fs/jbd2/transaction.c:1629! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP CPU: 2 PID: 584 Comm: desvincular Contaminado: GW 5.19.0-rc6-00115-g4a57a8400075-dirty #697 RIP: 0010:jbd2_journal_dirty_metadata+0x3c5/0x470 RSP: 0018:ffffc90000be7ce0 EFLAGS: 00010202 Rastreo de llamadas: __ext4_handle_dirty_metadata+0xa0/0x290 ext4_handle_dirty_dirblock+0x10c/0x1d0 ext4_delete_entry+0x104/0x200 __ext4_unlink+0x22b/0x360 ext4_unlink+0x275/0x390 vfs_unlink+0x20b/0x4c0 do_unlinkat+0x42f/0x4c0 __x64_sys_unlink+0x37/0x50 do_syscall_64+0x35/0x80 Despu\u00e9s de abortar el diario, se ejecuta __jbd2_journal_refile_buffer() manteniendo presionado @jh->b_state_lock. Podemos solucionarlo moviendo 'is_handle_aborted()' al \u00e1rea protegida por @jh->b_state_lock." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.20", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "622A407A-754C-4353-8055-EF60B3D7C0D9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:-:*:*:*:*:*:*", + "matchCriteriaId": "9E2DBD4C-9DD9-4DD3-87CB-A0070A789CEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "8D97ED16-D6B7-4445-889C-4D6DE2EDC49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "DFFB2843-A867-48EC-97D7-B106C7BBAED0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "3CD3FE23-1A10-47E6-AD7E-D67F1BE3C5E2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "9F39FC76-7D77-4064-94D3-A16C436FA8D1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0f61c6dc4b714be9d79cf0782ca02ba01c1b7ac3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a734f0869f970b8a9b65062ea40b09a5da9dba8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6073389db83b903678a0920554fa19f5bdc51c48", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/731c1662d838fe954c6759e3ee43229b0d928fe4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ddd896792e1718cb84c96f3e618270589b6886dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e62f79827784f56499a50ea2e893c98317b5407b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f7161d0da975adc234161cd0641d0e484f5ce375", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa5b65d39332fef7a11ae99cb1f0696012a61527", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50127.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50127.json index 0d235d46f45..41c03d7307c 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50127.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50127.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50127", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.477", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:11:35.227", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/rxe: Correcci\u00f3n del error de desenrollado en rxe_create_qp(). En la funci\u00f3n rxe_create_qp(), se llama a rxe_qp_from_init() para inicializar qp. Internamente, elementos como los bloqueos de giro no se configuran hasta rxe_qp_init_req(). Si se produce un error antes de este punto, el desenrollado llamar\u00e1 a rxe_cleanup() y, finalmente, a rxe_qp_do_cleanup()/rxe_cleanup_task(), lo que generar\u00e1 un error al intentar acceder al bloqueo de giro no inicializado. Se deben adelantar las inicializaciones de los bloqueos de giro para evitar cualquier fallo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.8", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "381CD809-3659-46C5-BC70-3AD16FD6A80E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a63f24e724f677db1ab21251f4d0011ae0bb5b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ceeb04252e621c0b128ecc8fedbca922d11adba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c838ca6fbdb173102780d7bdf18f2f7d9e30979", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ef491b26c720a87fcfbd78b7dc8eb83d9753fe6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b348e204a53103f51070513a7494da7c62ecbdaa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/db924bd8484c76558a4ac4c4b5aeb52e857f0341", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f05b7cf02123aaf99db78abfe638efefdbe15555", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd5382c5805c4bcb50fd25b7246247d3f7114733", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50129.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50129.json index 9eb189c7e18..a087ea7dfc1 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50129.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50129.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50129", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.700", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:10:00.103", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/srpt: Se corrige un problema de use-after-free. Se cambian los miembros del puerto LIO dentro de struct srpt_port de miembros regulares a punteros. Se asignan las estructuras de datos del puerto LIO desde srpt_make_tport() y se liberan desde srpt_make_tport(). Se mantiene struct srpt_device mientras un puerto RDMA o un puerto de destino LIO est\u00e9 asociado a \u00e9l. Este parche desacopla la duraci\u00f3n de struct srpt_port (controlado por el n\u00facleo RDMA) y struct srpt_port_id (controlado por LIO). Este parche corrige la siguiente queja de KASAN: ERROR: KASAN: Use-After-Free en srpt_enable_tpg+0x31/0x70 [ib_srpt] Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff888141cc34b8 por la tarea check/5093 Rastreo de llamadas: show_stack+0x4e/0x53 dump_stack_lvl+0x51/0x66 print_address_description.constprop.0.cold+0xea/0x41e print_report.cold+0x90/0x205 kasan_report+0xb9/0xf0 __asan_load8+0x69/0x90 srpt_enable_tpg+0x31/0x70 [ib_srpt] target_fabric_tpg_base_enable_store+0xe2/0x140 [target_core_mod] configfs_write_iter+0x18b/0x210 new_sync_write+0x1f2/0x2f0 vfs_write+0x3e3/0x540 ksys_write+0xbb/0x140 __x64_sys_write+0x42/0x50 do_syscall_64+0x34/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.3", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "F6C33A97-B485-4E75-A44C-6CE806602042" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/388326bb1c32fcd09371c1d494af71471ef3a04b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4ee8c39968a648d58b273582d4b021044a41ee5e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5605148e6ce36bb21020d49010b617693933128", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de95b52d9aabc979166aba81ccbe623aaf9c16a1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e60d7e2462bf57273563c4e00dbfa79ee973b9e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50130.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50130.json index bb152af4584..e543add73d7 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50130.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50130.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50130", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.810", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:48.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,96 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: fbtft: core: establecer smem_len antes de la llamada a fb_deferred_io_init. La funci\u00f3n fbtft_framebuffer_alloc() llama a fb_deferred_io_init() antes de inicializar info->fix.smem_len. La funci\u00f3n framebuffer_alloc() la establece a cero. Esto activar\u00e1 un WARN_ON() al inicio de fb_deferred_io_init() y la funci\u00f3n no realizar\u00e1 ninguna acci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.3", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "7A271EA6-471F-4DDD-955D-AA1DB01A48A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4178bfa3fc9de556dfe248a6eabe29280f0ffda5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5185c319e8ea67657e0d3edd520a7276516c506a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ae6abe240306f878557d6eadd950a2e2561f59f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/81e878887ff82a7dd42f22951391069a5d520627", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50131.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50131.json index 5b8a5187374..9abe069683b 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50131.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50131.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50131", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:42.920", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:41.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: mcp2221: evitar un desbordamiento de b\u00fafer en mcp_smbus_write() Advertencia de Smatch: drivers/hid/hid-mcp2221.c:388 Error de mcp_smbus_write(): __memcpy() '&mcp->txbuf[5]' demasiado peque\u00f1o (59 frente a 255) drivers/hid/hid-mcp2221.c:388 Error de mcp_smbus_write(): __memcpy() 'buf' demasiado peque\u00f1o (34 frente a 255) La variable 'len' puede tomar un valor entre 0 y 255, ya que puede provenir de data->block[0] y son datos de usuario. Por lo tanto, agregue una comprobaci\u00f3n de l\u00edmite para evitar un desbordamiento de b\u00fafer en memcpy()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "674AABE4-BC3E-4530-9717-5DFE7AB70A3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3c0f8a59f2cc8841ee6653399a77f4f3e6e9a270", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62ac2473553a00229e67bdf3cb023b62cf7f5a9a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6402116a7b5ec80fa40fd145a80c813019cd555f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66c8e816f2f2ca4a61b406503bd10bad1b35f72f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91443c669d280937968f0aa4edefa741cfe35314", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50132.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50132.json index 999e44bed0e..caa3fa99efe 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50132.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50132.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50132", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.030", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:32.377", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: cdns3: cambio de la asignaci\u00f3n de 'priv_ep' en cdns3_gadget_ep_dequeue() y cdns3_gadget_ep_enable(). Si 'ep' es nulo, el resultado de ep_to_cdns3_ep(ep) es un puntero no v\u00e1lido y su desreferencia con priv_ep->cdns3_dev puede causar p\u00e1nico. Encontrado por el Centro de Verificaci\u00f3n de Linux (linuxtesting.org) con SVACE." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "7693EE4A-D4B7-4C70-A72D-7B976F944D76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7af83bb516d7aa4f96835288e4aeda21d7aa2a17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bfa0201468587072454dba7933e4a4a7be44467a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c3ffc9c4ca44bfe9562166793d133e1fb0630ea6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d342203df9f2d0851b4acd9ed577d73d10eade77", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eb82c0382285ee17a9966aaab27b8becb08eb1ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50133.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50133.json index 2efe87e1f1c..8d69ce67987 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50133.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50133.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50133", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.140", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:08:30.600", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: xhci_plat_remove: evitar la desreferencia NULL Desde el commit 4736ebd7fcaff1eb8481c140ba494962847d6e0a (\"usb: host: xhci-plat: omitir hcd compartido si el concentrador ra\u00edz no tiene puertos\") xhci->shared_hcd puede ser NULL, lo que provoca el siguiente error Oops al reiniciar: [ 710.124450] systemd-shutdown[1]: Reiniciando. [ 710.298861] xhci-hcd xhci-hcd.2.auto: eliminar, estado 4 [ 710.304217] usb usb3: desconexi\u00f3n USB, n\u00famero de dispositivo 1 [ 710.317441] xhci-hcd xhci-hcd.2.auto: bus USB 3 anulado [ 710.323280] xhci-hcd xhci-hcd.2.auto: eliminar, estado 1 [ 710.328401] usb usb2: desconexi\u00f3n USB, n\u00famero de dispositivo 1 [ 710.333515] usb 2-3: desconexi\u00f3n USB, n\u00famero de dispositivo 2 [ 710.467649] xhci-hcd xhci-hcd.2.auto: bus USB 2 anulado [ 710.475450] No se puede manejar el kernel NULL desreferencia de puntero en la direcci\u00f3n virtual 00000000000003b8 [ 710.484425] Informaci\u00f3n de aborto de memoria: [ 710.487265] ESR = 0x0000000096000004 [ 710.491060] EC = 0x25: DABT (EL actual), IL = 32 bits [ 710.496427] SET = 0, FnV = 0 [ 710.499525] EA = 0, S1PTW = 0 [ 710.502716] FSC = 0x04: fallo de traducci\u00f3n de nivel 0 [ 710.507648] Informaci\u00f3n de aborto de datos: [ 710.510577] ISV = 0, ISS = 0x00000004 [ 710.514462] CM = 0, WnR = 0 [ 710.517480] usuario pgtable: 4k p\u00e1ginas, VAs de 48 bits, pgdp=00000008b0050000 [ 710.523976] [00000000000003b8] pgd=0000000000000000, p4d=0000000000000000 [ 710.530961] Error interno: Oops: 96000004 [#1] PREEMPT SMP [ 710.536551] M\u00f3dulos vinculados: rfkill input_leds snd_soc_simple_card snd_soc_simple_card_utils snd_soc_nau8822 designware_i2s snd_soc_core dw_hdmi_ahb_audio snd_pcm_dmaengine arm_ccn panfrost ac97_bus gpu_sched snd_pcm at24 fuse configfs sdhci_of_dwcmshc sdhci_pltfm sdhci nvme led_class mmc_core nvme_core bt1_pvt polynomial tp_serio snd_seq_midi snd_seq_midi_event snd_seq snd_timer snd_rawmidi snd_seq_device snd soundcore efivarfs ipv6 [ 710.575286] CPU: 7 PID: 1 Comm: systemd-shutdow No contaminado 5.19.0-rc7-00043-gfd8619f4fd54 #1 [ 710.583822] Nombre del hardware: T-Platforms TF307-MB/BM1BM1-A, BIOS 5.6 07/06/2022 [ 710.590972] pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 710.597949] pc : usb_remove_hcd+0x34/0x1e4 [ 710.602067] lr : xhci_plat_remove+0x74/0x140 [ 710.606351] sp : ffff800009f3b7c0 [ 710.609674] x29: ffff800009f3b7c0 x28: ffff000800960040 x27: 0000000000000000 [ 710.616833] x26: ffff800008dc22a0 x25: 0000000000000000 x24: 0000000000000000 [ 710.623992] x23: 0000000000000000 x22: ffff000805465810 x21: ffff000805465800 [ 710.631149] x20: ffff000800f80000 x19: 0000000000000000 x18: ffffffffffffffff [ 710.638307] x17: ffff000805096000 x16: ffff00080633b800 x15: ffff000806537a1c [ 710.645465] x14: 000000000000001 x13: 0000000000000000 x12: ffff00080378d6f0 [ 710.652621] x11: ffff00080041a900 x10: ffff800009b204e8 x9 : ffff8000088abaa4 [ 710.659779] x8 : ffff000800960040 x7 : ffff800009409000 x6 : 0000000000000001 [ 710.666936] x5 : ffff800009241000 x4 : ffff800009241440 x3 : 0000000000000000 [ 710.674094] x2 : ffff000800960040 x1 : ffff000800960040 x0 : 0000000000000000 [ 710.681251] Llamada seguimiento: [ 710.683704] usb_remove_hcd+0x34/0x1e4 [ 710.687467] xhci_plat_remove+0x74/0x140 [ 710.691400] platform_remove+0x34/0x70 [ 710.695165] device_remove+0x54/0x90 [ 710.698753] device_release_driver_internal+0x200/0x270 [ 710.703992] device_release_driver+0x24/0x30 [ 710.708273] bus_remove_device+0xe0/0x16c [ 710.712293] device_del+0x178/0x390 [ 710.715797] platform_device_del.part.0+0x24/0x90 [ 710.720514] platform_device_unregister+0x30/0x50 [ 710.725232] dwc3_host_exit+0x20/0x30 [ 710.728907] dwc3_remove+0x174/0x1b0 [ 710.732494] platform_remove+0x34/0x70 [ 710.736254] device_remove+0x54/0x90 [ 710.739840] device_release_driver_internal+0x200/0x270 [ 710.745078] device_release_driver+0x24/0x30 [ 710.749359] bus_remove_device+0xe0/0x16c [ 710.753380] device_del+0x178/0x390 [ 710.756881] platform_device_del.part ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/371a8af4f26e06b4d51d893b4436f520b48d07fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7de14d74d6551f0d097430f9893ce82ad17e5b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50134.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50134.json index 6f38a02264d..073cf1b4404 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50134.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50134.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50134", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.263", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:08:19.523", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/hfi1: Se corrige una posible fuga de memoria en setup_base_ctxt(). setup_base_ctxt() asigna un fragmento de memoria para uctxt->groups con hfi1_alloc_ctxt_rcv_groups(). Cuando init_user_ctxt() falla, uctxt->groups no se libera, lo que provoca una fuga de memoria. Deber\u00edamos liberar uctxt->groups con hfi1_free_ctxt_rcv_groups() cuando init_user_ctxt() falla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "0E9187D3-7E1D-4FE6-89BD-D8F8C04C15F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1750be1e9f18787cf717c24dbc5fa029fc372a22", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2f90813f1c21c3d780585390af961bd17c8515ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/90ef48a718f88935d4af53d7dadd1ceafe103ce6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a85c7dd1edadcdeca24e603a6618153a3bcc81ca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9055dfe437efae77e28e57205437c878a03ccb7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa2a1df3a2c85f855af7d54466ac10bd48645d63", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e25b828553aecb3185a8d8d0c4f9b4e133fb5db6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fc4de8009fd6c2ca51986c6757efa964040e7d02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50135.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50135.json index 2428e81d52e..3a84a443fe1 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50135.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50135.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50135", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.387", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:08:10.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/rxe: Correcci\u00f3n BUG: KASAN: null-ptr-deref en rxe_qp_do_cleanup La funci\u00f3n rxe_create_qp llama a rxe_qp_from_init. Si ocurre alg\u00fan error, el controlador de errores de la funci\u00f3n rxe_qp_from_init establecer\u00e1 tanto scq como rcq en NULL. Luego, rxe_create_qp llama a rxe_put para manejar qp. Al final, rxe_put llama a rxe_qp_do_cleanup. rxe_qp_do_cleanup accede directamente a scq y rcq antes de verificarlos. Esto causar\u00e1 un error null-ptr-deref. El gr\u00e1fico de llamadas es el siguiente: rxe_create_qp { ... rxe_qp_from_init { ... err1: ... qp->rcq = NULL; <---rcq se establece en NULL qp->scq = NULL; <---scq se establece en NULL ... } qp_init: rxe_put{ ... rxe_qp_do_cleanup { ... atomic_dec(&qp->scq->num_wq); <--- se accede a scq ... atomic_dec(&qp->rcq->num_wq); <--- se accede a rcq } }" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/37da51efe6eaa0560f46803c8c436a48a2084da7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8598b9d0a364c1663c96fc0fab9df0d36c809aea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50136.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50136.json index 5cf241da362..0def1edfde7 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50136.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50136.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50136", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.493", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:08:02.810", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/siw: Se corrige el evento IW_CM_EVENT_CONNECT_REPLY reportado duplicado. Si siw_recv_mpa_rr devuelve -EAGAIN, significa que la respuesta de MPA no se ha recibido completamente y, en este caso, no deber\u00eda reportar IW_CM_EVENT_CONNECT_REPLY. Esto podr\u00eda activar un seguimiento de llamadas en iw_cm. Una forma sencilla de activarlo: servidor: ib_send_lat cliente: ib_send_lat -R . El seguimiento de llamadas se ve as\u00ed: kernel BUG en drivers/infiniband/core/iwcm.c:894! C\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP NOPTI <...> Cola de trabajo: iw_cm_wq cm_work_handler [iw_cm] Rastreo de llamadas: cm_work_handler+0x1dd/0x370 [iw_cm] process_one_work+0x1e2/0x3b0 worker_thread+0x49/0x2e0 ? rescuer_thread+0x370/0x370 kthread+0xe5/0x110 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "DABFD37F-7E0C-41E0-9811-29A4EF9C11FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0066246d2d7e2619f3ecf3cf07333c59e6e7d84d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/11edf0bba15ea9df49478affec7974f351bb2f6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1434de50a5d9dab91c8ce031bc23b3e2178379c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3056fc6c32e613b760422b94c7617ac9a24a4721", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ade92ddaf2347fb34298c02080caaa3cdd7c27b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f6e26e1a5f600b760dc32135d3fac846eabe09e7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50137.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50137.json index fbfcd73829c..20a989145c2 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50137.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50137.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50137", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.623", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:07:53.420", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/irdma: Se corrige una ventana para el Use-After-Free. Durante un CQ de destrucci\u00f3n, una interrupci\u00f3n puede provocar el procesamiento de un CQE despu\u00e9s de que irdma_cq_free_rsrc() libere recursos CQ. Se soluciona este problema trasladando la llamada a irdma_cq_free_rsrc() despu\u00e9s de irdma_sc_cleanup_ceqes(), que se ejecuta bajo cq_lock." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "E529C2C2-B07B-4425-919F-8EC0AB91FA47" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0abf2eef80295923b819ce89ff9edc1fe61be17c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/350ac793a03c8a30a3f2b27fc282cd1c67070763", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ecef7890b3aea78c8bbb501a4b5b8134367b821", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/92520864ef9f912f38b403d172a0ded020683d55", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-322xx/CVE-2023-32246.json b/CVE-2023/CVE-2023-322xx/CVE-2023-32246.json index 79fd00fbaa5..db3f3b7b088 100644 --- a/CVE-2023/CVE-2023-322xx/CVE-2023-32246.json +++ b/CVE-2023/CVE-2023-322xx/CVE-2023-32246.json @@ -2,8 +2,8 @@ "id": "CVE-2023-32246", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:26.393", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:10:46.287", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: el problema de la llamada a rcu_barrier() en ksmbd_server_exit() desencadena el error al acelerarse entre el cierre de una conexi\u00f3n y rmmod. En ksmbd, rcu_barrier() no se llama al descargar el m\u00f3dulo, por lo que nada impide que ksmbd se descargue mientras a\u00fan tenga devoluciones de llamada de RCU pendientes. Esto provoca la ejecuci\u00f3n involuntaria de c\u00f3digo del kernel localmente y se utiliza para burlar protecciones como el bloqueo del kernel." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.111", + "matchCriteriaId": "73004160-CAB6-4206-935F-05BE8E8F3904" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.28", + "matchCriteriaId": "08F855F4-7188-4EE1-BD79-D4B6C7E2EF54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.15", + "matchCriteriaId": "3844A90B-940D-46C3-8D7B-9FF63F1AFC2F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.3.2", + "matchCriteriaId": "38F6F330-91A0-4675-8B90-6F950471A7CC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5a7090ccc242ab009ee7769e9d7fad6644dbe9bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b80422474ffe44cb5e813cd6da1f1c6bc50fd9d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c053e389db0d892e2ff5a60ec5e533b976503795", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d4174505016a3b2996eb7ff1530dcabbf15d47b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eb307d09fe15844fdaebeb8cc8c9b9e925430aa5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-322xx/CVE-2023-32249.json b/CVE-2023/CVE-2023-322xx/CVE-2023-32249.json index 6d324a50c76..07787381cc7 100644 --- a/CVE-2023/CVE-2023-322xx/CVE-2023-32249.json +++ b/CVE-2023/CVE-2023-322xx/CVE-2023-32249.json @@ -2,8 +2,8 @@ "id": "CVE-2023-32249", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.123", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:57:18.937", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: no permitir usuarios invitados en multicanal. Este parche devuelve STATUS_NOT_SUPPORTED si la sesi\u00f3n de enlace es de invitado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.112", + "matchCriteriaId": "752E77B1-A511-429D-A6FD-B3735478239B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.28", + "matchCriteriaId": "08F855F4-7188-4EE1-BD79-D4B6C7E2EF54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.15", + "matchCriteriaId": "3844A90B-940D-46C3-8D7B-9FF63F1AFC2F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.3.2", + "matchCriteriaId": "38F6F330-91A0-4675-8B90-6F950471A7CC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/088131b7b01099720a528a72005ff17868705d40", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1f0490586544455e5be698be2e6c30077b4ec461", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a98e859c4673013385a54084e0cd865695ca072", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed76d3a8910be06cd4e4ba63bf6075bf903945a1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-38xx/CVE-2023-3865.json b/CVE-2023/CVE-2023-38xx/CVE-2023-3865.json index e5da32c0409..ea81a55b5f0 100644 --- a/CVE-2023/CVE-2023-38xx/CVE-2023-3865.json +++ b/CVE-2023/CVE-2023-38xx/CVE-2023-3865.json @@ -2,8 +2,8 @@ "id": "CVE-2023-3865", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.250", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:57:24.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,138 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige una lectura fuera de los l\u00edmite en smb2_write. ksmbd_smb2_check_message no valida hdr->NextCommand. Si ->NextCommand es mayor que Offset + Length de la escritura smb2, se permite una longitud de escritura smb2 sobredimensionada. Esto provoca una lectura fuera de los l\u00edmite en smb2_write." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "D80EAC0B-0800-4E58-A184-64A1FA7F7EB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.36", + "matchCriteriaId": "989E8FC0-FE5E-4486-9391-FE0521B2326E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "9E91549C-3A35-4895-992D-EAD48CAD6C38" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", + "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*", + "matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*", + "matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*", + "matchCriteriaId": "89CC80C6-F1EE-4AC7-BD21-DB3217BADE87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*", + "matchCriteriaId": "41EACEA1-FB69-4AF2-BC52-D39489858D42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*", + "matchCriteriaId": "9E1C36BE-F9D8-40B6-8281-5B8F9B42322D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*", + "matchCriteriaId": "1D6CAA59-F0EF-4E0B-8C23-EC9535008572" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-38xx/CVE-2023-3866.json b/CVE-2023/CVE-2023-38xx/CVE-2023-3866.json index 3de82f93aa5..ee15eb01346 100644 --- a/CVE-2023/CVE-2023-38xx/CVE-2023-3866.json +++ b/CVE-2023/CVE-2023-38xx/CVE-2023-3866.json @@ -2,8 +2,8 @@ "id": "CVE-2023-3866", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.383", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:58:12.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,138 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: valida el ID de sesi\u00f3n y el ID de \u00e1rbol en la solicitud compuesta. Este parche valida el ID de sesi\u00f3n y el ID de \u00e1rbol en la solicitud compuesta. Si la primera operaci\u00f3n en la solicitud compuesta es una solicitud ECHO SMB2, ksmbd omite la validaci\u00f3n de sesi\u00f3n y \u00e1rbol. Por lo tanto, work->sess y work->tcon podr\u00edan ser NULL. Si la segunda solicitud en la solicitud compuesta accede a work->sess o tcon, se produce un error de desreferenciaci\u00f3n de puntero NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "D80EAC0B-0800-4E58-A184-64A1FA7F7EB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.36", + "matchCriteriaId": "989E8FC0-FE5E-4486-9391-FE0521B2326E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "9E91549C-3A35-4895-992D-EAD48CAD6C38" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", + "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*", + "matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*", + "matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*", + "matchCriteriaId": "89CC80C6-F1EE-4AC7-BD21-DB3217BADE87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*", + "matchCriteriaId": "41EACEA1-FB69-4AF2-BC52-D39489858D42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*", + "matchCriteriaId": "9E1C36BE-F9D8-40B6-8281-5B8F9B42322D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*", + "matchCriteriaId": "1D6CAA59-F0EF-4E0B-8C23-EC9535008572" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5005bcb4219156f1bf7587b185080ec1da08518e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/854156d12caa9d36de1cf5f084591c7686cc8a9d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d1066c1b3663401cd23c0d6e60cdae750ce00c0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eb947403518ea3d93f6d89264bb1f5416bb0c7d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-38xx/CVE-2023-3867.json b/CVE-2023/CVE-2023-38xx/CVE-2023-3867.json index 56e38d70c1b..9dba7b1bbb4 100644 --- a/CVE-2023/CVE-2023-38xx/CVE-2023-3867.json +++ b/CVE-2023/CVE-2023-38xx/CVE-2023-3867.json @@ -2,8 +2,8 @@ "id": "CVE-2023-3867", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.510", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:58:23.887", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige una lectura fuera de los l\u00edmites en smb2_sess_setup. ksmbd no considera el caso en el que la configuraci\u00f3n de la sesi\u00f3n smb2 se encuentra en una solicitud compuesta. Si este es el segundo payload de la solicitud compuesta, se produce un problema de lectura fuera de los l\u00edmites al procesar el primer payload en smb2_sess_setup()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.145", + "matchCriteriaId": "6943BD04-722B-4B0F-810D-A5086EA877BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.40", + "matchCriteriaId": "69315BCC-36D2-45CD-84F8-381EDF8E38F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.5", + "matchCriteriaId": "923F6AEA-C2EF-4B08-B038-69A18F3D41F8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ba03cecb12ac7ac9e0170e251543c56832d9959", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/676392184785ace61e939831e7ca44a03d438c3b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef572ffa8eb44111eed2925fbb2adca78bdcbf61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-41xx/CVE-2023-4130.json b/CVE-2023/CVE-2023-41xx/CVE-2023-4130.json index 5e10a218503..cdf5c936877 100644 --- a/CVE-2023/CVE-2023-41xx/CVE-2023-4130.json +++ b/CVE-2023/CVE-2023-41xx/CVE-2023-4130.json @@ -2,8 +2,8 @@ "id": "CVE-2023-4130", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.640", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:58:43.357", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: corrige la siguiente validaci\u00f3n de longitud incorrecta del b\u00fafer ea en smb2_set_ea() Hay m\u00faltiples b\u00faferes smb2_ea_info en la solicitud FILE_FULL_EA_INFORMATION del cliente. ksmbd encuentra el siguiente smb2_ea_info usando ->NextEntryOffset del smb2_ea_info actual. ksmbd necesita validar la longitud del b\u00fafer antes de acceder al siguiente ea. ksmbd debe verificar la longitud del b\u00fafer usando buf_len, no la variable next. next es el desplazamiento de inicio del ea actual que se obtuvo del ea anterior." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.127", + "matchCriteriaId": "73A72E27-1F7D-4EF0-B826-78FD0D86735C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.46", + "matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.11", + "matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*", + "matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4bf629262f9118ee91b1c3a518ebf2b3bcb22180", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79ed288cef201f1f212dfb934bcaac75572fb8f6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aeb974907642be095e38ecb1a400ca583958b2b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f339d76a3a972601d0738b881b099d49ebbdc3a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-45xx/CVE-2023-4515.json b/CVE-2023/CVE-2023-45xx/CVE-2023-4515.json index c76fd53f8c8..5bb6c0c5ac5 100644 --- a/CVE-2023/CVE-2023-45xx/CVE-2023-4515.json +++ b/CVE-2023/CVE-2023-45xx/CVE-2023-4515.json @@ -2,8 +2,8 @@ "id": "CVE-2023-4515", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T14:15:27.780", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:59:02.723", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,140 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: validar el tama\u00f1o de la solicitud de comando. En el commit 2b9b8f3b68ed (\"ksmbd: validar el tama\u00f1o del payload del comando\"), excepto para el comando SMB2_OPLOCK_BREAK_HE, no se comprueba el tama\u00f1o de la solicitud de otros comandos, lo cual no es lo esperado. Se puede solucionar a\u00f1adiendo la comprobaci\u00f3n del tama\u00f1o de la solicitud de otros comandos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.121", + "versionEndExcluding": "5.15.127", + "matchCriteriaId": "D2F3853E-A274-49CF-9E46-D1C5D1514BED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.36", + "versionEndExcluding": "6.1.46", + "matchCriteriaId": "4DEA4DD6-B61A-4D61-B9EE-E145A420D04F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3.10", + "versionEndExcluding": "6.4", + "matchCriteriaId": "3E002324-2B5E-4373-A29E-1D5D0FC97F6F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4.1", + "versionEndExcluding": "6.4.11", + "matchCriteriaId": "1C678B72-1C6D-44C9-82A5-F7A6B203FD9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*", + "matchCriteriaId": "DE0B0BF6-0EEF-4FAD-927D-7A0DD77BEE75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*", + "matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-73xx/CVE-2023-7328.json b/CVE-2023/CVE-2023-73xx/CVE-2023-7328.json index cd5f6917e26..22e0bd0096b 100644 --- a/CVE-2023/CVE-2023-73xx/CVE-2023-7328.json +++ b/CVE-2023/CVE-2023-73xx/CVE-2023-7328.json @@ -2,7 +2,7 @@ "id": "CVE-2023-7328", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-14T23:15:43.640", - "lastModified": "2025-11-18T14:06:55.963", + "lastModified": "2025-11-18T17:15:57.660", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -89,6 +89,14 @@ { "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/51460", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-251xx/CVE-2024-25189.json b/CVE-2024/CVE-2024-251xx/CVE-2024-25189.json index e4878e8bd48..fec347898a6 100644 --- a/CVE-2024/CVE-2024-251xx/CVE-2024-25189.json +++ b/CVE-2024/CVE-2024-251xx/CVE-2024-25189.json @@ -2,8 +2,8 @@ "id": "CVE-2024-25189", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-08T17:15:10.960", - "lastModified": "2024-11-21T09:00:24.657", - "vulnStatus": "Modified", + "lastModified": "2025-11-18T17:06:06.357", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -90,8 +90,23 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:bencollins:jwt_c_library:1.15.3:*:*:*:*:*:*:*", - "matchCriteriaId": "110D1B50-016F-4346-9FA9-506FFE08D37C" + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:libjwt:libjwt:1.15.3:*:*:*:*:*:*:*", + "matchCriteriaId": "B0FC5712-C689-40C7-AB9A-F594BCF37585" } ] } @@ -109,7 +124,11 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00009.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://github.com/P3ngu1nW/CVE_Request/blob/main/benmcollins%3Alibjwt.md", @@ -121,7 +140,11 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00009.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-321xx/CVE-2024-32122.json b/CVE-2024/CVE-2024-321xx/CVE-2024-32122.json index 0e46856d082..097448b4e94 100644 --- a/CVE-2024/CVE-2024-321xx/CVE-2024-32122.json +++ b/CVE-2024/CVE-2024-321xx/CVE-2024-32122.json @@ -2,13 +2,13 @@ "id": "CVE-2024-32122", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-04-08T14:15:31.040", - "lastModified": "2025-07-18T14:23:53.260", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:15:57.847", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1 allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server." + "value": "A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "psirt@fortinet.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2024/CVE-2024-35xx/CVE-2024-3566.json b/CVE-2024/CVE-2024-35xx/CVE-2024-3566.json index 9175af6e5de..d720ea6b5e3 100644 --- a/CVE-2024/CVE-2024-35xx/CVE-2024-3566.json +++ b/CVE-2024/CVE-2024-35xx/CVE-2024-3566.json @@ -2,8 +2,8 @@ "id": "CVE-2024-3566", "sourceIdentifier": "cret@cert.org", "published": "2024-04-10T16:15:16.083", - "lastModified": "2025-06-25T20:24:12.743", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T18:16:05.353", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -185,6 +185,10 @@ "Third Party Advisory" ] }, + { + "url": "https://github.com/nu11secur1ty/Windows11Exploits/tree/main/2024/CVE-2024-3566", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, { "url": "https://kb.cert.org/vuls/id/123335", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12760.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12760.json new file mode 100644 index 00000000000..fe2dd9e3f24 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12760.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-12760", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:58.383", + "lastModified": "2025-11-18T17:15:58.383", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-contrib-2025-115", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12761.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12761.json new file mode 100644 index 00000000000..60f8c76cdb8 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12761.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-12761", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:58.570", + "lastModified": "2025-11-18T17:15:58.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-contrib-2025-116", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json index 117f2773af3..7291291c33d 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12864", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-11-10T03:15:42.017", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:04:46.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:edetw:u-office_force:*:*:*:*:*:*:*:*", + "versionEndExcluding": "29.50", + "matchCriteriaId": "FC377CFD-3CA3-4AC3-AED3-6C6636A6DD46" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/en/cp-139-10489-a5a6d-2.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-10488-2df22-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json index 06df9bb5c6e..f619614c288 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12865", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-11-10T03:15:42.280", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:04:27.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:edetw:u-office_force:*:*:*:*:*:*:*:*", + "versionEndExcluding": "29.50", + "matchCriteriaId": "FC377CFD-3CA3-4AC3-AED3-6C6636A6DD46" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/en/cp-139-10489-a5a6d-2.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-10488-2df22-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json index fc8fb104e50..2fccd46bba7 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12871", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-11-12T08:15:41.733", - "lastModified": "2025-11-12T17:15:36.847", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-18T18:28:18.553", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,18 +91,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aenrich:a\\+hrd:*:*:*:*:*:*:*:*", + "versionEndIncluding": "7.5", + "matchCriteriaId": "AFE95A54-8084-4126-A1B7-9B89828066C0" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.chtsecurity.com/news/b97e8337-6b0c-43e8-8e8c-187b7c0e13c2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Press/Media Coverage", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json index 0a7bbc07511..731a4bb370e 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12926", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T03:15:42.653", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:03:27.043", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:farm_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "CADF7506-C817-4FA2-A728-C1BF2AD8034D" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/R178/cve/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331646", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331646", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.681506", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json index 00bc2713ee0..c638f7561b7 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12929", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T04:15:41.943", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:02:42.837", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,82 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oretnom23:survey_application_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BC838E1E-FAEC-4100-8364-41B7D342A010" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331649", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331649", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.681746", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json index 6adba4ac0da..2bf0e11ce72 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12930", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T04:15:42.127", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:01:49.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,84 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:food_ordering_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9745778F-3365-419F-952C-7088CF6E670C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/puppytgyh/-CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331650", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331650", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682185", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/puppytgyh/-CVE/issues/1", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json index f85dc06d97b..714f1b14880 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12931.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12931", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T05:15:43.513", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:57:22.283", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:food_ordering_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9745778F-3365-419F-952C-7088CF6E670C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/puppytgyh/-CVE/issues/5", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331651", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331651", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682234", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13080.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13080.json new file mode 100644 index 00000000000..bbb7da8c0f5 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13080.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-13080", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:58.813", + "lastModified": "2025-11-18T17:15:58.813", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-754" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-core-2025-005", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13081.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13081.json new file mode 100644 index 00000000000..175edafbbe5 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13081.json @@ -0,0 +1,66 @@ +{ + "id": "CVE-2025-13081", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:58.987", + "lastModified": "2025-11-18T18:16:06.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-915" + } + ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-core-2025-006", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13082.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13082.json new file mode 100644 index 00000000000..ff205568401 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13082.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-13082", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:59.163", + "lastModified": "2025-11-18T17:15:59.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-core-2025-007", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13083.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13083.json new file mode 100644 index 00000000000..a69c6a1af3b --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13083.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-13083", + "sourceIdentifier": "mlhess@drupal.org", + "published": "2025-11-18T17:15:59.313", + "lastModified": "2025-11-18T17:15:59.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "mlhess@drupal.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-525" + } + ] + } + ], + "references": [ + { + "url": "https://www.drupal.org/sa-core-2025-008", + "source": "mlhess@drupal.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13303.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13303.json index 1650cb3a837..2903497cbb9 100644 --- a/CVE-2025/CVE-2025-133xx/CVE-2025-13303.json +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13303.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13303", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-17T22:15:45.220", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:15:59.490", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://vuldb.com/?submit.691792", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/labi1106/cve/issues/2", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13304.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13304.json index 9868e7bd6d7..4c5026fb23b 100644 --- a/CVE-2025/CVE-2025-133xx/CVE-2025-13304.json +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13304.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13304", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-17T23:15:48.357", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:15:59.707", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -156,6 +156,10 @@ { "url": "https://www.dlink.com/", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/LX-LX88/cve/issues/11", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13306.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13306.json index c93b553b3d1..13bad8a0d4b 100644 --- a/CVE-2025/CVE-2025-133xx/CVE-2025-13306.json +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13306.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13306", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-18T00:15:48.380", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:15:59.897", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -152,6 +152,10 @@ { "url": "https://www.dlink.com/", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/LX-LX88/cve/issues/15", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13325.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13325.json index a4790d897f3..16e352237dd 100644 --- a/CVE-2025/CVE-2025-133xx/CVE-2025-13325.json +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13325.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13325", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-18T00:15:48.823", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:16:00.190", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://vuldb.com/?submit.691929", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/chenxiyue-2006/CVE/issues/1", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2395.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2395.json index 5e058d3679f..be17fd68726 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2395.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2395.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2395", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-03-17T06:15:25.910", - "lastModified": "2025-03-17T06:15:25.910", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:46:29.060", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:edetw:u-office_force:*:*:*:*:*:*:*:*", + "versionEndExcluding": "28.0", + "matchCriteriaId": "CC2F81D9-17D8-4FE1-8048-D68364527CC5" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/en/cp-139-10012-d5bbc-2.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-10011-3de72-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2396.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2396.json index 329abb902f1..c0eb259ac3a 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2396.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2396.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2396", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-03-17T06:15:26.113", - "lastModified": "2025-03-17T06:15:26.113", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:45:59.737", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:edetw:u-office_force:*:*:*:*:*:*:*:*", + "versionEndExcluding": "28.0", + "matchCriteriaId": "CC2F81D9-17D8-4FE1-8048-D68364527CC5" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/en/cp-139-10014-69aa5-2.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-10013-0d371-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-249xx/CVE-2025-24990.json b/CVE-2025/CVE-2025-249xx/CVE-2025-24990.json index 9c987508b2e..f33cac438e9 100644 --- a/CVE-2025/CVE-2025-249xx/CVE-2025-24990.json +++ b/CVE-2025/CVE-2025-249xx/CVE-2025-24990.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24990", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:39.193", - "lastModified": "2025-11-17T19:16:18.790", - "vulnStatus": "Modified", + "lastModified": "2025-11-18T17:03:38.993", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -177,11 +177,18 @@ }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-24990-detection-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windows", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-24990-mitigation-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windows", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24990", diff --git a/CVE-2025/CVE-2025-302xx/CVE-2025-30225.json b/CVE-2025/CVE-2025-302xx/CVE-2025-30225.json index 809a8e30f20..7875841d5f3 100644 --- a/CVE-2025/CVE-2025-302xx/CVE-2025-30225.json +++ b/CVE-2025/CVE-2025-302xx/CVE-2025-30225.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30225", "sourceIdentifier": "security-advisories@github.com", "published": "2025-03-26T17:15:26.917", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:44:59.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,33 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "9.22.0", + "versionEndExcluding": "11.5.0", + "matchCriteriaId": "C7A4CEFC-E369-4300-A8D2-8996446C65C5" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/directus/directus/security/advisories/GHSA-j8xj-7jff-46mx", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-303xx/CVE-2025-30350.json b/CVE-2025/CVE-2025-303xx/CVE-2025-30350.json index e338a170d0d..4850972911b 100644 --- a/CVE-2025/CVE-2025-303xx/CVE-2025-30350.json +++ b/CVE-2025/CVE-2025-303xx/CVE-2025-30350.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30350", "sourceIdentifier": "security-advisories@github.com", "published": "2025-03-26T17:15:27.093", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:44:38.713", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,33 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "9.22.0", + "versionEndExcluding": "11.5.0", + "matchCriteriaId": "C7A4CEFC-E369-4300-A8D2-8996446C65C5" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/directus/directus/security/advisories/GHSA-rv78-qqrq-73m5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33183.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33183.json new file mode 100644 index 00000000000..34e036a5d9f --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33183.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33183", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-18T17:16:00.500", + "lastModified": "2025-11-18T17:16:00.500", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33183", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5725", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33183", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33184.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33184.json new file mode 100644 index 00000000000..bea52d48632 --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33184.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33184", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-18T17:16:00.727", + "lastModified": "2025-11-18T17:16:00.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33184", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5725", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33184", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-343xx/CVE-2025-34324.json b/CVE-2025/CVE-2025-343xx/CVE-2025-34324.json new file mode 100644 index 00000000000..6ea9dcc3f5d --- /dev/null +++ b/CVE-2025/CVE-2025-343xx/CVE-2025-34324.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-34324", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-11-18T17:16:00.923", + "lastModified": "2025-11-18T17:16:00.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate validation can be disabled when a proxy is configured, allowing an attacker who can intercept network traffic to supply a malicious update manifest and corresponding package with a matching hash. This can cause the client to download and install a tampered update, resulting in arbitrary code execution with the privileges of the GoSign Desktop user on Windows and macOS, or with elevated privileges on some Linux deployments. A local attacker who can modify proxy settings may also abuse this behavior to escalate privileges by forcing installation of a crafted update." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-347" + } + ] + } + ], + "references": [ + { + "url": "https://infocert.digital/consumer/gosign-suite/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.ush.it/2025/11/14/multiple-vulnerabilities-gosign-desktop-remote-code-execution/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.ush.it/2025/11/14/vulnerabilita-multiple-gosign-desktop-esecuzione-remota-codice-arbitrario/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/gosign-desktop-insecure-update-mechanism-rce", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38196.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38196.json index fd5983144c5..cb43b361034 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38196.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38196.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38196", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-04T14:15:26.787", - "lastModified": "2025-07-08T16:18:53.607", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:24:01.503", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,85 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: io_uring/rsrc: validar el recuento de b\u00fafer con desplazamiento para la clonaci\u00f3n syzbot informa que puede activar un WARN_ON() para un intento de kmalloc() que es demasiado grande: CPU: 0 PID: 6488 at mm/slub.c:5024 __kvmalloc_node_noprof+0x520/0x640 mm/slub.c:5024 Modules linked in: CPU: 0 UID: 0 PID: 6488 Comm: syz-executor312 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __kvmalloc_node_noprof+0x520/0x640 mm/slub.c:5024 lr : __do_kmalloc_node mm/slub.c:-1 [inline] lr : __kvmalloc_node_noprof+0x3b4/0x640 mm/slub.c:5012 sp : ffff80009cfd7a90 x29: ffff80009cfd7ac0 x28: ffff0000dd52a120 x27: 0000000000412dc0 x26: 0000000000000178 x25: ffff7000139faf70 x24: 0000000000000000 x23: ffff800082f4cea8 x22: 00000000ffffffff x21: 000000010cd004a8 x20: ffff0000d75816c0 x19: ffff0000dd52a000 x18: 00000000ffffffff x17: ffff800092f39000 x16: ffff80008adbe9e4 x15: 0000000000000005 x14: 1ffff000139faf1c x13: 0000000000000000 x12: 0000000000000000 x11: ffff7000139faf21 x10: 0000000000000003 x9 : ffff80008f27b938 x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 00000000ffffffff x4 : 0000000000400dc0 x3 : 0000000200000000 x2 : 000000010cd004a8 x1 : ffff80008b3ebc40 x0 : 0000000000000001 Call trace: __kvmalloc_node_noprof+0x520/0x640 mm/slub.c:5024 (P) kvmalloc_array_node_noprof include/linux/slab.h:1065 [inline] io_rsrc_data_alloc io_uring/rsrc.c:206 [inline] io_clone_buffers io_uring/rsrc.c:1178 [inline] io_register_clone_buffers+0x484/0xa14 io_uring/rsrc.c:1287 __io_uring_register io_uring/register.c:815 [inline] __do_sys_io_uring_register io_uring/register.c:926 [inline] __se_sys_io_uring_register io_uring/register.c:903 [inline] __arm64_sys_io_uring_register+0x42c/0xea8 io_uring/register.c:903 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Esto se debe a que offset + buffer_count es demasiado grande. El c\u00f3digo de registro solo verifica el recuento total de b\u00faferes, pero dado que la indexaci\u00f3n es una matriz, tambi\u00e9n deber\u00eda verificar offset + count. Esto tampoco puede superar IORING_MAX_REG_BUFFERS, ya que no es posible acceder a b\u00faferes m\u00e1s all\u00e1 de ese l\u00edmite. Registrar una tabla tan grande no presenta ning\u00fan problema, salvo que no tiene sentido registrar b\u00faferes inaccesibles y que puede activar la advertencia de kmalloc() por intentar una asignaci\u00f3n demasiado grande." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.4", + "matchCriteriaId": "DFD174C5-1AA2-4671-BDDC-1A9FCC753655" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e23ac818f3afb16660b0ba384875d56a7013879", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1d27f11bf02b38c431e49a17dee5c10a2b4c2e28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38199.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38199.json index 80bc79487fa..f61d9c52009 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38199.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38199.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38199", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-04T14:15:27.707", - "lastModified": "2025-07-08T16:18:53.607", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:17:24.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: Se solucion\u00f3 una fuga de memoria debido a la asignaci\u00f3n m\u00faltiple de rx_stats. rx_stats para cada arsta se asigna al a\u00f1adir una estaci\u00f3n. arsta->rx_stats se liberar\u00e1 al eliminar una estaci\u00f3n. Se producen asignaciones redundantes cuando se a\u00f1ade la misma estaci\u00f3n varias veces. Esto provoca que ath12k_mac_station_add() se invoque varias veces y que rx_stats se asigne cada vez. Como resultado, se producen fugas de memoria. Evite las asignaciones m\u00faltiples de rx_stats cuando ath12k_mac_station_add() se invoque repetidamente comprobando si rx_stats ya est\u00e1 asignado antes de volver a asignarlo. Asigne arsta->rx_stats si arsta->rx_stats es NULL, respectivamente. Probado en: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1 Probado en: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.15.4", + "matchCriteriaId": "F9EA275A-88DB-4367-B4D3-1D3686859AAB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/232f962ae5fca98912a719e64b4964a5aec7c99b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c426497fa2055c8005196922e7d29c41d7e0948a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38201.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38201.json index af8f30698bc..b5cd53e438e 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38201.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38201.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38201", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-04T14:15:28.000", - "lastModified": "2025-07-08T16:18:53.607", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:09:29.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nft_set_pipapo: fijar el tama\u00f1o m\u00e1ximo del contenedor de mapas a INT_MAX. De lo contrario, es posible que se active WARN_ON_ONCE en __kvmalloc_node_noprof() al redimensionar la tabla hash porque __GFP_NOWARN no est\u00e1 configurado. Similar a: b541ba7d1f5a (\"netfilter: conntrack: fijar el tama\u00f1o m\u00e1ximo de la tabla hash a INT_MAX\")" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "6.12.35", + "matchCriteriaId": "050CE774-A0F0-44CD-A2C7-CE9563BFFA43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.4", + "matchCriteriaId": "DFD174C5-1AA2-4671-BDDC-1A9FCC753655" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0ab3de047808f375a36cd345225572eb3366f3c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b85e3367a5716ed3662a4fe266525190d2af76df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d2768016f091f8a5264076b433fd7c3fabb6eb97", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38205.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38205.json index 9022b9e0980..2c47dce67a4 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38205.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38205.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38205", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-04T14:15:28.540", - "lastModified": "2025-07-08T16:18:53.607", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:08:11.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Evite la divisi\u00f3n por cero inicializando el paso ficticio en 1 [Por qu\u00e9] Si los valores ficticios en `populate_dummy_dml_surface_cfg()` no se actualizan, pueden provocar una divisi\u00f3n por cero en los llamadores posteriores como CalculateVMAndRowBytes() [C\u00f3mo] Inicialice el valor ficticio en un valor para evitar la divisi\u00f3n por cero." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-369" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.15.4", + "matchCriteriaId": "9070DE87-9D2B-479F-AD76-596EB6C842D8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7e40f64896e8e3dca471e287672db5ace12ea0be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8044f981b2cf8c32fe1bd5d1fc991552cdf7ffe0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38207.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38207.json index 34eb30a3561..d26ce0d7bd3 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38207.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38207.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38207", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-04T14:15:28.823", - "lastModified": "2025-07-08T16:18:53.607", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:07:12.037", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm: se corrige la sobrescritura del archivo uprobe al expandir vma. Serie de parches \"Corregir la sobrescritura del archivo uprobe al expandir vma\". Este parche (de 4): Se detect\u00f3 una alerta de error generada por Syzkaller: Error: Estado incorrecto del contador RSS mm:00000000b4a60fca tipo:MM_ANONPAGES val:1. Se puede reproducir con los siguientes pasos: 1. Registrar uprobe en el archivo con desplazamiento cero. 2. Asignar el archivo con mmap en el desplazamiento cero: addr1 = mmap(NULL, 2 * 4096, PROT_NONE, MAP_PRIVATE, fd, 0); 3. Asignar con mremap parte de vma1 al nuevo vma2: addr2 = mremap(addr1, 4096, 2 * 4096, MREMAP_MAYMOVE); 4. mremap de vuelta a la direcci\u00f3n original 1: mremap(addr2, 4096, 4096, MREMAP_MAYMOVE | MREMAP_FIXED, addr1); En el paso 3, el rango vma1 [addr1, addr1 + 4096] se reasignar\u00e1 a la nueva vma2 con rango [addr2, addr2 + 8192] y se reasignar\u00e1 la p\u00e1gina uprobe anon de vma1 a vma2, luego desasignar\u00e1 el rango vma1 [addr1, addr1 + 4096]. En el paso 4, el rango vma2 [addr2, addr2 + 4096] se reasignar\u00e1 de nuevo al rango addr [addr1, addr1 + 4096]. Dado que el rango de direcciones [addr1 + 4096, addr1 + 8192] a\u00fan asigna el archivo, se requerir\u00e1 vma_merge_new_range para expandir el rango y luego ejecutar uprobe_mmap en vma_complete. Dado que el desplazamiento de la p\u00e1gina de la vma fusionada tambi\u00e9n tiene desplazamiento cero, se instalar\u00e1 uprobe anon page en la vma fusionada. Sin embargo, el siguiente paso `move_page_tables`, que usa `set_pte_at` para reasignar la pte de uprobe vma2 a la vma fusionada, sobrescribir\u00e1 la nueva pte de uprobe en la vma fusionada y la dejar\u00e1 hu\u00e9rfana. Dado que la pte de uprobe se reasignar\u00e1 a la vma fusionada, podemos eliminar uprobe_mmap innecesario al fusionar la vma. Este problema se encontr\u00f3 por primera vez en linux-6.6.y y tambi\u00e9n existe en la comunidad syzkaller: https://lore.kernel.org/all/000000000000ada39605a5e71711@google.com/T/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "6.15.4", + "matchCriteriaId": "70F17898-FFE8-46CE-936C-A820CAF98A94" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2b12d06c37fd3a394376f42f026a7478d826ed63", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58b83b9a9a929611a2a2e7d88f45cb0d786b7ee0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38264.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38264.json index 5a8b846934a..bb0c3b3e935 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38264.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38264.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38264", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-09T11:15:28.810", - "lastModified": "2025-07-10T13:17:30.017", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:22:21.840", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvme-tcp: desinfectar el manejo de la lista de solicitudes Valide la solicitud en nvme_tcp_handle_r2t() para asegurarse de que no sea parte de ninguna lista; de lo contrario, una PDU R2T maliciosa podr\u00eda inyectar un bucle en el procesamiento de la lista de solicitudes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "6.12.36", + "matchCriteriaId": "A758CD7A-5A7A-490D-922C-0C9DC4947E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.5", + "matchCriteriaId": "0CC768E2-3BBC-4A6E-9C2F-ECB27A703C2D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0bf04c874fcb1ae46a863034296e4b33d8fbd66c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/78a4adcd3fedb0728436e8094848ebf4c6bae006", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f054ea62598197714a6ca7b3b387a027308f8b13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38265.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38265.json index bb2d573879c..3f7a9d16721 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38265.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38265.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38265", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-10T08:15:24.600", - "lastModified": "2025-07-10T13:17:30.017", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:27:39.153", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: jsm: fix NPE durante jsm_uart_port_init No se configur\u00f3 ning\u00fan dispositivo que caus\u00f3 que serial_base_ctrl_add se bloqueara. ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 000000000000050 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 16 UID: 0 PID: 368 Comm: (udev-worker) No contaminado 6.12.25-amd64 #1 Debian 6.12.25-1 RIP: 0010:serial_base_ctrl_add+0x96/0x120 Rastreo de llamadas: serial_core_register_port+0x1a0/0x580 ? __setup_irq+0x39c/0x660 ? __kmalloc_cache_noprof+0x111/0x310 jsm_uart_port_init+0xe8/0x180 [jsm] jsm_probe_one+0x1f4/0x410 [jsm] local_pci_probe+0x42/0x90 pci_device_probe+0x22f/0x270 really_probe+0xdb/0x340 ? pm_runtime_barrier+0x54/0x90 ? __pfx___driver_attach+0x10/0x10 __driver_probe_device+0x78/0x110 driver_probe_device+0x1f/0xa0 __driver_attach+0xba/0x1c0 bus_for_each_dev+0x8c/0xe0 bus_add_driver+0x112/0x1f0 driver_register+0x72/0xd0 jsm_init_module+0x36/0xff0 [jsm] ? __pfx_jsm_init_module+0x10/0x10 [jsm] do_one_initcall+0x58/0x310 do_init_module+0x60/0x230 Probado con la tarjeta Digi Neo PCIe de 8 puertos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "3D3A3F5D-1F88-4BFE-92A6-43E827D27BE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.33", + "matchCriteriaId": "A2859AC4-2A0C-40F2-AEC9-40693D2E0038" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.11", + "matchCriteriaId": "11A49F74-21D6-4C09-888D-FAB31E79FBC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.15", + "versionEndExcluding": "6.15.2", + "matchCriteriaId": "5C28A2D1-4E5D-4F87-AEFA-9268B4CB0980" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3258d7ff8ebfa451426662b23e8f2b51b129afe1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/985961dd2688a527a4847300d41beaad475ab7af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a14c0d2eb3f0b1836fdec22908b87ecffd2ac844", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/abaecb2a4ad021c2f2426e9b2a9c020aef57aca9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3975aa899c0a3bbc10d035e699b142cd1373a71", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38266.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38266.json index 1b3d7c65618..91f88f861ee 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38266.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38266.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38266", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-10T08:15:24.727", - "lastModified": "2025-07-10T13:17:30.017", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:29:23.313", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: mediatek: eint: Correcci\u00f3n de la desreferencia de puntero no v\u00e1lida para plataformas v1. El commit 3ef9f710efcb (\"pinctrl: mediatek: A\u00f1adir compatibilidad con EINT para m\u00faltiples direcciones\") introdujo un acceso al campo 'soc' de struct mtk_pinctrl en mtk_eint_do_init() y, para ello, la inclusi\u00f3n de pinctrl-mtk-common-v2.h. Sin embargo, los controladores pinctrl que dependen del controlador com\u00fan v1 incluyen pinctrl-mtk-common.h, que proporciona otra definici\u00f3n de struct mtk_pinctrl que no contiene el campo 'soc'. Dado que mtk_eint_do_init() puede ser invocado tanto por controladores v1 como v2, ahora intentar\u00e1 desreferenciar un puntero no v\u00e1lido al invocarlo en plataformas v1. Esto se ha observado en Genio 350 EVK (MT8365), que se bloquea al inicio (la traza del kernel solo se puede ver con earlycon). Para solucionarlo, dado que 'struct mtk_pinctrl' solo era necesario para obtener un 'struct mtk_eint_pin', se debe convertir 'struct mtk_eint_pin' en un par\u00e1metro de mtk_eint_do_init() para que quienes lo invoquen deban proporcionarlo, eliminando as\u00ed la dependencia de mtk_eint_do_init() de cualquier 'struct mtk_pinctrl' en particular." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.15", + "versionEndExcluding": "6.15.2", + "matchCriteriaId": "5C28A2D1-4E5D-4F87-AEFA-9268B4CB0980" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1c9977b263475373b31bbf86af94a5c9ae2be42c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ebe21ede792cef851847648962c363cac67d17f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-382xx/CVE-2025-38267.json b/CVE-2025/CVE-2025-382xx/CVE-2025-38267.json index 1a5a04f4fb8..21fd2489da1 100644 --- a/CVE-2025/CVE-2025-382xx/CVE-2025-38267.json +++ b/CVE-2025/CVE-2025-382xx/CVE-2025-38267.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38267", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-10T08:15:24.833", - "lastModified": "2025-07-10T13:17:30.017", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:33:03.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ring-buffer: No se activa WARN_ON() debido a un commit_overrun. Al leer un b\u00fafer asignado a memoria, la p\u00e1gina del lector simplemente se intercambia con la \u00faltima p\u00e1gina escrita en el b\u00fafer de escritura. Si la p\u00e1gina del lector coincide con el b\u00fafer de confirmaci\u00f3n (el b\u00fafer en el que se est\u00e1 escribiendo), se asum\u00eda que nunca deber\u00eda haber omitido eventos. Si lo hace, activa WARN_ON_ONCE(). Sin embargo, existe un escenario donde esto puede ocurrir leg\u00edtimamente: un commit_overrun. Un commit_overrun ocurre cuando una interrupci\u00f3n adelanta un evento que se est\u00e1 escribiendo en el b\u00fafer y luego la interrupci\u00f3n agrega tantos eventos nuevos que llena y envuelve el b\u00fafer de nuevo en la confirmaci\u00f3n. Cualquier evento nuevo se descartar\u00eda y se reportar\u00eda como \"missed_events\". En este caso, la siguiente p\u00e1gina a leer es el b\u00fafer de confirmaci\u00f3n y despu\u00e9s del intercambio de la p\u00e1gina del lector, la p\u00e1gina del lector ser\u00e1 el b\u00fafer de confirmaci\u00f3n, pero esta vez habr\u00e1 eventos perdidos y esto activa la siguiente advertencia: ------------[ cortar aqu\u00ed ]------------ ADVERTENCIA: CPU: 2 PID: 1127 at kernel/trace/ring_buffer.c:7357 ring_buffer_map_get_reader+0x49a/0x780 Modules linked in: kvm_intel kvm irqbypass CPU: 2 UID: 0 PID: 1127 Comm: trace-cmd Not tainted 6.15.0-rc7-test-00004-g478bc2824b45-dirty #564 PREEMPT Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:ring_buffer_map_get_reader+0x49a/0x780 Code: 00 00 00 48 89 fe 48 c1 ee 03 80 3c 2e 00 0f 85 ec 01 00 00 4d 3b a6 a8 00 00 00 0f 85 8a fd ff ff 48 85 c0 0f 84 55 fe ff ff <0f> 0b e9 4e fe ff ff be 08 00 00 00 4c 89 54 24 58 48 89 54 24 50 RSP: 0018:ffff888121787dc0 EFLAGS: 00010002 RAX: 00000000000006a2 RBX: ffff888100062800 RCX: ffffffff8190cb49 RDX: ffff888126934c00 RSI: 1ffff11020200a15 RDI: ffff8881010050a8 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed1024d26982 R10: ffff888126934c17 R11: ffff8881010050a8 R12: ffff888126934c00 R13: ffff8881010050b8 R14: ffff888101005000 R15: ffff888126930008 FS: 00007f95c8cd7540(0000) GS:ffff8882b576e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f95c8de4dc0 CR3: 0000000128452002 CR4: 0000000000172ef0 Call Trace: ? __pfx_ring_buffer_map_get_reader+0x10/0x10 tracing_buffers_ioctl+0x283/0x370 __x64_sys_ioctl+0x134/0x190 do_syscall_64+0x79/0x1c0 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f95c8de48db Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 RSP: 002b:00007ffe037ba110 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffe037bb2b0 RCX: 00007f95c8de48db RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000006 RBP: 00007ffe037ba180 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe037bb6f8 R14: 00007f95c9065000 R15: 00005575c7492c90 irq event stamp: 5080 hardirqs last enabled at (5079): [] _raw_spin_unlock_irqrestore+0x50/0x70 hardirqs last disabled at (5080): [] _raw_spin_lock_irqsave+0x63/0x70 softirqs last enabled at (4182): [] handle_softirqs+0x552/0x710 softirqs last disabled at (4159): [] __irq_exit_rcu+0x107/0x210 ---[ fin del seguimiento 0000000000000000 ]--- Lo anterior se activ\u00f3 al ejecutar un kernel con lockdep y KASAN, as\u00ed como kmemleak habilitados, y al ejecutar el siguiente comando: # perf record -o perf-test.dat -a -- trace-cmd record --nosplice -e all -p function hackbench 50 Con perf intercalando muchas interrupciones y trace-cmd habilitando todos los eventos as\u00ed como el seguimiento de funciones, con lockdep, KASAN y kmemleak habilitados, podr\u00eda causar una interrupci\u00f3n que interrumpa la escritura de un evento para agregar suficiente evento ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "F6499D2B-1E57-44BB-866C-D74E63C32759" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4fc78a7c9ca994e1da5d3940704d4e8f0ea8c5e4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b8df8cb8f7eef52baa9ac5bf36a405ca67945a91", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e018053632bad8ee0752242c7d2cffb0bbf45404", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38526.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38526.json index e28618cab25..114f715baa8 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38526.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38526.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38526", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:28.060", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:14:34.377", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,148 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: a\u00f1adir comprobaci\u00f3n NULL en la comprobaci\u00f3n de retardo de eswitch. La funci\u00f3n ice_lag_is_switchdev_running() se llama desde fuera del c\u00f3digo del controlador de eventos LAG. Esto provoca que lag->upper_netdev sea NULL en ocasiones. Para evitar una desreferencia de puntero NULL, es necesario realizar una comprobaci\u00f3n antes de desreferenciarlo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.1", + "versionEndExcluding": "6.6.100", + "matchCriteriaId": "4C0E74C5-B30A-46CB-90D1-E99E764ADD69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*", + "matchCriteriaId": "E346B162-D566-4E62-ABDE-ECBFB21B8BFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*", + "matchCriteriaId": "E114E9DD-F7E1-40CC-AAD5-F14E586CB2E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.6:rc7:*:*:*:*:*:*", + "matchCriteriaId": "DC5BD782-474C-4A68-AED7-6EC818FF89AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/245917d3c5ed7c6ae720302b64eac5c6f0c85177", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/27591d926191e42b2332e4bad3bcd3a49def393b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ce58b01ada408b372f15b7c992ed0519840e3cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a5d64f0eec82076b2c09fee2195d640cfbe3379", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38531.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38531.json index 26de5008b48..bed004e7b43 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38531.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38531.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38531", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:28.693", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:14:44.457", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,118 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: common: st_sensors: Se corrige el uso de estructuras de dispositivo sin inicializar. En las diversas funciones de sondeo, se usa &indio_dev->dev antes de su inicializaci\u00f3n. Esto provocaba un p\u00e1nico del kernel en st_sensors_power_enable() cuando la llamada a devm_regulator_bulk_get_enable() falla y luego se llama a dev_err_probe() con el dispositivo sin inicializar. Esto parece causar un p\u00e1nico solo con dev_err_probe(); dev_err(), dev_warn() y dev_info() no parecen causarlo, pero tambi\u00e9n se han corregido. El problema se reporta y rastrea aqu\u00ed: [1]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "2BEFDB83-601F-4005-B7C4-D1C82B7420EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3297a9016a45144883ec990bd4bd5b1d79cafb46", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/610615c9668037e3eca11132063b93b2d945af13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f92e93e257b33e73622640a9205f8642ec16ddd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38532.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38532.json index f16a1bc6de8..bf662572aa1 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38532.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38532.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38532", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:28.823", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:16:54.280", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: libwx: restablecimiento correcto del descriptor de anillo Rx. Cuando el reinicio del dispositivo se activa por cambios en las funciones, como la activaci\u00f3n o desactivaci\u00f3n de la descarga de la VLAN Rx, se llama a wx->do_reset() para reinicializar los anillos Rx. El anillo de descriptores de hardware puede conservar valores obsoletos de sesiones anteriores. Adem\u00e1s, establecer la longitud a 0 en rx_desc[0] provocar\u00eda la creaci\u00f3n de SKB malformados. Corr\u00edjalo para asegurar un borr\u00f3n y cuenta nueva tras el reinicio del dispositivo. [ 549.186435] [ C16] ------------[ cut here ]------------ [ 549.186457] [ C16] kernel BUG at net/core/skbuff.c:2814! [ 549.186468] [ C16] Oops: invalid opcode: 0000 [#1] SMP NOPTI [ 549.186472] [ C16] CPU: 16 UID: 0 PID: 0 Comm: swapper/16 Kdump: loaded Not tainted 6.16.0-rc4+ #23 PREEMPT(voluntary) [ 549.186476] [ C16] Hardware name: Micro-Star International Co., Ltd. MS-7E16/X670E GAMING PLUS WIFI (MS-7E16), BIOS 1.90 12/31/2024 [ 549.186478] [ C16] RIP: 0010:__pskb_pull_tail+0x3ff/0x510 [ 549.186484] [ C16] Code: 06 f0 ff 4f 34 74 7b 4d 8b 8c 24 c8 00 00 00 45 8b 84 24 c0 00 00 00 e9 c8 fd ff ff 48 c7 44 24 08 00 00 00 00 e9 5e fe ff ff <0f> 0b 31 c0 e9 23 90 5b ff 41 f7 c6 ff 0f 00 00 75 bf 49 8b 06 a8 [ 549.186487] [ C16] RSP: 0018:ffffb391c0640d70 EFLAGS: 00010282 [ 549.186490] [ C16] RAX: 00000000fffffff2 RBX: ffff8fe7e4d40200 RCX: 00000000fffffff2 [ 549.186492] [ C16] RDX: ffff8fe7c3a4bf8e RSI: 0000000000000180 RDI: ffff8fe7c3a4bf40 [ 549.186494] [ C16] RBP: ffffb391c0640da8 R08: ffff8fe7c3a4c0c0 R09: 000000000000000e [ 549.186496] [ C16] R10: ffffb391c0640d88 R11: 000000000000000e R12: ffff8fe7e4d40200 [ 549.186497] [ C16] R13: 00000000fffffff2 R14: ffff8fe7fa01a000 R15: 00000000fffffff2 [ 549.186499] [ C16] FS: 0000000000000000(0000) GS:ffff8fef5ae40000(0000) knlGS:0000000000000000 [ 549.186502] [ C16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.186503] [ C16] CR2: 00007f77d81d6000 CR3: 000000051a032000 CR4: 0000000000750ef0 [ 549.186505] [ C16] PKRU: 55555554 [ 549.186507] [ C16] Call Trace: [ 549.186510] [ C16] [ 549.186513] [ C16] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.186517] [ C16] __skb_pad+0xc7/0xf0 [ 549.186523] [ C16] wx_clean_rx_irq+0x355/0x3b0 [libwx] [ 549.186533] [ C16] wx_poll+0x92/0x120 [libwx] [ 549.186540] [ C16] __napi_poll+0x28/0x190 [ 549.186544] [ C16] net_rx_action+0x301/0x3f0 [ 549.186548] [ C16] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.186551] [ C16] ? __raw_spin_lock_irqsave+0x1e/0x50 [ 549.186554] [ C16] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.186557] [ C16] ? wake_up_nohz_cpu+0x35/0x160 [ 549.186559] [ C16] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.186563] [ C16] handle_softirqs+0xf9/0x2c0 [ 549.186568] [ C16] __irq_exit_rcu+0xc7/0x130 [ 549.186572] [ C16] common_interrupt+0xb8/0xd0 [ 549.186576] [ C16] [ 549.186577] [ C16] [ 549.186579] [ C16] asm_common_interrupt+0x22/0x40 [ 549.186582] [ C16] RIP: 0010:cpuidle_enter_state+0xc2/0x420 [ 549.186585] [ C16] Code: 00 00 e8 11 0e 5e ff e8 ac f0 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 0d ed 5c ff 45 84 ff 0f 85 40 02 00 00 fb 0f 1f 44 00 00 <45> 85 f6 0f 88 84 01 00 00 49 63 d6 48 8d 04 52 48 8d 04 82 49 8d [ 549.186587] [ C16] RSP: 0018:ffffb391c0277e78 EFLAGS: 00000246 [ 549.186590] [ C16] RAX: ffff8fef5ae40000 RBX: 0000000000000003 RCX: 0000000000000000 [ 549.186591] [ C16] RDX: 0000007fde0faac5 RSI: ffffffff826e53f6 RDI: ffffffff826fa9b3 [ 549.186593] [ C16] RBP: ffff8fe7c3a20800 R08: 0000000000000002 R09: 0000000000000000 [ 549.186595] [ C16] R10: 0000000000000000 R11: 000000000000ffff R12: ffffffff82ed7a40 [ 549.186596] [ C16] R13: 0000007fde0faac5 R14: 0000000000000003 R15: 0000000000000000 [ 549.186601] [ C16] ? cpuidle_enter_state+0xb3/0x420 [ 549.186605] [ C16] cpuidle_en ---truncated---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-909" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.100", + "matchCriteriaId": "2FFFB27A-1108-4092-B495-80F39EDD8FF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/10e27b2a6ebeda49e9c2897a699d3ce1ded565ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d510116c80b37efb100ce8d5ee326214b0157293", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d992ed7e1b687ad7df0763d3e015a5358646210b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee527d3fba4dae1d619d2d0438624002c8e99e24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38533.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38533.json index 651bb06e93c..c5652afd836 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38533.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38533.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38533", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:28.957", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:17:01.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: libwx: correcci\u00f3n del uso del DMA del b\u00fafer Rx. La estructura wx_rx_buffer conten\u00eda dos campos de direcci\u00f3n DMA: 'dma' y 'page_dma'. Sin embargo, solo 'page_dma' se inicializ\u00f3 y se utiliz\u00f3 para programar el descriptor Rx. Sin embargo, 'dma' no se inicializ\u00f3 y se utiliz\u00f3 en algunas rutas. Esto podr\u00eda provocar un comportamiento indefinido, incluyendo errores de DMA o use after free, si se utilizaba 'dma' sin inicializar. Si bien este error a\u00fan no se ha producido, conviene corregirlo en el c\u00f3digo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.100", + "matchCriteriaId": "2FFFB27A-1108-4092-B495-80F39EDD8FF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/027701180a7bcb64c42eab291133ef0c87b5b6c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/05c37b574997892a40a0e9b9b88a481566b2367d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5fd77cc6bd9b368431a815a780e407b7781bcca0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba7c793f96c1c2b944bb6f423d7243f3afc30fe9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38534.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38534.json index 8f301299718..ede37561e54 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38534.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38534.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38534", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:29.087", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:17:45.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfs: Arreglar la copia a cach\u00e9 para que realice la recolecci\u00f3n con ceph+fscache La copia a cach\u00e9 de netfs que usa Ceph con cach\u00e9 local configura una nueva solicitud para escribir datos reci\u00e9n le\u00eddos en la cach\u00e9. La solicitud se inicia y luego se deja que se cuide a s\u00ed misma mientras la aplicaci\u00f3n contin\u00faa. La solicitud es notificada por el sistema de archivos de respaldo al completarse la escritura DIO as\u00edncrona, pero luego intenta despertar la aplicaci\u00f3n porque NETFS_RREQ_OFFLOAD_COLLECTION no est\u00e1 configurado, pero la aplicaci\u00f3n no est\u00e1 esperando all\u00ed, y por lo tanto la solicitud simplemente se cuelga. Arregla esto configurando NETFS_RREQ_OFFLOAD_COLLECTION que hace que la notificaci\u00f3n del sistema de archivos de respaldo coloque la recolecci\u00f3n en una cola de trabajo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "3B1D6837-C0C8-4CC6-9D70-85B362FFE711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ebe58cef84eab22b41b4d5e72c2051ebf00af50", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c238e30774e3022a505fa54311273add7570f13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38536.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38536.json index fda3b2e279b..df9817bafa8 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38536.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38536.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38536", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:29.347", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:17:56.823", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: airoha: se corrige un posible error de use after free en airoha_npu_get(). np->name se usaba despu\u00e9s de llamar a of_node_put(np), lo que libera el nodo y puede provocar un error de use after free. Anteriormente, se llamaba a of_node_put(np) incondicionalmente despu\u00e9s de of_find_device_by_node(np), lo que pod\u00eda provocar un error de use after free si pdev era NULL. Este parche traslada of_node_put(np) despu\u00e9s de la comprobaci\u00f3n de errores para garantizar que el nodo solo se libere despu\u00e9s de que tanto el error como los casos de \u00e9xito se hayan gestionado correctamente, lo que evita posibles problemas de recursos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.15", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "7AAE4EC0-78FF-4244-B25E-7B6A937DA2D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3cd582e7d0787506990ef0180405eb6224fa90a6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/df6bf96b41e547e350667bc4c143be53646d070d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38537.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38537.json index fa9747e498b..fb450061e65 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38537.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38537.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38537", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:29.467", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:21.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: phy: No registrar los LED para genphy. Si una PHY no tiene controlador, el controlador genphy se prueba/elimina directamente en phy_attach/detach. Si el nodo ofnode de la PHY tiene un subnodo \"leds\", los LED se (des)registrar\u00e1n al probar/eliminar el controlador genphy. Esto podr\u00eda ocurrir si los LED corresponden a un controlador no gen\u00e9rico que no est\u00e1 cargado por cualquier motivo. La eliminaci\u00f3n sincr\u00f3nica del dispositivo PHY en phy_detach genera el siguiente bloqueo: rtnl_lock() ndo_close() ... phy_detach() phy_remove() phy_leds_unregister() led_classdev_unregister() led_trigger_set() netdev_trigger_deactivate() unregister_netdevice_notifier() rtnl_lock() Existe un bloqueo correspondiente en el lado de apertura/registro (y este es reportado por lockdep), pero requiere una ejecuci\u00f3n mientras que este es determinista. Los PHY gen\u00e9ricos no admiten LED de todos modos, as\u00ed que no se moleste en registrarlos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.6.100", + "matchCriteriaId": "0F50E34C-5B86-414A-B85F-EDE608892599" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/75e1b2079ef0653a2f7aa69be515d86b7faf1908", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec158d05eaa91b2809cab65f8068290e3c05ebdd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0f2b992d8185a0366be951685e08643aae17d6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd6493533af9e5d73d0d42ff2a8ded978a701dc6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38541.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38541.json index 1fe01aaaf08..b8c2786c994 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38541.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38541.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38541", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:29.957", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:39.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mt76: mt7925: Se ha corregido la correcci\u00f3n de null-ptr-deref en mt7925_thermal_init(). Devm_kasprintf() devuelve NULL en caso de error. Actualmente, mt7925_thermal_init() no comprueba este caso, lo que resulta en una desreferencia de puntero NULL. A\u00f1ada la comprobaci\u00f3n de NULL despu\u00e9s de devm_kasprintf() para evitar este problema." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.9", + "versionEndExcluding": "6.12.39", + "matchCriteriaId": "C9325419-D57F-42AA-B54C-A562DC0BF997" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.7", + "matchCriteriaId": "F9C46937-5FA9-4335-AD7B-E7FC29453CE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/03ee8f73801a8f46d83dfc2bf73fb9ffa5a21602", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1bbdf4213711bb6dc365e7628430a63dd3280794", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e99e9b34ece0b6d3e82cb757e9f60fa414da999", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38544.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38544.json index a06aa40f24a..84277c6b912 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38544.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38544.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38544", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:30.373", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:45.810", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rxrpc: Correcci\u00f3n de error debido a la colisi\u00f3n de preasignaci\u00f3n Cuando el espacio de usuario usa AF_RXRPC para proporcionar un servidor, tiene que preasignar las llamadas entrantes y asignarles identificadores de llamada que se usar\u00e1n para enhebrar recvmsg() y sendmsg() relacionados. Los identificadores de llamada preasignados se adjuntar\u00e1n autom\u00e1ticamente a las llamadas a medida que entran hasta que el grupo est\u00e9 vac\u00edo. Para el kernel, los identificadores de llamada son solo n\u00fameros arbitrarios, pero el espacio de usuario puede usar el identificador de llamada para contener un puntero a estructuras preparadas. En cualquier caso, el usuario no tiene permitido crear dos llamadas con el mismo identificador de llamada (los identificadores de llamada vuelven a estar disponibles cuando la llamada finaliza) y EBADSLT deber\u00eda ser el resultado de sendmsg() si se intenta preasignar una llamada con un identificador de llamada en uso. Sin embargo, la limpieza en el manejo de errores activar\u00e1 ambas aserciones en rxrpc_cleanup_call() porque la llamada no est\u00e1 marcada como completa ni como liberada. Solucione esto configurando el estado de la llamada en rxrpc_service_prealloc_one() y luego marc\u00e1ndolo como liberado antes de llamar a la funci\u00f3n de limpieza." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "6.6.99", + "matchCriteriaId": "80E390C1-CBAC-4FDE-97F4-D1AFA9CDC748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.39", + "matchCriteriaId": "18D57670-11F8-4B5A-AD56-EA32DD0F44E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.7", + "matchCriteriaId": "F9C46937-5FA9-4335-AD7B-E7FC29453CE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/432c5363cd6fe5a928bbc94524d28b05515684dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5385ad53793de2ab11e396bdcdaa65bb04b4dad6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/69e4186773c6445b258fb45b6e1df18df831ec45", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8ffb47a443919277cb093c3db1ec6c0a06880b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38545.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38545.json index 7f7aec0f57b..2be748ee5af 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38545.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38545.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38545", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:30.500", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:09:52.797", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ethernet: ti: am65-cpsw-nuss: Se corrige el tama\u00f1o de skb teniendo en cuenta skb_shared_info. Durante la transici\u00f3n de netdev_alloc_ip_align() a build_skb(), no se asign\u00f3 memoria para el miembro \"skb_shared_info\" de un \"skb\". Para solucionar esto, se asigna \"PAGE_SIZE\" como la longitud de skb, teniendo en cuenta la longitud del paquete, el margen de maniobra y el margen de maniobra, incluyendo as\u00ed el espacio de memoria necesario para skb_shared_info." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10", + "versionEndExcluding": "6.12.39", + "matchCriteriaId": "5E0A7E52-CDBF-45E4-8338-F679910D5C1B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.7", + "matchCriteriaId": "F9C46937-5FA9-4335-AD7B-E7FC29453CE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02c4d6c26f1f662da8885b299c224ca6628ad232", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7d6ca0c8c0caf9a13cae2de763bb1f2a9ea7eabb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fc2fffa2facac15ce711e95f98f954426e025bc5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38547.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38547.json index bec7a277761..282d7ea0c07 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38547.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38547.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38547", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:30.757", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:10:12.830", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: adc: axp20x_adc: Se ha a\u00f1adido una entrada centinela faltante a los mapas de canales del ADC AXP717. A los mapas de canales del ADC AXP717 les falta una entrada centinela al final. Esto genera una advertencia de KASAN. Agregue la entrada centinela faltante." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "71A07D97-4B91-4F15-9E6A-BCABF0F79A2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/086a76474121bf2351438e311376ec67b410b2ea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c0c01c88bb69951539539d2001e67f0c613001f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3281ddcea6429f7bc1fdb39d407752dd1371aba9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38549.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38549.json index 3394dd19da6..4a787596199 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38549.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38549.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38549", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:31.003", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:10:21.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: efivarfs: corrige la p\u00e9rdida de memoria de efivarfs_fs_info en las rutas de error de fs_context Al procesar las opciones de montaje, efivarfs asigna efivarfs_fs_info (sfi) al principio de la inicializaci\u00f3n de fs_context. Sin embargo, sfi est\u00e1 asociado al superbloque y normalmente se libera cuando este se destruye. Si se libera fs_context (posici\u00f3n final) antes de llamar a fill_super (como en rutas de error o durante la reconfiguraci\u00f3n), la estructura sfi se filtrar\u00eda, ya que la propiedad nunca se transfiere al superbloque. Implementa la devoluci\u00f3n de llamada .free en efivarfs_context_ops para garantizar que cualquier sfi asignado se libere correctamente si fs_context se derriba antes que fill_super, lo que previene esta p\u00e9rdida de memoria." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/64e135f1eaba0bbb0cdee859af3328c68d5b9789", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/816d36973467d1c9c08a48bdffe4675e219a2e84", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9fabe7036bb8be6071f39dc38605508f5f57b20", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38551.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38551.json index c0098dd40c6..0aabed4b9d3 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38551.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38551.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38551", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-16T12:15:31.267", - "lastModified": "2025-08-18T20:16:28.750", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T18:10:27.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: virtio-net: correcci\u00f3n de rtnl_lock() recursivo durante probe(). El interbloqueo aparece en un seguimiento de pila como: virtnet_probe() rtnl_lock() virtio_config_changed_work() netdev_notify_peers() rtnl_lock(). Esto ocurre si el VMM env\u00eda una solicitud VIRTIO_NET_S_ANNOUNCE mientras el controlador de virtio-net sigue sondeando. config_work en probe() se programar\u00e1 hasta que virtnet_open() habilite la notificaci\u00f3n de cambios de configuraci\u00f3n mediante virtio_config_driver_enable()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11.2", + "versionEndExcluding": "6.12.40", + "matchCriteriaId": "ECF1CB79-320A-40E9-8D59-AA179363B29B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.8", + "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*", + "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*", + "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3859f137b3c1fa1f0031d54263234566bdcdd7aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e7c46362550b229354aeb52038f414e231b0037", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be5dcaed694e4255dc02dd0acfe036708c535def", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38554.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38554.json index 72b61cf8926..e27db512517 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38554.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38554.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38554", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:31.510", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:59:40.800", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm: se corrige un UAF cuando vma->mm se libera despu\u00e9s de que vma->vm_refcnt se eliminara. Al inducir retrasos en los lugares adecuados, Jann Horn cre\u00f3 un reproductor para un problema de UAF dif\u00edcil de alcanzar que se hizo posible despu\u00e9s de que se permitiera reciclar los VMA agregando SLAB_TYPESAFE_BY_RCU a su cach\u00e9. La descripci\u00f3n de la ejecuci\u00f3n se tom\u00f3 prestada del informe de descubrimiento de Jann: lock_vma_under_rcu() busca un VMA sin bloqueo con mas_walk() bajo rcu_read_lock(). En ese punto, el VMA puede liberarse simult\u00e1neamente y puede reciclarse por otro proceso. vma_start_read() luego incrementa vma->vm_refcnt (si est\u00e1 en un rango aceptable) y, si esto tiene \u00e9xito, vma_start_read() puede devolver un VMA reciclado. En este escenario, donde el VMA se ha reciclado, lock_vma_under_rcu() detectar\u00e1 el puntero ->vm_mm no coincidente y eliminar\u00e1 el VMA mediante vma_end_read(), que llama a vma_refcount_put(). vma_refcount_put() elimina el recuento de referencias y luego llama a rcuwait_wake_up() usando una copia de vma->vm_mm. Esto es incorrecto: asume impl\u00edcitamente que quien llama mantiene activo el mm del VMA, pero en este escenario, quien llama no tiene relaci\u00f3n con el mm del VMA, por lo que rcuwait_wake_up() puede causar UAF. El diagrama que representa la ejecuci\u00f3n: T1 T2 T3 == == == lock_vma_under_rcu mas_walk mmap vma_start_read __refcount_inc_not_zero_limited_acquire munmap __vma_enter_locked refcount_add_not_zero vma_end_read vma_refcount_put __refcount_dec_and_test rcuwait_wait_event rcuwait_wake_up [UAF] Tenga en cuenta que rcuwait_wait_event() en T3 no se bloquea porque refcount ya fue descartado por T1. En este punto, T3 puede salir y liberar el mm que causa UAF en T1. Para evitar esto, movemos la verificaci\u00f3n vma->vm_mm a vma_start_read() y tomamos vma->vm_mm para estabilizarlo antes de la operaci\u00f3n vma_refcount_put(). [surenb@google.com: v3]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.15", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "2EA7D98E-F04C-44BE-AC61-F5ADC4C88EC6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1bcd236a2536a451e385f8d6d2bb589689ec812f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e88fe54721dee17d3496bc998f0c7d243896348", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bbffee67ffd16360179327b57f3b1245579ef08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38556.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38556.json index 301f9171ed1..70b416c681b 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38556.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38556.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38556", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:31.817", - "lastModified": "2025-09-09T17:15:45.080", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T17:59:48.710", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: n\u00facleo: Reforzar s32ton() contra la conversi\u00f3n a 0 bits. Las pruebas realizadas por el fuzzer syzbot mostraron que el n\u00facleo HID recibe una excepci\u00f3n de desplazamiento fuera de los l\u00edmites al intentar convertir una cantidad de 32 bits a una cantidad de 0 bits. Idealmente, esto nunca deber\u00eda ocurrir, pero existen dispositivos con errores y algunos podr\u00edan tener un campo de informe con un tama\u00f1o establecido en cero; no deber\u00edamos rechazar el informe ni el dispositivo solo por eso. En su lugar, reforzar la rutina s32ton() para que devuelva un resultado razonable en lugar de bloquearse al llamarla con el n\u00famero de bits establecido en 0, igual que ocurre con snto32()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.20", + "versionEndExcluding": "6.12.46", + "matchCriteriaId": "FD3BA7EB-EFB0-46CB-8079-C9D3121A3ABB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/865ad8469fa24de1559f247d9426ab01e5ce3a56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b4a94b1510f6a46ec48494b52ee8f67eb4fc836", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6b87bfc2ab5bccb7ad953693c85d9062aef3fdd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d3b504146c111548ab60b6ef7aad00bfb1db05a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-462xx/CVE-2025-46215.json b/CVE-2025/CVE-2025-462xx/CVE-2025-46215.json new file mode 100644 index 00000000000..c64771d812d --- /dev/null +++ b/CVE-2025/CVE-2025-462xx/CVE-2025-46215.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46215", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:01.513", + "lastModified": "2025-11-18T17:16:01.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-653" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-501", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46373.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46373.json new file mode 100644 index 00000000000..7894a6804a0 --- /dev/null +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46373.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46373", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:01.753", + "lastModified": "2025-11-18T17:16:01.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Heap-based Buffer Overflow vulnerability [CWE-122] in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via \"fortips_74.sys\". The attacker would need to bypass the Windows heap integrity protections" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-125", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-467xx/CVE-2025-46775.json b/CVE-2025/CVE-2025-467xx/CVE-2025-46775.json new file mode 100644 index 00000000000..84e5b37a13a --- /dev/null +++ b/CVE-2025/CVE-2025-467xx/CVE-2025-46775.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46775", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:01.973", + "lastModified": "2025-11-18T17:16:01.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1295" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-259", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-467xx/CVE-2025-46776.json b/CVE-2025/CVE-2025-467xx/CVE-2025-46776.json new file mode 100644 index 00000000000..548ad25f09d --- /dev/null +++ b/CVE-2025/CVE-2025-467xx/CVE-2025-46776.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46776", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:02.180", + "lastModified": "2025-11-18T17:16:02.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.5, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-251", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-477xx/CVE-2025-47761.json b/CVE-2025/CVE-2025-477xx/CVE-2025-47761.json new file mode 100644 index 00000000000..0ccdd30710e --- /dev/null +++ b/CVE-2025/CVE-2025-477xx/CVE-2025-47761.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47761", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:02.413", + "lastModified": "2025-11-18T17:16:02.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-782" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-112", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-488xx/CVE-2025-48839.json b/CVE-2025/CVE-2025-488xx/CVE-2025-48839.json new file mode 100644 index 00000000000..aa5034c4488 --- /dev/null +++ b/CVE-2025/CVE-2025-488xx/CVE-2025-48839.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48839", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:02.610", + "lastModified": "2025-11-18T17:16:02.610", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-225", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53360.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53360.json new file mode 100644 index 00000000000..9edd167095e --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53360.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-53360", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-18T17:16:02.807", + "lastModified": "2025-11-18T17:16:02.807", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "pluginsGLPI's Database Inventory Plugin \"manages\" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/pluginsGLPI/databaseinventory/commit/0a376a0c6f4142e11ea518faefe95c01b176fd87", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/pluginsGLPI/databaseinventory/commit/7dcad1efb6ee84e9cffb3b446cdb47dc0be1091e", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/pluginsGLPI/databaseinventory/commit/e9d4474acdab4141a6f4798cdd406b0d04480269", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/pluginsGLPI/databaseinventory/security/advisories/GHSA-5j5j-xr62-jr58", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-538xx/CVE-2025-53843.json b/CVE-2025/CVE-2025-538xx/CVE-2025-53843.json new file mode 100644 index 00000000000..8800dc7ab90 --- /dev/null +++ b/CVE-2025/CVE-2025-538xx/CVE-2025-53843.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53843", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:03.033", + "lastModified": "2025-11-18T17:16:03.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-358", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54660.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54660.json new file mode 100644 index 00000000000..f216d4e7dc8 --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54660.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54660", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:03.270", + "lastModified": "2025-11-18T17:16:03.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-489" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-844", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54821.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54821.json new file mode 100644 index 00000000000..4c7ffce5c4d --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54821.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54821", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:03.490", + "lastModified": "2025-11-18T17:16:03.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 1.9, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.5, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-545", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54971.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54971.json new file mode 100644 index 00000000000..5ef343f9a5e --- /dev/null +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54971.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54971", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:03.680", + "lastModified": "2025-11-18T17:16:03.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password via the logs of the product" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-686", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54972.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54972.json new file mode 100644 index 00000000000..e5d59c75877 --- /dev/null +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54972.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54972", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:03.890", + "lastModified": "2025-11-18T17:16:03.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An improper neutralization of crlf sequences ('crlf injection') in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions, FortiMail 7.0 all versions may allow an attacker to inject headers in the response via convincing a user to click on a specifically crafted link" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-93" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-634", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55796.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55796.json new file mode 100644 index 00000000000..359ce823dcb --- /dev/null +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55796.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-55796", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:04.270", + "lastModified": "2025-11-18T18:16:07.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and email change confirmation. These tokens are generated by hashing the current timestamp formatted as \"%d %H:%M:%S\" without incorporating any user-specific data or cryptographic randomness. This predictability allows remote attackers to brute-force valid tokens within a small time window, enabling unauthorized account confirmation, password resets, and email change approvals, potentially leading to account takeover." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/openml", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/openml/openml.org", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/openml/openml.org/security/advisories/GHSA-xfjh-gf9p-8qr6", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-55xx/CVE-2025-5552.json b/CVE-2025/CVE-2025-55xx/CVE-2025-5552.json index debf272f516..6b43288696b 100644 --- a/CVE-2025/CVE-2025-55xx/CVE-2025-5552.json +++ b/CVE-2025/CVE-2025-55xx/CVE-2025-5552.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5552", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-04T03:15:27.317", - "lastModified": "2025-10-03T01:04:38.463", + "lastModified": "2025-11-18T17:03:52.857", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -163,9 +163,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:1000mz:chestnutcms:*:*:*:*:*:*:*:*", - "versionEndExcluding": "15.1.0", - "matchCriteriaId": "FF5F1BA6-218E-40A5-8C6C-B34CDC965C65" + "criteria": "cpe:2.3:a:1000mz:chestnutcms:-:*:*:*:*:*:*:*", + "matchCriteriaId": "10F41C86-8A2E-49DF-A9DC-199E17CE6DC5" } ] } @@ -201,9 +200,9 @@ "url": "https://vuldb.com/?submit.587199", "source": "cna@vuldb.com", "tags": [ + "Exploit", "Third Party Advisory", - "VDB Entry", - "Exploit" + "VDB Entry" ] } ] diff --git a/CVE-2025/CVE-2025-564xx/CVE-2025-56413.json b/CVE-2025/CVE-2025-564xx/CVE-2025-56413.json index 26ab2ca92e2..676fe47652a 100644 --- a/CVE-2025/CVE-2025-564xx/CVE-2025-56413.json +++ b/CVE-2025/CVE-2025-564xx/CVE-2025-56413.json @@ -2,7 +2,7 @@ "id": "CVE-2025-56413", "sourceIdentifier": "cve@mitre.org", "published": "2025-09-10T14:15:39.940", - "lastModified": "2025-09-17T20:28:53.573", + "lastModified": "2025-11-18T17:41:44.543", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -56,8 +56,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:1panel:1panel:2.0.8:*:*:*:*:*:*:*", - "matchCriteriaId": "56F8ADDF-D3E2-4E6C-8482-03A41DAC56D7" + "criteria": "cpe:2.3:a:fit2cloud:1panel:2.0.8:*:*:*:*:*:*:*", + "matchCriteriaId": "42B39480-8488-48F2-BE9D-BAA5CB4FE0AA" } ] } diff --git a/CVE-2025/CVE-2025-565xx/CVE-2025-56526.json b/CVE-2025/CVE-2025-565xx/CVE-2025-56526.json new file mode 100644 index 00000000000..fd5bd8cf739 --- /dev/null +++ b/CVE-2025/CVE-2025-565xx/CVE-2025-56526.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-56526", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:04.477", + "lastModified": "2025-11-18T17:16:04.477", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Cinnamon/kotaemon", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Cinnamon/kotaemon/commit/37cdc28", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure", + "source": "cve@mitre.org" + }, + { + "url": "https://skinny-exoplanet-584.notion.site/Stored-XSS-via-Unsanitized-PDF-Content-Rendering-and-Plaintext-Credential-Exposure-in-LocalStorage-22cd1563bd3380458588eb49f361a363", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-565xx/CVE-2025-56527.json b/CVE-2025/CVE-2025-565xx/CVE-2025-56527.json new file mode 100644 index 00000000000..42c81996d19 --- /dev/null +++ b/CVE-2025/CVE-2025-565xx/CVE-2025-56527.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-56527", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:04.760", + "lastModified": "2025-11-18T17:16:04.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-256" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Cinnamon/kotaemon", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Cinnamon/kotaemon/commit/37cdc28", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure", + "source": "cve@mitre.org" + }, + { + "url": "https://skinny-exoplanet-584.notion.site/Stored-XSS-via-Unsanitized-PDF-Content-Rendering-and-Plaintext-Credential-Exposure-in-LocalStorage-22cd1563bd3380458588eb49f361a363?pvs=74", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-566xx/CVE-2025-56643.json b/CVE-2025/CVE-2025-566xx/CVE-2025-56643.json new file mode 100644 index 00000000000..2041e64ae75 --- /dev/null +++ b/CVE-2025/CVE-2025-566xx/CVE-2025-56643.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-56643", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:07.647", + "lastModified": "2025-11-18T18:16:07.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/0xBS0D27/CVE-2025-56643", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-580xx/CVE-2025-58034.json b/CVE-2025/CVE-2025-580xx/CVE-2025-58034.json new file mode 100644 index 00000000000..dd052afa720 --- /dev/null +++ b/CVE-2025/CVE-2025-580xx/CVE-2025-58034.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-58034", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:05.057", + "lastModified": "2025-11-18T17:16:05.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-513", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58413.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58413.json new file mode 100644 index 00000000000..23eb6424985 --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58413.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-58413", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:06.557", + "lastModified": "2025-11-18T17:16:06.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-632", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58692.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58692.json new file mode 100644 index 00000000000..86ce1e37cfb --- /dev/null +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58692.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-58692", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:06.963", + "lastModified": "2025-11-18T17:16:06.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-666", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-596xx/CVE-2025-59669.json b/CVE-2025/CVE-2025-596xx/CVE-2025-59669.json new file mode 100644 index 00000000000..396a9c2def8 --- /dev/null +++ b/CVE-2025/CVE-2025-596xx/CVE-2025-59669.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59669", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:07.390", + "lastModified": "2025-11-18T17:16:07.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-843", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61713.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61713.json new file mode 100644 index 00000000000..28b294a855a --- /dev/null +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61713.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61713", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-11-18T17:16:07.630", + "lastModified": "2025-11-18T17:16:07.630", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@fortinet.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.6, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@fortinet.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-316" + } + ] + } + ], + "references": [ + { + "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-789", + "source": "psirt@fortinet.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-631xx/CVE-2025-63147.json b/CVE-2025/CVE-2025-631xx/CVE-2025-63147.json index cc2393f24b6..b8b6127beb5 100644 --- a/CVE-2025/CVE-2025-631xx/CVE-2025-63147.json +++ b/CVE-2025/CVE-2025-631xx/CVE-2025-63147.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63147", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:34.637", - "lastModified": "2025-11-17T19:08:56.897", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:07.860", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63258.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63258.json new file mode 100644 index 00000000000..19e4850ef35 --- /dev/null +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63258.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-63258", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:08.183", + "lastModified": "2025-11-18T17:16:08.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points (versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS, WAP662-WPT330-R2262, WAP662H-WPT330-R2262, USG300V2-WPT330-R2129, MSG300-WPT330-R1350, and MSG326-WPT330-R2129). Attackers are able to exploit this vulnerability via injecting crafted commands into the sessionid parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://er3200g3x.com", + "source": "cve@mitre.org" + }, + { + "url": "http://h3c.com", + "source": "cve@mitre.org" + }, + { + "url": "https://zhiliao.h3c.com/Theme/details/232571", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63292.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63292.json index deb57f688eb..703754a805c 100644 --- a/CVE-2025/CVE-2025-632xx/CVE-2025-63292.json +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63292.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63292", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-17T19:16:20.037", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:16:08.460", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 R\u00e9volution r1\u2013r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM authentication over the `FreeWifi_secure` network. During the EAP-Response/Identity exchange, the subscriber's full Network Access Identifier (NAI), which embeds the raw IMSI, is transmitted without encryption, tunneling, or pseudonymization. An attacker located within Wi-Fi range (~100 meters) can passively capture these frames without requiring user interaction or elevated privileges. The disclosed IMSI enables device tracking, subscriber correlation, and long-term monitoring of user presence near any broadcasting Freebox device. The vendor acknowledged the vulnerability, and the `FreeWifi_secure` service is planned for full deactivation by 1 October 2025." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-319" + } + ] + } + ], "references": [ { "url": "https://7h30th3r0n3.fr/the-vulnerability-that-killed-freewifi_secure/", diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63408.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63408.json index f4e12114e24..6ed86943708 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63408.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63408.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63408", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T16:15:45.323", - "lastModified": "2025-11-18T16:15:45.323", + "lastModified": "2025-11-18T17:16:08.787", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,46 @@ "value": "Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + }, + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], "references": [ { "url": "https://ispysoftware.github.io/Agent_API/", diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json index a572cf43fb7..99941276bf7 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63456", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:34.957", - "lastModified": "2025-11-17T18:35:00.850", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:09.087", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json index f5baa42451c..ba99c38ceb0 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63457", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.100", - "lastModified": "2025-11-17T18:34:11.637", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:09.427", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json new file mode 100644 index 00000000000..9a33e93a8d5 --- /dev/null +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-63512", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:09.817", + "lastModified": "2025-11-18T17:16:09.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_SQL2.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json new file mode 100644 index 00000000000..d3eea04afba --- /dev/null +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63513", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:10.360", + "lastModified": "2025-11-18T17:16:10.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_IDOR.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/kishan0725/Hospital-Management-System/issues/55", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json new file mode 100644 index 00000000000..7b9142732a3 --- /dev/null +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63514", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:13.280", + "lastModified": "2025-11-18T18:16:13.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_Stored_XSS.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/kishan0725/Hospital-Management-System/issues/54", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63602.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63602.json index f5de8593376..33b1d764c82 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63602.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63602.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63602", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T16:15:45.593", - "lastModified": "2025-11-18T16:15:45.593", + "lastModified": "2025-11-18T17:16:10.613", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 (1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys) that lacks a properly secured DACL, allowing unprivileged users to interact with the driver and, as a result, the kernel. This can result in local privilege escalation, information disclosure, denial of service, and other unspecified impacts." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-126" + } + ] + } + ], "references": [ { "url": "https://dreadsec.co/p/cve-2025-63602-hijacking-system-calls-with-a-popular-crypto-miner.html", diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63603.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63603.json index ab0d56ffb40..92d7dab2321 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63603.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63603.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63603", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T16:15:45.833", - "lastModified": "2025-11-18T16:15:45.833", + "lastModified": "2025-11-18T17:16:10.923", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe_eval() function (src/mcp_server_ds/server.py:108). The function uses Python's exec() to execute user-supplied scripts but fails to restrict the __builtins__ dictionary in the globals parameter. When __builtins__ is not explicitly defined, Python automatically provides access to all built-in functions including __import__, exec, eval, and open. This allows an attacker to execute arbitrary Python code with full system privileges, leading to complete system compromise. The vulnerability can be exploited by submitting a malicious script to the run_script tool, requiring no authentication or special privileges." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], "references": [ { "url": "https://github.com/reading-plus-ai/mcp-server-data-exploration/issues/12", diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63604.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63604.json index 17782437080..9c582ca2f5a 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63604.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63604.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63604", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T16:15:46.060", - "lastModified": "2025-11-18T16:15:46.060", + "lastModified": "2025-11-18T17:16:11.243", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], "references": [ { "url": "https://github.com/baryhuang/mcp-server-aws-resources-python/issues/8", diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63694.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63694.json new file mode 100644 index 00000000000..a3e9cd8b12b --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63694.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63694", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:13.437", + "lastModified": "2025-11-18T18:16:13.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Yohane-Mashiro/dzzoffice_sql", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/zyx0814/dzzoffice/issues/364", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63695.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63695.json new file mode 100644 index 00000000000..8ae6968d64c --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63695.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63695", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:13.590", + "lastModified": "2025-11-18T18:16:13.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Yohane-Mashiro/dzzoffice_upload", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/zyx0814/dzzoffice/issues/365", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json index de1138cf7c1..7b443fa7c67 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63709", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:37.793", - "lastModified": "2025-11-17T18:20:14.297", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:11.890", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 2.5 } ] }, diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json index a88e018d194..620fe9c01bf 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63712", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:38.240", - "lastModified": "2025-11-17T18:15:02.930", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:12.217", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 4.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-352" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63800.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63800.json index e3db5b55d5b..004cc928fc7 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63800.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63800.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63800", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T16:15:46.310", - "lastModified": "2025-11-18T16:15:46.310", + "lastModified": "2025-11-18T17:16:12.640", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation. When an authenticated user omits or leaves the `password` and `repeat_password` parameters empty in the password change request, the backend still returns a successful response and sets the password to an empty string. This effectively disables authentication and may allow unauthorized access to user or administrative accounts." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-521" + } + ] + } + ], "references": [ { "url": "https://github.com/omkaryepre/vulnerability-research/tree/main/CVE-2025-63800", diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63828.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63828.json new file mode 100644 index 00000000000..9d65504b1ca --- /dev/null +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63828.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63828", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:13.753", + "lastModified": "2025-11-18T18:16:13.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/mertdurum06/BackdropCms-1.32.1/", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/mertdurum06/BackdropCms-1.32.1/blob/main/backdropcms_exploit.txt", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63829.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63829.json new file mode 100644 index 00000000000..6277416fa29 --- /dev/null +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63829.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-63829", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T17:16:12.907", + "lastModified": "2025-11-18T18:16:13.893", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-835" + } + ] + } + ], + "references": [ + { + "url": "https://gist.github.com/lkloliver/b00377bec754d4aa1dc731be210d5889", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/fastdds/core/Time_t.cpp#L67", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json index a5990c069eb..ca9dab5e5a8 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63834", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.810", - "lastModified": "2025-11-17T18:30:40.370", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:13.093", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 4.1, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.5, + "impactScore": 2.5 } ] }, diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json index 6ac6e44eb38..e6f760bf7e2 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63835", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.960", - "lastModified": "2025-11-17T18:28:18.650", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-18T17:16:13.363", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json b/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json index fed2d60dd6c..60caa2878e1 100644 --- a/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json +++ b/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63918", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-17T17:15:51.333", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T17:16:13.687", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], "references": [ { "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/DirectoryTraversal-ImageExport.md", diff --git a/CVE-2025/CVE-2025-639xx/CVE-2025-63994.json b/CVE-2025/CVE-2025-639xx/CVE-2025-63994.json new file mode 100644 index 00000000000..8ee4471640f --- /dev/null +++ b/CVE-2025/CVE-2025-639xx/CVE-2025-63994.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-63994", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:14.103", + "lastModified": "2025-11-18T18:16:14.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An arbitrary file upload vulnerability in the /php/UploadHandler.php component of RichFilemanager v2.7.6 allows attackers to execute arbitrary code via uploading a crafted file." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/psolom/RichFilemanager/issues/412", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-640xx/CVE-2025-64076.json b/CVE-2025/CVE-2025-640xx/CVE-2025-64076.json new file mode 100644 index 00000000000..c6e114079e3 --- /dev/null +++ b/CVE-2025/CVE-2025-640xx/CVE-2025-64076.json @@ -0,0 +1,52 @@ +{ + "id": "CVE-2025-64076", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-18T18:16:14.263", + "lastModified": "2025-11-18T18:16:14.263", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE-125): An incorrect variable reference and missing state reset in the chunk processing loop causes buffer_length to not be reset to zero after UTF-8 character consumption. This results in subsequent chunk_length calculations producing negative values (e.g., chunk_length = 65536 - buffer_length), which are passed as signed integers to the read() method, potentially triggering unlimited read operations and resource exhaustion. (2) Memory Leak via Missing Reference Count Release (CWE-401): The main processing loop fails to release Python object references (Py_DECREF) for chunk objects allocated in each iteration. For CBOR strings longer than 65536 bytes, this causes cumulative memory leaks proportional to the payload size, enabling memory exhaustion attacks through repeated processing of large CBOR payloads. Both vulnerabilities can be exploited remotely without authentication by sending specially-crafted CBOR data containing definite-length text strings with multi-byte UTF-8 characters positioned at 65536-byte chunk boundaries. Successful exploitation results in denial of service through process crashes (CBORDecodeEOF exceptions) or memory exhaustion. The vulnerabilities affect all applications using cbor2's C extension to process untrusted CBOR data, including web APIs, IoT data collectors, and message queue processors. Fixed in commit 851473490281f82d82560b2368284ef33cf6e8f9 pushed with released version 5.7.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://github.com/agronholm/cbor2/commit/851473490281f82d82560b2368284ef33cf6e8f9", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/agronholm/cbor2/issues/264", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/agronholm/cbor2/pull/265", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json b/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json index 5d23bc50257..8463468c9cf 100644 --- a/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json +++ b/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json @@ -2,13 +2,13 @@ "id": "CVE-2025-64756", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-17T18:15:58.270", - "lastModified": "2025-11-18T14:06:29.817", + "lastModified": "2025-11-18T18:16:14.480", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Glob matches files using patterns the shell uses. From versions 10.3.7 to 11.0.3, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in version 11.1.0." + "value": "Glob matches files using patterns the shell uses. Starting in version 10.3.7 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0." } ], "metrics": { @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -48,6 +48,10 @@ } ], "references": [ + { + "url": "https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f", + "source": "security-advisories@github.com" + }, { "url": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146", "source": "security-advisories@github.com" diff --git a/README.md b/README.md index 8bee7cc6154..5315b1e64ca 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-18T17:00:11.332029+00:00 +2025-11-18T19:00:11.494150+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-18T16:49:31.740000+00:00 +2025-11-18T18:33:03.180000+00:00 ``` ### Last Data Feed Release @@ -33,69 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318616 +318656 ``` ### CVEs added in the last Commit -Recently added CVEs: `30` +Recently added CVEs: `40` -- [CVE-2025-13347](CVE-2025/CVE-2025-133xx/CVE-2025-13347.json) (`2025-11-18T15:16:28.973`) -- [CVE-2025-13349](CVE-2025/CVE-2025-133xx/CVE-2025-13349.json) (`2025-11-18T15:16:29.883`) -- [CVE-2025-55074](CVE-2025/CVE-2025-550xx/CVE-2025-55074.json) (`2025-11-18T16:15:44.500`) -- [CVE-2025-55179](CVE-2025/CVE-2025-551xx/CVE-2025-55179.json) (`2025-11-18T15:16:32.177`) -- [CVE-2025-58121](CVE-2025/CVE-2025-581xx/CVE-2025-58121.json) (`2025-11-18T16:15:44.700`) -- [CVE-2025-58122](CVE-2025/CVE-2025-581xx/CVE-2025-58122.json) (`2025-11-18T16:15:44.930`) -- [CVE-2025-59110](CVE-2025/CVE-2025-591xx/CVE-2025-59110.json) (`2025-11-18T15:16:32.620`) -- [CVE-2025-59111](CVE-2025/CVE-2025-591xx/CVE-2025-59111.json) (`2025-11-18T15:16:32.900`) -- [CVE-2025-59112](CVE-2025/CVE-2025-591xx/CVE-2025-59112.json) (`2025-11-18T15:16:33.157`) -- [CVE-2025-59113](CVE-2025/CVE-2025-591xx/CVE-2025-59113.json) (`2025-11-18T15:16:33.387`) -- [CVE-2025-59114](CVE-2025/CVE-2025-591xx/CVE-2025-59114.json) (`2025-11-18T15:16:33.717`) -- [CVE-2025-59115](CVE-2025/CVE-2025-591xx/CVE-2025-59115.json) (`2025-11-18T15:16:33.887`) -- [CVE-2025-59116](CVE-2025/CVE-2025-591xx/CVE-2025-59116.json) (`2025-11-18T15:16:34.127`) -- [CVE-2025-59117](CVE-2025/CVE-2025-591xx/CVE-2025-59117.json) (`2025-11-18T15:16:34.337`) -- [CVE-2025-63408](CVE-2025/CVE-2025-634xx/CVE-2025-63408.json) (`2025-11-18T16:15:45.323`) -- [CVE-2025-63602](CVE-2025/CVE-2025-636xx/CVE-2025-63602.json) (`2025-11-18T16:15:45.593`) -- [CVE-2025-63603](CVE-2025/CVE-2025-636xx/CVE-2025-63603.json) (`2025-11-18T16:15:45.833`) -- [CVE-2025-63604](CVE-2025/CVE-2025-636xx/CVE-2025-63604.json) (`2025-11-18T16:15:46.060`) -- [CVE-2025-63800](CVE-2025/CVE-2025-638xx/CVE-2025-63800.json) (`2025-11-18T16:15:46.310`) -- [CVE-2025-63883](CVE-2025/CVE-2025-638xx/CVE-2025-63883.json) (`2025-11-18T15:16:36.097`) -- [CVE-2025-63892](CVE-2025/CVE-2025-638xx/CVE-2025-63892.json) (`2025-11-18T15:16:36.367`) -- [CVE-2025-64996](CVE-2025/CVE-2025-649xx/CVE-2025-64996.json) (`2025-11-18T16:15:46.563`) -- [CVE-2025-8084](CVE-2025/CVE-2025-80xx/CVE-2025-8084.json) (`2025-11-18T15:16:38.073`) -- [CVE-2025-9312](CVE-2025/CVE-2025-93xx/CVE-2025-9312.json) (`2025-11-18T15:16:38.530`) -- [CVE-2025-9977](CVE-2025/CVE-2025-99xx/CVE-2025-9977.json) (`2025-11-18T16:15:47.027`) +- [CVE-2025-53360](CVE-2025/CVE-2025-533xx/CVE-2025-53360.json) (`2025-11-18T17:16:02.807`) +- [CVE-2025-53843](CVE-2025/CVE-2025-538xx/CVE-2025-53843.json) (`2025-11-18T17:16:03.033`) +- [CVE-2025-54660](CVE-2025/CVE-2025-546xx/CVE-2025-54660.json) (`2025-11-18T17:16:03.270`) +- [CVE-2025-54821](CVE-2025/CVE-2025-548xx/CVE-2025-54821.json) (`2025-11-18T17:16:03.490`) +- [CVE-2025-54971](CVE-2025/CVE-2025-549xx/CVE-2025-54971.json) (`2025-11-18T17:16:03.680`) +- [CVE-2025-54972](CVE-2025/CVE-2025-549xx/CVE-2025-54972.json) (`2025-11-18T17:16:03.890`) +- [CVE-2025-55796](CVE-2025/CVE-2025-557xx/CVE-2025-55796.json) (`2025-11-18T17:16:04.270`) +- [CVE-2025-56526](CVE-2025/CVE-2025-565xx/CVE-2025-56526.json) (`2025-11-18T17:16:04.477`) +- [CVE-2025-56527](CVE-2025/CVE-2025-565xx/CVE-2025-56527.json) (`2025-11-18T17:16:04.760`) +- [CVE-2025-56643](CVE-2025/CVE-2025-566xx/CVE-2025-56643.json) (`2025-11-18T18:16:07.647`) +- [CVE-2025-58034](CVE-2025/CVE-2025-580xx/CVE-2025-58034.json) (`2025-11-18T17:16:05.057`) +- [CVE-2025-58413](CVE-2025/CVE-2025-584xx/CVE-2025-58413.json) (`2025-11-18T17:16:06.557`) +- [CVE-2025-58692](CVE-2025/CVE-2025-586xx/CVE-2025-58692.json) (`2025-11-18T17:16:06.963`) +- [CVE-2025-59669](CVE-2025/CVE-2025-596xx/CVE-2025-59669.json) (`2025-11-18T17:16:07.390`) +- [CVE-2025-61713](CVE-2025/CVE-2025-617xx/CVE-2025-61713.json) (`2025-11-18T17:16:07.630`) +- [CVE-2025-63258](CVE-2025/CVE-2025-632xx/CVE-2025-63258.json) (`2025-11-18T17:16:08.183`) +- [CVE-2025-63512](CVE-2025/CVE-2025-635xx/CVE-2025-63512.json) (`2025-11-18T17:16:09.817`) +- [CVE-2025-63513](CVE-2025/CVE-2025-635xx/CVE-2025-63513.json) (`2025-11-18T17:16:10.360`) +- [CVE-2025-63514](CVE-2025/CVE-2025-635xx/CVE-2025-63514.json) (`2025-11-18T18:16:13.280`) +- [CVE-2025-63694](CVE-2025/CVE-2025-636xx/CVE-2025-63694.json) (`2025-11-18T18:16:13.437`) +- [CVE-2025-63695](CVE-2025/CVE-2025-636xx/CVE-2025-63695.json) (`2025-11-18T18:16:13.590`) +- [CVE-2025-63828](CVE-2025/CVE-2025-638xx/CVE-2025-63828.json) (`2025-11-18T18:16:13.753`) +- [CVE-2025-63829](CVE-2025/CVE-2025-638xx/CVE-2025-63829.json) (`2025-11-18T17:16:12.907`) +- [CVE-2025-63994](CVE-2025/CVE-2025-639xx/CVE-2025-63994.json) (`2025-11-18T18:16:14.103`) +- [CVE-2025-64076](CVE-2025/CVE-2025-640xx/CVE-2025-64076.json) (`2025-11-18T18:16:14.263`) ### CVEs modified in the last Commit -Recently modified CVEs: `46` +Recently modified CVEs: `100` -- [CVE-2025-13240](CVE-2025/CVE-2025-132xx/CVE-2025-13240.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13241](CVE-2025/CVE-2025-132xx/CVE-2025-13241.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13242](CVE-2025/CVE-2025-132xx/CVE-2025-13242.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13243](CVE-2025/CVE-2025-132xx/CVE-2025-13243.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13244](CVE-2025/CVE-2025-132xx/CVE-2025-13244.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13245](CVE-2025/CVE-2025-132xx/CVE-2025-13245.json) (`2025-11-18T14:06:55.963`) -- [CVE-2025-13305](CVE-2025/CVE-2025-133xx/CVE-2025-13305.json) (`2025-11-18T15:16:26.957`) -- [CVE-2025-38208](CVE-2025/CVE-2025-382xx/CVE-2025-38208.json) (`2025-11-18T16:49:31.740`) -- [CVE-2025-38209](CVE-2025/CVE-2025-382xx/CVE-2025-38209.json) (`2025-11-18T16:45:17.013`) -- [CVE-2025-38210](CVE-2025/CVE-2025-382xx/CVE-2025-38210.json) (`2025-11-18T15:46:21.950`) -- [CVE-2025-38216](CVE-2025/CVE-2025-382xx/CVE-2025-38216.json) (`2025-11-18T15:45:33.627`) -- [CVE-2025-38217](CVE-2025/CVE-2025-382xx/CVE-2025-38217.json) (`2025-11-18T15:21:06.057`) -- [CVE-2025-38220](CVE-2025/CVE-2025-382xx/CVE-2025-38220.json) (`2025-11-18T15:17:07.557`) -- [CVE-2025-38221](CVE-2025/CVE-2025-382xx/CVE-2025-38221.json) (`2025-11-18T15:12:48.100`) -- [CVE-2025-38223](CVE-2025/CVE-2025-382xx/CVE-2025-38223.json) (`2025-11-18T15:03:50.400`) -- [CVE-2025-38224](CVE-2025/CVE-2025-382xx/CVE-2025-38224.json) (`2025-11-18T16:44:28.037`) -- [CVE-2025-38228](CVE-2025/CVE-2025-382xx/CVE-2025-38228.json) (`2025-11-18T16:37:46.747`) -- [CVE-2025-38232](CVE-2025/CVE-2025-382xx/CVE-2025-38232.json) (`2025-11-18T16:22:40.943`) -- [CVE-2025-38233](CVE-2025/CVE-2025-382xx/CVE-2025-38233.json) (`2025-11-18T16:16:49.497`) -- [CVE-2025-38234](CVE-2025/CVE-2025-382xx/CVE-2025-38234.json) (`2025-11-18T16:08:00.433`) -- [CVE-2025-38235](CVE-2025/CVE-2025-382xx/CVE-2025-38235.json) (`2025-11-18T16:03:43.567`) -- [CVE-2025-4945](CVE-2025/CVE-2025-49xx/CVE-2025-4945.json) (`2025-11-18T15:16:30.640`) -- [CVE-2025-55108](CVE-2025/CVE-2025-551xx/CVE-2025-55108.json) (`2025-11-18T15:16:31.357`) -- [CVE-2025-55118](CVE-2025/CVE-2025-551xx/CVE-2025-55118.json) (`2025-11-18T15:16:31.550`) -- [CVE-2025-63891](CVE-2025/CVE-2025-638xx/CVE-2025-63891.json) (`2025-11-18T14:06:55.963`) +- [CVE-2025-38541](CVE-2025/CVE-2025-385xx/CVE-2025-38541.json) (`2025-11-18T18:09:39.653`) +- [CVE-2025-38544](CVE-2025/CVE-2025-385xx/CVE-2025-38544.json) (`2025-11-18T18:09:45.810`) +- [CVE-2025-38545](CVE-2025/CVE-2025-385xx/CVE-2025-38545.json) (`2025-11-18T18:09:52.797`) +- [CVE-2025-38547](CVE-2025/CVE-2025-385xx/CVE-2025-38547.json) (`2025-11-18T18:10:12.830`) +- [CVE-2025-38549](CVE-2025/CVE-2025-385xx/CVE-2025-38549.json) (`2025-11-18T18:10:21.467`) +- [CVE-2025-38551](CVE-2025/CVE-2025-385xx/CVE-2025-38551.json) (`2025-11-18T18:10:27.400`) +- [CVE-2025-38554](CVE-2025/CVE-2025-385xx/CVE-2025-38554.json) (`2025-11-18T17:59:40.800`) +- [CVE-2025-38556](CVE-2025/CVE-2025-385xx/CVE-2025-38556.json) (`2025-11-18T17:59:48.710`) +- [CVE-2025-5552](CVE-2025/CVE-2025-55xx/CVE-2025-5552.json) (`2025-11-18T17:03:52.857`) +- [CVE-2025-56413](CVE-2025/CVE-2025-564xx/CVE-2025-56413.json) (`2025-11-18T17:41:44.543`) +- [CVE-2025-63147](CVE-2025/CVE-2025-631xx/CVE-2025-63147.json) (`2025-11-18T17:16:07.860`) +- [CVE-2025-63292](CVE-2025/CVE-2025-632xx/CVE-2025-63292.json) (`2025-11-18T17:16:08.460`) +- [CVE-2025-63408](CVE-2025/CVE-2025-634xx/CVE-2025-63408.json) (`2025-11-18T17:16:08.787`) +- [CVE-2025-63456](CVE-2025/CVE-2025-634xx/CVE-2025-63456.json) (`2025-11-18T17:16:09.087`) +- [CVE-2025-63457](CVE-2025/CVE-2025-634xx/CVE-2025-63457.json) (`2025-11-18T17:16:09.427`) +- [CVE-2025-63602](CVE-2025/CVE-2025-636xx/CVE-2025-63602.json) (`2025-11-18T17:16:10.613`) +- [CVE-2025-63603](CVE-2025/CVE-2025-636xx/CVE-2025-63603.json) (`2025-11-18T17:16:10.923`) +- [CVE-2025-63604](CVE-2025/CVE-2025-636xx/CVE-2025-63604.json) (`2025-11-18T17:16:11.243`) +- [CVE-2025-63709](CVE-2025/CVE-2025-637xx/CVE-2025-63709.json) (`2025-11-18T17:16:11.890`) +- [CVE-2025-63712](CVE-2025/CVE-2025-637xx/CVE-2025-63712.json) (`2025-11-18T17:16:12.217`) +- [CVE-2025-63800](CVE-2025/CVE-2025-638xx/CVE-2025-63800.json) (`2025-11-18T17:16:12.640`) +- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-11-18T17:16:13.093`) +- [CVE-2025-63835](CVE-2025/CVE-2025-638xx/CVE-2025-63835.json) (`2025-11-18T17:16:13.363`) +- [CVE-2025-63918](CVE-2025/CVE-2025-639xx/CVE-2025-63918.json) (`2025-11-18T17:16:13.687`) +- [CVE-2025-64756](CVE-2025/CVE-2025-647xx/CVE-2025-64756.json) (`2025-11-18T18:16:14.480`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 565a337983b..2f56d7bab8b 100644 --- a/_state.csv +++ b/_state.csv @@ -85133,7 +85133,7 @@ CVE-2016-15052,0,0,00b251e7ee71c4d41f46899da6881e9a7f5760b1d0c655254635edfaff480 CVE-2016-15053,0,0,a4411b2de56397429229b112e8c6926b103d55a46d21a13c38d9b29f05fd7baf,2025-11-05T18:27:07.803000 CVE-2016-15054,0,0,a797d90816b7130b874120ee8782f7a45191b7da875f27c690428c0b2563ecec,2025-11-10T18:15:34.540000 CVE-2016-15055,0,0,4a9dc10f9607c853eee4e9d7ec955f0483e40753aef2c3e6afbd23d05ad8ae87,2025-11-14T16:42:30.503000 -CVE-2016-15056,0,0,a55090ec17ab3d4a97965c0e0794716dcb97fcc7b6f7249430c7777893ec979a,2025-11-18T14:06:55.963000 +CVE-2016-15056,0,1,91402b975692747129e007097110431ec8f2702b316b8f160b72caf0b7fe8ba4,2025-11-18T17:15:56.507000 CVE-2016-1513,0,0,06136b6111d450b6f9a09af32cd105798eeb2e0357d398298aa697c3a3f64994,2025-04-12T10:46:40.837000 CVE-2016-1514,0,0,b7fef097b48e8e79c45cbf0778b00b6a0da537c685d5ef916a10faf8cfdae6e7,2023-11-07T02:29:56.923000 CVE-2016-1515,0,0,7650f16bc9bfdae9e539eda0300a3023d110d1932894a66d7e6ac27f785826da,2023-11-07T02:29:57.150000 @@ -123682,7 +123682,7 @@ CVE-2018-4874,0,0,001e4deb5c6535f1d86a9853487f66e644017abf53f30c14044fe24a71e9ac CVE-2018-4875,0,0,828ca7194958837af531f6d926f2e6efad3e06506c06a1ec60d79f97e482f6db,2024-11-21T04:07:37.340000 CVE-2018-4876,0,0,d60f8ca5a522370294131546a37d8cfa7029fe032394b40e7a70c89d2890bdae,2024-11-21T04:07:37.460000 CVE-2018-4877,0,0,837f92480206511c1669bbf6ba58b0f130e7f2857587d84aa9f5f9bb536c7e84,2024-11-21T04:07:37.580000 -CVE-2018-4878,0,0,5463e41ed2854c31a5a1ff480fd16b66651cdafd3ab31a5cec330a99abebecc1,2025-11-17T20:15:48.083000 +CVE-2018-4878,0,1,b90f532d0ea986349facd9e6ab37bb631dbe19b92c8bbabcb3a90a7563ab8cca,2025-11-18T17:03:20.877000 CVE-2018-4879,0,0,0d7f8a85e4038ef27ba31e2472daf37e74ddf6899fecdc5a583ac5bc34a6f3d0,2024-11-21T04:07:37.860000 CVE-2018-4880,0,0,045e9f032a298443f93e3790a70e4abcd68625e59e5c9df6c44c44f9f5c06d42,2024-11-21T04:07:37.987000 CVE-2018-4881,0,0,9b0e562147a6706c36c5906c56df0a08b4ec6027e1f194d83f10d8a9ec581508,2024-11-21T04:07:38.110000 @@ -123806,7 +123806,7 @@ CVE-2018-4998,0,0,7bc1b91b4ed3c2ed5bb6e8b5e97d6fabfae099cb567a2c4e418bda5babdd3e CVE-2018-4999,0,0,2804f0f3c26b64f522ac214766f1e12aff6b13f52d410b5a5278af4aa1384d4c,2024-11-21T04:07:53.377000 CVE-2018-5000,0,0,ca36b8788981e66a469b6a12a11b7147b02def6a470cf4634f205bca07351332,2024-11-21T04:07:53.507000 CVE-2018-5001,0,0,937f04430d8bdb291415510bf42966bd1f1f8a6f7a7e08147565cabc6147c403,2024-11-21T04:07:53.620000 -CVE-2018-5002,0,0,6cdf7f0a7ecb20fd16349d520ce4c64ba46b97cf13484ac0cbdd3c13652c2c61,2025-11-17T21:15:50.467000 +CVE-2018-5002,0,1,8197558a6f0eb049b2e78ed1f56faf7a75f7fcb0de25b56ed3f8edc8be8aa1ce,2025-11-18T17:03:08.343000 CVE-2018-5003,0,0,68d2f21cd2423841c08bc7db21746f56f3f11803c62cdf55b5a25f219ce9047a,2024-11-21T04:07:53.853000 CVE-2018-5004,0,0,64ff4844ff1f2ff63e89e50d615ef90053208aae825a36ed0bff1b6f013b75d8,2024-11-21T04:07:53.967000 CVE-2018-5005,0,0,580545e4297826f5fb3054eb463692d3543e12ee70adabe9306aad26a47249e1,2024-11-21T04:07:54.077000 @@ -186176,7 +186176,7 @@ CVE-2021-4464,0,0,a32ce8cbae7cec983b099d8268be3ad1eaf495841afcd75cbfc3d7f80bae75 CVE-2021-44647,0,0,ac224a29211aa7944b31354c6bb9bc0e926f35b23991977cda6b379da67d4382,2024-11-21T06:31:18.587000 CVE-2021-44648,0,0,452c39714bb4ff78eaf9da121ee0cf37ce55714b9437ff36a6232d40268c42b6,2024-11-21T06:31:18.763000 CVE-2021-44649,0,0,3c25979f4fc7135d3b9ed97212e81384a9a64edd7f4552cfc0447ab30267fc7f,2024-11-21T06:31:18.960000 -CVE-2021-4465,0,0,c6a17d1773b9cddd8da68622938f3bbf6eb416bc51ec28839de1ab3589a9b158,2025-11-18T14:06:55.963000 +CVE-2021-4465,0,1,eb70b7c8eb96f59631bb8d67b6c4f8f20845cf168fc2751f757d9084439ae402,2025-11-18T17:15:57 CVE-2021-44650,0,0,cd4c8642abe43046a357776d113b6bcdf7cb5706bc607cb616e065fca13e9836,2024-11-21T06:31:19.100000 CVE-2021-44651,0,0,21ecd7badcd71c93e86a1672d5db0c3f7fd2944e916cdb968ab7fc428e907cf3,2024-11-21T06:31:19.260000 CVE-2021-44652,0,0,d2428edba3a430fc028e410f8a613553c6d17d4aebc439b58e36e40b6479b0be,2024-11-21T06:31:19.410000 @@ -186190,7 +186190,7 @@ CVE-2021-44663,0,0,000bf46e223aea5a4d30e75aebd3266ec089f6ee6c62f89dd2cb55c646be0 CVE-2021-44664,0,0,90e98ff30a0f5ca9b65519e90e1b5292312e0451795822e68b03e2717d918adc,2024-11-21T06:31:20.513000 CVE-2021-44665,0,0,3d7b90093f0913578baa4d866fd53cd6453d3cc0fde9b825a6456227dd78e451,2024-11-21T06:31:20.690000 CVE-2021-44667,0,0,200d1c54b1e1e0e72e7285fe35ab8f883488f7a0cfd224c78fc32081402cc35a,2024-11-21T06:31:20.840000 -CVE-2021-4467,0,0,43cd04234c59e34c1e97b47d950cb69e73473cf357138ec8dd78e888310f78ee,2025-11-18T14:06:55.963000 +CVE-2021-4467,0,1,45bcdf088f8e36bdfb78fe239786bbdc3b115d507afe88377e7c8af8bcd02213,2025-11-18T17:15:57.190000 CVE-2021-44673,0,0,fe22eb47031408df6610ac33e9a3f039f6a04609683f55cb2bd638fad696b78e,2024-11-21T06:31:20.980000 CVE-2021-44674,0,0,c7c6e2ed33dca74a232a634034f6e6fd34833e91beb72c750693f14b0a56c53c,2024-11-21T06:31:21.107000 CVE-2021-44675,0,0,93c7b915bb07d168e70989e749adda22aeea5746adf5a2037345af3a84dca3fa,2024-11-21T06:31:21.260000 @@ -186215,7 +186215,7 @@ CVE-2021-44696,0,0,d9da53c3818dca55df6eb7db88266603527bfbf101649db54536b541188f4 CVE-2021-44697,0,0,d27f9c13414182a2a73093067c0b3e0d019d5ee20eeaa64a2e29d43387995937,2024-11-21T06:31:24.647000 CVE-2021-44698,0,0,882e1934ea3ec28feab23e05621642a8160655348af30db98cfffe22c1719f6f,2024-11-21T06:31:24.763000 CVE-2021-44699,0,0,907b00b413a15ff4ae11f453fd3e527a4d05f0977807875e678be0121358559d,2024-11-21T06:31:24.887000 -CVE-2021-4470,0,0,310ccd50166ac2fa2af833fff96d6b5c48910663a28610c42f62dc6c0994f46b,2025-11-18T14:06:55.963000 +CVE-2021-4470,0,1,f1e337d4f83e1a001a41bcdf634487144bdbbc6768ad5f5dd89ab63c550f863d,2025-11-18T17:15:57.330000 CVE-2021-44700,0,0,0ea8476c0d8fe8cd6f3e088809d4bbe54a7bc2e8a7bd2c798673cefa3be537e5,2024-11-21T06:31:25 CVE-2021-44701,0,0,b94d244a21e966d611238df0d0f39f815b8c690e1b09bbf51afd793f4682e807,2024-11-21T06:31:25.127000 CVE-2021-44702,0,0,ddaa82fe07ccc3660fc495c1fd4f3c5a651288a984534e5e2145a35f3eb44347,2024-11-21T06:31:25.270000 @@ -188191,7 +188191,7 @@ CVE-2021-47485,0,0,c3b0e3c72dfce312116a02c117217dcd2204d4cc1ff6d84a7d0941be2c708 CVE-2021-47486,0,0,5fdbd5c225c12c40df3e77ebee31acb93d11be5e6abbb1e964ee7922a63cbad5,2025-04-01T18:40:11.830000 CVE-2021-47487,0,0,37fda3dbde69565646173f301baa99f70441700610bcbfc8402f3e27ab23c916,2024-05-28T19:15:08.983000 CVE-2021-47488,0,0,6bd518faf568ee263bd5be6b79978583251019752295859beb9e265d517b8683,2024-12-05T14:15:18.520000 -CVE-2021-47489,0,1,9803110f4a72d89369f891bf7914814bf568ab23c5a1fc4da1cc1e461379cf68,2025-11-18T15:08:24.170000 +CVE-2021-47489,0,0,9803110f4a72d89369f891bf7914814bf568ab23c5a1fc4da1cc1e461379cf68,2025-11-18T15:08:24.170000 CVE-2021-47490,0,0,151ef266838c7722eaa82f178f6718ea223752e3cd4c4dc0ef3927c3dea46501,2025-01-24T16:15:28.487000 CVE-2021-47491,0,0,e6ef1d01aaffa297f37c4fe8726469a4ad7a6c14f367a951ccfeb7452fcd4ce0,2025-09-29T16:37:28.290000 CVE-2021-47492,0,0,5ee6b833f651a1915fbd202f96394675b24f74f5203f3af1a6a1edb45708cc7b,2025-09-29T16:35:34.680000 @@ -213880,7 +213880,7 @@ CVE-2022-4906,0,0,a823b4bbfbbc923f2df028a42581e18917821bc8c8d60008f8440a61828e4e CVE-2022-49060,0,0,e20323711665f770cfe1e9b0344aa20ebcaa22f466db1924bef2508697fe7698,2025-10-01T20:15:44.680000 CVE-2022-49061,0,0,75dd642b06e2f5b2ed83b9eb0056e095ea11f6153fb933fbd623a37d523b03e3,2025-10-01T20:15:44.900000 CVE-2022-49062,0,0,4d51895fff660e61c1e7f10dfd2a14e5d6ad51eb64bfc6f6c0426ebc568804c7,2025-10-01T20:15:45.117000 -CVE-2022-49063,0,1,d63209c1b12a40663ab059ea2f6e9d9c1cd4bee57734db2e6792e4e94ef5df19,2025-11-18T15:08:43.753000 +CVE-2022-49063,0,0,d63209c1b12a40663ab059ea2f6e9d9c1cd4bee57734db2e6792e4e94ef5df19,2025-11-18T15:08:43.753000 CVE-2022-49064,0,0,b5257d304900b4f0a3fb2e98f5751c784f116a6ac8eafde551cfebdc382ee8a6,2025-10-14T19:04:27.453000 CVE-2022-49065,0,0,816c0557dc0209e9355056b61221c9dce214e0ca6c29d0a2046a73ae6a766e3e,2025-10-01T20:15:45.343000 CVE-2022-49066,0,0,2fe13a08a22ca224672b34e60e40d113c85cb80c32f7899312b001adc2d6de77,2025-10-14T19:01:51.153000 @@ -213995,7 +213995,7 @@ CVE-2022-49164,0,0,6ace0a0a9f262327900c09abfd75819eb321139524002bb1153e28e8e4f60 CVE-2022-49165,0,0,dede4e284fe259bf80fa271a83b13e60df4c900e05a1a7bef8e25898ad85b27f,2025-09-23T14:20:18.553000 CVE-2022-49166,0,0,8089b5c823dfdea62637f4f390ea8ca5939ea91d78d8fe97e9eb8d459bf8e001,2025-10-15T19:42:37.193000 CVE-2022-49167,0,0,a7a71018b250f06a5d90ad7941515416b37d98a3e62de1123e282600e12d7889,2025-10-21T17:13:31.160000 -CVE-2022-49168,0,1,e0978d0dcc2cce45d333806a618677b375927d9cbd2f7353fc5977ce3f442398,2025-11-18T15:09:08.220000 +CVE-2022-49168,0,0,e0978d0dcc2cce45d333806a618677b375927d9cbd2f7353fc5977ce3f442398,2025-11-18T15:09:08.220000 CVE-2022-49169,0,0,3ad07513f13cf2edb9907f898691a4f4890f243d92f9f71b89a54e8910f44ab0,2025-10-22T17:15:02.537000 CVE-2022-4917,0,0,632226f8b02c5f8d00ce4b404529b7905bf41638914202b70d798cef2843a50d,2024-11-21T07:36:14.493000 CVE-2022-49170,0,0,d7420bce49d33da4515c25707a2a2eb61fdbc529b795d0cd9b8e8ac7195d6ff4,2025-09-23T13:38:25.463000 @@ -214397,7 +214397,7 @@ CVE-2022-49531,0,0,19cba9f622b0790713b1b99e24524e6970302f2ba108292f76d15d384e6ee CVE-2022-49532,0,0,8433141355d95dd74afe1bbbcea2bd26ad730121e2b3f3b8d3ecd6bffade5e29,2025-10-01T20:16:37.633000 CVE-2022-49533,0,0,86a11282ed7937e8ecc4138bedd75cb2825e68cf9e96d9f0f95d822a09e56d52,2025-10-21T12:05:17.793000 CVE-2022-49534,0,0,3c45e03663be26aeb067f3f1aaaaa3643bda17683a3f9dc925c27e71f3035982,2025-10-01T20:16:37.977000 -CVE-2022-49535,0,1,3a4f039981c69f498a058d794bca507cd8a8b95af1ed7b9771b8bb951e213406,2025-11-18T15:09:24.330000 +CVE-2022-49535,0,0,3a4f039981c69f498a058d794bca507cd8a8b95af1ed7b9771b8bb951e213406,2025-11-18T15:09:24.330000 CVE-2022-49536,0,0,0aa6d8e64d53d03ad8d71a5eb7e2b72684bb1d13ba4268ccaaa801f9d8f752b4,2025-10-01T20:16:38.327000 CVE-2022-49537,0,0,8e7bea91572b5ae7a97c27ad893b8027f872fc1041c2e4c61e9e6d54942467e6,2025-10-21T12:05:07.657000 CVE-2022-49538,0,0,ff069d5db9312383b86467c1f593d594dc7b792b71d25e20a54e460f33e7e0c6,2025-10-01T20:16:38.660000 @@ -214738,7 +214738,7 @@ CVE-2022-49846,0,0,8d07e38c1a16875b643f0114d5dd7ce27838b2aa805c4193b21dbf5682833 CVE-2022-49847,0,0,17760558b49e52576cc7c70cb2b8a20788befb464a7bf0ad064c7ec027d8fb06,2025-11-10T21:14:36.097000 CVE-2022-49848,0,0,b19fb6b7a7d9a94f66a0e8f833422ed27161f9037100ad67edf18c214d54f49d,2025-10-01T17:15:34.430000 CVE-2022-49849,0,0,cf84a9ae7b93ed171a189d2fc116317796ec3ac7f8ebbdf428597a7184e7a607,2025-11-10T21:02:50.920000 -CVE-2022-4985,0,0,1f37705329addc08d7bb820446be32c30572210e789a037598a998d515894e7b,2025-11-18T14:06:55.963000 +CVE-2022-4985,0,1,0c5cd441883db434e326f1f2dd50e7224a3be85f4d8f93e75a667c83d73cd0d7,2025-11-18T17:15:57.493000 CVE-2022-49850,0,0,35b103175df7efcecc17a65ff31610259ccf12c1e69bc7265cf1b250a5eda605,2025-10-01T17:15:34.637000 CVE-2022-49851,0,0,d9d05c0d1dc59dbeec348e9e60bb5e911e81860a40a2ce4b8df63c3ac4391e26,2025-11-10T21:02:56.937000 CVE-2022-49852,0,0,b4b8962eaeb49fcbb1169678f335e4ca0b0bb0737ba085d81bd89f4a864e2615,2025-05-02T13:53:20.943000 @@ -215001,32 +215001,32 @@ CVE-2022-50108,0,0,5c773446d73645ed895c47387473596d3fd7eff3475e97812187960ba3c84 CVE-2022-50109,0,0,b1259f0781a5749f3c9ff7076eff9338f639eedaf524f412e4ba8df568c73492,2025-06-18T13:47:40.833000 CVE-2022-50110,0,0,8c48c3979b34046692cb51eca8a136cbaf8ad99a020ff137b653bbcc1e4db3d1,2025-11-17T19:42:52.230000 CVE-2022-50111,0,0,d4e0d574108c0936b3a5f301d0353ba3f775a6ab25c07ba412ef8e6467524c64,2025-06-18T13:47:40.833000 -CVE-2022-50112,0,0,e43e72960b43fb80287aefe1d57c82df19cb11a29fe24da05399a80e1bc9ca86,2025-06-18T13:47:40.833000 -CVE-2022-50113,0,0,4a5d56e87e9a410ddc66efb32f2a43de10902434e8411daf4b6dece19cb7ad6a,2025-06-18T13:47:40.833000 -CVE-2022-50114,0,0,01d479e80a0bc835615a60dfc194635cdb76e782d4968f6ed19b9b8c5d888725,2025-06-18T13:47:40.833000 -CVE-2022-50115,0,0,70cc6b5749d98508ac8bb9ea64deeefc4fc253ca871066f88b88a4eaf8259ba9,2025-06-18T13:47:40.833000 -CVE-2022-50116,0,0,eac5cc19d5532c24564c915a031007ce5b553404600b63579eb9835e41f47269,2025-06-18T13:47:40.833000 -CVE-2022-50117,0,0,55ef286ea5efabe42908a0147609688fbc3c533e412ceced3b521c6417fb14cc,2025-06-18T13:47:40.833000 -CVE-2022-50118,0,0,03d407fed130d945d3a25ea1d4e92cd45196c98d7a49e704c4bc4487f653cea5,2025-06-18T13:47:40.833000 -CVE-2022-50119,0,0,c24bd15687cd50d59e1240aa5c16231780f2e5df6d59afb26012e5f48a359bea,2025-06-18T13:47:40.833000 -CVE-2022-50120,0,0,546997b535cb0502f14ed9e896622013a11238bc240477c43a1dd1979ed7b60e,2025-06-18T13:47:40.833000 -CVE-2022-50121,0,0,a9e0410a2a533180b3688f20ce8b823970f02b41028776b5d7d6d70f26cad1cc,2025-06-18T13:47:40.833000 -CVE-2022-50122,0,0,d7ceada23e3452eecde1d638688286855703e8fd49cc611188c8254aef5d9652,2025-06-18T13:47:40.833000 -CVE-2022-50123,0,0,aaa932cc8f68643a56bd2eeb17c7b3f6829d17399735a568eb974de34f1d02b0,2025-06-18T13:47:40.833000 -CVE-2022-50124,0,0,b5550e4b6f70c42e52d74fccd38aaf8f4f08126364b5b02773db5ba9c698b4e0,2025-06-18T13:47:40.833000 -CVE-2022-50125,0,0,921e86705816525d4ea1e83aafccce9d242eb86438bec7c94124b7176c44520d,2025-06-18T13:47:40.833000 -CVE-2022-50126,0,0,259bae5b5e0696be34eea038b2dfaee3610706fc2785305b2be9b5099a0ec923,2025-06-18T13:47:40.833000 -CVE-2022-50127,0,0,45ea2a2a507c9cdebe9c8f69990a26b8c13dae429f1b91b57bd6fc263e910b28,2025-06-18T13:47:40.833000 +CVE-2022-50112,0,1,9df6dafa818f302b043f18e8d1915ae2a6712e1de5085aa993591b323c34e756,2025-11-18T18:14:26.363000 +CVE-2022-50113,0,1,ad5467c1c150a2c88562f73a658c71fa81b8e8f84adb0c629e62ded6117807d7,2025-11-18T18:14:16.340000 +CVE-2022-50114,0,1,5a89b000bda2cb271b10ed90aabc54bfd69775e717d68636a626d52144a261c3,2025-11-18T18:14:06.050000 +CVE-2022-50115,0,1,3837723a453e78898b5d4186bd26cf57b9d58f0e991b1d0ceacd4ed858e4901c,2025-11-18T18:13:58.527000 +CVE-2022-50116,0,1,5d1a3bf0e73150c25dd44eeefd2d437eb350752c795bd2fee676fff7d3ed68fe,2025-11-18T18:13:48.470000 +CVE-2022-50117,0,1,d75e0755800034eac5fa3cef1e9b04c691f348f16632502b2727dfde196f8cdf,2025-11-18T18:13:37.010000 +CVE-2022-50118,0,1,5d7a4e27a2bbd71d5c4bac99f0174e008728c1794adc0c95535be170c46c9158,2025-11-18T18:13:26.477000 +CVE-2022-50119,0,1,a28563035c25c8623a0589eb437d137336dd1b347448ebb9531c15140866ff3f,2025-11-18T18:12:47.267000 +CVE-2022-50120,0,1,50ce527ee0a5556737c7a0c11d9d9dd6918f6105ad56e65c9af9eb499ee11bdc,2025-11-18T18:12:38.590000 +CVE-2022-50121,0,1,34eb09b4f0236404c945677e821cd12b81a9f87a5c95e320e6b20931ded5de10,2025-11-18T18:12:31.010000 +CVE-2022-50122,0,1,28f9d50d69f9d8b1aa77625f149dd397a841689d681b376a41b3bef54cea634b,2025-11-18T18:12:23.230000 +CVE-2022-50123,0,1,d067dcb7757cbed16484ff2fd74bb52d18a20650b37d5eaf0777ce8a3eef3424,2025-11-18T18:12:15.123000 +CVE-2022-50124,0,1,aafbdd74ccb2b4d53124b2a55da4876ee0a5b87024a907889adbc8d21a5a20b1,2025-11-18T18:12:07.753000 +CVE-2022-50125,0,1,3751f65fdb9ccd8460875b4c5a26caacae398f95deb94c3d6912474d7bc2574a,2025-11-18T18:12:00.063000 +CVE-2022-50126,0,1,97c3fd13ee6829adf5ff8e3e3afc2bd93f809d998febfcd44591dc23e2c796c3,2025-11-18T18:11:46.243000 +CVE-2022-50127,0,1,1b895266afd7502b10af6750113ecbb1b7ec351552df386ebe07a61caade1d3b,2025-11-18T18:11:35.227000 CVE-2022-50128,0,0,cfe053d3115c9145a3b1c6b0f9880bd4376fc4562b75b729003e4556d7f26e8c,2025-06-18T14:15:24.210000 -CVE-2022-50129,0,0,75d227f5dc921ca9b855ddb67aa55ee56953eab84007bd58712b26113d152cba,2025-06-18T13:47:40.833000 -CVE-2022-50130,0,0,49d8e121a2eae7069d9a7668fa5f41d4a2799aa184a2491baef62c735b62912d,2025-06-18T13:47:40.833000 -CVE-2022-50131,0,0,be66e75f9d11421235b9fe629fd376d1735b7530d8aa198f6047339e8f1e7be8,2025-06-18T13:47:40.833000 -CVE-2022-50132,0,0,16547f9d056d6dd2c787ad56a97f04b6b70277fcfcddfba291def87d8e779f61,2025-06-18T13:47:40.833000 -CVE-2022-50133,0,0,710705c87ac57737a1f012d96a9b73d9521c735582ef140fb77b2c0587e517e1,2025-06-18T13:47:40.833000 -CVE-2022-50134,0,0,323bf0738652e9429446d4f2d2fd79f46a94a4cae680746bc5660d6c7b9000d9,2025-06-18T13:47:40.833000 -CVE-2022-50135,0,0,b8f34d1e8dc0bda0d2f16d17c342105d26a094eeb50199f0ad1c175274f690bd,2025-06-18T13:47:40.833000 -CVE-2022-50136,0,0,5dc64768ce44f7f978654094e9130548fe1b8654433b30d206ea8f4319bd97b2,2025-06-18T13:47:40.833000 -CVE-2022-50137,0,0,a40be02f78d8a69ec6b697436a37ce4b1982e132be8f322009ca3702b582c0af,2025-06-18T13:47:40.833000 +CVE-2022-50129,0,1,06e3de215bef180a32c3402873efa4168d60b68826ba8759b703f895151fa9b5,2025-11-18T18:10:00.103000 +CVE-2022-50130,0,1,632ccc52c898320a743b27411bef3bd3c0e2e8558f08db44db1e5258dca77c3d,2025-11-18T18:09:48.880000 +CVE-2022-50131,0,1,ac8b3544e2fd5a8dd61bf9eb52d578d7a7c04d4fa4257323b546670565a1d591,2025-11-18T18:09:41.120000 +CVE-2022-50132,0,1,39381613387e312ef7a6a609d05d6086afd51a3640eb3397c51d3c4077ec6ecf,2025-11-18T18:09:32.377000 +CVE-2022-50133,0,1,74289c8670324594d1b1e8638bd01f1eb610bf25a0a8019e94b31cb3a7d01fbe,2025-11-18T18:08:30.600000 +CVE-2022-50134,0,1,5df10ff009e0ebb16751c594b126890b4b58fc3788e5bfba4f883a4b73bd7a13,2025-11-18T18:08:19.523000 +CVE-2022-50135,0,1,f79f2233746766457c0210d2aaa9e4a3c9b59c6a7bf21721c52248afea77f542,2025-11-18T18:08:10.530000 +CVE-2022-50136,0,1,c0a40f1bef50faa337fb87d51e6689fc6d8e0d7e57101dc855d0ed54f04f6f24,2025-11-18T18:08:02.810000 +CVE-2022-50137,0,1,2ac154befa60bf488992e72bb921fd7f0bf1427110554323a1aa86f01a221403,2025-11-18T18:07:53.420000 CVE-2022-50138,0,0,84cfc4e5beb8c6e04434ffb72d1fee9a57479f64e05fd418307932d03874fa62,2025-11-18T02:59:18.993000 CVE-2022-50139,0,0,a60c55a217f872044b245a27b7baf431a53c9797f38653b15f1b5c3a0a17f3ad,2025-11-18T02:57:43.417000 CVE-2022-50140,0,0,753f84a931ee447a2985d770a6e2e879901452999e9c4beac3bf908386d88142,2025-11-18T02:56:32.010000 @@ -227430,10 +227430,10 @@ CVE-2023-32242,0,0,6f5cc855851276ab333bff4c0b7e08a97457fbe104e634a929387aff4e307 CVE-2023-32243,0,0,d92a7d21f27b0256c499b3b5264efb010b27df2c32b15befaf2a0c29f151421e,2024-11-21T08:02:58.183000 CVE-2023-32244,0,0,1aa23fa1890adc007c2504140c905b47c15e856be8fdb3c8d90f9ddf6af2c291,2024-11-21T08:02:58.310000 CVE-2023-32245,0,0,4a35e3d11b0261fc82b08eb4da8d00fb31a3cf3176523839098f7386ad6c9b13,2024-11-21T08:02:58.423000 -CVE-2023-32246,0,0,a32a6db1f327451c2be9db9dbd105ca5b42d02b470760f068edb505e8d223012,2025-08-18T20:16:28.750000 +CVE-2023-32246,0,1,f3762ddfee9f4d58f464c093929c65c4e39d1c206a60faadafe378507a5c7733,2025-11-18T18:10:46.287000 CVE-2023-32247,0,0,5234491d5bfd954edbae4231314ab6bf207cd726a8560f99204d8cab518f0027,2024-11-21T08:02:58.553000 CVE-2023-32248,0,0,315cb53c369aea49360f7881b513f96b1197c03e4c42f1f534efed47982d56d9,2024-11-21T08:02:58.703000 -CVE-2023-32249,0,0,4e944348a6a54d182c0b09be83a831da4037038af2414bb8035d980808a4ed7d,2025-08-18T20:16:28.750000 +CVE-2023-32249,0,1,c2ed5edd407c411f92bf8ae79642a6846838114b1ca1b981a568e07a79fd3da7,2025-11-18T17:57:18.937000 CVE-2023-3225,0,0,4bdd21824614daf357158e9af8ed9b9f6eebaa73a9b980bd3a2d9a25c3e0868f,2024-11-21T08:16:44.400000 CVE-2023-32250,0,0,fb128cdf3a5a07bcc5aa7ea425c270f5cbffd389b48e7f3fadc94a1562329b3e,2024-11-21T08:02:58.833000 CVE-2023-32251,0,0,a7fbfb86fef01427e7daea8acfb86899a847a03007465677058f17078558c59e,2025-08-04T15:06:36.623000 @@ -232534,7 +232534,7 @@ CVE-2023-38646,0,0,ecffdb3d4fe2961dd52b26d83aaa65ed1e272622bed67c044f29bb4c83605 CVE-2023-38647,0,0,9b44a333bc5ce4100107d1f954ed677842bff285f98d364abeb795e8c1c4b022,2024-11-21T08:13:58.997000 CVE-2023-38648,0,0,a92be7fc2c2f30f766b41c6092c0b8345148bc1402142b10f4f242b9ea611b5f,2025-11-04T19:15:51.690000 CVE-2023-38649,0,0,625319a170dcd25df20ca496904a63bd550d2e566c0d2b4544657cff5e9f78b4,2025-11-04T19:15:51.813000 -CVE-2023-3865,0,0,9545add7239b0b4d9dfe318e8a4c2d942478f51c1ea0d7dd83d3bd8029e22ae2,2025-08-18T20:16:28.750000 +CVE-2023-3865,0,1,fb292f6e3fd66bb3f6bb27185654b5a79ecee989b18df84d09d0f679f0f0bae6,2025-11-18T17:57:24.790000 CVE-2023-38650,0,0,e9f7a4373cdaa059d479a875b611393007845c5f51039496a8764f9136f1b89b,2025-11-04T19:15:51.930000 CVE-2023-38651,0,0,d2239d25c3d20971488e6d2bd607d49d2634a50a7a4c73ee34afc9e38b4666c1,2025-11-04T19:15:52.050000 CVE-2023-38652,0,0,9eaec4a8677f0eb9f07f1756c0f512b13037c93201558a7b645214f7809080be,2025-11-04T19:15:52.167000 @@ -232542,13 +232542,13 @@ CVE-2023-38653,0,0,87a9b43e9f4922c8ef0ac35495f25f3ef985f9cd95f5d6acf0d5ca7c205c2 CVE-2023-38654,0,0,4fd0ef956f78a68c953267534ffcfa32bebbc5ee629d45fe49f79970ac868bbc,2024-11-21T08:13:59.923000 CVE-2023-38655,0,0,e04b0ce99b0f0f0f7310858c4f4392bb87b730def05c535ec193656152246e13,2024-08-14T17:49:14.177000 CVE-2023-38657,0,0,799c77c5ae950aa02ed85a875f29a040c54c9a4919e83b7c3afa7503c960293f,2025-11-04T19:15:52.403000 -CVE-2023-3866,0,0,5308c1cdd1f8939c952e0b13a2e5ee34e085e8dd36e56dccefa8c29ebae35c44,2025-08-18T20:16:28.750000 +CVE-2023-3866,0,1,29abd88ef61b2b0c9d4506a355de3c11be1ce0255fafa3bbf45d10f009692ca1,2025-11-18T17:58:12.250000 CVE-2023-38665,0,0,c227f7c0c751d344ab197db215fb08149d78c43cceadf0b558c655f6af41a7e4,2024-11-21T08:14:00.230000 CVE-2023-38666,0,0,0e59aadcb11fe4373eef99b4d19bcf12f424021534bd962d95a6db2a4d47545d,2024-11-21T08:14:00.373000 CVE-2023-38667,0,0,164f0109557146168ad696dab8d878c17fdde6336cdabdc55e749ded50ee0835,2024-11-21T08:14:00.527000 CVE-2023-38668,0,0,ba0d0dd74525b5387a81baab2ea7744b2a95d1f89b54f2b5e4ced62daadb7d59,2024-11-21T08:14:00.667000 CVE-2023-38669,0,0,1446f58242cd93b2990741d867085a185988f940fbb34ec6ba440682f31b766f,2024-11-21T08:14:00.817000 -CVE-2023-3867,0,0,51130527b99ca3c4274d0bd830f0c1f24dc511073d8f8683d45109c3421e4f54,2025-08-18T20:16:28.750000 +CVE-2023-3867,0,1,a17ec96d119bfad88c0eceb2441561a4f3561bcbe74b5b9d2441cb1d43158627,2025-11-18T17:58:23.887000 CVE-2023-38670,0,0,b9cabae77c436440cf2ebb14bff9fcee90cca037133ca2728a1b87f69e061c70,2024-11-21T08:14:00.937000 CVE-2023-38671,0,0,fd0e7debc69e0a4a25000581c467cccfadb5bb3af994d8916d4726d9f710e352,2024-11-21T08:14:01.063000 CVE-2023-38672,0,0,af78cfd2419149d86d595dfdbc8a7339501fd3dff4aa907991fff98b16a56a11,2024-11-21T08:14:01.187000 @@ -234690,7 +234690,7 @@ CVE-2023-41296,0,0,8a0a615caffb5b55efe867090de85638ae2af06d21e0f8a83b57be6d44426 CVE-2023-41297,0,0,cd32b59a822b58d2156e43f4422bd52537ccd447ca219a00c49cf13db293fc27,2024-11-21T08:21:00.840000 CVE-2023-41298,0,0,2aa2cb7277f497f4d82a760a9206752edcb69625950d93b2b45688ed59d5d3f6,2024-11-21T08:21:00.973000 CVE-2023-41299,0,0,d01322b0c01c32a7bd507af1efa0199bba8b76ea28d36ccc64e09a02180be64a,2024-11-21T08:21:01.090000 -CVE-2023-4130,0,0,22fe7a15f9cfb0111623ba655fa430d2e36a19b10f0659264a447189b6fa890a,2025-08-18T20:16:28.750000 +CVE-2023-4130,0,1,abb89e5a7f4c03c6777fa03ce7595524bd3e9aef74bf6e50a3ebad517a20c368,2025-11-18T17:58:43.357000 CVE-2023-41300,0,0,68e39f543d4320864ffeb8c546c6d4a82d30a5002926ed95567ef78efba5c002,2024-11-21T08:21:01.220000 CVE-2023-41301,0,0,543db7fe1cf76f790a8b7d08edf023598c5116b195df6f37171d1fab6e24bc56,2024-11-21T08:21:01.350000 CVE-2023-41302,0,0,05145fdec0689e04ead198a781c201ef630a5ab3e68e0d754a1774b497293e18,2024-11-21T08:21:01.470000 @@ -237349,7 +237349,7 @@ CVE-2023-45146,0,0,005638c54f958110964562140024ec081b1c49062fdb04bd1c5f2b96a6176 CVE-2023-45147,0,0,97ddf9da8a29805a0a8242f3bb30928da27d6b4a8a54f2710e8dd149f5411af6,2024-11-21T08:26:26.637000 CVE-2023-45148,0,0,9bc01e05180fcfa4f15bfbb935d013092240dd6decaae7f8f761cb03b5ce099c,2024-11-21T08:26:26.757000 CVE-2023-45149,0,0,6aad8059e6d198656d3b7915f2b67546b81cea853cd540ff67c1b5631ebdf7ca,2024-11-21T08:26:26.890000 -CVE-2023-4515,0,0,cefaff790a8be49a5bc215d6c4e138cecc314258de6783ba812b05e5d4be16c4,2025-08-18T20:16:28.750000 +CVE-2023-4515,0,1,585dd39ea6affb7f84e05f487fc210e60a81e93f8e048cd0ef93dfae60f467a8,2025-11-18T17:59:02.723000 CVE-2023-45150,0,0,c7f9dd08e5d77b39bc516d75b449467167616f136216a14a5454a52abd1453a9,2024-11-21T08:26:27.023000 CVE-2023-45151,0,0,600ad9bef1af059cc06cf18b91759f47e4001f5306c7bd0430380f7c365a7deb,2024-11-21T08:26:27.163000 CVE-2023-45152,0,0,943782991041bd072188f8052045aaa97addd1415f2ecc4292b6c970e4d54ad7,2024-11-21T08:26:27.290000 @@ -245965,7 +245965,7 @@ CVE-2023-7324,0,0,16ac3bc7943055c7c9176e5ff7ced9571c4f93a3bbfc7bfbb7e243bb0db19b CVE-2023-7325,0,0,feebf7a44b1b8e86f90bd0a4a4662f21827c6398dd1bc6b9458201a229d76368,2025-11-04T15:41:56.843000 CVE-2023-7326,0,0,51bf375c00626214daa25f4754835413b3041c0ca903a8f39134e8f878725de9,2025-11-14T16:42:30.503000 CVE-2023-7327,0,0,fa9855516679fe9126d29d46b7a9a41adab7c9c9156cc6140c6501b5ecdc2da1,2025-11-14T16:42:30.503000 -CVE-2023-7328,0,0,fa00d964c74dc7de3b8b2199e1a2198a0a309bab5f2c44c96317e11fe5eb88fc,2025-11-18T14:06:55.963000 +CVE-2023-7328,0,1,3fec04401449f3c0bcf50daafeb18d9ba58606ae8d7af22ad9ba8c33371d3e11,2025-11-18T17:15:57.660000 CVE-2023-7329,0,0,df4c22cbdc703d263240210c120513fc4b8f07dd0efedb08a6c00bb22d494e7a,2025-11-14T16:42:30.503000 CVE-2024-0001,0,0,a3803d5da55711ef7259e1abe303432c001f8021792dbcb3d58baa5f1fc32304,2024-09-27T14:08:57.327000 CVE-2024-0002,0,0,62be75bb877da347c07ffaf17dbd26e07bdfc8e85f8e86a969ec56eaba9c8a5a,2024-09-27T14:13:24.427000 @@ -255803,7 +255803,7 @@ CVE-2024-25178,0,0,7a76ad0414efeb8aacfb32f2e58be45238588bccc3d3ef285f9b49dcf0383 CVE-2024-2518,0,0,218e6d38201830e4f08ae52d79ac56db7a7b552c444bda2da7a3568e50b7a7a6,2025-02-14T16:59:49.713000 CVE-2024-25180,0,0,6c4f9519ece96564cb8bbb38c56337d15b68729b9ea597b77e43cb8c48c7e78f,2025-05-13T14:46:15.803000 CVE-2024-25187,0,0,b5bdcba71ceb1efd4b7f3a75dfc46c9a93b6aa6414ead7bfb505e326018a4574,2025-06-10T00:46:34.737000 -CVE-2024-25189,0,0,509ea081e277357b278ee949dac27256cde1e5cd64a689b5f46c4a4823913802,2024-11-21T09:00:24.657000 +CVE-2024-25189,0,1,f1716fd101bce18a1e8ba4917a5a4b2191d5f431a398fefa8d8d2519ea4e85b2,2025-11-18T17:06:06.357000 CVE-2024-2519,0,0,25506805cec23f34da1bcf6347cfcf15afa6fdde406c956fdefd44554556e9ce,2025-02-14T16:59:14.683000 CVE-2024-25190,0,0,b1ba4d33a756c63f1888b43396a47998407e09c652481bc438cf266fbee6871e,2024-11-21T09:00:24.893000 CVE-2024-25191,0,0,ea03a8d319c70ead4f0b31f84a987144ed5cd1fece445f588162beaa96f3e054,2025-06-12T15:15:37.780000 @@ -261164,7 +261164,7 @@ CVE-2024-32116,0,0,140b66d8b58d23b0fe567501dcd986adbe9732a7da9e43b727de51e69eac6 CVE-2024-32117,0,0,bd78be4c7fc18e4c6cdf647393be0c96c39e14b7e7c17f1e39dba267511a48ce,2025-01-21T22:19:39.353000 CVE-2024-32118,0,0,2178f2e51949497d6f853d9fa8cabb773027cc510805d277e413737b19193366,2025-01-17T20:42:17.053000 CVE-2024-32119,0,0,a9c4092c1cfbaedc63567d579a5e100f747ee8634c481fbfb4ba2bf815a7fad9,2025-07-16T15:20:12.983000 -CVE-2024-32122,0,0,b857190961ff06fac5ee7d0e22d819ff49a82ecb93a2726a563a02cca341b0bf,2025-07-18T14:23:53.260000 +CVE-2024-32122,0,1,539fb3915564b8966464e95b4cc8ac07fe3b9352fa6cbf5b1388d03377d896b6,2025-11-18T17:15:57.847000 CVE-2024-32123,0,0,90926d4afd1c5e4966b41c66237d14ad0e1b1282aa424d474a7e12435fce9554,2025-07-24T19:05:03.987000 CVE-2024-32124,0,0,0747992ecceb3dbfbbfc546ae3dcaad0b4d6ba9e8ce6e2e1971a6b3418df6772,2025-07-22T17:08:39.680000 CVE-2024-32125,0,0,d36ac7f8a17677d938b5bf6c12b9c868ee2ece6d692e8f1181aa5a94b725cccb,2025-03-12T18:52:52.640000 @@ -263807,7 +263807,7 @@ CVE-2024-35656,0,0,3436b0f14b2959bea8fc825a54c64a44f02137bbabc01c234a83c6647cb1e CVE-2024-35657,0,0,52f2f8b62b52dcfed11b97eb150f334015e1cb23147b79a5bc882cf94990431f,2024-11-21T09:20:35.633000 CVE-2024-35658,0,0,6531be8a731cf210f8bd84cc9a1b5df6c2e6a798e2c62ee057a6ee39f70eade0,2024-11-21T09:20:35.813000 CVE-2024-35659,0,0,94fc8c9ecf9cbc329ec09ae9c57c34c10f05c7bc21806e9dc3f5cf5c53370c34,2024-11-26T16:33:20.087000 -CVE-2024-3566,0,0,34c074f75845cc49c44e4029155d1d64351ecf32c06cc9d2177c7447e4fb8b37,2025-06-25T20:24:12.743000 +CVE-2024-3566,0,1,c62c3b6002e22e2cd51f6b4490aad15bb942e5ca07a5ea4ac850af9479c53b78,2025-11-18T18:16:05.353000 CVE-2024-35660,0,0,8111ea089a01680e2cd609f0bb4784592fc91adaac3d4d051159a4e1a7ab5320,2024-11-26T16:36:34.257000 CVE-2024-35661,0,0,95c094b7c7a943c2958c2c20974d6ff9a43fb5e9c9a77a59c5c355d443a5c848,2024-11-21T09:20:36.217000 CVE-2024-35662,0,0,c03d362a1ad5250505aa2f4d9f87b5b0e4e5024055b0ac4cd380c4aac4185ed0,2024-11-21T09:20:36.373000 @@ -264033,7 +264033,7 @@ CVE-2024-35865,0,0,445937985c3884d80adeeb214da00e50bd39bf5cbe7a86ccc7ae53f180149 CVE-2024-35866,0,0,50512a5af9d42db12c2457e31fb503e4cb6f47e2bdc22f62adc9b284e096be85,2025-11-03T20:16:13.100000 CVE-2024-35867,0,0,413e556b68752988fdd0928a4a9194a3d8c94570013a812219052a4ff82c57ad,2025-11-03T20:16:13.263000 CVE-2024-35868,0,0,e8b95ad6bcd307204263d2d8707c5b297bc3637fd97a489fe51ccf8435e7faa9,2024-12-30T17:37:00.887000 -CVE-2024-35869,0,1,8a2f272e0b1561a8d87e0321fe5560582a3e649fa387b7abb1c5cda201b69dd5,2025-11-18T15:46:37.950000 +CVE-2024-35869,0,0,8a2f272e0b1561a8d87e0321fe5560582a3e649fa387b7abb1c5cda201b69dd5,2025-11-18T15:46:37.950000 CVE-2024-3587,0,0,d796127fe00036180574bc0acf0ef97c6e42b5586ad9b2a144bef2e5bc673425,2024-11-21T09:29:55.960000 CVE-2024-35870,0,0,62333b17605be0c18bd0f57ffe338cf6df088a633cd52756ebd75a5d91d45da4,2025-11-03T21:16:11.800000 CVE-2024-35871,0,0,d2f774ae413fba330d4787c25595262cbfe4798cfb8a619ed11fbe4b1ed7640e,2024-11-21T09:21:05.780000 @@ -264119,7 +264119,7 @@ CVE-2024-35944,0,0,ce49f5b3d57917ae0fbcd2452c7e1c0458f5bc9a5f4f2ae390af1e6a990f3 CVE-2024-35945,0,0,8fa88b560cec38302a838aef898e5baa1dae10698602b321c86676d445f99126,2025-01-31T15:01:01.190000 CVE-2024-35946,0,0,bdc48baa7a2291997f9b791946b657604b013e0c653c13d8a3e40bb71c2c62f0,2025-01-31T15:02:04.300000 CVE-2024-35947,0,0,3fa8ecf8f00e3ae31ae44e95e8968619b89ddff27b00f8103223bab7a29a3617,2025-04-04T14:23:31.930000 -CVE-2024-35948,0,1,63e1c654c95b2ada75388c35be1d31af5d929a883a9ce478cb4eb49f1b18dbd8,2025-11-18T15:46:54.250000 +CVE-2024-35948,0,0,63e1c654c95b2ada75388c35be1d31af5d929a883a9ce478cb4eb49f1b18dbd8,2025-11-18T15:46:54.250000 CVE-2024-35949,0,0,d6dd716a2ba0d68902839cc3f39969f4e5f6d242b2e5e743413cf7edc8ddc033,2025-03-28T22:15:16.637000 CVE-2024-3595,0,0,299f219cd8929463949e6012be628526df16bc0b75976798ed8df15f665be518,2024-11-21T09:29:57.020000 CVE-2024-35950,0,0,ef079ede60c6c9326dca631d7f2fe485843c48efdf1d2a19a2dc54ee921138e4,2024-11-21T09:21:16.493000 @@ -264862,7 +264862,7 @@ CVE-2024-36909,0,0,cf32a7cfa7799ee4197fefeb2670e9e3fe8c24036481dcfb7b326bd60faf2 CVE-2024-3691,0,0,d0d5563495d9075b90bfaa6d2ab5bbf6dcf82c228d110efa49a20a6893129bd8,2025-02-18T19:04:33.587000 CVE-2024-36910,0,0,965398f938ac02c33ab743ca0d6997217b03f61a61087a6612c1b060ebce2068,2025-04-01T18:35:10.140000 CVE-2024-36911,0,0,a21ced77bab5de494d9f537e5a753b9f6d11a93e8b37fe194a2b05ef648f5c4e,2025-09-30T17:57:44.780000 -CVE-2024-36912,0,1,cd2b559058f7be8a54f6c54368ad808e9bb0f6a494d257507a0f967fdaa02074,2025-11-18T16:23:46.257000 +CVE-2024-36912,0,0,cd2b559058f7be8a54f6c54368ad808e9bb0f6a494d257507a0f967fdaa02074,2025-11-18T16:23:46.257000 CVE-2024-36913,0,0,e31418a171c82c1242a25fe113b47d636aff9209d5fb5ecb187c3515ab8a1ab9,2025-11-14T17:15:31.143000 CVE-2024-36914,0,0,2e81f4336d6814b4c1ea1e01d87bb0a204d184bcf9f133f425ed24e0479d5bc5,2025-11-03T22:16:59.967000 CVE-2024-36915,0,0,1523668ffe4254e96042fa9ef3804a662ab83c85dd6d7f59f5c959b7a65e7d2d,2025-11-03T22:17:00.227000 @@ -273385,7 +273385,7 @@ CVE-2024-47681,0,0,f5a0c6d7379c2cad3ebee4df0e49687fd7f34e91d3784a0eb776da1767bac CVE-2024-47682,0,0,6f8c800aea557312e573b92bd793da7b984bfb0a7c6d6db5208e3366a2a8d02d,2025-11-03T23:16:15.873000 CVE-2024-47683,0,0,4fa376870411e000f5c0acaa8b55355a1c3768cc28f6d419ba424b3474118588,2025-11-03T23:16:15.987000 CVE-2024-47684,0,0,79febfd6cdf4af53072d521f690d711b358da9161ce5fa7807c4b4ccc5702ca0,2025-11-03T23:16:16.087000 -CVE-2024-47685,0,1,4e3b17c614380c74324f25d369d0868d506a32a411fbedf54f44d9b76a467493,2025-11-18T15:36:36.730000 +CVE-2024-47685,0,0,4e3b17c614380c74324f25d369d0868d506a32a411fbedf54f44d9b76a467493,2025-11-18T15:36:36.730000 CVE-2024-47686,0,0,be022f13f7458e41fbaae5e92886f2973a76f294de2dec9580fb720aa90b6fc4,2025-11-03T23:16:16.593000 CVE-2024-47687,0,0,a3d6a2e91e9933cae5247d0ea22d1665674de7914eef8f166aad1fc953fc7545,2024-10-23T15:22:45.867000 CVE-2024-47688,0,0,82d650929d7296cb09f0c0132981c420482e14a0a2283d085ebecc899c6a988a,2024-10-23T15:36:21.977000 @@ -285250,7 +285250,7 @@ CVE-2025-0616,0,0,3b45a99e1285f31c0d74889567311fd5c4c70b427a83d06d6b42450e938a01 CVE-2025-0617,0,0,f628b1ad73170d04122e24ddb3e888ab06e1591d9b8c499515e522c90868af4e,2025-01-29T11:15:09.330000 CVE-2025-0618,0,0,a593804ad72ce2a28c45218d44c74c44e97fb22bf3ef7b7191613950f392edd2,2025-04-23T14:08:13.383000 CVE-2025-0619,0,0,916ed4984782d6b383b18b82cdda69dfa1bc02b5b5fd4b3cf84e457f0a50f67c,2025-10-03T00:12:16.513000 -CVE-2025-0620,0,1,118d10ed4ca26808f156ecfa17360d824eba330fd3f68e6f38047a7264aa2390,2025-11-18T15:46:16.790000 +CVE-2025-0620,0,0,118d10ed4ca26808f156ecfa17360d824eba330fd3f68e6f38047a7264aa2390,2025-11-18T15:46:16.790000 CVE-2025-0622,0,0,ca5cac01aef0a26d89389c5d38feed71de8b3146abb6edef8651b9f5f3ea4b92,2025-09-18T09:15:34.980000 CVE-2025-0623,0,0,341d910d0f0f4575e107592c92f38288f68e01fe716af21df488a6d82193e481,2025-01-21T17:15:16.817000 CVE-2025-0624,0,0,5e7cc7e5662444cde03f306d8020f755456ce74e001137340eb6cbb9d3fbcdcc,2025-05-21T15:16:04.547000 @@ -285723,7 +285723,7 @@ CVE-2025-10151,0,0,51ad0dc41919664f9fe62d9973b7d00317ac251a826c38829026cf06941bd CVE-2025-10155,0,0,35edb945359b3f752ea2add24f6ff84f24c4277669a4c651e30e1f0d159d894b,2025-10-02T19:07:57.567000 CVE-2025-10156,0,0,6d3ef6b40ccd3ea297855a18dffd123d78d7a2d409cf0f85b72f9fe0f7f8509d,2025-10-02T19:04:56 CVE-2025-10157,0,0,b17616161ffab2d33f0afe4579d1af56a56c4f84d1ed50f3753ea5e72001f6eb,2025-11-13T17:02:36.447000 -CVE-2025-10158,1,1,424060dbc660a9933c07f0fa012aecbe53d8eb8376bd6370222035bfe5fc8a1a,2025-11-18T15:16:25.433000 +CVE-2025-10158,0,0,424060dbc660a9933c07f0fa012aecbe53d8eb8376bd6370222035bfe5fc8a1a,2025-11-18T15:16:25.433000 CVE-2025-10159,0,0,bc2479901e344925c1fed5794edfaa0042e7c3b6babefeba0a8d881177127b61,2025-09-11T17:14:25.240000 CVE-2025-1016,0,0,88332aebfb37c8a0374f29bc24b1377b0ad5dcb8286967b11f4b56907f40b1e8,2025-11-03T21:18:51.740000 CVE-2025-10161,0,0,5fa5d6ad6b37d8aeb95dd4223321a3b2024455220f0d65cb023b729da8135e31,2025-11-12T16:19:34.210000 @@ -286483,7 +286483,7 @@ CVE-2025-11018,0,0,3d615abfae22fd3267166f0906610a3c1e2b728b5797b0b89477946fed7ae CVE-2025-11019,0,0,27449200f275ecb1a95e5c83535fa5a59269619c1e37554c6445345c2cd61de6,2025-09-29T19:34:10.030000 CVE-2025-1102,0,0,4a68cb9f9249da7caa7d3660d94ec38d088bf93b417930cb57da5ccb645c2710,2025-10-24T14:58:28.943000 CVE-2025-11020,0,0,3ab673aeb3c468dd0bed703867cbc3aff35f3041dff84a0f7d2609a2cf91ca20,2025-10-02T19:11:46.753000 -CVE-2025-11021,0,1,235f911260592c01511092f237b764ca2938159bd12895a7fca96f85dda33134,2025-11-18T15:16:25.700000 +CVE-2025-11021,0,0,235f911260592c01511092f237b764ca2938159bd12895a7fca96f85dda33134,2025-11-18T15:16:25.700000 CVE-2025-11023,0,0,07d329ffc8d95134e826de681be88316432d2bfd1bf8b02a01273a7b006bb130,2025-10-27T13:20:33.350000 CVE-2025-11025,0,0,f3276fe94d07d47ffee93b64b3a9b4e2b0092ef1edcf638f6779726c2b526589,2025-09-26T14:32:19.853000 CVE-2025-11026,0,0,ea0f3fe6b26cbedffd9b9f222ef7d8819bf3df2bb4de5eddf00d118e77051069,2025-10-08T20:22:33.550000 @@ -287609,12 +287609,12 @@ CVE-2025-12367,0,0,fdc4e13dc4823c4f2ebd516855f0994820a812a71426c0158ba005b28d73e CVE-2025-12369,0,0,7138931d181b1186e76b17d1fe262d14551c9ffda7682171860d81fc16e0589f,2025-11-04T15:40:45.533000 CVE-2025-12371,0,0,728a3d354d73aa4b3531e521ba186b9f829eabbfe71fb19a23bbc9800f341ff3,2025-11-04T15:40:45.533000 CVE-2025-12372,0,0,507dfd31f27bba5c97b79fea61f2048f47b69ddb97b4c3c9834f1906ebde3b16,2025-11-18T14:06:29.817000 -CVE-2025-12376,1,1,246d9f8b08bbc75a0d9a8d45612a9588ccaf931f1e196cd27664194f54c6bdef,2025-11-18T15:16:26.140000 +CVE-2025-12376,0,0,246d9f8b08bbc75a0d9a8d45612a9588ccaf931f1e196cd27664194f54c6bdef,2025-11-18T15:16:26.140000 CVE-2025-12377,0,0,5fe8af51f693a3315c2fc7454303643d9155686b329504340c61ae068adf9531,2025-11-14T16:42:03.187000 CVE-2025-12378,0,0,c3a29d7df65813584da9089434d3fe18d740b7c41026db1ceb1b9e7f025e265b,2025-11-03T16:55:44.037000 CVE-2025-12380,0,0,bb60ed904b5cd07f28ccf0b8c547579a2eaedffe194eb86f05bbbc7c86475bc6,2025-10-30T15:05:32.197000 CVE-2025-12382,0,0,40c62c44a982f767a54e0a55ac1fb6c62289d5230f508981fbe38bcbef0694dc,2025-11-13T11:15:51.097000 -CVE-2025-12383,1,1,36617d7ed9ad020403b4dfeac0a92bd2f7bbbbead8f9400600ef70c949aa6910,2025-11-18T16:15:42.867000 +CVE-2025-12383,0,0,36617d7ed9ad020403b4dfeac0a92bd2f7bbbbead8f9400600ef70c949aa6910,2025-11-18T16:15:42.867000 CVE-2025-12384,0,0,26981709d2e27415205054fd89b3ac36337e3e1c964199a4211178bc74a34fe1,2025-11-06T19:45:30.990000 CVE-2025-12388,0,0,4fba8586ead4e35723ba1383f9400c371521fe6c5c573183e8007f7470999e24,2025-11-06T19:45:30.990000 CVE-2025-12389,0,0,717f3ca6168cceaaf20050505e8a7873f912c0d856e33621015d5a9806e232e6,2025-11-04T15:40:45.533000 @@ -287724,7 +287724,7 @@ CVE-2025-12538,0,0,6741e4452d191688e445cbfb71ca34e020f201e0b0726fcd9a21a802421eb CVE-2025-12539,0,0,73c8f0f705fbb477f278bd69ab561fc25e7e90e92b993de563782accb6cee609,2025-11-12T16:19:34.210000 CVE-2025-1254,0,0,2d42fe39b0469e8dea2e9e07ad0ef18f353c9bfde6249c7137d267d3e130782f,2025-07-31T14:15:33.970000 CVE-2025-12542,0,0,b1dd14061e73696fc4b0d855ef581923272001779d54c31160a942a911c5f336,2025-11-10T23:15:41.523000 -CVE-2025-12545,1,1,6a310a44ab9487ab9530d57cbb6de73d81580910c02bbd7871ab90a33eb8afdb,2025-11-18T15:16:26.483000 +CVE-2025-12545,0,0,6a310a44ab9487ab9530d57cbb6de73d81580910c02bbd7871ab90a33eb8afdb,2025-11-18T15:16:26.483000 CVE-2025-12546,0,0,e053a61bce46e09ea18eced2c60fd9d8a445d1a562f0ece9e830f406c57ab314,2025-11-07T01:30:56.277000 CVE-2025-12547,0,0,5daa02618e2dec455cded61beb92c5a781fd09a2485f948a3e7e4cc5feb6bdcc,2025-11-07T01:36:29.650000 CVE-2025-1255,0,0,1aca6f27929ccb759d7d03416bffcd39b922af5d9c0ec230e9461392103e3756,2025-10-02T13:44:49.900000 @@ -287834,6 +287834,8 @@ CVE-2025-1275,0,0,37ac9eafc83f367a9b020f98459eacda940bbbebedd7c265613d3a0c3d38bd CVE-2025-12753,0,0,dce5488b6a7e1342b5f0ee5bf5522a34d7f724ae148d764c7afd4a1dd45f1372,2025-11-12T16:19:34.210000 CVE-2025-12754,0,0,c80a4804ba616568e0704a3735004746ab5b310abd5ad2c2e74aaf0f477e6450,2025-11-12T16:19:34.210000 CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000 +CVE-2025-12760,1,1,e58e734c01b9e705e0ccc9dded1b4442ca20ad2cdd0e2db08b162191d224664e,2025-11-18T17:15:58.383000 +CVE-2025-12761,1,1,e0e28ac17152351f5ef58f345a2befca1fdb6fffc9f06e7008dacc1fe620165d,2025-11-18T17:15:58.570000 CVE-2025-12762,0,0,8bf5c1169a12280ca9e8c05e74f8da3bf0bb75f5971c61e92b90d09437e07df2,2025-11-14T16:42:03.187000 CVE-2025-12763,0,0,02196817a5506874f560be4749815dbb652d42f9a0c544f20a64aa29d0384565,2025-11-14T16:42:03.187000 CVE-2025-12764,0,0,38a959e027784f68235a6fe6588cab0db66a0c635427189538b480e443d0796e,2025-11-14T16:42:03.187000 @@ -287880,15 +287882,15 @@ CVE-2025-12860,0,0,ba372730de42f3d82e9ccd30505457c4266d0293742b94fdec771cf9e4fb5 CVE-2025-12861,0,0,5562de5c70b6a09fe0ecde4d96d0241263c1a2e0002abb79bdafcca4759a0207,2025-11-12T16:20:22.257000 CVE-2025-12862,0,0,204e1ea810e5085277ffc4732b25c1a3a92d893d4b90fda8bb5bf26cf0eaf764,2025-11-12T16:20:22.257000 CVE-2025-12863,0,0,20663d968689e8410d5db760f594aec3005b3b148d2f0b2bd3c305e63a1d462e,2025-11-12T16:20:22.257000 -CVE-2025-12864,0,0,29db13a12718b7e55716eb20a7ed2f3f1a9087115586a9a9aadfdc9466652b79,2025-11-12T16:19:59.103000 -CVE-2025-12865,0,0,3531a9c620129080d00e5ce8900c8554983e5c27178c9a062f94be78d710f182,2025-11-12T16:19:59.103000 +CVE-2025-12864,0,1,0489db4cc8828518b13c1c7283080dc3f0a975044ad53eda805fa1e9d25f3ba8,2025-11-18T18:04:46.590000 +CVE-2025-12865,0,1,072ac174ae6734438aa9778d98077cf2288fe4eae78ea8b0b840918cab8df955,2025-11-18T18:04:27.180000 CVE-2025-12866,0,0,f92022733c7f8c0bbdf8cfdd8a664557505003707b39eb29e7273840b1ccb643,2025-11-12T17:15:36.430000 CVE-2025-12867,0,0,e4b3e8a323057fe811cb9fe90d8e85fc890c4b3374fa0f03797b08c2722adc7f,2025-11-12T17:15:36.550000 CVE-2025-12868,0,0,04b23ed68dccb08c62697f77800656f9898c278940289686eaef908d3b705fcd,2025-11-12T16:19:59.103000 CVE-2025-12869,0,0,02f46ee2bdefb412db64e833ee4b6dcc194a06e7f0fc7d661a1bc020c7e242c8,2025-11-12T16:19:12.850000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 CVE-2025-12870,0,0,bed455d6e4b57e6315cc28cc79cfaf5beb2e1dd07bed95e81ca93bb938d7a82c,2025-11-12T17:15:36.727000 -CVE-2025-12871,0,0,520d3abcfc838a4e4b02b09c56c1725ded3810c209e360d6fb0f2871d549bd14,2025-11-12T17:15:36.847000 +CVE-2025-12871,0,1,dabff4312f3828f70697288d6edae387238ee6033ff52304891a3445ad46a568,2025-11-18T18:28:18.553000 CVE-2025-12872,0,0,5d6e27a96d7cff7fd4c84328cc098620dd62741aabe32bb21e4bb805e36000d2,2025-11-12T16:19:12.850000 CVE-2025-12873,0,0,cbcf909479837fc513838de8ac6a4a1ed9971564b7b62da08c005d09cc55f6b1,2025-11-12T16:20:22.257000 CVE-2025-12875,0,0,51cfde61e1a699aa33da43f9d733dee4f24e97424bcd86ea27b5881d5e441013,2025-11-13T15:15:49.763000 @@ -287927,13 +287929,13 @@ CVE-2025-12922,0,0,f49ccbd569c66c7a1241edbbb6e8e257743a01caefe096ea152247a519e63 CVE-2025-12923,0,0,c4a5971e61e942846cfa5fb97c18f88c407fdda9031853425be6036aab01e946,2025-11-12T16:19:59.103000 CVE-2025-12924,0,0,3949d706f061685b75e9ca674bdb002cf9f3343aa43bb6404f28be058685cdac,2025-11-12T16:19:59.103000 CVE-2025-12925,0,0,b2b3998fc00839146424f24349e43dd253cc3711c75036c7bfda6ee4aba972df,2025-11-12T16:19:59.103000 -CVE-2025-12926,0,0,65bbd25f8c24a1226affe3579555315267b25d64ac5e30480c20d55644e63a9a,2025-11-12T16:19:59.103000 +CVE-2025-12926,0,1,56a762e7adbc957c95d6f211ca000848ea248ca1b195c99fac6de83a78e44995,2025-11-18T18:03:27.043000 CVE-2025-12927,0,0,db49860d52662d6d18c73d7a2600036793fbdd7880601940fa39b54fb6be21e2,2025-11-12T16:19:59.103000 CVE-2025-12928,0,0,bc93b7aeaa531d98cddd8aca26502b5b1e31271347764905a42797e9ed05aa90,2025-11-17T19:18:40.530000 -CVE-2025-12929,0,0,ca0d1ef6d939ceeb44a38957300a133cc608cffcc8a0bd322f8864463e5cd32f,2025-11-12T16:19:59.103000 +CVE-2025-12929,0,1,74e769043c2c60ff940affa69f91f78826221b8514ab6f34a03dd3ee973c9049,2025-11-18T18:02:42.837000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 -CVE-2025-12930,0,0,27abeadb38fc8959bec5b7a597619055f7804da0028f6b341a329f93f63b057b,2025-11-12T16:19:59.103000 -CVE-2025-12931,0,0,a2e653aea649bf7ef34735b9458a2e350f9de273587602452ae10e364832bc18,2025-11-12T16:19:59.103000 +CVE-2025-12930,0,1,c59dd02dc376be1ab5d84e7522b504c92d16676a27c4074e9fe1cc816c572686,2025-11-18T18:01:49.560000 +CVE-2025-12931,0,1,a65997d2e7f39d32d04a4685ec5485b1d4b6006be4ea54b4e95602bce3dc1d48,2025-11-18T17:57:22.283000 CVE-2025-12932,0,0,e603d9bc10fddbc01c4f5674c4ab1f2d39c8461d2c91bb8d10193c505c600f27,2025-11-17T12:42:33.317000 CVE-2025-12933,0,0,64aa276681d2d5fe0da66f392e04d849d24740c70c3ca96e4e8e8d7c5e5139c5,2025-11-17T12:42:20.207000 CVE-2025-12937,0,0,6485cfbbf4070a5b794089de1a5540b431669840474dc82e785bf8e81d563ec8,2025-11-18T14:06:29.817000 @@ -287997,6 +287999,10 @@ CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb CVE-2025-13075,0,0,3f1665f9621635bc55b6e8fe88ef98ea4632aac4e1a5ca7e9f1d5196c68f2fd3,2025-11-17T19:18:12.263000 CVE-2025-13076,0,0,cfff693171066f169a01803cb43220ca6b4f1d97d1b79abf7ff51d29a3f8fa95,2025-11-17T19:17:59.923000 CVE-2025-1308,0,0,73e17aeb6de3d57ecba00a18ccc8ae4e9076e7a79f5357613a6cf6f554b00b65,2025-05-21T20:25:16.407000 +CVE-2025-13080,1,1,61f9060344d377d40631f2bfbabba39c979d0743aa7667e5fffc4258e49d6135,2025-11-18T17:15:58.813000 +CVE-2025-13081,1,1,654b64aa3d4b4fa7b7d295b97c68a3df68a3ccdef060441da16050dca26e7ac3,2025-11-18T18:16:06.780000 +CVE-2025-13082,1,1,be5eba486e3370317524f9f3b7fa4bb63e4fc0ccf6fe826e303fda6cce2388cc,2025-11-18T17:15:59.163000 +CVE-2025-13083,1,1,566b66d05f5fc19038f7d8893d20c3832b5b0a503ed5cb3a4acd6598d89e4f0d,2025-11-18T17:15:59.313000 CVE-2025-13088,0,0,dc043644cd4125a857741cf9a91450bd763157cc91b68ab66e721861c232b0f0,2025-11-18T14:06:29.817000 CVE-2025-1309,0,0,5d2b17215fed7de1b66f6e9e5fd86a1c64bff76093266d0c2270f4eeb2161dcf,2025-03-07T08:15:42.017000 CVE-2025-13097,0,0,0a463c7146931e807334c871d0e683f7d8bea2d0ec5ce4001c32f9829ca46e11,2025-11-17T12:23:36.557000 @@ -288052,17 +288058,17 @@ CVE-2025-13191,0,0,62d08b28e17f95267fdb39cef43be8ce6f89f84170f62382e0c18f0930474 CVE-2025-13193,0,0,db168a9ea1092c51af85cde0ebd583eff893f3965437015732e68957dc6c9503,2025-11-18T14:06:29.817000 CVE-2025-13196,0,0,17d12e5214c08fa1474b4612fc0bb5d35a03b96060c1af8a604b2b56a5be7715,2025-11-18T14:06:29.817000 CVE-2025-13198,0,0,730b55e9942dfb170abee2146662fe200542960b4293bf094b4807af542d0022,2025-11-18T14:06:55.963000 -CVE-2025-13199,0,1,13e08647c48615467ccbcf2625ea85828a7f2837ae589ba42356df5f977fff8b,2025-11-18T14:06:55.963000 +CVE-2025-13199,0,0,13e08647c48615467ccbcf2625ea85828a7f2837ae589ba42356df5f977fff8b,2025-11-18T14:06:55.963000 CVE-2025-1320,0,0,13286132de07d5b3e75d1dc00002068d71264e2873deeb1c22836d23ecec950d,2025-08-11T14:14:38.580000 -CVE-2025-13200,0,1,68c9a67b938a84d93c27212f81aacfebe2f959fd985a3c76f5e8ebfef75658ff,2025-11-18T14:06:55.963000 -CVE-2025-13201,0,1,18f83eb9bac879f2500592a7160ef1ba41cd1c3f79e2b887f8c90a2354de251d,2025-11-18T14:06:55.963000 -CVE-2025-13202,0,1,21cd3291d9d7b9bc36a25aa059472b40da339a9e407cf9186088d968142f73e0,2025-11-18T14:06:55.963000 -CVE-2025-13203,0,1,60f9ea2a4bcd8f4e21f7878a0dee7c4f689d03e5246babb4c2c4c932cebb7cb5,2025-11-18T14:06:55.963000 +CVE-2025-13200,0,0,68c9a67b938a84d93c27212f81aacfebe2f959fd985a3c76f5e8ebfef75658ff,2025-11-18T14:06:55.963000 +CVE-2025-13201,0,0,18f83eb9bac879f2500592a7160ef1ba41cd1c3f79e2b887f8c90a2354de251d,2025-11-18T14:06:55.963000 +CVE-2025-13202,0,0,21cd3291d9d7b9bc36a25aa059472b40da339a9e407cf9186088d968142f73e0,2025-11-18T14:06:55.963000 +CVE-2025-13203,0,0,60f9ea2a4bcd8f4e21f7878a0dee7c4f689d03e5246babb4c2c4c932cebb7cb5,2025-11-18T14:06:55.963000 CVE-2025-13204,0,0,1bcc056f74dbd4f6c6928a579b909aad76c4490fc279ef426c7675fc4132fbe6,2025-11-18T14:06:55.963000 CVE-2025-13208,0,0,d92a8925bd99a853a870703a1cc8afae2e2338cb5fd0f05a3d97fb13a3fae38f,2025-11-18T14:06:55.963000 CVE-2025-13209,0,0,a5c37dd48a116ab36a3ce65010557175f0568972913b6670d63d4a4b35566e73,2025-11-18T14:06:55.963000 CVE-2025-1321,0,0,3da7738bfdaa0898de004d40e4fadbe2a67a378d68f0f0d09a0d5c3a6126abd2,2025-03-05T18:46:16.890000 -CVE-2025-13210,0,1,a79c78298ddfcf2d7c833a4fffe1f70da6d65bcaebb243b0b564ecd75e83c846,2025-11-18T14:06:55.963000 +CVE-2025-13210,0,0,a79c78298ddfcf2d7c833a4fffe1f70da6d65bcaebb243b0b564ecd75e83c846,2025-11-18T14:06:55.963000 CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000 CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000 CVE-2025-13221,0,0,f11e0d2569a48d2fcac26bc250b2c712a99ed195f472f50be6a93a8ffd553a97,2025-11-18T14:06:55.963000 @@ -288075,20 +288081,20 @@ CVE-2025-13229,0,0,c929d3227c40260f998759088a3318c37f9ec8cfc738e0d50d0d704ce08c5 CVE-2025-1323,0,0,b0f3bc5e76c99481e26517f66c3e5ae3fc1e8b63a6b6098651bbb6d69ab76e54,2025-03-12T16:24:59.343000 CVE-2025-13230,0,0,d73973f5da689d7870895c181384e82fc76d2314b3de46dac822d18322830a65,2025-11-18T14:06:29.817000 CVE-2025-13232,0,0,493386dc63b8ed95454a5fdbf02008a5a17901f580455fcf09ec505e81c3c955,2025-11-18T14:06:55.963000 -CVE-2025-13233,0,1,71b6d4839ccc4c3de3400a4386f5be09a665ecf642a8d5fefc4074c2e26e8edd,2025-11-18T14:06:55.963000 -CVE-2025-13234,0,1,2bee2eabffb9a2bedc17d5bba5e0bedd8ab88ca13cf487f4b27ee42adf868aa9,2025-11-18T14:06:55.963000 -CVE-2025-13235,0,1,6572238949c8e933f78e834d28594ac542aa76b199b7d5c4841e8dc35851c121,2025-11-18T14:06:55.963000 -CVE-2025-13236,0,1,fe2c8b5f3c5d9dec1f97870d24181db4c93ddf165fc5fa89b427ea1ba11f943e,2025-11-18T14:06:55.963000 -CVE-2025-13237,0,1,ad75b786bad35d5855e68e35b1b317e2c6939bf479744a9b26514a26dc24a81b,2025-11-18T14:06:55.963000 +CVE-2025-13233,0,0,71b6d4839ccc4c3de3400a4386f5be09a665ecf642a8d5fefc4074c2e26e8edd,2025-11-18T14:06:55.963000 +CVE-2025-13234,0,0,2bee2eabffb9a2bedc17d5bba5e0bedd8ab88ca13cf487f4b27ee42adf868aa9,2025-11-18T14:06:55.963000 +CVE-2025-13235,0,0,6572238949c8e933f78e834d28594ac542aa76b199b7d5c4841e8dc35851c121,2025-11-18T14:06:55.963000 +CVE-2025-13236,0,0,fe2c8b5f3c5d9dec1f97870d24181db4c93ddf165fc5fa89b427ea1ba11f943e,2025-11-18T14:06:55.963000 +CVE-2025-13237,0,0,ad75b786bad35d5855e68e35b1b317e2c6939bf479744a9b26514a26dc24a81b,2025-11-18T14:06:55.963000 CVE-2025-13238,0,0,890b187b5e9270fffb048dc586f4db5c396790afb421173c329863be557c6615,2025-11-18T14:06:55.963000 CVE-2025-13239,0,0,170bb97ecc1e5f096170070a50e20fdaeccffa304da9bf37d1b64f33dab719b7,2025-11-18T14:06:55.963000 CVE-2025-1324,0,0,0b272f0faceca289f0c40e81d7e67cfed130feb379b2f510016e8db4dc34ecdf,2025-03-24T18:13:16.743000 -CVE-2025-13240,0,1,41c414d337e0a90fa056ec77d1f33444fd49b2937072a759865f710393f8346b,2025-11-18T14:06:55.963000 -CVE-2025-13241,0,1,786ebe07de52034ef5429dfee282ffbb65670e500b9319fe4a04c8a53cc6c702,2025-11-18T14:06:55.963000 -CVE-2025-13242,0,1,7bb4f42e060da127211d858ecbd695e62578046f013783d09fe67ff6df68d310,2025-11-18T14:06:55.963000 -CVE-2025-13243,0,1,d29a9ad44e24901f921f7130bf2fde145282c12669ae5c5ac904ea1b98cede7f,2025-11-18T14:06:55.963000 -CVE-2025-13244,0,1,4404e85613199a4abcc75bf3a2540f76b56f7cebcdbb3a6dac1ed4c576d727a4,2025-11-18T14:06:55.963000 -CVE-2025-13245,0,1,41addbb9a46f312b417aa5dfdb9bbc6b36f1afc575a4cb6ab6b94838f2f40911,2025-11-18T14:06:55.963000 +CVE-2025-13240,0,0,41c414d337e0a90fa056ec77d1f33444fd49b2937072a759865f710393f8346b,2025-11-18T14:06:55.963000 +CVE-2025-13241,0,0,786ebe07de52034ef5429dfee282ffbb65670e500b9319fe4a04c8a53cc6c702,2025-11-18T14:06:55.963000 +CVE-2025-13242,0,0,7bb4f42e060da127211d858ecbd695e62578046f013783d09fe67ff6df68d310,2025-11-18T14:06:55.963000 +CVE-2025-13243,0,0,d29a9ad44e24901f921f7130bf2fde145282c12669ae5c5ac904ea1b98cede7f,2025-11-18T14:06:55.963000 +CVE-2025-13244,0,0,4404e85613199a4abcc75bf3a2540f76b56f7cebcdbb3a6dac1ed4c576d727a4,2025-11-18T14:06:55.963000 +CVE-2025-13245,0,0,41addbb9a46f312b417aa5dfdb9bbc6b36f1afc575a4cb6ab6b94838f2f40911,2025-11-18T14:06:55.963000 CVE-2025-13246,0,0,739e637c411809ee4cb31d84ada319110813a74c043eed2bb4c403769954bb61,2025-11-18T14:06:55.963000 CVE-2025-13247,0,0,650dc81f11fa4d0739c24a2db8323cc30eef06977642a3733ccbcfce7a49e635,2025-11-18T14:06:29.817000 CVE-2025-13248,0,0,9f36359b872067636e8728d09d88c5c96cd9ddfa230886e0bf02281e5dc4a8b7,2025-11-18T14:06:29.817000 @@ -288146,24 +288152,24 @@ CVE-2025-1330,0,0,e5548d630b4a5d00be349a3ec4aba946ab4046a68f7f0746f75dcc659a1ef9 CVE-2025-13300,0,0,b4cb53f9e922aa987c71f95dc1143058a0e012cd7b2adb3a7a8019ee2d4b4a48,2025-11-18T14:06:29.817000 CVE-2025-13301,0,0,59400d214d70a156cf84e50f313aae95a6372d7fbab37274a6e7e20f783d8906,2025-11-18T14:06:29.817000 CVE-2025-13302,0,0,3c89bc125b0d410d6fc8678d03f99dd699b7138e32d6c2f036acb6b94abbe18b,2025-11-18T14:06:29.817000 -CVE-2025-13303,0,0,46d7dcde857e56015d54c6da7f380fccb1ea957e41823746cde4457a7f078a4e,2025-11-18T14:06:29.817000 -CVE-2025-13304,0,0,315285ec3c1dca90ac26e19c8c703a86283f50d98c915bd12e94d18468e1b6e5,2025-11-18T14:06:29.817000 -CVE-2025-13305,0,1,812746f38deae9d139b8f6716b88d64e79f1fd06b06b36cecfefdac13696344b,2025-11-18T15:16:26.957000 -CVE-2025-13306,0,0,cf9751d24327432ecbde216c86c1c91c3f11e8f21a1eed64ff46f6ec0d5a6723,2025-11-18T14:06:29.817000 +CVE-2025-13303,0,1,0fe61e94ac1df28b84e39e1608864ef8cb8777417d72f2d12f2bd318acbff2e6,2025-11-18T17:15:59.490000 +CVE-2025-13304,0,1,d9e4c1e05c6b48c701b862f346a4360af1adbe23ff0cd5d83db0982a8088782b,2025-11-18T17:15:59.707000 +CVE-2025-13305,0,0,812746f38deae9d139b8f6716b88d64e79f1fd06b06b36cecfefdac13696344b,2025-11-18T15:16:26.957000 +CVE-2025-13306,0,1,cadc4f1066d4003e55c2127f7ce0caf22a3e0614d7fbc8a5a03a66eb20c4b493,2025-11-18T17:15:59.897000 CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000 CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000 CVE-2025-13319,0,0,3b98245f83c8baf13b15f741f25bdc9df65bda9dcddcde35cd78ae519a4a5e27,2025-11-18T14:06:29.817000 CVE-2025-1332,0,0,651a32ff0ce1e4c178256e4e7fa7755a14b2351228c1c710a764ce12601a0c92,2025-03-04T17:17:39.640000 CVE-2025-13323,0,0,ab62e308ef93f5a983c4f45aee806767c5d1f9fc417c67ea848b0d5d79bbcb40,2025-11-18T14:06:29.817000 -CVE-2025-13325,0,0,ce34e64d54e6387c083b4c2fc777fc23bc1832dcc29538b66eb821c8d4ce4456,2025-11-18T14:06:29.817000 +CVE-2025-13325,0,1,ffcccbf01ca838c0c5b005cf78ddb2d87692bf7e9638d494b4fcd0ea67775a93,2025-11-18T17:16:00.190000 CVE-2025-1333,0,0,4ee465b51a4a069cb257fed9914f5e7ef1c93ab3d9ee351936b316e7a69cce78,2025-08-25T17:27:30.640000 CVE-2025-1334,0,0,68abe056ab92b6fe06d69183ba7a4c9642dbc3d5cbc6dfff5a401743920f909c,2025-08-12T20:06:55.380000 CVE-2025-13343,0,0,bb4d89fbf4a4d1e3e0b232f0655b0d712a763f52f7285e4df258df9e92bf08bc,2025-11-18T14:06:29.817000 CVE-2025-13344,0,0,16d13dbf8bc92da0c01dd33051f42f238e8ba3fbd0fec425074cf6e25b17e7a8,2025-11-18T14:06:29.817000 CVE-2025-13345,0,0,2e0c7528a923cfa19f223f32c0210edf19881ff14c36175b1c178ab1b9fd7caa,2025-11-18T14:06:29.817000 -CVE-2025-13346,1,1,8db71a286072b59c77761617ac5411f0c1af4a75bea3c45abfd4fa67af0266ca,2025-11-18T15:16:27.323000 -CVE-2025-13347,1,1,8b80dbfec313cfedbcf93059e8ab4008e33a9611d66ea3d13b19bb0cfa1e440d,2025-11-18T15:16:28.973000 -CVE-2025-13349,1,1,44f98488baa49e194a9dcef8b81f9932b12a3cc773574f97595f871e7e9057f7,2025-11-18T15:16:29.883000 +CVE-2025-13346,0,0,8db71a286072b59c77761617ac5411f0c1af4a75bea3c45abfd4fa67af0266ca,2025-11-18T15:16:27.323000 +CVE-2025-13347,0,0,8b80dbfec313cfedbcf93059e8ab4008e33a9611d66ea3d13b19bb0cfa1e440d,2025-11-18T15:16:28.973000 +CVE-2025-13349,0,0,44f98488baa49e194a9dcef8b81f9932b12a3cc773574f97595f871e7e9057f7,2025-11-18T15:16:29.883000 CVE-2025-1335,0,0,564364b2f61e7747ac590848e7f26fbef6a8ec644fa7858b0ae594d6c732e9b5,2025-02-28T19:56:39.220000 CVE-2025-1336,0,0,5bb81efefa47b6b10a748758c689250ae0a85244c2bc3fa4b57d2310008c62b3,2025-02-28T19:55:19.603000 CVE-2025-1337,0,0,d50b5c2b5aabd36826ddbc10fd1c9ad645d3a485550527f95248dd387d871087,2025-04-09T13:15:41.100000 @@ -292421,7 +292427,7 @@ CVE-2025-23946,0,0,9de3ccf4350f51c6d8e67eab9fdaace2b0128c36302335bbd7ddc29cf4115 CVE-2025-23947,0,0,b918dd9018ba545f112604d29f16795478738d9868aa76eb24c352a7a4e3c4ec,2025-01-16T21:15:36.670000 CVE-2025-23948,0,0,fa217fc33fb3c65287110150a4613d620cf18c0fe66132ab121eab1307585f10,2025-01-22T15:15:26.383000 CVE-2025-23949,0,0,d90495090ae00e6e58d5cfea56b4f220cf8c7c1a45a835ce24e1ea30c09f925d,2025-01-22T15:15:26.527000 -CVE-2025-2395,0,0,8db22957e69f6bbc9dec5c4ad48012ffedb8bf0219d8dbf60bb6e01857e50bd6,2025-03-17T06:15:25.910000 +CVE-2025-2395,0,1,ceb71ce4cbf847b20fe00fb786d3b64cea8feac784ae69c329cb8e7d2ba5f447,2025-11-18T17:46:29.060000 CVE-2025-23950,0,0,4ac29c4dd1a428d4afa0ee44a692bfd3a045bfda7b0c1933c7ec004bbdec77a8,2025-01-16T21:15:36.817000 CVE-2025-23951,0,0,2d32c1931f285be8ff0de2b01cdf7652c918f38bc79b845ac3d321ee8c1bb84b,2025-01-16T21:15:36.983000 CVE-2025-23952,0,0,663ce0774992df2d4e82d93997307f804e8274c4eb5514be7679fac6976387c3,2025-03-27T16:45:27.850000 @@ -292432,7 +292438,7 @@ CVE-2025-23956,0,0,15f2dcb32df35e2b8473f6870c5d0b4c83cc77afd7741dc7fb30f1d524230 CVE-2025-23957,0,0,40b759ae20a341b30b3caf9db81dbe00398828638d81ba3346ad7f7cf25fc424,2025-01-16T21:15:37.420000 CVE-2025-23958,0,0,6f7f1d209d3544d4516058b664d2587a49eabc375b38037b1c374dfa50565579,2025-04-17T20:21:48.243000 CVE-2025-23959,0,0,4d3ba4ca608a53eb6870e6e5b2be4b542170ae3caec5feb8a182291e655509aa,2025-01-22T15:15:26.810000 -CVE-2025-2396,0,0,a1089f5d9b452663468528f9e7ca954cc57f8349df33c95acd3dfb7b279d16c6,2025-03-17T06:15:26.113000 +CVE-2025-2396,0,1,2ce2be54dcab709b86befcd417b8d1c5ff50a15b3479bf1861f17ec305875e63,2025-11-18T17:45:59.737000 CVE-2025-23960,0,0,fef5413834349b73f28bcc0fec0108a4368773674c1a2ae5d7728e978b8298e8,2025-01-23T16:15:40.777000 CVE-2025-23961,0,0,36c0da688ed3e8548f86716b57ea278db435c869e71f4caf3f9de5e6869464d4,2025-01-16T21:15:37.573000 CVE-2025-23962,0,0,38c72a66f748d246b44f5351bf9ff0f3b3815cc4926f227945695c33eaf96317,2025-01-16T21:15:37.730000 @@ -293422,7 +293428,7 @@ CVE-2025-24987,0,0,373e6d09a8ace8cb30dc3914cdcee279354e0dbcfd234bfd436136c7b019f CVE-2025-24988,0,0,865dd4a39f1eb6bb96a45435a2ce453af1f63a7b4194a0e4d20de09f7b43a3a7,2025-07-07T17:34:42.237000 CVE-2025-24989,0,0,9a5d80b1c247e7b6325e1359c2242c7fbbb795c57f5751dba0320c4043b2007a,2025-10-27T17:14:03.217000 CVE-2025-2499,0,0,3c8d6ce8948dad3f3862a248891318bfe8741eeb1c7c9fea64b2e5275865eed3,2025-07-02T17:32:56.357000 -CVE-2025-24990,0,0,55784bdea98ce99a22d7cd34782dd132d854708b51429aa0ffefc4bb79a0b82d,2025-11-17T19:16:18.790000 +CVE-2025-24990,0,1,71024b428789703be9b8823c83810d432aad43cf7b1981abe6b5665478cdb7c2,2025-11-18T17:03:38.993000 CVE-2025-24991,0,0,82ec4558773473509a3352a0487b5a415d63191919994ff062334b3f16501687,2025-10-27T17:13:44.767000 CVE-2025-24992,0,0,ca51c0442648f1c522fb3a3a77647121c595c0b60ddce67866f6f8edefaf9f53,2025-07-03T17:27:58.803000 CVE-2025-24993,0,0,7c2619610d6898577959ab3901f2a16026bd94951fbb905506797edc9895547d,2025-10-27T17:13:41.423000 @@ -296704,7 +296710,7 @@ CVE-2025-30221,0,0,b78962d7d374d57624c57c2bd45520ed73de256e6210780692f628d0e7b67 CVE-2025-30222,0,0,8181bb8e50b5d5403e3aeeed651e80d360ebd306c6c001c9fd5d8239df2af092,2025-03-27T16:45:46.410000 CVE-2025-30223,0,0,753f15683872aa6e5e39748d41ebbf06340321448b53059c05e0a946f3d8825a,2025-08-01T18:58:43.910000 CVE-2025-30224,0,0,4a5da5d18683dad9b13849baa455183b16937940e3de00549e5c3794d7daf746,2025-05-29T22:15:20.577000 -CVE-2025-30225,0,0,cc37e4f779c1e97cd26219457ed556549a6b6364424a050cb8b68a80d988d93c,2025-03-27T16:45:27.850000 +CVE-2025-30225,0,1,54d6b2c66e14048668672fc70adbcc323e6431e5ce8079c4173189fd187d119e,2025-11-18T17:44:59.633000 CVE-2025-3023,0,0,c0506f7d95f0b17e7bc0a73f1252e5bd69aa40179970119460c1a5bbe9e48c68,2025-04-09T23:15:38.053000 CVE-2025-30232,0,0,fdf71925739044e2f5513ebbfbd3ec61af79733118af2bd5821c1983bf05055f,2025-09-30T21:52:55.007000 CVE-2025-30234,0,0,cf20660d6d37e637116a40ce9b3055465db9a1b9c87663c91728f3bae499e866,2025-03-19T05:15:41.353000 @@ -296802,7 +296808,7 @@ CVE-2025-30347,0,0,ed9763d5b530026684262273e310ca4c964268ef0ffc4c726547353dbc677 CVE-2025-30348,0,0,0fb0e9fd503e8730c9a3857e63ee0ac5611b8bb7632a64f763dd19e4ff36427c,2025-03-24T14:08:36.513000 CVE-2025-30349,0,0,d863fcdacafbcc4265f861b9a5ca8402397ade3d5ede94aef0450f050ac91a50,2025-04-03T12:15:16.210000 CVE-2025-3035,0,0,03d49d41973a269f63c10099f775c9d282c755415dac20b290dc221d2ddd8472,2025-04-15T12:55:21.203000 -CVE-2025-30350,0,0,769aed62b7c52c7efff0910786b1540702d43c431a2629a37c544cf6ab27d2c0,2025-03-27T16:45:27.850000 +CVE-2025-30350,0,1,4b68c575a29364a0c2e30dc9094366410a3da26caf94d95b7ee1c1410d215d92,2025-11-18T17:44:38.713000 CVE-2025-30351,0,0,7d42683bcbb1ddea6091e3ccf89351add956b4a5fd1f87b90dde15d1ba2fab8c,2025-08-26T01:36:01.170000 CVE-2025-30352,0,0,e3fa9563751414e49b28d66547874e8460b56e0875bd7b96d9bf7c9a34cd3330,2025-08-26T01:41:50.303000 CVE-2025-30353,0,0,2512e7533340d2d528b439b9dfe85ef0f0ffce2f29e058cd5cf9fca7f96e5856,2025-08-26T01:47:43.713000 @@ -299449,6 +299455,8 @@ CVE-2025-33177,0,0,edeb6348c0e10a51ac07b4119267b9936814302c730069fdad7fc6cafedd2 CVE-2025-33178,0,0,009f3b9e344b013c3a7d0707675afd8eb37122bead93005d28613ecd7dfce2f0,2025-11-12T16:19:34.210000 CVE-2025-3318,0,0,d41455da27266d28e58c612e5331d057733e012f908834dfd039a0c35f682aa4,2025-04-08T18:54:37.387000 CVE-2025-33182,0,0,e33d8f832b7bc23f9bbaa03184f94bd97471143ba69d9ee7ffd66b6316cb15f0,2025-10-14T19:35:56.913000 +CVE-2025-33183,1,1,883d205a9eaa72b2efaa7c8f658fba435aa0b4e4ec23a942177711b3a2d3d8d1,2025-11-18T17:16:00.500000 +CVE-2025-33184,1,1,04e6fa47571594c2c277fd64add791e279ef1131df6e64566650024868d4b498,2025-11-18T17:16:00.727000 CVE-2025-33185,0,0,d46453b27550f250adc9d939222fd5989eafab4fb75b25dc21ee26dd839b908c,2025-11-12T16:19:34.210000 CVE-2025-33186,0,0,26a5b9a87228ec79f09da9eafb23380139b6a11ed15510213c48c3f9681031a8,2025-11-12T16:19:34.210000 CVE-2025-3319,0,0,880669dd684e57eb526d867fa799ce3f0c621351af95b86a7eeee725b908de94,2025-08-13T14:06:26.170000 @@ -299820,6 +299828,7 @@ CVE-2025-34318,0,0,8a136f3d4321b5f2ec628b05406dc714e5fa1de322fbd7b251aeaf3d6550a CVE-2025-3432,0,0,32b4909a605e3dc15d41b2069e1ead14c30bcbe2dfa78debc747a89be022e4ba,2025-04-08T18:13:53.347000 CVE-2025-34322,0,0,21b90c5a15e98bedce7ce7159d674be71e0381e4f438ba6e865c81e11a03eaeb,2025-11-18T14:06:29.817000 CVE-2025-34323,0,0,aaaa99a1df8f503bf367f86780c7b690c94ffc438908196013b1c08d505ae01b,2025-11-18T14:06:29.817000 +CVE-2025-34324,1,1,3d3b09164e501933f10a3b0d019a60a9030ddba864d5bc5cf499292f52bea9b4,2025-11-18T17:16:00.923000 CVE-2025-3433,0,0,46dd66c57af291abbb1b77326145823e13d716692eb68902a18c25a048a17397,2025-04-08T18:13:53.347000 CVE-2025-3434,0,0,b8eaddf3b141c5d0cb4bc5eabf7fd897b349acdd6b9551b14d0e525f524ac410,2025-04-11T15:39:52.920000 CVE-2025-3435,0,0,3d90c60a4cfc3a7bb18551e3234425af7b1b7c42690c282d44da1e223c12fd33,2025-04-29T13:52:47.470000 @@ -300983,50 +300992,50 @@ CVE-2025-38192,0,0,c5ed72cfb6d3bdf096d071e0e28533f6561742edefb242b102c23df27cef2 CVE-2025-38193,0,0,095b4db190b8d085c460b7be4a6c352697b1018f16bd1910de952c8588b9a66e,2025-11-03T18:16:08.100000 CVE-2025-38194,0,0,51755b87b2ccbb6f327f705a88a7cbec315298c48baaa6692fff9186e12a391d,2025-11-03T18:16:08.210000 CVE-2025-38195,0,0,4a69053bec24fbc14d8296632da8ad15bcef70ba20615cd5668b50ff43a59404,2025-07-08T16:18:53.607000 -CVE-2025-38196,0,0,caf90d8d2bb363ab095765f9fd6d08e901fa62b07001de6a92a8ec0f6ba3d9a8,2025-07-08T16:18:53.607000 +CVE-2025-38196,0,1,dcf82c3375b60507ecab5f26ef4a34b6dfd05d54ed6d4b216093037f61674c6a,2025-11-18T17:24:01.503000 CVE-2025-38197,0,0,3bf3ba5697fb7db159058fc2734a20d5b83d45fac4a145b47773fdf75764b9de,2025-11-03T18:16:08.333000 CVE-2025-38198,0,0,34e5cdc64d1cdf7a7f20d63107f6d1250661cc94dcb50c08b222a62be33c17e4,2025-11-03T18:16:08.440000 -CVE-2025-38199,0,0,119f82522b095365365ba281f9dfd59ea37f501cbea35617543fe0d1477f10ac,2025-07-08T16:18:53.607000 +CVE-2025-38199,0,1,f890e7aa30746ab3132efec2307312fc1619ac9ec9fd0939f808c979a1726300,2025-11-18T17:17:24.977000 CVE-2025-3820,0,0,6bf7715108433b896a9e2b9391b87299642199dce4c65fa39c93d159c14478da,2025-07-30T18:57:54.207000 CVE-2025-38200,0,0,5911c891818238f56fd92de660574cc55568bba7712e7a6fa737847f26b271ab,2025-11-03T18:16:08.547000 -CVE-2025-38201,0,0,9b6178b1950fa65c8127b8ea481bbeeeecb691a04d792152f816042d6b52d8c6,2025-07-08T16:18:53.607000 +CVE-2025-38201,0,1,64e4164f5c56b02679b6dcad0d5ebaeec9884605b38e3d42024c2440d13327a9,2025-11-18T17:09:29.243000 CVE-2025-38202,0,0,417c4b2f4d83699b0ac47633e0af4ddf137d7e7c9adcbdf7841db93d982fa1b1,2025-11-03T18:16:08.657000 CVE-2025-38203,0,0,659c257d60a425e13cf616de6b6c84f444319d6a95d91227b98593e383951baa,2025-11-03T18:16:08.760000 CVE-2025-38204,0,0,ee25f7c97dd0c8c4cd48f28975a212dc2a6380fbbbd5ea3540cd485ac2074a59,2025-11-03T18:16:08.870000 -CVE-2025-38205,0,0,b56f0b94e7feb444d182a7b38fae290063fdf621dea13cf15454e3a3c5a7e1f8,2025-07-08T16:18:53.607000 +CVE-2025-38205,0,1,8bfb30c68fefe71b0caee1457503886ebd2ba9f1a543425c15af393c88b21430,2025-11-18T17:08:11.467000 CVE-2025-38206,0,0,ca0294c6f8dd91e579a09709fcbf6c75ebbc3617e181c92d74b9df520697148d,2025-11-03T18:16:08.970000 -CVE-2025-38207,0,0,5f1b51196246cbab369a3a8a54ee233f9ed27949ba87301a6a24359bc81e05e8,2025-07-08T16:18:53.607000 -CVE-2025-38208,0,1,88feb537627897374a2e6a4a8d38a450ce39f2ac770fa2b5b91a0717b6dec0f0,2025-11-18T16:49:31.740000 -CVE-2025-38209,0,1,23cc84ec4c3c47945593b38cc45d1afb5bc0863bab4a2068c13111d1b97e2111,2025-11-18T16:45:17.013000 +CVE-2025-38207,0,1,658557e1c82c9c225c658a1f7a1b767588e289789c5f7bd47e5e3a72957c968a,2025-11-18T17:07:12.037000 +CVE-2025-38208,0,0,88feb537627897374a2e6a4a8d38a450ce39f2ac770fa2b5b91a0717b6dec0f0,2025-11-18T16:49:31.740000 +CVE-2025-38209,0,0,23cc84ec4c3c47945593b38cc45d1afb5bc0863bab4a2068c13111d1b97e2111,2025-11-18T16:45:17.013000 CVE-2025-3821,0,0,3699df16ba4e38d23bcfa11d0ecd5e203afe55655765d9ea2321ebbc5147167b,2025-04-24T15:43:30.220000 -CVE-2025-38210,0,1,187996a16fab2ac9b554d90937078ea6f3d0ec34beb0a3ce2e001ab1d64d70ab,2025-11-18T15:46:21.950000 +CVE-2025-38210,0,0,187996a16fab2ac9b554d90937078ea6f3d0ec34beb0a3ce2e001ab1d64d70ab,2025-11-18T15:46:21.950000 CVE-2025-38211,0,0,2160734615db99203bd6e5249a0913a54056110c2c80d106f469774712c0607c,2025-11-03T18:16:09.070000 CVE-2025-38212,0,0,623098ef8592988ee031dedc8bf4ac2098622c3f767405cbc9ca0adad784c512,2025-11-03T18:16:09.183000 CVE-2025-38213,0,0,36234916ca1847db8c8f2bcd974b9301f6cecad2e7f65b6f38a6ce648b625a26,2025-08-11T16:15:29.973000 CVE-2025-38214,0,0,cb8ef6e9d46308d0eb890825d7a55ce6d4b3e3d024adfdaa77a419e11492e1c9,2025-11-03T18:16:09.297000 CVE-2025-38215,0,0,9e6a7ea91c0f0e096266fed10840d7b306546a916ba374f8591ce4a4118913f2,2025-11-03T18:16:09.403000 -CVE-2025-38216,0,1,26d1a960beee28ef5d45a3d2492b07762ea4e56ee5aedcaa5ab80640fe48b554,2025-11-18T15:45:33.627000 -CVE-2025-38217,0,1,13c86a38c6fa50132bdf82abece435e7042c16a738cba4ecf5ffa4f60e1ecf9d,2025-11-18T15:21:06.057000 +CVE-2025-38216,0,0,26d1a960beee28ef5d45a3d2492b07762ea4e56ee5aedcaa5ab80640fe48b554,2025-11-18T15:45:33.627000 +CVE-2025-38217,0,0,13c86a38c6fa50132bdf82abece435e7042c16a738cba4ecf5ffa4f60e1ecf9d,2025-11-18T15:21:06.057000 CVE-2025-38218,0,0,fe4ffda4f4d8bf6f169960cc09f5737509e23b78268824cf90a994ae11039e6b,2025-11-03T18:16:09.510000 CVE-2025-38219,0,0,87cbbc995568c7811f83c4ef38b0b1fe9ec8000fa2209fd17b9d442767416df7,2025-11-03T18:16:09.620000 CVE-2025-3822,0,0,7790a01e24287d8b249506db0d133ebb2d3ce7360cb94da0889d65e764ec0507,2025-04-24T15:40:04.663000 -CVE-2025-38220,0,1,a78e7594910f34f993c843a21eb08c9fe3c170da3983c75091bfe568904425a1,2025-11-18T15:17:07.557000 -CVE-2025-38221,0,1,82004ea434c2fb8f2648a13cbed462b850bc7a38bbfdb57876b5908a0fe6d9e6,2025-11-18T15:12:48.100000 +CVE-2025-38220,0,0,a78e7594910f34f993c843a21eb08c9fe3c170da3983c75091bfe568904425a1,2025-11-18T15:17:07.557000 +CVE-2025-38221,0,0,82004ea434c2fb8f2648a13cbed462b850bc7a38bbfdb57876b5908a0fe6d9e6,2025-11-18T15:12:48.100000 CVE-2025-38222,0,0,7e84b4c5951f733f6c65c39927a9d0d69ed45f50b0f7d5a9f18b6f260baa7056,2025-11-03T18:16:09.727000 -CVE-2025-38223,0,1,04986824f89b5061a43751a4e409c60dd835a1d8b1e911b585c532e65677f087,2025-11-18T15:03:50.400000 -CVE-2025-38224,0,1,8be166631976672ac486d8a904b8dc18af4fe3c051fa0e3ef2b7afc73841f776,2025-11-18T16:44:28.037000 +CVE-2025-38223,0,0,04986824f89b5061a43751a4e409c60dd835a1d8b1e911b585c532e65677f087,2025-11-18T15:03:50.400000 +CVE-2025-38224,0,0,8be166631976672ac486d8a904b8dc18af4fe3c051fa0e3ef2b7afc73841f776,2025-11-18T16:44:28.037000 CVE-2025-38225,0,0,575706b2a5249bc0e56b4cc8c605167b6fbee4b4b5c1d273400b32f70263eb96,2025-11-03T18:16:09.847000 CVE-2025-38226,0,0,3192bbefc0c8ec661f301912563c6530249730b93909a7e981f4603586595f6d,2025-11-03T18:16:09.950000 CVE-2025-38227,0,0,3131552f4ede4a16da90c23494b97d0a481ae5431c2bdc2e6ca4821819c41b13,2025-11-03T18:16:10.057000 -CVE-2025-38228,0,1,9302c65e2365143b59ebab1d139dab03dce88bdf93af8969b3fd351cca09e5c4,2025-11-18T16:37:46.747000 +CVE-2025-38228,0,0,9302c65e2365143b59ebab1d139dab03dce88bdf93af8969b3fd351cca09e5c4,2025-11-18T16:37:46.747000 CVE-2025-38229,0,0,70f279624ff00ad2c767e8b9fa156f2ef9011566658bdd0a3ca8468a2664b858,2025-11-03T18:16:10.170000 CVE-2025-3823,0,0,f978abbb7fa2709632f1f6fe745ffcaa6b81e025b2c8e5749491f7b8db352dc6,2025-04-30T17:38:51.467000 CVE-2025-38230,0,0,a87b16d4397f414baf7120f423877ccc017862a3b09c0df7a4d2eaacb47b7a15,2025-11-03T18:16:10.280000 CVE-2025-38231,0,0,1fae169079dc8098a86dcc57f5bc80ec051436d611e509823ffe08959772b17b,2025-11-03T18:16:10.397000 -CVE-2025-38232,0,1,20ca432050483fead575a5edcf2e1f83ae82ffd7f277f9042a899173de005d1d,2025-11-18T16:22:40.943000 -CVE-2025-38233,0,1,a4581534bf3d03d6b646ce3a70b9515f604d0f467b42d5b985a971ea22b11d40,2025-11-18T16:16:49.497000 -CVE-2025-38234,0,1,56c904681f5a07d12513de4e1657024af6aaaff7993f825d265422dab3663ffb,2025-11-18T16:08:00.433000 -CVE-2025-38235,0,1,e920db1b0289305d00dbd1b14ec75d9d78dadc5a7812e1adf68398032353e8b3,2025-11-18T16:03:43.567000 +CVE-2025-38232,0,0,20ca432050483fead575a5edcf2e1f83ae82ffd7f277f9042a899173de005d1d,2025-11-18T16:22:40.943000 +CVE-2025-38233,0,0,a4581534bf3d03d6b646ce3a70b9515f604d0f467b42d5b985a971ea22b11d40,2025-11-18T16:16:49.497000 +CVE-2025-38234,0,0,56c904681f5a07d12513de4e1657024af6aaaff7993f825d265422dab3663ffb,2025-11-18T16:08:00.433000 +CVE-2025-38235,0,0,e920db1b0289305d00dbd1b14ec75d9d78dadc5a7812e1adf68398032353e8b3,2025-11-18T16:03:43.567000 CVE-2025-38236,0,0,25812df848ed787092a2ce07c9c474b1e7b1b43f40ee4a82a1e8748fc47a7415,2025-11-03T18:16:10.503000 CVE-2025-38237,0,0,bca0a93d1f59e2cf08e7db8c87d4bff5b022a1cc56117b9f03ac7139032b8dc2,2025-11-03T18:16:10.620000 CVE-2025-38238,0,0,ce222b5cb2d0713405724eecf43ab4cffcc34c7c7b589632a657d5821fa9cc4e,2025-07-10T13:17:30.017000 @@ -301058,10 +301067,10 @@ CVE-2025-38260,0,0,322700104c250774f26aedbdc2d8f9c4b27f1485e6c60d334b5e88d850d15 CVE-2025-38261,0,0,105759cea73afbfece8e8b072f279d91ec9bad4d985441f16364d448e9374090,2025-07-10T13:17:30.017000 CVE-2025-38262,0,0,c0a418bdff0c2ad131b4e6cdc5a6fd6c2203e6f618b477cf0fa9baf9b3eacb3b,2025-11-03T18:16:11.487000 CVE-2025-38263,0,0,be6cd7aa65d5da06187fa0155321eec142116f2f980b2f398241a24050863a33,2025-11-03T18:16:11.597000 -CVE-2025-38264,0,0,c011002bb0b5bf732b26fd4be26dc9114dba302f3d7a33286c80092fc1e2de6d,2025-07-10T13:17:30.017000 -CVE-2025-38265,0,0,30f2000971e0fe0337992613702fbbaf5db64f52f4f7b68990ead3cf2d1a982a,2025-07-10T13:17:30.017000 -CVE-2025-38266,0,0,d7dc060d37e935fe60c5c7741c4155ac595fefd80aa24da9fa2f2b78c053385a,2025-07-10T13:17:30.017000 -CVE-2025-38267,0,0,747e1eb7a2dc559839cb7e39b58adc1dfcdddfa9a96be026f6ccb49c6915e97a,2025-07-10T13:17:30.017000 +CVE-2025-38264,0,1,d3b2ee9f94b8c15f74731d05a48374286a8e01c8f0adf0fc349f4b5600c560e7,2025-11-18T18:22:21.840000 +CVE-2025-38265,0,1,044e465f36a0ef94db35c44b46a21a488fda3f2ade8ce442c4c7e765d51f1549,2025-11-18T18:27:39.153000 +CVE-2025-38266,0,1,13a86feabdca196d1298ecd37ccdc6980177310de8bd947ef3b2d657e88211b7,2025-11-18T18:29:23.313000 +CVE-2025-38267,0,1,9c4130d2b9531cfa3ddd1960d678187509f6501c47610b9dc9bb71ba65a5e709,2025-11-18T18:33:03.180000 CVE-2025-38268,0,0,2c2a8068c7b300a54b4de73e3b2ceadfa12dde467d96a1b809c9976a516bd01d,2025-07-10T13:17:30.017000 CVE-2025-38269,0,0,33853c64949a492e762ebb4c2cf4838f9d20090db6e4267a0b830889855b595e,2025-07-10T13:17:30.017000 CVE-2025-3827,0,0,33bbba915b7b592866bfc3616cf9f0001aecfaf6e988592cd9c29413273dcae3,2025-04-28T17:38:47.400000 @@ -301345,40 +301354,40 @@ CVE-2025-38522,0,0,f6bac4d4b70b387c62f28b3357b107ab27b41462c9a8ad470f6e294092dfa CVE-2025-38523,0,0,d2a0bac2890535fb6247d72bf91d1993c7fb8b417dcc7a8b281381fa5b7a847c,2025-08-18T20:16:28.750000 CVE-2025-38524,0,0,c4bbbe0b159c35032fc78b17fc28cf6c52a65a39eec717a09377757d831abb9b,2025-08-18T20:16:28.750000 CVE-2025-38525,0,0,9ef59bff9471a99b31c0948f6df82cc3bf2a70a8ea68c4ee7f6f6b93567ac205,2025-08-18T20:16:28.750000 -CVE-2025-38526,0,0,aecaad972d6730708acb0c5dc9b2b04eb3443eaafdc14e599ba5bfad62e3777b,2025-08-18T20:16:28.750000 +CVE-2025-38526,0,1,dc28ebbde544fa375e276e1f5db7e59240bf5ccd3de39e9b607ec0bef8916b9c,2025-11-18T18:14:34.377000 CVE-2025-38527,0,0,d2ac93eafbfc3569f46bdf031afb6c18888c157b06b8ea9a256786e923de1f4e,2025-11-03T18:16:27.397000 CVE-2025-38528,0,0,2613f37e59b55b98befb583e8e4d5d0a584f66e4af49b470c5f5225664abfde2,2025-11-03T18:16:27.503000 CVE-2025-38529,0,0,cb147b66382d5178ba42b0570318de468a0dcaf62f53b25735370ebc581ac165,2025-11-03T18:16:27.603000 CVE-2025-3853,0,0,3d80a145da5ad5a8d059dec5212cab49b06dcef506bc94100f93e0bbb20486b7,2025-05-07T14:13:20.483000 CVE-2025-38530,0,0,0833a960b44ed47a916dca681ba6cb1bd6a4801c17be8c76aae481a21f1c512d,2025-11-03T18:16:27.727000 -CVE-2025-38531,0,0,556075a08e240062e8e6fbf514aa2a8818ee0bbca59a8dd0dc85748a58ae6819,2025-08-18T20:16:28.750000 -CVE-2025-38532,0,0,1b9907b686e966b06649d1b7832cd0abe494d9d40a1946446638fb66226fdf39,2025-08-18T20:16:28.750000 -CVE-2025-38533,0,0,782d1ae8604c2f0854096fcd3d23599231eed9d1c193844ed06ffda92164b645,2025-08-18T20:16:28.750000 -CVE-2025-38534,0,0,d92913d8d7a83fe9012b606ed37c472f1d7645b6a9f1ce2de318be89f08a2dc9,2025-08-18T20:16:28.750000 +CVE-2025-38531,0,1,e7b49441692b6a3ce82be50ce3db4566e0d423d8753951130389a5d00a6654f7,2025-11-18T18:14:44.457000 +CVE-2025-38532,0,1,6e7ab9070680dd915814ac900a1005e43d33b2d25ada2f0ff5979db20e5fa21e,2025-11-18T18:16:54.280000 +CVE-2025-38533,0,1,984eac038986876c806f76bad874ac97878598650756f5dd0e40efb007109b39,2025-11-18T18:17:01.150000 +CVE-2025-38534,0,1,f6295c56adf1e5c8a76e4c841b008afc2d3330715cb5c42797026990c0d11ccb,2025-11-18T18:17:45.843000 CVE-2025-38535,0,0,b261fda5f5b2ed95008531058b7dc39b2894ba8198e0907218ffda00e151b5f6,2025-11-03T18:16:27.837000 -CVE-2025-38536,0,0,0db66fae798a464aeaa8fa65217466017602674df73746fadff31471a59e34fc,2025-08-18T20:16:28.750000 -CVE-2025-38537,0,0,31963c71a1ba162118cc2d4ff55239c122c41ba4e2a7707940190ea300dc4200,2025-08-18T20:16:28.750000 +CVE-2025-38536,0,1,6348f2b827c1cf3f0ec5d2cd07668f860acb2a489b0b398f8134112654a66bdd,2025-11-18T18:17:56.823000 +CVE-2025-38537,0,1,779f1ee6f37a8586f553de5621773aea909fb24cfc86d99fa08cdd203ca134f9,2025-11-18T18:09:21.560000 CVE-2025-38538,0,0,451200faa1aee3dce8ee77d281dfaf91a8cf08bc8f262c153e35f745f236b25f,2025-11-03T18:16:27.947000 CVE-2025-38539,0,0,8b7fd10f0754ce0d111305ed01d66ca8d0ca3af6b586d8a141cefc0bd8f3e213,2025-11-03T18:16:28.057000 CVE-2025-3854,0,0,a2729f8a9fa1cea83bbba19e099fb87e367ba12ab40b09c5601023af4fdb59b5,2025-04-23T14:08:13.383000 CVE-2025-38540,0,0,2c1deed7b348567f645a008d0016a17f3b637606c235beeefbf49a25046b0a78,2025-11-03T18:16:28.167000 -CVE-2025-38541,0,0,8f56e328ed239b5a69c87721839fa1d976af2bdef73dbfd66dde8e6a2934b4c8,2025-08-18T20:16:28.750000 +CVE-2025-38541,0,1,2012caf64edbc91b148fb50ef91a1278fa147e3439b098fa42e441dc492686f1,2025-11-18T18:09:39.653000 CVE-2025-38542,0,0,636758edbd801af20ca67b021b895161ad8f62b053bf5456f38df519fa40243a,2025-11-03T18:16:28.270000 CVE-2025-38543,0,0,bc891aaa30b0a2bde0eda1aa32a0e39207a67e4f19c47c99307302984edb1c32,2025-11-03T18:16:28.380000 -CVE-2025-38544,0,0,7a570e86d1c3c3413104ab41ca83356939cc11658ce86e09c3b159e3158465a2,2025-08-18T20:16:28.750000 -CVE-2025-38545,0,0,d7e8f2c3a92b43206ecbfdb8601c4b8340dc3c6e3849514ab10d65d808e4c087,2025-08-18T20:16:28.750000 +CVE-2025-38544,0,1,ecdad5ece070456342b94c0be40bc60ee0570535fff1e8017db9993d6d6edfe3,2025-11-18T18:09:45.810000 +CVE-2025-38545,0,1,95dd91d2e3ef12dcf375ffef37d737e06fdf095cfcbbad26b7e64bed9ca0fffa,2025-11-18T18:09:52.797000 CVE-2025-38546,0,0,0c72876d39a5f5960facd4247656d4dec9f571a8798d89eed295905a00b670aa,2025-11-03T18:16:28.477000 -CVE-2025-38547,0,0,0ce8c7bb3be52dcf8667c45c588da2c33606b86cca22239cfe1686fd6ccb848e,2025-08-18T20:16:28.750000 +CVE-2025-38547,0,1,3e89e352fc9cb8f9c482be12b42e7bdffd5da69dbbee87e61ab5ea433cb18939,2025-11-18T18:10:12.830000 CVE-2025-38548,0,0,35bebd8fcbdfafa2a89f6bc50dc72e3d4dc1de588c147c4b0dc86c6a80a792ac,2025-11-03T18:16:28.583000 -CVE-2025-38549,0,0,3247234ac110af49b5df1893421bd6d4e742456a15361f0f145952e4e31a47da,2025-08-18T20:16:28.750000 +CVE-2025-38549,0,1,7b910427347ef7c40ad0310d5b184a00f98fa4db4033751ada9486e081a3a1f4,2025-11-18T18:10:21.467000 CVE-2025-3855,0,0,ce62ba6d89f7480de962c5560d2cbc06804a3280fc23cf762a9b737c572574d4,2025-08-01T22:06:07.263000 CVE-2025-38550,0,0,46e9f488e3f59d0fc0b3aae40398f1dd93502ff32226e8fcf5a91a981e2c4346,2025-11-03T18:16:28.687000 -CVE-2025-38551,0,0,504634a90138f2addd8da71847258723ace778cdcad3c25f3c905b021ddd87f2,2025-08-18T20:16:28.750000 +CVE-2025-38551,0,1,54fa37795cd1530b48f64675b81c8b343f7940cc2e36e8f8f1def99a6a58557e,2025-11-18T18:10:27.400000 CVE-2025-38552,0,0,9efd8d0cc768887edfdf1afe52124bd2af03d4777f64a53e7fe42611515e6c3a,2025-11-03T18:16:28.783000 CVE-2025-38553,0,0,2d6f39c2c7d776b188d9221c48b26ebc0f7c8fff0d4331bd8c19e5c795a04a9b,2025-11-03T18:16:28.887000 -CVE-2025-38554,0,0,961bd91367cf9dca724b09a99ebbf90d0e8f58c7a2642b63a0754cce2d431f9e,2025-08-20T14:40:17.713000 +CVE-2025-38554,0,1,1b6b157b7b1ad624571b786bcf255c53f44cdb4f1a10c6637f3737f397ba5ada,2025-11-18T17:59:40.800000 CVE-2025-38555,0,0,ce55c1384cdf7ed457f5762c53ff63f05b01c9f26ff4fd6a972cf040bc2d8875,2025-11-03T18:16:29 -CVE-2025-38556,0,0,3667c5d37b2551b3e25cead9b860be2049d13f3a84bf499462ca19d673b887ce,2025-09-09T17:15:45.080000 +CVE-2025-38556,0,1,443b2c8ceae5016ad25ac497ad1cda9f4180123f84889ac9d202e3303eed3a1f,2025-11-18T17:59:48.710000 CVE-2025-38557,0,0,1ca4412bf440568e879cc0a6a8b74ba9d3e66e13213dce559ba4a2d4f2ddaeb1,2025-08-20T14:40:17.713000 CVE-2025-38558,0,0,702b2bba05f67460746c2e06da4e7886a2442df74d3a6eed76458dd1e3f4b433,2025-08-20T14:40:17.713000 CVE-2025-38559,0,0,1dec387be68d626e634248f45bf1dd276c210058a067e3d69c298762bbdff010,2025-08-20T14:40:17.713000 @@ -304721,6 +304730,7 @@ CVE-2025-46203,0,0,be953e8984307aae070f8f20f44040a65022d6e23c76a670663628bd657ed CVE-2025-46204,0,0,75ae4b5b42744427789fa14d0febcfcba5e97dc93c09cc82148b678635dca115,2025-06-10T15:07:19.043000 CVE-2025-46205,0,0,0d1b733c29e3cd20f3b269a20aa0cc60522cd542a938b33d897107f00ad7bc4b,2025-10-27T05:15:38.780000 CVE-2025-46206,0,0,f5fe9118353769319a6935452790cfe7f23d240251b3c82b9f2a05d50d084ef8,2025-10-02T17:39:43.930000 +CVE-2025-46215,1,1,6aee7ae895f5c7fce5b3f2f6ac9aa18d4fb158daec02bdfeda0f020787d9dfda,2025-11-18T17:16:01.513000 CVE-2025-46216,0,0,aeeb168de31af46b00554fe4e8c894f6f952bf91677cd58baacfa2edfa3da131,2025-04-23T03:15:22.333000 CVE-2025-46217,0,0,c0708bfcbcfb8b1f8589ac8ee7b6149158182bec9e1515e0d8ddabb4f9f96f81,2025-04-23T03:15:22.403000 CVE-2025-46218,0,0,b4d34877020ce88bfe5e738c92a5cdebc137bb9b383057afd40e6895a6e2e87c,2025-04-23T03:15:22.457000 @@ -304822,6 +304832,7 @@ CVE-2025-46368,0,0,cb2a146753d960b1278b4fba090ce0c35b616e8466e7182cd2da876ba86b0 CVE-2025-46369,0,0,f59b0a321dc9fffca2b08fad57c97f674ba2fc7b3a8a312b5f38b8c7c6fdabc4,2025-11-17T12:26:51.163000 CVE-2025-4637,0,0,6a6f5a6b16c4a5dc9c7dfdefe827d1876d1a6cd89fb863be894c5faba3f21b65,2025-05-16T14:43:56.797000 CVE-2025-46370,0,0,fd69c0b8d2c1f653f8134026fc5c44f729d4aed28c859677d4d80c4fa70fe58b,2025-11-17T12:26:13.463000 +CVE-2025-46373,1,1,0042ccb649bdee6edbdbf3c477bf4f823236a42aca22099a78f17db2f55a62f1,2025-11-18T17:16:01.753000 CVE-2025-46374,0,0,0df9474f29e53d817d13f584af47eb0c12cf27caea3c45635f75daa159094ef3,2025-04-24T03:15:15.797000 CVE-2025-46375,0,0,c7cadd24d0c0ef6263c2e4f0e993c1b14e1cbac838119ad2f4f42dcfb3b1b113,2025-04-24T03:15:15.867000 CVE-2025-46376,0,0,4a4eb88dda9426fffae031e9cc4c1cb39c01ffb8fef76394b4584f59d8624ab6,2025-04-24T03:15:15.917000 @@ -305169,6 +305180,8 @@ CVE-2025-46760,0,0,1aae8a3800bc8e61bd758d95ef9065321ebead4f3e5ea38e1c464070ada44 CVE-2025-46761,0,0,059f0098d2c689539a71c18076deed8660ffa847e6a284cb8b6f047a46883f18,2025-04-29T03:15:35.670000 CVE-2025-46762,0,0,e84f36f65437fb50d0f0252ee45fb5ae34a5c3a20839a1f599176b60d5024163,2025-09-02T20:50:53.483000 CVE-2025-46774,0,0,398c4492d6f5036ec20bd4271dffa25b520dce9f6d9b66c0b93ea73d40898789,2025-10-22T16:47:22.450000 +CVE-2025-46775,1,1,13a705676e509f8486b422ab0289a1f7c571c0d4ef1a2772f8a3e194e33cd88c,2025-11-18T17:16:01.973000 +CVE-2025-46776,1,1,9e539d234282b3b24b65e671d2f5060dce9aacf1c670a2aef5f3c12d7a0af70f,2025-11-18T17:16:02.180000 CVE-2025-46777,0,0,4c99b3c2cd506dc2615e6e8e33c5b9f4290116b197ae8af42d9b1d5b366de9dd,2025-06-04T15:37:37.577000 CVE-2025-46778,0,0,84fdcd667ddc60ff72e9bc53bf816d5ed8cbe6a8eb95254e6bac35e23e4c18a7,2025-04-30T03:15:19.170000 CVE-2025-46779,0,0,37c24e5b7e4a0045a4d100f0b48f14bc24b2b68a67fe538c22d10ef701f0dd5f,2025-04-30T03:15:19.250000 @@ -306008,6 +306021,7 @@ CVE-2025-47757,0,0,259c485b91aa6c29548dcf08cae86ff2495dccb09a50e806a7bf189c4c30a CVE-2025-47758,0,0,636af7f9648d7d01052488171a480b606312b154b866689061fdf2646c94618d,2025-05-19T17:33:20.443000 CVE-2025-47759,0,0,683d60fa9024864e81c245c590be54bea3e5271f2f064cb55555750b41386bee,2025-05-19T17:33:27.877000 CVE-2025-47760,0,0,ef37e0783129e0c79878e160ee3a415ea835d944a6d07e9ac13750c5e8b6c1a4,2025-05-19T17:33:35.253000 +CVE-2025-47761,1,1,42228202dd9148a424aed6aa2a25a4e2a9150ef317116b62578edb343667c587,2025-11-18T17:16:02.413000 CVE-2025-47762,0,0,384853401ac5927cb027d794df791cfdbeca5b913aada5e5cad3c9b400c240fd,2025-05-10T03:15:24.413000 CVE-2025-47763,0,0,95795b0d22b0cb5167d5890811ee378e96f7a7c6831a659ee1b4d281512990ba,2025-05-10T03:15:24.480000 CVE-2025-47764,0,0,4055f9349c4a1910f638fd768f03b00dc0e25d5a9778105f615056784c51fe9b,2025-05-10T03:15:24.537000 @@ -306803,6 +306817,7 @@ CVE-2025-48826,0,0,af2c7bd5bea9313204ec7e80b5ffe669ad1728d82afc9159ae0bc7daee529 CVE-2025-48827,0,0,e2e79ef6a8629053e66e0020881c95eca4862508fcd8019d12aa8f7c12118ad4,2025-06-25T16:46:46.703000 CVE-2025-48828,0,0,a20d67a6220e199cb76316e65707e3c589202908bfbbdaa1e496c0db70fc2c08,2025-06-25T16:32:38.947000 CVE-2025-4883,0,0,5862fdd520821c1eedf697774db7196e34040fbccfc13f239bec6cec686b2e42,2025-05-21T19:38:13.727000 +CVE-2025-48839,1,1,501302e18b9b6b2a600d6f9b4b17583ec214d5d525704745dd949e975c5d2f5f,2025-11-18T17:16:02.610000 CVE-2025-4884,0,0,a5075b7b8d83def92ecc2c0d343a27fb6b4aa14be4db0c1f3e48e239bcc69f25,2025-05-28T11:49:00.090000 CVE-2025-48841,0,0,7f0e0c969efb3bef9720951c083cd77dcf55000205a06e477705e2d5154973aa,2025-05-28T04:15:46.770000 CVE-2025-48842,0,0,ba4bb2008ab25dba5eb316ee71e55945ac6c6e86998ead36e4c18bbc602b9af6,2025-05-28T04:15:47.390000 @@ -307309,7 +307324,7 @@ CVE-2025-49446,0,0,4a60c84d6d9edfc5bac793b7fa075e27f2b5d546a1d935927e4891fdf1b2b CVE-2025-49447,0,0,c4d34b5024edfeb35936de01e9132a8016e1f002b3610908711f8bd2ca156a59,2025-06-17T20:50:23.507000 CVE-2025-49448,0,0,80c0573ee62c45ef63b05229501359f13c14679846bcdf462fd90ed93d8d24bf,2025-06-30T18:38:48.477000 CVE-2025-49449,0,0,0d697cd8e2657fa1de80516a3f9d24c8d0aece4b7b6ce292b70d5d242971d137,2025-06-06T14:06:58.193000 -CVE-2025-4945,0,1,1305219de34abad57b566fddd073035a8c02557731481e7d4715bd611795baf4,2025-11-18T15:16:30.640000 +CVE-2025-4945,0,0,1305219de34abad57b566fddd073035a8c02557731481e7d4715bd611795baf4,2025-11-18T15:16:30.640000 CVE-2025-49450,0,0,90130af9185941b6c9463f758e97094467c86e05a17a9bfaaa1b7426680ecb37,2025-06-06T14:06:58.193000 CVE-2025-49451,0,0,d24010e8c37a1c438e61417e062ebe0d9ca251be12d10b0cd1fa2e68906751e8,2025-06-17T20:50:23.507000 CVE-2025-49452,0,0,d6aa57355417f52e4d3316ff2eec237aa2d7e210d5ddc0d1e38acb1a2a460758,2025-06-17T20:50:23.507000 @@ -309311,6 +309326,7 @@ CVE-2025-53357,0,0,0689c155bfa13ecbe1f08be01e33d8745ff0b56723ee1f2c10d7d2917df72 CVE-2025-53358,0,0,3d97a4954e653a509d4005c71cf64fbb269b7293bb5ffaddd5ae485b7c74944b,2025-07-03T15:13:53.147000 CVE-2025-53359,0,0,45ed40db77640f47ba583ca32d5c60d80ffbacd98c4463b392cad98fdcfa3117,2025-07-03T15:13:53.147000 CVE-2025-5336,0,0,51ebbfc8a6c001d043ad92fbb70974a3ccedacbc8290bd5643cc8faeb9732c02,2025-06-16T12:32:18.840000 +CVE-2025-53360,1,1,3d0021f8b98775ac1969144716abee09ca389f32ee3acf5b609f0f1547482aa9,2025-11-18T17:16:02.807000 CVE-2025-53363,0,0,976dc541f7f1094b62661ffb8ac3418d914e81b5b57fc18bb8ae5dcad26de38d,2025-08-22T18:08:51.663000 CVE-2025-53364,0,0,44750180878d423d96f0431c04d3ff22bbf7287b48791da69c5b8805f47601bb,2025-07-15T13:24:41.097000 CVE-2025-53365,0,0,3c9002ee138b7484cfeed75e07a2470c0191764d03998fbfcbcb0a841ea0deb3,2025-07-08T16:18:53.607000 @@ -309741,6 +309757,7 @@ CVE-2025-53839,0,0,0fe9e8115f25ed7860de6af81d0585a3e622975ef7d71e60549a7bcdf8e4e CVE-2025-5384,0,0,426b37626f52c4f4e3a056b716990d67755f804d6affe4d05a3c3aa20060c173,2025-09-11T20:43:49.703000 CVE-2025-53840,0,0,e078653c6c2f01f571eb637d0301e3aebb6aaa09420604baad151e57db007ec2,2025-07-16T14:58:59.837000 CVE-2025-53842,0,0,12bc62ed524c41a68c20d8799bd78d61bf090a261c9394cb4c7fc35797717f54,2025-07-16T14:58:59.837000 +CVE-2025-53843,1,1,046701af3f5faf65847c22669c02041c1721947a4c666b312395130d0ff4d348,2025-11-18T17:16:03.033000 CVE-2025-53845,0,0,89f4086c79fe31163855ff4224ddf316ab8d580fc1a997f8729981c68cdd9ed6,2025-10-15T17:19:50.113000 CVE-2025-53848,0,0,5460cad91668d82d6ed7c4c0d1e30c80343841088b381fe0437c70fdfc43f7b1,2025-07-11T04:15:52.443000 CVE-2025-53849,0,0,eadab0cf7cd870934edf567f40a9be5dbe5884daca59b3988dfcd8d99ff47aad,2025-07-11T04:15:53.240000 @@ -310458,6 +310475,7 @@ CVE-2025-54656,0,0,94f1ada77914a32dc0858e83185b1adbab01cd91dcbe4d17058ce48cb5b85 CVE-2025-54657,0,0,ce5e9302df1f80ca8890a55b600508732690dc5fec9f25e06292f5311ad76efc,2025-08-01T04:16:18.450000 CVE-2025-54658,0,0,9c1cbe3bf71ae93cb315b61f51ea2e21f5d4656db794b8d18f25640af19538e8,2025-10-16T17:54:26.570000 CVE-2025-5466,0,0,56648f8f300986eac47708e2ca00e536926e43370f1e29f35b96be8e58ab4958,2025-09-23T18:18:59.357000 +CVE-2025-54660,1,1,5b013af9f1452d2953541c217de57b2becf3221eab0c7a4dde35537f10bbd3cf,2025-11-18T17:16:03.270000 CVE-2025-54661,0,0,e812545bbd81261a21ad4f7bfb9bded32cc8e6329c77144c1e4482ecad428c57,2025-07-29T03:15:22.170000 CVE-2025-54662,0,0,b9072bdd9eef15273d8e7c40f521eadfc1b5e456686f0bfb696278bfa78511fa,2025-07-29T03:15:22.340000 CVE-2025-54663,0,0,5ed1e106718ca23529cfce9a909b353f829621c9e25df4d93f0f560783c02991,2025-07-29T03:15:22.407000 @@ -310608,6 +310626,7 @@ CVE-2025-54815,0,0,6a520131a269be984ed625432e6f40989499c8e407a2bfc924f3d596398e4 CVE-2025-54818,0,0,557d43e163a6902e87d8e54ee3d0156e522bd3f4e6cf81e41a9668a68f4a130b,2025-09-19T16:00:27.847000 CVE-2025-54819,0,0,5ccbf1192f20f1980f76baec4f9ee0d2ed830f6d943c229bf23a3ce427fb3a59,2025-08-29T16:24:09.860000 CVE-2025-5482,0,0,28a5af8d823bbe34a12b92449946e0177133613f1c363f5ee62ff165a65e1333,2025-07-11T18:50:03.380000 +CVE-2025-54821,1,1,3bbbce4ada284183511e3ff9c105e2e5ebf1bfa2a4dc003e1c72d158b74687d7,2025-11-18T17:16:03.490000 CVE-2025-54822,0,0,6e185d260cdcdab3ba2b099e96cbe42a189c14d7f9c816bb6153fb87b4cd3c10,2025-10-15T17:20:21.080000 CVE-2025-54823,0,0,8e207f1210ba1f306016d26c9fe5cea935855420b0e714a913e75aef07f7763c,2025-07-31T03:15:33.950000 CVE-2025-54824,0,0,6f67b097d92e6a5afbac82ead560e808e80817af0315a311e96e6769625ec9e7,2025-07-31T03:15:34.037000 @@ -310737,6 +310756,8 @@ CVE-2025-54968,0,0,f130da12b134bbfcb4551f5475637f24575dc9c477ca47cd695b4aef5d3c4 CVE-2025-54969,0,0,2e46b202aef2cf912ca53b4baf9cddef94d206f413e2c17e8b29672ddc472db6,2025-10-31T20:31:00.633000 CVE-2025-5497,0,0,a5a489455de67fc5f2c75625a09d2f78af3fac1d986fa9288d403c700711930f,2025-08-20T09:15:28.213000 CVE-2025-54970,0,0,ce440c1ca81b1611036b7ac9400e1b6c2c8baa4f021d103223488e544aa1b6ff,2025-10-31T20:29:08.613000 +CVE-2025-54971,1,1,eb0575aa7e84c99f92cb718061aa740e7218bfbb1e893c0ef3297bc1779b3a98,2025-11-18T17:16:03.680000 +CVE-2025-54972,1,1,6689b761e242c87c7e4da101e2607799e726cf75e60f02d500204b036b5e3f4d,2025-11-18T17:16:03.890000 CVE-2025-54973,0,0,d5964aa93d5504e5acd8e14d26b8a43fdf081949ef526a2ab1e2dc941fa43ef4,2025-10-22T16:31:59.647000 CVE-2025-54974,0,0,d89aba17142603c1b92cd59622d3a6ec2fd62d5f934ba7cd8ed9696b0ec9d15e,2025-08-05T04:16:07.123000 CVE-2025-54975,0,0,51314dbc39080c5ef951019ec10b4054c3912e95372fd513533a7416a1be3828,2025-08-05T04:16:11.863000 @@ -310821,7 +310842,7 @@ CVE-2025-5507,0,0,0de2d6d693f1cdca3338a8f454497e00fd071a5de3cbcba86cf6c01ce62cef CVE-2025-55070,0,0,f2a78eb36bf9efc20e8a5c0faa1c67b678d8fe36c78fe6ad277729b9d0d97cb1,2025-11-17T17:51:05.737000 CVE-2025-55072,0,0,f6ba9fb896cd7e2c60b3aa4941e369baedb704784ead15f066b823a72d7bf7a2,2025-10-16T15:28:59.610000 CVE-2025-55073,0,0,bcd1fb1043532255ec7f4d659e489d633fb8270e44c75ae73b6b8c1ca3475518,2025-11-14T16:42:03.187000 -CVE-2025-55074,1,1,910bc8a536dd8100b4ae7b2181824559c5d53b734a4bd4e0b1ecdb11c86cf629,2025-11-18T16:15:44.500000 +CVE-2025-55074,0,0,910bc8a536dd8100b4ae7b2181824559c5d53b734a4bd4e0b1ecdb11c86cf629,2025-11-18T16:15:44.500000 CVE-2025-55075,0,0,481fa2b83c118d8c47e2167cbdeff4313a5d82562c11911e24961e4f6db3f988,2025-09-17T14:18:55.093000 CVE-2025-55077,0,0,07b1bdb308268917b8e16ee4163fe85bf5f8b44633bba5060bbd1ee053cb938f,2025-09-23T18:29:25.153000 CVE-2025-55078,0,0,8fc7d72686da8e8a789b12eeb0d786961da7e29f5a32c21bb560aa93b62b6de0,2025-10-21T19:45:33.453000 @@ -310853,7 +310874,7 @@ CVE-2025-55104,0,0,5d541c32d5c84d2c068c6b920a85ec31ba6a8eacbc6b86be4c4321f6a2783 CVE-2025-55105,0,0,0e45673f32e102d58253b52410a2897b021c454dfbf8fbc372d90e017a85e90d,2025-09-05T15:10:54.547000 CVE-2025-55106,0,0,9cc28a053c2f0c101e1fd34f74489b8020f462b3ed647abd64e780e4402aedbc,2025-09-05T15:11:17.027000 CVE-2025-55107,0,0,048396a0c6b7003f3d87652c66440d34a18d53846b44c9fc2381a60300f2e857,2025-09-05T15:11:57.197000 -CVE-2025-55108,0,1,066893f986222a929a7595e8fd02ede70433e6ec481efef21c3ff1a801fec469,2025-11-18T15:16:31.357000 +CVE-2025-55108,0,0,066893f986222a929a7595e8fd02ede70433e6ec481efef21c3ff1a801fec469,2025-11-18T15:16:31.357000 CVE-2025-55109,0,0,997308adfa263cbfa54b4b011371308a0ceb9ada769cb35bef2cb8c4748f32e2,2025-10-10T14:16:19.660000 CVE-2025-5511,0,0,079b3397f3446f7e8de3a28873d14ebe35c9b51934c46a5fbb155db2594f173e,2025-10-03T01:15:42.177000 CVE-2025-55110,0,0,bf28ec0b28c78b78af1766542adf31493afee927776efcf36cb9965d8196bc62,2025-09-17T14:18:55.093000 @@ -310864,7 +310885,7 @@ CVE-2025-55114,0,0,d3ced5f513d4979d2d6f24804962ad474cfed104a78c94c63d1a2b3439eaa CVE-2025-55115,0,0,57992ecbc923b16cb398b3406b77484c47826b9cde51d262b1a96fdf896ff449,2025-10-10T14:10:38.947000 CVE-2025-55116,0,0,2e308ca5157b9d43baf15fbdbe17a155c51520a76fc8afc9087659ba18727857,2025-10-10T14:10:51.570000 CVE-2025-55117,0,0,3df17bda75d8c4ea3fb95272d2cc7b5da6aba206e53896ef8319ca14e1107800,2025-10-10T14:12:25.770000 -CVE-2025-55118,0,1,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418c62,2025-11-18T15:16:31.550000 +CVE-2025-55118,0,0,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418c62,2025-11-18T15:16:31.550000 CVE-2025-5512,0,0,e298909e7d933eb5f783304ac70fd519fe6ced2380a8d0fd8cc914efcaaadd53,2025-10-03T01:14:16.500000 CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000 CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000 @@ -310913,7 +310934,7 @@ CVE-2025-55173,0,0,0ba10b3f904a4bb0376ab8a95f28e8ac77caa0504b7876c5a37ae1d8ead29 CVE-2025-55175,0,0,8a9a96b6940dcb5481a5805aa3fd0ade05e99c7390b09d0a69092bc296bdb418,2025-09-08T17:15:37.447000 CVE-2025-55177,0,0,f46ccf7e5508b924682c0a63e61f4f91e789f0917538352e6f705c16b05bc3e2,2025-10-24T14:14:08.077000 CVE-2025-55178,0,0,2086fee17d42f81542886de42f3ce2b36f5b431b312adda6d6229a08e694dbf3,2025-09-26T14:32:53.583000 -CVE-2025-55179,1,1,988a2b81463ba2aac2acda8e30e09a4f7efd8385f1d94b2664d9f5d99c6bf505,2025-11-18T15:16:32.177000 +CVE-2025-55179,0,0,988a2b81463ba2aac2acda8e30e09a4f7efd8385f1d94b2664d9f5d99c6bf505,2025-11-18T15:16:32.177000 CVE-2025-5518,0,0,e07a2e4f648cf9c701f6cca3584b50df0552e3b9721d5170ed697276e7b04003,2025-09-16T12:49:16.060000 CVE-2025-55187,0,0,ce5a1fe8ba5d181aa267da827f5b49b264748c5b183777d2a7fae70c98f58122,2025-10-08T20:20:03.193000 CVE-2025-55188,0,0,b086d0dbd5599cbb04e0766a467bde69e87f63204bf06972e30a6ddfe139c26b,2025-11-04T22:16:30.420000 @@ -311068,7 +311089,7 @@ CVE-2025-55499,0,0,2cc58768c5ecd696ffd19853e039a58c4d54eabed656d33a1c73476ad6054 CVE-2025-5550,0,0,a7f8b3e6e4a65cf1d1c446dfd54ef557b099721ea53064805d74dc097ab7fb46,2025-06-24T15:21:17.413000 CVE-2025-55503,0,0,dc02ebc50da2e58192b820560f741b104a58c71594c718b7312606473541f51f,2025-08-21T14:30:49.670000 CVE-2025-5551,0,0,8ff7f4202c6173c89eb8a0c23eac7c48e12b4cd2567c9c9acb701d3f7babd62e,2025-06-24T15:21:26.347000 -CVE-2025-5552,0,0,da3b6868808443cf68362739e0b09df77681d1b0aaf4837a01defefdd26cb226,2025-10-03T01:04:38.463000 +CVE-2025-5552,0,1,a51c7c7440093852f6e5ff52592261ef1998095d4b9ce3098d64e6a55fd3e605,2025-11-18T17:03:52.857000 CVE-2025-55521,0,0,a599c0be41cc0e6c9332237e0722973b64b9549508bd65193f66a99f6e48cccd,2025-09-10T19:56:25.113000 CVE-2025-55522,0,0,1023df47c420c796c2e61125c76caa729c9b443e463847d6ae44fcc994031069,2025-09-10T20:02:08.333000 CVE-2025-55523,0,0,6e386a9f2d6a81d2ab89d0f49df39bbef31a6ea0e8b29cf7433523ec81200657,2025-08-22T18:08:51.663000 @@ -311233,6 +311254,7 @@ CVE-2025-5578,0,0,32e2b67e097a268e61a1363cf2f541533741f65d29219018b3efd0a9d82e02 CVE-2025-55780,0,0,563004ec91093865198815ea7522323bf223938474199b81eaac8efcc9bf6c76,2025-10-08T18:04:01.977000 CVE-2025-5579,0,0,f50149d8544a2d773348b89ae7f885564e1c15d6fd801a8287e0be610055b816,2025-06-04T18:27:53.140000 CVE-2025-55795,0,0,5bf7bc5b9d7698f80e0390080a5832f3fcf27bcf1486e60d3ed0b6a0572f5ac4,2025-10-16T17:09:46.393000 +CVE-2025-55796,1,1,d6e776608aabad7c577f3184ee06bf7a0787c4eb73aff303c779a9513227c2f4,2025-11-18T18:16:07.377000 CVE-2025-55797,0,0,69f16a3a574d79be17b0bd4ead630aecb65a27985e40eb09ee7faabbadd5d994,2025-10-07T13:37:54.860000 CVE-2025-5580,0,0,5420af4803342beed15a14e9e13364c54154082896c2011e3016de8bff3b1595,2025-06-04T17:43:09.830000 CVE-2025-5581,0,0,c54747d4f47de2d53a0450ac3d2803f6b1ce7f3a8f3dd0d32c7ea29ca0ea8be0,2025-06-04T17:44:44.413000 @@ -311382,7 +311404,7 @@ CVE-2025-56405,0,0,0304b6b0912b3f5106e981ea35f7cc32a57eef5a24de92ddcf9bbd612d7f8 CVE-2025-56406,0,0,7492fffc13fb383de7a670ae66ca295a08bae339c635408a9504544028169e6b,2025-09-16T13:16:11.347000 CVE-2025-56407,0,0,7620937d0492187c538149a770d9b7a2139d5f64e25d5220a84ee7f33d1a8f52,2025-10-06T17:16:11.120000 CVE-2025-5641,0,0,d5b74ed2999cb0573a6a00c5400b18ea1376fb3a7e88a5275977b2c2932e733f,2025-06-23T14:37:57.193000 -CVE-2025-56413,0,0,c9223cfd3e2b360365fb3916e2e772c82288c89976da07200973f71c72aa719e,2025-09-17T20:28:53.573000 +CVE-2025-56413,0,1,799bc005c807185cbe2cd516d12856a3bf76c9a9283bdf901d3f7f942e323c18,2025-11-18T17:41:44.543000 CVE-2025-5642,0,0,07bc4ff6bdf6624bf56957684ab53a92c9369b191efa0f5f0ccbb572aed8a52a,2025-06-23T14:38:11.337000 CVE-2025-56426,0,0,1e6d230143e3582cb8f7de2fb755090ae125515d570ec7b708bbf77c9915c3e6,2025-10-30T14:30:40.043000 CVE-2025-5643,0,0,bdc7b71238ce4013f922d9b127c18310da265916fde136924493a6a34126de7b,2025-06-23T14:38:25.483000 @@ -311411,6 +311433,8 @@ CVE-2025-56514,0,0,4482f71c1d8ca23c138073d6af7feb89ed548879dfeab98abda9787d64509 CVE-2025-56515,0,0,4213c102f8ae467f7609431d8eb5051fa530f8c19a033428ab3a7a9b1eebad9b,2025-10-15T18:38:27.753000 CVE-2025-5652,0,0,0724d88b1f9ce21bc0e0832801cf9e7e7f74020843d83266b3b7dd809f5e6ba7,2025-06-06T18:31:53.513000 CVE-2025-56520,0,0,16d45c2367b380e1d26e97aecd4769436da7abdfd37700c2e9f2a223acaceba2,2025-10-07T13:20:03.270000 +CVE-2025-56526,1,1,15792d3535a30d39096f6dc47d13ee579d0eb4be8d9392acddcf46f1ba6621f6,2025-11-18T17:16:04.477000 +CVE-2025-56527,1,1,96844ce9dd049b135359ad03f995f856b31bea0e4bce1a4dd4c8658e980755fa,2025-11-18T17:16:04.760000 CVE-2025-5653,0,0,da755ba8339a98f5c3056c961e1098d96885507356387524c7f4efd0d31177f8,2025-06-10T15:05:01.687000 CVE-2025-5654,0,0,aad7b406341fca3d2be283c7d4299523b9fa233ab63b2831170e20e228761ade,2025-06-10T15:04:45.870000 CVE-2025-5655,0,0,131fe07f8fa27963687df1fc758ddb8b8d91c8d717ac28a37f70ed3c2fc60910,2025-06-10T15:02:37.133000 @@ -311435,6 +311459,7 @@ CVE-2025-5662,0,0,13b0e9eb543fdf837e585d27cf26a4fc713e76f1cf9d9e92a69010e02c783e CVE-2025-5663,0,0,8c93d873d2b9bcbc305e1d9b46e20f6f681f336f769ee36ddc277777629edd2b,2025-06-06T18:43:14.380000 CVE-2025-56630,0,0,729cbeeb577d124be23f33245003dad97b206372edb1e4dc6e501140646d475b,2025-09-08T20:36:30.930000 CVE-2025-5664,0,0,074d167717e31a25a328ab1446dd36260b2abd74bcedd74ba2c593919d206734,2025-06-24T15:21:54.440000 +CVE-2025-56643,1,1,a93582e14705e076bdf95e235f4ef8b4eb167f951475ec36e3c050beb0a5170f,2025-11-18T18:16:07.647000 CVE-2025-56648,0,0,732c0ea9bbe6cea903929ee9c94d3a6fb080620b5ec06018b53ef6c71707519c,2025-09-26T15:06:13.300000 CVE-2025-5665,0,0,2824619f1a9a35f45b2fa31c95baf28e5f64102ec35512ead930d2b494d05692,2025-06-24T15:22:02.157000 CVE-2025-5666,0,0,df69802ddbbbee8bd5aee5c58c228da8bb9c4009409caaefe51674350e6deb03,2025-06-24T15:22:09.833000 @@ -312028,6 +312053,7 @@ CVE-2025-58030,0,0,4e43f682673d1202c22c350c09836764e20e374a3d0f7626c8a804f30e7b5 CVE-2025-58031,0,0,67df86bb8b1e73abbb936d2a0fd8982c15627697fa43f2321684dc1dc549a391,2025-09-22T21:22:16.313000 CVE-2025-58032,0,0,87d4be683cea8a7de9a4025f14f6161d1ce5e80d1af2365516e9f502cf2b4c9b,2025-09-22T21:22:16.313000 CVE-2025-58033,0,0,de184e5dac0644c28df8a8756f32fe3469b81037a5697699b20dcbdd0ac11a43,2025-09-22T21:22:16.313000 +CVE-2025-58034,1,1,28c9c866b67f9931cf064743bbdcc9da89ca8952baff4b36581e91003e823bfd,2025-11-18T17:16:05.057000 CVE-2025-58035,0,0,96c0b05ce1932b2b9c5e0208babb33f75f6ac1875144fb35c17e474010797500,2025-08-23T03:15:30.483000 CVE-2025-58036,0,0,8ad16fdaf903d3b30fd124bf4cb5c51455a040317deeec19c26d37ce930f713e,2025-08-23T03:15:30.557000 CVE-2025-58037,0,0,a6769cd5939bbde8f6da3651ae8c9951b3c0edf96ff36d995b643f4130713cf0,2025-08-23T03:15:30.630000 @@ -312080,8 +312106,8 @@ CVE-2025-58115,0,0,7d51f549e894b882fcfa42e6da18f5b189644e1a8f191af34e4c628601708 CVE-2025-58116,0,0,260d1823c3231d087a44b857dfaf8f28a97eb604b8c79d08b8192019b0497f5b,2025-09-17T14:18:55.093000 CVE-2025-5812,0,0,a8fa614eb185b909327a01b5dadc2a8b72103fb7810bcfabee505f3dccfda767,2025-06-26T18:57:43.670000 CVE-2025-58120,0,0,c45cc93bacfd00a0f2c186502d15f1822baa488e0455e8637f49470ba1455c56,2025-10-22T20:49:29.667000 -CVE-2025-58121,1,1,33de88a3563eec69582e57aa47d05fa40cccbbadb1ce35be337d4e82647b8686,2025-11-18T16:15:44.700000 -CVE-2025-58122,1,1,99f6381a1844079e8329be33554e2d15017fa52614e3aca022d4efbd28e4fbc7,2025-11-18T16:15:44.930000 +CVE-2025-58121,0,0,33de88a3563eec69582e57aa47d05fa40cccbbadb1ce35be337d4e82647b8686,2025-11-18T16:15:44.700000 +CVE-2025-58122,0,0,99f6381a1844079e8329be33554e2d15017fa52614e3aca022d4efbd28e4fbc7,2025-11-18T16:15:44.930000 CVE-2025-58123,0,0,930eb521d7289fded38a651b5be10ecd7b5f9de2669073d29833da9f0701a671,2025-09-23T16:14:52.880000 CVE-2025-58124,0,0,494faacc066d4aab99b05c9459b16302c40b0c62dcb1e2c4ba4b3934848ffb7b,2025-09-23T16:07:25.177000 CVE-2025-58125,0,0,ef0d6828599d1ac7edd6ec8d487189f6b32cdf2835d555f004737b1c24b1ca71,2025-09-23T15:56:51.177000 @@ -312312,6 +312338,7 @@ CVE-2025-58401,0,0,dfe49675ac850566c13466bff29641bc3ad410b493d2f5416ef68a61d9db8 CVE-2025-58407,0,0,5039b87552986e37dea8992fef32c93f3c127bd52ac1cff7e74f4c5ab19388b0,2025-11-18T14:06:29.817000 CVE-2025-5841,0,0,f400ea2f8b46ebb92066563e7d4eaccd25056b8981da67e57e016f89e1a31dc6,2025-06-16T12:32:18.840000 CVE-2025-58410,0,0,49b912b5c7c314d8beb8e93d272cdce535297035770e862546c128a54816928a,2025-11-18T14:06:29.817000 +CVE-2025-58413,1,1,5a1ebf433778cefba5aae2d66937ac25b4e292163bf19030c26afc3768f2df09,2025-11-18T17:16:06.557000 CVE-2025-58414,0,0,3188c8a972929c6948c919c7baf1afe0e88051b884f6bf261ce4dde88ba5b151,2025-09-02T03:15:41.850000 CVE-2025-58415,0,0,db1260fb06820906cae7ff9ccf72bd557b188d34b327d4b6e99f57ba17b8df3f,2025-09-02T03:15:41.967000 CVE-2025-58416,0,0,fdeef2b836eeeae4fc521b9beafb7336486f5c39a29160fece0ab47de0267d7a,2025-09-02T03:15:42.047000 @@ -312501,6 +312528,7 @@ CVE-2025-58689,0,0,652561ba5eedce78e8c08e01eecfe4cfd9ad02222f09a1e78149fbd702c9e CVE-2025-5869,0,0,0d0109c6487f0d413e2a59308ed1863931f481f01e2321cec60fc07d5df09a60,2025-07-11T18:07:03.757000 CVE-2025-58690,0,0,2d042d509befb027b2cf5efe812183c1ccc16739f152eedb99f415909aad8c4b,2025-09-22T21:22:16.313000 CVE-2025-58691,0,0,f472802eb94d348c73d6f9588b04ba5cd6292fb11ffedade4d8539ee03f1166f,2025-09-22T21:22:16.313000 +CVE-2025-58692,1,1,31cb41b11462acc0ba7dc5e05c2ddda0b70be2a354c98512526da68ddc323f98,2025-11-18T17:16:06.963000 CVE-2025-58694,0,0,d7777a0bf0d612b62dcd13bd1852571f412eb9392abdcf089e75f24df0ef7b3f,2025-09-04T10:42:33.173000 CVE-2025-58695,0,0,0bb666061bc6d018e9855d9875fb0729a251519f263cb3a05cfda70138426b6c,2025-09-04T10:42:33.253000 CVE-2025-58696,0,0,afee77777ae44953e811615bd4da6785f61b911a7e59d0d56b371e4f91b33c6d,2025-09-04T10:42:33.330000 @@ -312816,14 +312844,14 @@ CVE-2025-59089,0,0,4d1de6bbb8d91ed3ea174c22160cec7d962caff97bb8596c81096c8da5c28 CVE-2025-5909,0,0,f82bb01110c9ead7795cebb5ea4e7190d1b79e236ac8da87e1f6c74c57a9946d,2025-06-16T17:14:56.647000 CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f3e,2025-06-16T17:13:58.870000 CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 -CVE-2025-59110,1,1,645d89ad9ef42b92dd5f35d20759f42fa7528bf92d6a9b09c6242a8f843ac9ed,2025-11-18T15:16:32.620000 -CVE-2025-59111,1,1,3c8fcc9fce748a7883d3443f7c9a692b4e08fa8ef8429d871b255bb31ef86c23,2025-11-18T15:16:32.900000 -CVE-2025-59112,1,1,ca46e8aa6b53cba7912eb3b7812d5c9d041f72b7780cd3383ab2648631b77c07,2025-11-18T15:16:33.157000 -CVE-2025-59113,1,1,6db3fef351b636e878a196865093206cf4c9f0dfcdeffefeafb9a6f38bc769e6,2025-11-18T15:16:33.387000 -CVE-2025-59114,1,1,fe544b0311d4a6128f06bf9fd1dd383eaf843fae686bbabbc3d9b4161d721d01,2025-11-18T15:16:33.717000 -CVE-2025-59115,1,1,9759b82bcca458c4a6898bc8a78b6a6b175626a4846491c3915855421ae0ba11,2025-11-18T15:16:33.887000 -CVE-2025-59116,1,1,d86700037e93d9049da7ea69233090e0529501aca3512cf53f9796ae934c6cdd,2025-11-18T15:16:34.127000 -CVE-2025-59117,1,1,ddab9e93846e0e78938483055dda648abb207800e7cbbc1617a7aef0797ce9a4,2025-11-18T15:16:34.337000 +CVE-2025-59110,0,0,645d89ad9ef42b92dd5f35d20759f42fa7528bf92d6a9b09c6242a8f843ac9ed,2025-11-18T15:16:32.620000 +CVE-2025-59111,0,0,3c8fcc9fce748a7883d3443f7c9a692b4e08fa8ef8429d871b255bb31ef86c23,2025-11-18T15:16:32.900000 +CVE-2025-59112,0,0,ca46e8aa6b53cba7912eb3b7812d5c9d041f72b7780cd3383ab2648631b77c07,2025-11-18T15:16:33.157000 +CVE-2025-59113,0,0,6db3fef351b636e878a196865093206cf4c9f0dfcdeffefeafb9a6f38bc769e6,2025-11-18T15:16:33.387000 +CVE-2025-59114,0,0,fe544b0311d4a6128f06bf9fd1dd383eaf843fae686bbabbc3d9b4161d721d01,2025-11-18T15:16:33.717000 +CVE-2025-59115,0,0,9759b82bcca458c4a6898bc8a78b6a6b175626a4846491c3915855421ae0ba11,2025-11-18T15:16:33.887000 +CVE-2025-59116,0,0,d86700037e93d9049da7ea69233090e0529501aca3512cf53f9796ae934c6cdd,2025-11-18T15:16:34.127000 +CVE-2025-59117,0,0,ddab9e93846e0e78938483055dda648abb207800e7cbbc1617a7aef0797ce9a4,2025-11-18T15:16:34.337000 CVE-2025-59118,0,0,718f31b09aea9185650c6c11ae9f8f553f00c15bc116edbda7a20ebad6f1fe2a,2025-11-13T15:04:59.130000 CVE-2025-5912,0,0,10ff6acf965d367f7f73802da6c280421d13214babe0565635ffb936692b9383,2025-06-16T16:52:15.440000 CVE-2025-5913,0,0,4cba6ee8cf199de13dc8cd6aadd287347b651acc47698b712c4382a0d9737790,2025-06-16T16:49:15.273000 @@ -313188,6 +313216,7 @@ CVE-2025-5963,0,0,fa08382550ea0c3ee30b8fad922b8d6a6c917f388130b237bfade6a185c040 CVE-2025-5964,0,0,b6338f89835947f0c4815c57ff50de99747ffc03f9ef08e09224f51a89fc6f2c,2025-10-09T16:35:13.663000 CVE-2025-5966,0,0,09d8a9bac7504afbe6edeaeb6484541fab81d41ede92798466cd79f657e6f40d,2025-09-29T14:49:26.283000 CVE-2025-59668,0,0,c3215ccd37a9189456d647e82cbeee5270d026f9cdf13dc3ec27030b55949e96,2025-10-31T15:15:42.660000 +CVE-2025-59669,1,1,fa982cb9a64797ca4da08430479d15dfc14065877c399eecfe6e26d831ee25f7,2025-11-18T17:16:07.390000 CVE-2025-5967,0,0,7c5e0c26ed4b66df85d365d4ed75d8b91a00ca441c684f6a0fb381904729dedb,2025-07-03T15:14:12.767000 CVE-2025-59670,0,0,7998a2a73f29a56b569fb557cf7e3bc20fe5f01d005c5e612684697997417e77,2025-09-19T03:15:37.283000 CVE-2025-59671,0,0,b1e6040c295e847543b7b442846779e12aa8ea370556edf9efadac15af16073e,2025-09-19T03:15:37.370000 @@ -314102,6 +314131,7 @@ CVE-2025-61691,0,0,eec839b13fa21074d44e3bbffeae75a4b252e2fc2cfd48d4a38fd47ce3e25 CVE-2025-61692,0,0,6d4b2dd3d04d38f2353f575dfbbccc93c25bf9f06993949a8d61ea2f96eae14c,2025-10-07T14:09:27 CVE-2025-6170,0,0,8ee62512245e2af562128802327ad4e5836ac5fc4d880ffe07a3d169847f512f,2025-11-03T20:19:18.300000 CVE-2025-6171,0,0,c44f2fd4f71ecef9ddc8db0c2ec060f5f97b7b394de77cdf0495b522fc1b65d7,2025-11-18T14:06:55.963000 +CVE-2025-61713,1,1,e09766aeba6caa4d72c147b956ba69d9e103f0733ec21f118a62519cd4c22a6b,2025-11-18T17:16:07.630000 CVE-2025-61714,0,0,c02deb5a89a330eb5e764d72dfc6a2022cdb6c3eb0846d7603c4fcf125e99cde,2025-10-01T03:15:36.940000 CVE-2025-61715,0,0,acebc75d3bddb97cd22dac1f8d270822aed8a8abfbc5b81f36e35c32dd634eea,2025-10-01T03:15:37.037000 CVE-2025-61716,0,0,6e3f1bbce6eaebe3bc7f361bf2947f5e8e48283a61be4413f8db8272c46649fc,2025-10-01T03:15:37.113000 @@ -314946,7 +314976,7 @@ CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b93173 CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000 CVE-2025-6313,0,0,1562d4a1d7af34d5663a11ccca3c18498c794bf589f4002eb9f8648b22c4c20d,2025-07-11T15:51:05.223000 CVE-2025-6314,0,0,85263aadad702e79e29fb879ab737e30de52ac79d67682e5f45540c096d4466e,2025-07-11T15:51:18.450000 -CVE-2025-63147,0,0,a25a13d75e25824f31bbbbd2b35c215b06956e25e3ee43ad64453a9877aa2aa7,2025-11-17T19:08:56.897000 +CVE-2025-63147,0,1,2a359f948b52c7d4f1713170c7577539c419295fc85dcd0c13ea442e3acf3184,2025-11-18T17:16:07.860000 CVE-2025-63149,0,0,922982e1e448aaa9f8521caa7a9be52142d2544d255603b9d0dcb87b1c50636e,2025-11-17T19:08:37.703000 CVE-2025-6315,0,0,af65062d3a83820b00b6d86c3f2fcfd8c6f95503b5307720deb757d1fce33557,2025-06-26T21:10:39.227000 CVE-2025-63152,0,0,a9def23ea617e1863429feccc1ad14d3ccdc6a4cf42620833d545891e83a8f78,2025-11-17T19:07:39.120000 @@ -314962,13 +314992,14 @@ CVE-2025-6322,0,0,42aee047e7c5d44e6e1b0427b4ab00b96a5ddc259fc55ba7d8160dc3cc93ab CVE-2025-6323,0,0,f452bdf6c942e9aea72d0768dc1d57c62968228633f54da902893e80310f7431,2025-06-26T18:51:41.870000 CVE-2025-63248,0,0,a90a1aa279b743a232025cfaefdd22c8e8f25922acb5116f9391db1f458d6b8f,2025-11-06T19:45:30.990000 CVE-2025-6325,0,0,c794d9e7e13d5f2cad13175f2f17ac182b876ba660cb481241bd86afaeb52cf1,2025-11-13T11:17:40.620000 +CVE-2025-63258,1,1,21b45779ccd269866c03e434151ea29d5e205cb3ac773befb2f5bb5c108a557f,2025-11-18T17:16:08.183000 CVE-2025-6327,0,0,f16b475a0b89e76122d5447d3701add616d7cf126fe1427e042a72950dbe2e1b,2025-11-13T11:17:40.833000 CVE-2025-6328,0,0,63de09c1b6d4168f841e3ee35db39bcbc388058f6d7e6132f1ca750dac04ea71,2025-07-11T15:52:09.140000 CVE-2025-63288,0,0,8d26984336f32fcbeaabbc85d04a17d2000fd51427296a348a4dcdcfe64d9c0d,2025-11-12T21:15:51.867000 CVE-2025-63289,0,0,a8e0bed88424c28be9c8aa99e8188fadbd2657ef0707193edccd31065c45d57a,2025-11-13T16:15:53.373000 CVE-2025-6329,0,0,a7011e5bc2b5e58711262f4b75aef2100fd96b5a3e212f68f2e8d88a24c40180,2025-07-18T12:40:46.277000 CVE-2025-63291,0,0,0140dfdc9f37de29af1ccccb22841d51acb78f0605f11527e1c9f9d581d81ff5,2025-11-18T14:06:55.963000 -CVE-2025-63292,0,0,70f4a98c9631b7843b9ea2b35140c862f6cbcf2b06ee48eabe5c1aa31c635913,2025-11-18T14:06:29.817000 +CVE-2025-63292,0,1,2bf2266bd80076fabf2d0eebf340c065678afb3b666cfbc98b7900c9e0e6f12d,2025-11-18T17:16:08.460000 CVE-2025-63293,0,0,729114dd16fbaedca301f4fb2fc045170968a9c391cec805024dc06603c33f99,2025-11-14T18:32:13.647000 CVE-2025-63294,0,0,fce41f2cf55433fdc31167bfb0253f28f3a40e1f06401427f9b7d59e2a49acc8,2025-11-06T19:45:30.990000 CVE-2025-63296,0,0,6172cc0ed995a3ffbd37676260d9a8d6afab67af49c3bffea5690f0e9f90bacd,2025-11-12T21:15:52.030000 @@ -314991,7 +315022,7 @@ CVE-2025-63396,0,0,da5c29137d40ba6767f4dd963a92709b84f6e5a1f7bc329c0979e02c87b90 CVE-2025-63397,0,0,e57228ecd82fc8e356fd048a364fc70a7a072e380a1457bee8839b6db577d6b3,2025-11-12T21:15:52.523000 CVE-2025-6340,0,0,dacb53e17fd0fb578d899283d6d11eb80ece027ae37caccbd0442a6f52974b5a,2025-06-26T18:16:01.950000 CVE-2025-63406,0,0,8c2805ee3b2c521ed1a71504f9e1f0b68aab36022acfff577abf8d09c6bd3f5d,2025-11-14T17:16:14.427000 -CVE-2025-63408,1,1,87e5c06dd86d9f7ddcde8cbd1744924618138cdc9ce2bdc41c86e3017827e706,2025-11-18T16:15:45.323000 +CVE-2025-63408,0,1,2e2046dfe51bfc3512159c9ddf53150fffacb5d52294ddb13cb3b55742db15de,2025-11-18T17:16:08.787000 CVE-2025-6341,0,0,6eb97d536857f3ed3053b28a0b496ad883570be814c5c64c307e1ec4c95a4991,2025-06-26T17:31:18.840000 CVE-2025-63416,0,0,ba7225059e837de49bcd6e9ed6738f6482279d8469c500d4be2b6830c5a4e212,2025-11-07T19:47:41.363000 CVE-2025-63417,0,0,f6d0383c7b34ec0d4869cd1ca40ea1fa35486e57e41fdb06ad72060adf588685,2025-11-07T19:46:48.183000 @@ -315017,8 +315048,8 @@ CVE-2025-63452,0,0,80ded5c011c7a189fcedf63a17752b52f65cab539bc6401b41c6b9639db17 CVE-2025-63453,0,0,65ec3e84ec1dc3b14d1173db053c7edab368bd7f128d99b325e5406feccba198,2025-11-07T20:46:33.640000 CVE-2025-63454,0,0,fc308e95fe2714524e00bb0c486e8ee71dc646551e54a5bac6342bef541ec9b7,2025-11-05T17:29:08.600000 CVE-2025-63455,0,0,28a6ae5217ac360b373acdb9fb5d7168a3e5c514995f3ce2dc8621059b3d8b4c,2025-11-17T19:07:51.107000 -CVE-2025-63456,0,0,37a45632c55422a6b9c4e2271538c08ef2fd84a30cb40cf810a7abc54c3d7ecf,2025-11-17T18:35:00.850000 -CVE-2025-63457,0,0,29c6ae41ba98f90f3b2431b4b524afbad35060adfb50297346855005de6a7204,2025-11-17T18:34:11.637000 +CVE-2025-63456,0,1,3000faf7ba85b02ea09a2bb31d80cdbd172c83680b1abf484e71ce9a98cd9f95,2025-11-18T17:16:09.087000 +CVE-2025-63457,0,1,2cd572e6f3297bf7f146f7038b21bd63fca39eb7af821a085e369d02eb409272,2025-11-18T17:16:09.427000 CVE-2025-63458,0,0,c47f4a636e88405048a40f1d3b801588601d316481054e42e8373f492503f4e4,2025-11-05T17:28:58.980000 CVE-2025-63459,0,0,c0cd9ccfb71b7691adcd08d383fe8b3dfc20bf2068c4227fe9cb6570cb016a7c,2025-11-05T17:29:18.877000 CVE-2025-6346,0,0,60adff065c15ee37ac94dab3cf86c7439ef9e78c708c480099857f05e535c99f,2025-06-26T14:44:35.813000 @@ -315037,6 +315068,9 @@ CVE-2025-6348,0,0,9e42f8c7e366619532860c7cd5bbe1d98918b912d4a7739385dee9f89f381c CVE-2025-63497,0,0,10ce1c93b208a29c95044c5da2a1ddae810a082440d130d432288699a67a3ca1,2025-11-12T21:15:52.683000 CVE-2025-6350,0,0,a86ee8e77b19eb2905a6818fe7d360409130293abf6abafd272b9012f376c67f,2025-07-07T15:28:10.050000 CVE-2025-6351,0,0,58d9ebbc99a1fb6475be804d7a4fe745e483538a102155a9e63fef3060dd4f15,2025-06-26T14:05:27.120000 +CVE-2025-63512,1,1,685bd8fbd7c7c7afea1b6dc857a905dc4e9a6594ff70b3056616331f4fcc4bfb,2025-11-18T17:16:09.817000 +CVE-2025-63513,1,1,ee31f6afc24bc36fa339c6cfbae0952572bccb0dca88de2444d5cdedfcd6fa07,2025-11-18T17:16:10.360000 +CVE-2025-63514,1,1,ffae07df2116935697f525bbc10e3fea9b0ada3356e038fe4028fbbb58dc919a,2025-11-18T18:16:13.280000 CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000 CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000 CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000 @@ -315058,9 +315092,9 @@ CVE-2025-6359,0,0,4c6b3a89015ba9383cd0f30179b8f5c4de98d22d2446e398ba201465b8f648 CVE-2025-63593,0,0,73cba8fc4b3c191f0e6a87e4bf025f9b648698d6a725a50e4a8db1b82d338409,2025-11-07T18:33:34.427000 CVE-2025-6360,0,0,cd47aa26c5ecbd48de29b33b9fb52e4ccfc785bed014ddf3d7b77089b3be3045,2025-06-26T15:35:49.490000 CVE-2025-63601,0,0,a9aaad4c2ec16e08f794ee422b03c50a32421538037da46f9529c32a824db980,2025-11-10T17:15:35.603000 -CVE-2025-63602,1,1,bbd6500e6b28749800119f3f3e7f82d82b796a02c7afeaabc49c938de11e36df,2025-11-18T16:15:45.593000 -CVE-2025-63603,1,1,2e3021944b8587ccf8fe150314da3ec9a7f388e39d927f77b1cec8e0544415be,2025-11-18T16:15:45.833000 -CVE-2025-63604,1,1,c4ba4b300c83ab2ca53c66f69a4608d6685fb3f6106873ffa43f68696ca7e844,2025-11-18T16:15:46.060000 +CVE-2025-63602,0,1,842d9607e4cea0ed64d911786933b110881ada3968a2c43ec78944aea7f996c6,2025-11-18T17:16:10.613000 +CVE-2025-63603,0,1,6fda1288c448d9438634bd2a138c7ca7ebe48927be9a0f48b33fab315c5cb59f,2025-11-18T17:16:10.923000 +CVE-2025-63604,0,1,b8d1866cd985620099563713bf16acf77c4f3cd11e4d5899783736b20b792c7d,2025-11-18T17:16:11.243000 CVE-2025-63608,0,0,e958e593af9bc02b3d721e38f2c301060cffaf6161eaba950bb44aeacf054795,2025-10-30T15:15:44.690000 CVE-2025-6361,0,0,69dfed4b6ee28f48f4584674801cbba5191a06ac465e39fa526b231064a630aa,2025-06-26T15:33:24.173000 CVE-2025-63617,0,0,afc01184ac7bba35d707f2625844900a71d7d16b3c53574ab9a49d57bf839f48,2025-11-12T21:15:52.847000 @@ -315088,14 +315122,16 @@ CVE-2025-63689,0,0,ca884d3a8d08e0708274c67dbb0cbe060bdc573bd0bb52d2b2c634e45be2d CVE-2025-6369,0,0,4187feb2cde6bcc9d06148b06739c8e59691f4fcb04265209e201b0758fabfe1,2025-06-25T20:09:28.010000 CVE-2025-63690,0,0,496ac9d7e888dd7271d7c82f910393c3ade06187e222d0a80b077f281db91d20,2025-11-12T16:20:22.257000 CVE-2025-63691,0,0,0e8ec491f0b05c60cbd9fb85c0b28bffccfbd130bd00ad0f06b9650f0e2bc85a,2025-11-12T16:20:22.257000 +CVE-2025-63694,1,1,8937f70eff138067f6d08cbee33f080a8cb7d4babc9f2f54ee0a5da2927d4845,2025-11-18T18:16:13.437000 +CVE-2025-63695,1,1,70c372d29001244468e76c6d7598a72d1216a50d579cfe352e06d0d140752c5c,2025-11-18T18:16:13.590000 CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc83,2025-06-25T20:09:39.790000 CVE-2025-63701,0,0,662ea7849c27be5b80c25e2e58f382b31e98a3c765f38948a74aa0fa7306e223,2025-11-18T14:06:55.963000 CVE-2025-63708,0,0,e5512aad8662eee480f1bbc1ea77cf826dddc5494036a9d91ed2bb78aeeb3a9c,2025-11-18T14:06:29.817000 -CVE-2025-63709,0,0,b0547aefb089aa0e088ef7c14863f039e1930ffc78d15c029056449150facb67,2025-11-17T18:20:14.297000 +CVE-2025-63709,0,1,3ee3d3119216acbdd856f816aed9b25e1eac9bf664876444a248a02328e34eea,2025-11-18T17:16:11.890000 CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000 CVE-2025-63710,0,0,840583f3b4f0b85b92ea3d82cdb8fbd2d27339511c0160e41078f43563d92e92,2025-11-17T18:18:39.677000 CVE-2025-63711,0,0,829f43429852e091c8d00bc9c7399b99a933ccfc99024798255b2acaafa319a3,2025-11-17T18:16:51.357000 -CVE-2025-63712,0,0,518441d6af2566ae93a76f08b50cb236c6f2de50c72178b99964ed650c827f43,2025-11-17T18:15:02.930000 +CVE-2025-63712,0,1,919b90f6d452821758f14ba5a88afd6b06e9339da8b7833f8210651787f43a4c,2025-11-18T17:16:12.217000 CVE-2025-63713,0,0,450b82543ca806f77fc52f91a530564dceb6e95ca328aa6dc60b6284d42ea76e,2025-11-12T20:15:44.273000 CVE-2025-63714,0,0,40eb878b2f75c214bda76dde6b33eebc20453471c55b154682203a1d68438079,2025-11-17T19:02:23.747000 CVE-2025-63716,0,0,fceb486ffc74351815db6d17a7f7bcd74dea8a5a99ebeaf09a82d5319d800ef2,2025-11-17T18:37:54.977000 @@ -315119,28 +315155,30 @@ CVE-2025-63784,0,0,f471d823789e4641059c300c53a1f63c956f9a1dfc32f95868857d60e3408 CVE-2025-63785,0,0,540fd149847400b2c4ab5e9be1d157cf0986dc25be0a572c51197c617bbc0e61,2025-11-12T16:20:22.257000 CVE-2025-6379,0,0,a573d0789f74e2940a233e26e5770bd43ee83276728b28e7918a6f6c0e9e28bc,2025-07-07T15:24:31.510000 CVE-2025-6380,0,0,8038af934fb98ec6cb1fd37b6f439a7d7ffbe43ae5c1a00c7e81bd72f09813f4,2025-07-25T15:29:19.837000 -CVE-2025-63800,1,1,ca6eadfca8bb8494f60a75750b390acbcdd8036b65c113e72b70ff0ee5356525,2025-11-18T16:15:46.310000 +CVE-2025-63800,0,1,17b406610e5cbdc45d2aa0f2e13c6fc2b62cfc791a5d05c9ec20c61583190f9c,2025-11-18T17:16:12.640000 CVE-2025-6381,0,0,bcb772a2599dc7010241cc7bbab88371a6f4c6ca137948aff05aab6ef1ed3e85,2025-07-07T15:24:28.070000 CVE-2025-63811,0,0,4f7263eb3d2fb17697e7a3a05437a2c81636562357efcad7db279b056f97af7a,2025-11-14T16:42:30.503000 CVE-2025-6382,0,0,efd8750cb574f4b8ddeed5e07b9915e567566e97e99b145524009524920bff34,2025-07-25T15:29:19.837000 +CVE-2025-63828,1,1,5ee698ac747be19bf0eca5a43f51c3d398a54ae4790afcde53e6d680f6b436d9,2025-11-18T18:16:13.753000 +CVE-2025-63829,1,1,58acca94938a3465d8e849191c225e2b0f523a606645e42479376105efb84249,2025-11-18T18:16:13.893000 CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000 CVE-2025-63830,0,0,16bc76bd2ea7525db4482f11ac727a595a949d46b7c14961050e7cf3bee15a75,2025-11-18T14:06:55.963000 -CVE-2025-63834,0,0,5c72e5fddf7ea954a5dee447968e7f965de2eea4b39e1f7696414db954223ba6,2025-11-17T18:30:40.370000 -CVE-2025-63835,0,0,7ffb39c8c9c6dc28463f55dadcbeb16ad2b98f5dd2fae3d3fc368bb9b8365dbc,2025-11-17T18:28:18.650000 +CVE-2025-63834,0,1,06bca667db37bd19e457ae81f941eabc0c0fed97aa9f25b2d14a20ca88bf9ad0,2025-11-18T17:16:13.093000 +CVE-2025-63835,0,1,3f8f66f94330f37380d25aacc7f62dc373a4f1752d30e3e8f5ad5cb4e3e435ef,2025-11-18T17:16:13.363000 CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000 CVE-2025-6385,0,0,464badea5b662001b494c98ff4f924b7b5edadd5780086f421fd9e2a4d9d1971,2025-07-25T15:29:19.837000 CVE-2025-6386,0,0,36273686c966a96e6687737cbcaf18f7573e7dd2a4ed9617fdf7c38b7cac9900,2025-07-08T16:18:34.923000 CVE-2025-6387,0,0,2cd1a43e98ae88ad7a6b5a63e665518e4af490af78f6281175d60f26b1475718,2025-07-25T15:29:19.837000 CVE-2025-6388,0,0,c57f74fcbb2b7d66e1341c84f56bc9041f6a01f87ae6ca05d02074754598d138,2025-10-06T14:57:05 -CVE-2025-63883,1,1,5dd3d7c47e5c5da5a1136d7fc1460a2156efbca6c63db41b12adc04d5b53de61,2025-11-18T15:16:36.097000 +CVE-2025-63883,0,0,5dd3d7c47e5c5da5a1136d7fc1460a2156efbca6c63db41b12adc04d5b53de61,2025-11-18T15:16:36.097000 CVE-2025-63885,0,0,12c6f95cbe8095c93fc90e41bd7e68c1f40301c95e3edc50862766fa954ae56e,2025-11-04T15:41:56.843000 -CVE-2025-63891,0,1,01c7232a0b8153cbb9c8660a456ce5a068407c83c81f25931f52e2dbefd9f0cc,2025-11-18T14:06:55.963000 -CVE-2025-63892,1,1,2908c29f544db674697d1657fe42213c3229df4ab387c1234affcb7b70c442f6,2025-11-18T15:16:36.367000 +CVE-2025-63891,0,0,01c7232a0b8153cbb9c8660a456ce5a068407c83c81f25931f52e2dbefd9f0cc,2025-11-18T14:06:55.963000 +CVE-2025-63892,0,0,2908c29f544db674697d1657fe42213c3229df4ab387c1234affcb7b70c442f6,2025-11-18T15:16:36.367000 CVE-2025-6390,0,0,9c2995b97c77e7da4f43909b7b6f4b7215a1357d7553475969bba1d7250f8bdd,2025-08-27T17:56:40.230000 CVE-2025-6391,0,0,76a67f2aac9fc01ec5ea0b9c5be515086faf87f6a920d69dbd894ac3dce21de0,2025-07-22T13:06:27.983000 CVE-2025-63916,0,0,eb94b82f05d0180da1604630a7a9fdd8507401f60230f5ed563ea1889083ab99,2025-11-18T14:06:29.817000 CVE-2025-63917,0,0,3a912a88840a63b7453f4dcd76066137c2c10baaeee06538f573ee1b457688ae,2025-11-18T14:06:29.817000 -CVE-2025-63918,0,0,d19136ddc076e063b8089baa1801fa01e2587f28dc6c5e1ff5dabfd8f900719d,2025-11-18T14:06:29.817000 +CVE-2025-63918,0,1,b09e72165cd9a149b4624ddee6e4d5712e35e3958a002b33871b8f8530474a05,2025-11-18T17:16:13.687000 CVE-2025-6392,0,0,e50d913b817f705c17e4c5986d5d237892454b2d6369a72711353bff4d200116,2025-08-27T17:55:17.067000 CVE-2025-63927,0,0,927a3dee6242a721c6301e1d29aea3ba370923e5b1369f7f351d1ef6ba9860c7,2025-11-14T16:42:30.503000 CVE-2025-63929,0,0,0423c0ef8a4c2b971a0c6713d98efbc18c25910d9a89341572ac19fe3c70b7d7,2025-11-14T16:42:30.503000 @@ -315150,6 +315188,7 @@ CVE-2025-6395,0,0,cb3c0c913443d3dc2f885a3f5cc382abf9dce52bfd5d3e81f83b6ebd900777 CVE-2025-6396,0,0,409d35ffb9fa5fc3efea4c648195fd3dec536a742d04504e9a9516fc0e1f1ab3,2025-09-29T19:34:10.030000 CVE-2025-6398,0,0,02d12ac3742f98638365088a5866a62886f500da3955c7c4cebb36d818fb0b0c,2025-08-04T15:06:15.833000 CVE-2025-6399,0,0,1cc4662a693a649a9f407a6e359aaca52fe988ef413a3d7e4dcc120f8e622da2,2025-06-25T20:13:30.100000 +CVE-2025-63994,1,1,cacf3e6dbb1dd64b91f19ea0834081a729238275a3cf4d6c9651d878883c7c7a,2025-11-18T18:16:14.103000 CVE-2025-6400,0,0,b7834b01ffc76dd6d3a754915f4603e275b0aa9a7826af0f6615e59accec721d,2025-06-25T20:13:52.420000 CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff44,2025-06-25T20:14:01.440000 CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000 @@ -315159,6 +315198,7 @@ CVE-2025-64046,0,0,996393386d264b6a1329e697e0d11aa5184668063759c7fb3ab2cf8a564ca CVE-2025-6405,0,0,892fa39ea25d0fceb083bcffe5177ecfbe7cb9096e1732c10483f9dee58de891,2025-06-24T19:16:58.253000 CVE-2025-6406,0,0,2db684a16f4e28aaee6c2ddbef92630dbb3eb77bc0c3d22bde49da8224e470bc,2025-06-24T19:09:54.780000 CVE-2025-6407,0,0,00f10b229214c0a1e897663a31513da61f75e551ec09dba31fa5834ec889a929,2025-06-24T19:04:59 +CVE-2025-64076,1,1,5656c8cfa40e7f5b9be4be43fd71e323805ada3c329838922274af2cc9e15140,2025-11-18T18:16:14.263000 CVE-2025-6408,0,0,24bc650a9e4f70106abdd7486753dd6d722bbe75931df339c3a441d581f110ee,2025-06-24T18:59:35.810000 CVE-2025-64084,0,0,b115e985d35c26119a4e9fdb1db3b3899d4a7d7e40456d860d9a3e37568d4fe8,2025-11-18T14:06:55.963000 CVE-2025-6409,0,0,6a99fb2614583059088998d144c12c76b7571f4cbfc4084cae8e639cd6f9ffd2,2025-06-24T18:55:59.940000 @@ -315508,7 +315548,7 @@ CVE-2025-6475,0,0,3f426cf1651995de981716ed0ce59ff04720b4c8d7d4d43d75adecd6f0735d CVE-2025-64752,0,0,202d8bf2e54c262ffa83eeaccdf60c143ce59974efd36f9d28e654bdeb8542f3,2025-11-14T16:42:03.187000 CVE-2025-64753,0,0,6bea306e9380d597e799aeea6d11d2d8308ae029159b3e05a9983ce22e1d0377,2025-11-14T16:42:03.187000 CVE-2025-64754,0,0,480ab0fff69b440688104502609a41fc0c48b3ada8c6719a1b4db445a7f10930,2025-11-14T16:42:03.187000 -CVE-2025-64756,0,0,29a7169849f972c4a0439385afcf01b49a13c502b3c09c0ba4c0d1cbb7d26df7,2025-11-18T14:06:29.817000 +CVE-2025-64756,0,1,fca378cf1fca5f0433aa4f00f6ee9ba6d284d8e3e7841dc3874048e63bfb217b,2025-11-18T18:16:14.480000 CVE-2025-64758,0,0,cd571fab4169cb0953f900310f9052343e84a0952e25c170369b83d42447c89a,2025-11-18T14:06:29.817000 CVE-2025-6476,0,0,88c9d4c09f8a99588e03924e5dd1181761a91a2ea6d53c95f7cf80fed6da32d7,2025-06-27T17:14:29.533000 CVE-2025-64766,0,0,869c63890b71c7d3612ddcb69d1600eee17abf3cbba677d2f8adf9672cd1bbc5,2025-11-18T14:06:29.817000 @@ -315536,7 +315576,7 @@ CVE-2025-6496,0,0,41dc145f9a02ba783f2ed330080b0df94da07c3c130615dd33f85880edf7aa CVE-2025-6497,0,0,085a542a1200fd4aa6eb1522dd911d9a98ef8c5a6df00f38adf93948fb0f75bd,2025-06-23T20:16:21.633000 CVE-2025-6498,0,0,907c56eb269ecc3260755ccec847f1470b3bf77ddda5a13f3ab3e22d241e2947,2025-09-30T18:21:57.093000 CVE-2025-6499,0,0,621f3cf77e1b458ebcd19ed863e5aad4281ed7c03f96f46067a613c832800727,2025-09-18T13:06:38.160000 -CVE-2025-64996,1,1,9fc16d48f3a4752ec210f6fd6ac54f41bd8196dd555bcf213844f5c4e9fb773b,2025-11-18T16:15:46.563000 +CVE-2025-64996,0,0,9fc16d48f3a4752ec210f6fd6ac54f41bd8196dd555bcf213844f5c4e9fb773b,2025-11-18T16:15:46.563000 CVE-2025-6500,0,0,7602f435f20916b80cbc1166133738fb4cac000fa6415e2f6accb678745e58c5,2025-06-27T16:58:31.480000 CVE-2025-65001,0,0,2aadedf0ca8f25c6eec3bdd5a5e3fa847b300282eb8b13781c978f3fa9ba43d5,2025-11-14T16:42:30.503000 CVE-2025-65002,0,0,0803af8dd562997e38e964e4d1c91305ed4860f92511ce2302600bf3035fef7c,2025-11-14T16:42:30.503000 @@ -316960,7 +317000,7 @@ CVE-2025-8078,0,0,97994f2e4bcdd31407e612258e9db1590c63c09a8e961c09ade9bd1701277b CVE-2025-8079,0,0,35503e94203d9ac169824656aa665409d2ad347624d8e2a8c05e791f4e48bea3,2025-09-22T21:22:33.590000 CVE-2025-8080,0,0,d0237ed728380df0b82877b72bf614229be82e9b1a4404c76921d581a2b018b4,2025-08-15T13:12:51.217000 CVE-2025-8081,0,0,2cce6a8ebb29dd3b62ed70f3a47f882319e43f1d0f1c706c5d0730d0c57393eb,2025-08-15T18:00:55.213000 -CVE-2025-8084,1,1,fc2145fd8c42c307b41811b215445b72e3d60271d80983627dc3812708a6998c,2025-11-18T15:16:38.073000 +CVE-2025-8084,0,0,fc2145fd8c42c307b41811b215445b72e3d60271d80983627dc3812708a6998c,2025-11-18T15:16:38.073000 CVE-2025-8085,0,0,6df941aed8cb2e823426b59ccda35bb16057d2f3c600da8210e4e91dcfd1d884,2025-09-08T19:15:37.450000 CVE-2025-8086,0,0,20e8a6bb7d775e296a2c11f829d98486e2e7087235c0873c440c88266a98893f,2025-08-06T23:15:26.987000 CVE-2025-8088,0,0,f04e1f501b18a0d6a03f3b616d7e153107383f0f031192eb153d7a21bac8a2cc,2025-10-30T15:50:59.680000 @@ -318031,7 +318071,7 @@ CVE-2025-9308,0,0,3b8aee51b13ce6a56a0b93cc0ff81a0119e80f08e1cc93841ba3467023bfa1 CVE-2025-9309,0,0,903a8559cd11f5530490fced20de7064e480767035b8ac9fe2743045d72d1959,2025-08-25T02:02:44.787000 CVE-2025-9310,0,0,e38ca382e8bafb3afdb83d5a203de4f4fbb0787d87bc38537371803074f1d4fe,2025-09-12T12:47:26.477000 CVE-2025-9311,0,0,4e207af8bc219323e5d27b4a882fd0453199963d0c0bfeaadc537d7a5f3bc728,2025-08-22T21:11:14.723000 -CVE-2025-9312,1,1,9e082d4e2fb735abdc6c9255d0ef823d64c78688f7f6a17270c22274cf9e1bc1,2025-11-18T15:16:38.530000 +CVE-2025-9312,0,0,9e082d4e2fb735abdc6c9255d0ef823d64c78688f7f6a17270c22274cf9e1bc1,2025-11-18T15:16:38.530000 CVE-2025-9313,0,0,4537d5943fc15bef28a0760ae4c84d7ece1125ec04e6eb41a2b31866ce166e71,2025-10-30T15:05:32.197000 CVE-2025-9316,0,0,a203a4bf867078ec79365208a726ed8032e335979921e043c1186369e54f3fb6,2025-11-12T16:19:12.850000 CVE-2025-9317,0,0,2bbc200fa4726ccbc423e6f82d207ed88b1e842c2522f7d0fcb37945742b7a31,2025-11-18T14:06:55.963000 @@ -318597,7 +318637,7 @@ CVE-2025-9971,0,0,7f876bd170f14b1feb7ae560049c9f4e9a3be104d4d2460ee327aa5029e9d1 CVE-2025-9972,0,0,c858d5cb332fc085c390742c1d19341f53ba61aa3995abc9c9bd64c8b9d8717f,2025-09-23T05:15:36.150000 CVE-2025-9975,0,0,b1f23dc970eb535920ca99e49e12f4473521da278d051437f077b4e79f3f0443,2025-10-14T19:36:59.730000 CVE-2025-9976,0,0,14fdfb7ba123561cad60c181e0158605f0221d76e4a1abbbb2a316e8cc259230,2025-10-14T19:36:29.240000 -CVE-2025-9977,1,1,4c9789996ba1afbfa126386dd72bf2b15656d0e30f4fa1c07aafa1bd08213c74,2025-11-18T16:15:47.027000 +CVE-2025-9977,0,0,4c9789996ba1afbfa126386dd72bf2b15656d0e30f4fa1c07aafa1bd08213c74,2025-11-18T16:15:47.027000 CVE-2025-9978,0,0,6f99726a551b50b0320b889e30e83c08c7ef412bc2298f412d122c03f2390d0c,2025-10-27T13:20:15.637000 CVE-2025-9979,0,0,1c484ce9f3590c3fac34599a605eebea346d1c16468e0dda6a414f42f9beac64,2025-09-11T17:14:10.147000 CVE-2025-9980,0,0,36354f6303e79217ddc24f28f6a3aa1b7f2aed5b3bf824b0df692c25a8a5ab38,2025-11-17T16:01:39.510000