diff --git a/CVE-2009/CVE-2009-200xx/CVE-2009-20002.json b/CVE-2009/CVE-2009-200xx/CVE-2009-20002.json index f369432add2..d3dee3e022c 100644 --- a/CVE-2009/CVE-2009-200xx/CVE-2009-20002.json +++ b/CVE-2009/CVE-2009-200xx/CVE-2009-20002.json @@ -2,7 +2,7 @@ "id": "CVE-2009-20002", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:32.207", - "lastModified": "2025-08-21T21:15:32.207", + "lastModified": "2025-08-22T16:15:30.107", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application fails to properly validate the length of the File1 field within the playlist, allowing an attacker to craft a malicious .pls file that overwrites the Structured Exception Handler (SEH) and executes arbitrary code. Exploitation requires the victim to open the file locally, though remote execution may be possible if the .pls extension is registered to the application and opened via a browser." + }, + { + "lang": "es", + "value": "Las versiones de Millenium MP3 Studio hasta la 2.0 incluida son vulnerables a un desbordamiento de b\u00fafer basado en pila al analizar archivos de listas de reproducci\u00f3n .pls. La aplicaci\u00f3n no valida correctamente la longitud del campo File1 dentro de la lista de reproducci\u00f3n, lo que permite a un atacante manipular un archivo .pls malicioso que sobrescribe el Gestor de Excepciones Estructuradas (SEH) y ejecuta c\u00f3digo arbitrario. Para explotar esta vulnerabilidad, la v\u00edctima debe abrir el archivo localmente, aunque la ejecuci\u00f3n remota podr\u00eda ser posible si la extensi\u00f3n .pls est\u00e1 registrada en la aplicaci\u00f3n y se abre mediante un navegador." } ], "metrics": { @@ -100,6 +104,14 @@ { "url": "https://www.vulncheck.com/advisories/millenium-mp3-studio-pls-file-stack-based-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/millenium_mp3_pls.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/9618", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2009/CVE-2009-200xx/CVE-2009-20004.json b/CVE-2009/CVE-2009-200xx/CVE-2009-20004.json index aea4f5dc116..e5fe09fba76 100644 --- a/CVE-2009/CVE-2009-200xx/CVE-2009-20004.json +++ b/CVE-2009/CVE-2009-200xx/CVE-2009-20004.json @@ -2,7 +2,7 @@ "id": "CVE-2009-20004", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.087", - "lastModified": "2025-08-21T21:15:33.087", + "lastModified": "2025-08-22T16:15:31.230", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code. Exploitation requires local interaction, typically by convincing a user to open the malicious file." + }, + { + "lang": "es", + "value": "gAlan 0.2.1, un entorno modular de procesamiento de audio para Windows, es vulnerable a un desbordamiento de b\u00fafer basado en la pila al analizar archivos .galan. La aplicaci\u00f3n no valida correctamente la longitud de los datos de entrada, lo que permite que un archivo especialmente manipulado sobrescriba la pila y ejecute c\u00f3digo arbitrario. La explotaci\u00f3n requiere interacci\u00f3n local, generalmente convenciendo al usuario para que abra el archivo malicioso." } ], "metrics": { @@ -104,6 +108,22 @@ { "url": "https://www.vulncheck.com/advisories/galan-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/galan_fileformat_bof.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/10339", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/10345", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16664", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-100xx/CVE-2010-10014.json b/CVE-2010/CVE-2010-100xx/CVE-2010-10014.json index 22048c0d26b..f6372b265c7 100644 --- a/CVE-2010/CVE-2010-100xx/CVE-2010-10014.json +++ b/CVE-2010/CVE-2010-100xx/CVE-2010-10014.json @@ -2,7 +2,7 @@ "id": "CVE-2010-10014", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:33.227", - "lastModified": "2025-08-20T16:15:33.227", + "lastModified": "2025-08-22T16:15:31.377", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system." + }, + { + "lang": "es", + "value": "Odin Secure FTP (versi\u00f3n <= 4.1) es vulnerable a un desbordamiento de b\u00fafer basado en la pila al analizar las listas de directorios recibidas en respuesta a un comando FTP LIST. Un servidor FTP malicioso puede enviar un nombre de archivo demasiado largo en la lista de directorios, lo que desborda un b\u00fafer de pila de tama\u00f1o fijo en el cliente y sobrescribe el Gestor de Excepciones Estructurado (SEH). Esto permite a atacantes remotos ejecutar c\u00f3digo arbitrario en el sistema cliente." } ], "metrics": { @@ -96,6 +100,14 @@ { "url": "https://www.vulncheck.com/advisories/odin-secure-ftp-stack-buffer-overflow-via-list-response", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/odin_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16716", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-100xx/CVE-2010-10015.json b/CVE-2010/CVE-2010-100xx/CVE-2010-10015.json index b5ab586120b..6dedc08ddf9 100644 --- a/CVE-2010/CVE-2010-100xx/CVE-2010-10015.json +++ b/CVE-2010/CVE-2010-100xx/CVE-2010-10015.json @@ -2,13 +2,17 @@ "id": "CVE-2010-10015", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T20:15:30.633", - "lastModified": "2025-08-21T20:15:30.633", + "lastModified": "2025-08-22T16:15:31.530", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attackers to execute arbitrary code in the context of the user, but only when the malicious HTML file is opened locally, due to the control not being marked safe for scripting or initialization.\u00a0AOL remains an active and supported brand offering services like AOL Mail and AOL Desktop Gold, but the legacy AOL 9.5 desktop software\u2014specifically the version containing the vulnerable Phobos.dll ActiveX control\u2014is long discontinued and no longer maintained." + }, + { + "lang": "es", + "value": "Las versiones de AOL hasta la 9.5 incluida incluyen un control ActiveX (Phobos.dll) que expone un m\u00e9todo llamado Import() a trav\u00e9s del objeto COM Phobos.Playlist. Este m\u00e9todo es vulnerable a un desbordamiento de b\u00fafer basado en la pila cuando se le proporciona un argumento de cadena excesivamente largo. Esta explotaci\u00f3n permite a atacantes remotos ejecutar c\u00f3digo arbitrario en el contexto del usuario, pero solo cuando el archivo HTML malicioso se abre localmente, ya que el control no est\u00e1 marcado como seguro para scripting o inicializaci\u00f3n. AOL sigue siendo una marca activa y con soporte, que ofrece servicios como AOL Mail y AOL Desktop Gold, pero el software de escritorio heredado de AOL 9.5 \u2014en concreto, la versi\u00f3n que contiene el control ActiveX vulnerable Phobos.dll\u2014 lleva tiempo descontinuado y sin mantenimiento." } ], "metrics": { @@ -101,6 +105,18 @@ { "url": "https://www.vulncheck.com/advisories/aol-phobos-playlist-import-stack-based-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/aol_phobos_bof.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/11190", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/11204", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-200xx/CVE-2010-20007.json b/CVE-2010/CVE-2010-200xx/CVE-2010-20007.json index fd6fab0ef66..97486aac3b4 100644 --- a/CVE-2010/CVE-2010-200xx/CVE-2010-20007.json +++ b/CVE-2010/CVE-2010-200xx/CVE-2010-20007.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20007", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.267", - "lastModified": "2025-08-21T21:15:33.267", + "lastModified": "2025-08-22T16:15:31.683", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long filename, the application fails to properly validate input length, resulting in a buffer overflow that overwrites the Structured Exception Handler (SEH). This may allow remote attackers to execute arbitrary code on the client system. This product line was discontinued and users were advised to use BlueZone Secure FTP instead, at the time of disclosure." + }, + { + "lang": "es", + "value": "Seagull FTP Client (versi\u00f3n 3.3, compilaci\u00f3n 409) presenta una vulnerabilidad de desbordamiento de b\u00fafer en su analizador de listados de directorios FTP. Cuando el cliente se conecta a un servidor FTP y recibe una respuesta manipulada a un comando LIST con un nombre de archivo excesivamente largo, la aplicaci\u00f3n no valida correctamente la longitud de la entrada, lo que provoca un desbordamiento de b\u00fafer que sobrescribe el Gestor de Excepciones Estructuradas (SEH). Esto podr\u00eda permitir que atacantes remotos ejecuten c\u00f3digo arbitrario en el sistema cliente. Esta l\u00ednea de productos se discontinu\u00f3 y se recomend\u00f3 a los usuarios utilizar BlueZone Secure FTP en su lugar en el momento de la divulgaci\u00f3n." } ], "metrics": { @@ -100,6 +104,14 @@ { "url": "https://www3.rocketsoftware.com/bluezone/help/v34/sftp/sftp.htm", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/seagull_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16705", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-200xx/CVE-2010-20034.json b/CVE-2010/CVE-2010-200xx/CVE-2010-20034.json index da09888c8c6..30078ac7e80 100644 --- a/CVE-2010/CVE-2010-200xx/CVE-2010-20034.json +++ b/CVE-2010/CVE-2010-200xx/CVE-2010-20034.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20034", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.443", - "lastModified": "2025-08-21T21:15:33.443", + "lastModified": "2025-08-22T16:15:31.830", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST command, the client fails to properly validate the length of filenames. A crafted response containing an overly long filename can overwrite the Structured Exception Handler (SEH), potentially allowing remote code execution." + }, + { + "lang": "es", + "value": "Gekko Manager FTP Client (versi\u00f3n <= 0.77) presenta un desbordamiento de b\u00fafer basado en pila en su analizador de listados de directorios FTP. Al procesar una respuesta del servidor a un comando LIST, el cliente no valida correctamente la longitud de los nombres de archivo. Una respuesta manipulada con un nombre de archivo demasiado largo puede sobrescribir el Gestor de Excepciones Estructuradas (GEH), lo que podr\u00eda permitir la ejecuci\u00f3n remota de c\u00f3digo." } ], "metrics": { @@ -96,6 +100,14 @@ { "url": "https://www.vulncheck.com/advisories/gekko-manager-ftp-client-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/gekkomgr_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16728", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-200xx/CVE-2010-20049.json b/CVE-2010/CVE-2010-200xx/CVE-2010-20049.json index 3b3c2419c16..2d5c1d34206 100644 --- a/CVE-2010/CVE-2010-200xx/CVE-2010-20049.json +++ b/CVE-2010/CVE-2010-200xx/CVE-2010-20049.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20049", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:33.773", - "lastModified": "2025-08-20T16:15:33.773", + "lastModified": "2025-08-22T17:15:29.750", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "LeapFTP <\u00a03.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the Structured Exception Handler (SEH) chain. This allows an attacker operating a malicious FTP server to execute arbitrary code on the victim\u2019s machine when the file is listed or downloaded." + }, + { + "lang": "es", + "value": "LeapFTP < 3.1.x contiene una vulnerabilidad de desbordamiento de b\u00fafer basada en pila en el analizador de su cliente FTP. Cuando el cliente recibe una lista de directorios con un nombre de archivo de m\u00e1s de 528 bytes, la aplicaci\u00f3n no realiza la comprobaci\u00f3n de enlace correcta de la entrada y sobrescribe la cadena del Gestor de Excepciones Estructuradas (SEH). Esto permite que un atacante que opere un servidor FTP malicioso ejecute c\u00f3digo arbitrario en el equipo de la v\u00edctima cuando el archivo se lista o se descarga." } ], "metrics": { @@ -96,6 +100,14 @@ { "url": "https://www.vulncheck.com/advisories/leapftp-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/leapftp_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16704", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-200xx/CVE-2010-20059.json b/CVE-2010/CVE-2010-200xx/CVE-2010-20059.json index 5a99aec505b..aaeff6a201c 100644 --- a/CVE-2010/CVE-2010-200xx/CVE-2010-20059.json +++ b/CVE-2010/CVE-2010-200xx/CVE-2010-20059.json @@ -2,13 +2,17 @@ "id": "CVE-2010-20059", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:33.953", - "lastModified": "2025-08-20T16:15:33.953", + "lastModified": "2025-08-22T17:15:30.833", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command\u2010execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation." + }, + { + "lang": "es", + "value": "FreeNAS 0.7.2, anterior a la revisi\u00f3n 5543, incluye una puerta trasera de ejecuci\u00f3n de comandos no autenticados en su interfaz web. El script exec_raw.php expone un par\u00e1metro cmd que se pasa directamente al shell subyacente sin depurar." } ], "metrics": { @@ -101,6 +105,14 @@ { "url": "https://www.vulncheck.com/advisories/freenas-arbitrary-command-execution", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/freenas_exec_raw.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16313", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20103.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20103.json index d9d7b5410f5..942f42f8aa2 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20103.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20103.json @@ -2,13 +2,17 @@ "id": "CVE-2010-20103", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:34.137", - "lastModified": "2025-08-20T16:15:34.137", + "lastModified": "2025-08-22T16:15:31.983", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host." + }, + { + "lang": "es", + "value": "Una puerta trasera maliciosa se integr\u00f3 en official ProFTPD 1.3.3c source tarball, distribuido entre el 28 de noviembre y el 2 de diciembre de 2010. Esta puerta trasera implementa un disparador de comandos FTP oculto que, al ser invocado, provoca que el servidor ejecute comandos de shell arbitrarios con privilegios de root. Esto permite a atacantes remotos no autenticados ejecutar cualquier comando del sistema operativo en el host del servidor FTP." } ], "metrics": { @@ -101,6 +105,18 @@ { "url": "https://www.vulncheck.com/advisories/proftpd-backdoor-command-execution", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/15662", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16921", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20107.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20107.json index 1a71a5d9d9e..12eccbd29e1 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20107.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20107.json @@ -2,13 +2,17 @@ "id": "CVE-2010-20107", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.610", - "lastModified": "2025-08-21T21:15:33.610", + "lastModified": "2025-08-22T16:15:32.130", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST command\u2014typically during sync preview or profile creation\u2014the server\u2019s response containing an overly long filename triggers a buffer overflow. This results in the corruption of the Structured Exception Handler (SEH), potentially allowing remote code execution." + }, + { + "lang": "es", + "value": "Existe un desbordamiento de b\u00fafer basado en la pila en FTP Synchronizer Professional (versi\u00f3n anterior a la v4.0.73.274). Cuando el cliente se conecta a un servidor FTP y emite un comando LIST (normalmente durante la vista previa de la sincronizaci\u00f3n o la creaci\u00f3n de un perfil), la respuesta del servidor, que contiene un nombre de archivo demasiado largo, provoca un desbordamiento de b\u00fafer. Esto provoca la corrupci\u00f3n del Gestor de Excepciones Estructuradas (GEH), lo que podr\u00eda permitir la ejecuci\u00f3n remota de c\u00f3digo." } ], "metrics": { @@ -93,6 +97,14 @@ { "url": "https://www.vulncheck.com/advisories/ftp-synchronizer-professional-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/ftpsynch_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16720", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20108.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20108.json index 9103adb7f7b..0f5443d53d3 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20108.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20108.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20108", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.780", - "lastModified": "2025-08-21T21:15:33.780", + "lastModified": "2025-08-22T16:15:32.273", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long directory and filename, the application fails to properly validate input length. This results in a buffer overflow that overwrites the saved Extended Instruction Pointer (EIP), allowing remote attackers to execute arbitrary code." + }, + { + "lang": "es", + "value": "FTPPad <= 1.2.0 contiene una vulnerabilidad de desbordamiento de b\u00fafer basada en pila en su analizador de listados de directorios FTP. Cuando el cliente se conecta a un servidor FTP y recibe una respuesta manipulada a un comando LIST que contiene un directorio y un nombre de archivo excesivamente largos, la aplicaci\u00f3n no valida correctamente la longitud de la entrada. Esto provoca un desbordamiento de b\u00fafer que sobrescribe el puntero de instrucci\u00f3n extendida (EIP) guardado, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario." } ], "metrics": { @@ -96,6 +100,14 @@ { "url": "https://www.vulncheck.com/advisories/ftppad-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/ftppad_list_reply.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16726", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20112.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20112.json index a4e3624af18..4b5a1411a69 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20112.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20112.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20112", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T20:15:31.217", - "lastModified": "2025-08-21T20:15:31.217", + "lastModified": "2025-08-22T16:15:32.420", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Amlib\u2019s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including the Structured Exception Handler (SEH). Additionally, malformed parameter names followed by an equals sign may result in unintended control flow behavior. This vulnerability is exposed through IIS and affects legacy Windows deployments" + }, + { + "lang": "es", + "value": "El archivo webquery.dll de NetOpacs de Amlib contiene una vulnerabilidad de desbordamiento de b\u00fafer basada en pila, desencadenada por el manejo incorrecto de par\u00e1metros HTTP GET. En concreto, la aplicaci\u00f3n no aplica l\u00edmites a la entrada suministrada al par\u00e1metro app, lo que permite que un exceso de datos sobrescriba las estructuras de memoria, incluido el Gestor de Excepciones Estructuradas (SEH). Adem\u00e1s, los nombres de par\u00e1metros mal formados seguidos de un signo igual pueden provocar un comportamiento no deseado en el flujo de control. Esta vulnerabilidad se expone a trav\u00e9s de IIS y afecta a las implementaciones heredadas de Windows." } ], "metrics": { @@ -100,6 +104,14 @@ { "url": "https://www.vulncheck.com/advisories/amlibweb-netopacs-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/amlibweb_webquerydll_app.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16793", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20113.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20113.json index 737a7cd2fa3..8832ce3fa6d 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20113.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20113.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20113", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:33.957", - "lastModified": "2025-08-21T21:15:33.957", + "lastModified": "2025-08-22T16:15:32.563", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp." + }, + { + "lang": "es", + "value": "EasyFTP Server 1.7.0.11 y versiones anteriores contienen una vulnerabilidad de desbordamiento de b\u00fafer en la pila de su interfaz HTTP. Al procesar una solicitud GET a list.html, el servidor no valida correctamente la longitud del par\u00e1metro path. Proporcionar un valor excesivamente largo provoca un desbordamiento de b\u00fafer en la pila, lo que podr\u00eda da\u00f1ar las estructuras del flujo de control. La vulnerabilidad se expone a trav\u00e9s del servidor web integrado y no requiere autenticaci\u00f3n debido al acceso an\u00f3nimo predeterminado. El problema se resolvi\u00f3 en la versi\u00f3n 1.7.0.12, tras lo cual el producto cambi\u00f3 su nombre a UplusFtp." } ], "metrics": { @@ -88,6 +92,14 @@ { "url": "https://www.vulncheck.com/advisories/easyftp-server-list-html-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/11500", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20120.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20120.json index b6164841348..e5be9d9ecaf 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20120.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20120.json @@ -2,13 +2,17 @@ "id": "CVE-2010-20120", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:34.507", - "lastModified": "2025-08-21T21:15:34.507", + "lastModified": "2025-08-22T16:15:32.710", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior bypasses standard security restrictions that normally prevent code execution in regular Maple worksheets. The vulnerability enables attackers to craft malicious .maplet files that execute arbitrary code without user interaction." + }, + { + "lang": "es", + "value": "Las versiones de Maple hasta la 13 (incluida la versi\u00f3n 13) permiten que los comandos incrustados se ejecuten autom\u00e1ticamente al abrir un archivo .maplet. Este comportamiento elude las restricciones de seguridad est\u00e1ndar que normalmente impiden la ejecuci\u00f3n de c\u00f3digo en hojas de c\u00e1lculo de Maple. Esta vulnerabilidad permite a los atacantes manipular archivos .maplet maliciosos que ejecutan c\u00f3digo arbitrario sin la interacci\u00f3n del usuario." } ], "metrics": { @@ -89,6 +93,14 @@ { "url": "https://www.vulncheck.com/advisories/maple-maplet-file-creation-command-execution", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16308", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20121.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20121.json index 6f6d836d2cf..a6374b2599d 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20121.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20121.json @@ -2,13 +2,17 @@ "id": "CVE-2010-20121", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T20:15:31.610", - "lastModified": "2025-08-21T20:15:31.610", + "lastModified": "2025-08-22T16:15:32.850", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed \u201cUplusFtp.\u201d" + }, + { + "lang": "es", + "value": "Las versiones de EasyFTP Server hasta la 1.7.0.11 contienen una vulnerabilidad de desbordamiento de b\u00fafer en la pila del analizador de comandos FTP. Al procesar el comando CWD (Cambiar directorio de trabajo), el servidor no valida correctamente la longitud de la cadena de entrada, lo que permite a los atacantes sobrescribir la memoria en la pila. Esta falla permite la ejecuci\u00f3n remota de c\u00f3digo sin autenticaci\u00f3n, ya que EasyFTP permite el acceso an\u00f3nimo por defecto. La vulnerabilidad se resolvi\u00f3 en la versi\u00f3n 1.7.0.12, tras la cual el producto pas\u00f3 a llamarse \"UplusFtp\"." } ], "metrics": { @@ -101,6 +105,30 @@ { "url": "https://www.vulncheck.com/advisories/easyftp-server-cwd-command-stack-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://seclists.org/bugtraq/2010/Feb/202", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/11668", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/12312", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/14402", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16737", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2010/CVE-2010-201xx/CVE-2010-20123.json b/CVE-2010/CVE-2010-201xx/CVE-2010-20123.json index d84470fa4a1..f6658910942 100644 --- a/CVE-2010/CVE-2010-201xx/CVE-2010-20123.json +++ b/CVE-2010/CVE-2010-201xx/CVE-2010-20123.json @@ -2,7 +2,7 @@ "id": "CVE-2010-20123", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-21T21:15:34.853", - "lastModified": "2025-08-21T21:15:34.853", + "lastModified": "2025-08-22T16:15:33.003", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to overwrite critical memory structures and execute arbitrary code. This vulnerability can be exploited locally by convincing a user to open a malicious .m3u file." + }, + { + "lang": "es", + "value": "Steinberg MyMP3Player versi\u00f3n 3.0 (compilaci\u00f3n 3.0.0.67) es vulnerable a un desbordamiento de b\u00fafer basado en la pila al analizar archivos de listas de reproducci\u00f3n .m3u. La aplicaci\u00f3n no valida correctamente la longitud de los datos de entrada dentro de la lista de reproducci\u00f3n, lo que permite que un archivo especialmente manipulado sobrescriba estructuras de memoria cr\u00edticas y ejecute c\u00f3digo arbitrario. Esta vulnerabilidad puede explotarse localmente convenciendo al usuario para que abra un archivo .m3u malicioso." } ], "metrics": { @@ -104,6 +108,18 @@ { "url": "https://www.vulncheck.com/advisories/steinburg-mymp3player-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mymp3player_m3u.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/11791", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16633", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10020.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10020.json index 527e4751102..583d94ae0bf 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10020.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10020.json @@ -2,7 +2,7 @@ "id": "CVE-2011-10020", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:34.327", - "lastModified": "2025-08-20T16:15:34.327", + "lastModified": "2025-08-22T17:15:30.977", "vulnStatus": "Received", "cveTags": [ { @@ -16,6 +16,10 @@ { "lang": "en", "value": "Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server\u2019s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability." + }, + { + "lang": "es", + "value": "La versi\u00f3n 0.86 de Kaillera Server es vulnerable a una condici\u00f3n de denegaci\u00f3n de servicio (DDS) que se activa al enviar un paquete UDP malformado tras el protocolo de enlace inicial. Una vez que un cliente env\u00eda un paquete HELLO0.83 v\u00e1lido y recibe una respuesta, cualquier paquete malformado posterior provoca el bloqueo del servidor y deja de responder. Esta vulnerabilidad se debe a una validaci\u00f3n de entrada incorrecta en el controlador de paquetes UDP del servidor, lo que permite a atacantes remotos no autenticados interrumpir la disponibilidad del servicio." } ], "metrics": { @@ -92,6 +96,14 @@ { "url": "https://www.vulncheck.com/advisories/kaillera-server-dos-via-malformed-udp-packet", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/games/kaillera.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/17460", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10021.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10021.json index 4592dc22a40..d2b5cf0737b 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10021.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10021.json @@ -2,13 +2,17 @@ "id": "CVE-2011-10021", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:34.510", - "lastModified": "2025-08-20T16:15:34.510", + "lastModified": "2025-08-22T17:15:31.127", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy() operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler (SEH). By crafting a malicious .mmm file, an attacker can trigger the overflow when the file is opened, potentially leading to arbitrary code execution. This vulnerability was remediated in version 17." + }, + { + "lang": "es", + "value": "Magix Musik Maker 16 es vulnerable a un desbordamiento de b\u00fafer basado en la pila debido al manejo incorrecto de archivos de arreglos .mmm. La vulnerabilidad surge de una operaci\u00f3n strcpy() insegura que no valida la longitud de entrada, lo que permite a los atacantes sobrescribir el Gestor de Excepciones Estructuradas (SEH). Al crear un archivo .mmm malicioso, un atacante puede provocar el desbordamiento al abrirlo, lo que podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo arbitrario. Esta vulnerabilidad se corrigi\u00f3 en la versi\u00f3n 17." } ], "metrics": { @@ -97,6 +101,18 @@ { "url": "https://www.vulncheck.com/advisories/magix-musik-maker-stack-based-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/magix_musikmaker_16_mmm.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/17313", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/17329", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10023.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10023.json index 22434102a8a..bc379ffe82c 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10023.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10023.json @@ -2,13 +2,17 @@ "id": "CVE-2011-10023", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:34.870", - "lastModified": "2025-08-20T16:15:34.870", + "lastModified": "2025-08-22T17:15:31.267", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "MJM QuickPlayer (likely now referred to as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code. Exploitation is achieved via a crafted payload that bypasses DEP and ASLR protections using ROP techniques, and requires user interaction to open the file." + }, + { + "lang": "es", + "value": "La versi\u00f3n 2010 de MJM QuickPlayer (probablemente ahora conocido como MJM Player) contiene una vulnerabilidad de desbordamiento de b\u00fafer basada en pila que se activa al abrir un archivo de m\u00fasica .s3m malicioso. La falla se produce debido a una comprobaci\u00f3n incorrecta de los l\u00edmites en el analizador de archivos, lo que permite a un atacante sobrescribir la memoria y ejecutar c\u00f3digo arbitrario. La explotaci\u00f3n se logra mediante un payload manipulado que elude las protecciones DEP y ASLR mediante t\u00e9cnicas ROP y requiere la interacci\u00f3n del usuario para abrir el archivo." } ], "metrics": { @@ -89,6 +93,14 @@ { "url": "https://www.vulncheck.com/advisories/mjm-quickplayer-s3m-stack-based-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_quickplayer_s3m.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/17229", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10024.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10024.json index 6979e03469b..f2b534e9c43 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10024.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10024.json @@ -2,13 +2,17 @@ "id": "CVE-2011-10024", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:35.057", - "lastModified": "2025-08-20T16:15:35.057", + "lastModified": "2025-08-22T17:15:31.400", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute arbitrary code. Exploitation is triggered when a user opens a malicious .s3m file, and the exploit bypasses DEP and ASLR protections using a ROP chain." + }, + { + "lang": "es", + "value": "MJM Core Player (probablemente ahora conocido como MJM Player) 2011 es vulnerable a un desbordamiento de b\u00fafer en la pila al analizar archivos de m\u00fasica .s3m especialmente manipulados. La vulnerabilidad se debe a una comprobaci\u00f3n incorrecta de los l\u00edmites en el analizador de archivos, lo que permite a un atacante sobrescribir memoria en la pila y ejecutar c\u00f3digo arbitrario. La vulnerabilidad se activa cuando un usuario abre un archivo .s3m malicioso y el exploit evade las protecciones DEP y ASLR mediante una cadena ROP." } ], "metrics": { @@ -89,6 +93,14 @@ { "url": "https://www.vulncheck.com/advisories/mjm-core-player-file-stack-based-buffer-overflow", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_coreplayer2011_s3m.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/17230", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2011/CVE-2011-100xx/CVE-2011-10030.json b/CVE-2011/CVE-2011-100xx/CVE-2011-10030.json index 62d7d971aa8..833797f9032 100644 --- a/CVE-2011/CVE-2011-100xx/CVE-2011-10030.json +++ b/CVE-2011/CVE-2011-100xx/CVE-2011-10030.json @@ -2,13 +2,17 @@ "id": "CVE-2011-10030", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-08-20T16:15:36.150", - "lastModified": "2025-08-20T16:15:36.150", + "lastModified": "2025-08-22T16:15:33.140", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Foxit PDF Reader <\u00a0 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk. By embedding a malicious PDF that calls this API, an attacker can drop executables or scripts into privileged folders, leading to code execution the next time the system boots or the user logs in." + }, + { + "lang": "es", + "value": "Foxit PDF Reader (versi\u00f3n anterior a la 4.3.1.0218) expone una funci\u00f3n de la API de JavaScript, createDataObject(), que permite que contenido PDF no confiable escriba archivos arbitrarios en cualquier lugar del disco. Al incrustar un PDF malicioso que llama a esta API, un atacante puede colocar archivos ejecutables o scripts en carpetas privilegiadas, lo que provoca la ejecuci\u00f3n de c\u00f3digo la pr\u00f3xima vez que el sistema se inicie o el usuario inicie sesi\u00f3n." } ], "metrics": { @@ -89,6 +93,18 @@ { "url": "https://www.vulncheck.com/advisories/foxit-pdf-reader-javascript-file-write", "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_reader_filewrite.rb", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://scarybeastsecurity.blogspot.com/2011/03/dangerous-file-write-bug-in-foxit-pdf.html", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.exploit-db.com/exploits/16978", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-89xx/CVE-2019-8998.json b/CVE-2019/CVE-2019-89xx/CVE-2019-8998.json index 458c88ce51c..ba18f04cb05 100644 --- a/CVE-2019/CVE-2019-89xx/CVE-2019-8998.json +++ b/CVE-2019/CVE-2019-89xx/CVE-2019-8998.json @@ -2,7 +2,7 @@ "id": "CVE-2019-8998", "sourceIdentifier": "secure@blackberry.com", "published": "2019-07-12T16:15:11.773", - "lastModified": "2024-11-21T04:50:47.273", + "lastModified": "2025-08-22T16:15:33.343", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -65,6 +87,16 @@ ] }, "weaknesses": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-413" + } + ] + }, { "source": "nvd@nist.gov", "type": "Primary", diff --git a/CVE-2020/CVE-2020-69xx/CVE-2020-6932.json b/CVE-2020/CVE-2020-69xx/CVE-2020-6932.json index 49b28ded943..5f30696836a 100644 --- a/CVE-2020/CVE-2020-69xx/CVE-2020-6932.json +++ b/CVE-2020/CVE-2020-69xx/CVE-2020-6932.json @@ -2,7 +2,7 @@ "id": "CVE-2020-6932", "sourceIdentifier": "secure@blackberry.com", "published": "2020-08-12T13:15:10.833", - "lastModified": "2024-11-21T05:36:21.940", + "lastModified": "2025-08-22T16:15:33.570", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + }, { "source": "nvd@nist.gov", "type": "Primary", @@ -65,6 +85,16 @@ ] }, "weaknesses": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-150" + } + ] + }, { "source": "nvd@nist.gov", "type": "Primary", diff --git a/CVE-2021/CVE-2021-221xx/CVE-2021-22156.json b/CVE-2021/CVE-2021-221xx/CVE-2021-22156.json index 5279e59b77f..21f6ec68893 100644 --- a/CVE-2021/CVE-2021-221xx/CVE-2021-22156.json +++ b/CVE-2021/CVE-2021-221xx/CVE-2021-22156.json @@ -2,7 +2,7 @@ "id": "CVE-2021-22156", "sourceIdentifier": "secure@blackberry.com", "published": "2021-08-17T19:15:08.057", - "lastModified": "2024-11-21T05:49:36.947", + "lastModified": "2025-08-22T16:15:33.777", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 6.0 + }, { "source": "nvd@nist.gov", "type": "Primary", @@ -65,6 +85,16 @@ ] }, "weaknesses": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + }, { "source": "nvd@nist.gov", "type": "Primary", diff --git a/CVE-2021/CVE-2021-320xx/CVE-2021-32025.json b/CVE-2021/CVE-2021-320xx/CVE-2021-32025.json index 3c1ecf6ac55..439bfdc8e78 100644 --- a/CVE-2021/CVE-2021-320xx/CVE-2021-32025.json +++ b/CVE-2021/CVE-2021-320xx/CVE-2021-32025.json @@ -2,7 +2,7 @@ "id": "CVE-2021-32025", "sourceIdentifier": "secure@blackberry.com", "published": "2022-03-10T17:42:14.083", - "lastModified": "2024-11-21T06:06:44.353", + "lastModified": "2025-08-22T16:15:34.010", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.4, + "impactScore": 6.0 + }, { "source": "nvd@nist.gov", "type": "Primary", @@ -65,6 +85,16 @@ ] }, "weaknesses": [ + { + "source": "secure@blackberry.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-368" + } + ] + }, { "source": "nvd@nist.gov", "type": "Primary", diff --git a/CVE-2023/CVE-2023-327xx/CVE-2023-32701.json b/CVE-2023/CVE-2023-327xx/CVE-2023-32701.json index fc5c3b4ca3d..f4e2a861f97 100644 --- a/CVE-2023/CVE-2023-327xx/CVE-2023-32701.json +++ b/CVE-2023/CVE-2023-327xx/CVE-2023-32701.json @@ -2,13 +2,13 @@ "id": "CVE-2023-32701", "sourceIdentifier": "secure@blackberry.com", "published": "2023-11-14T19:15:27.163", - "lastModified": "2024-11-21T08:03:52.980", + "lastModified": "2025-08-22T16:15:34.237", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": " Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition. \n\n" + "value": "Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-132xx/CVE-2024-13200.json b/CVE-2024/CVE-2024-132xx/CVE-2024-13200.json index b64cc6e8deb..6fce3e3795f 100644 --- a/CVE-2024/CVE-2024-132xx/CVE-2024-13200.json +++ b/CVE-2024/CVE-2024-132xx/CVE-2024-13200.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13200", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T03:15:23.820", - "lastModified": "2025-01-09T03:15:23.820", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:54:51.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wander-chu:springboot-blog:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "5E8E5F30-0B4E-48F8-89EE-86B696171DE6" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/4", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/4#issue-2761636207", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.290793", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290793", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.470902", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-132xx/CVE-2024-13201.json b/CVE-2024/CVE-2024-132xx/CVE-2024-13201.json index b8e349dacc4..eef7a8d3c28 100644 --- a/CVE-2024/CVE-2024-132xx/CVE-2024-13201.json +++ b/CVE-2024/CVE-2024-132xx/CVE-2024-13201.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13201", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T03:15:24.020", - "lastModified": "2025-01-09T03:15:24.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:47:34.393", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wander-chu:springboot-blog:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "5E8E5F30-0B4E-48F8-89EE-86B696171DE6" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/6", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/6#issue-2761640788", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.290794", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290794", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.470910", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-132xx/CVE-2024-13202.json b/CVE-2024/CVE-2024-132xx/CVE-2024-13202.json index 8c62e542ca2..6c9389d6ed0 100644 --- a/CVE-2024/CVE-2024-132xx/CVE-2024-13202.json +++ b/CVE-2024/CVE-2024-132xx/CVE-2024-13202.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13202", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T03:15:24.220", - "lastModified": "2025-01-09T17:15:12.110", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:46:09.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,32 +142,83 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wander-chu:springboot-blog:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "5E8E5F30-0B4E-48F8-89EE-86B696171DE6" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/7", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/7#issue-2761643235", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.290795", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290795", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.470914", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/wander-chu/SpringBoot-Blog/issues/7#issue-2761643235", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-290xx/CVE-2024-29072.json b/CVE-2024/CVE-2024-290xx/CVE-2024-29072.json index 790679d4ec0..d291f95489d 100644 --- a/CVE-2024/CVE-2024-290xx/CVE-2024-29072.json +++ b/CVE-2024/CVE-2024-290xx/CVE-2024-29072.json @@ -2,8 +2,8 @@ "id": "CVE-2024-29072", "sourceIdentifier": "talos-cna@cisco.com", "published": "2024-05-28T14:15:12.493", - "lastModified": "2024-11-21T09:07:29.887", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:03:32.227", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,102 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", + "versionEndIncluding": "11.2.9.53938", + "matchCriteriaId": "310F9865-EAB7-4537-B205-CE25418D5A3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", + "versionStartIncluding": "12.0.0", + "versionEndIncluding": "12.1.6.15509", + "matchCriteriaId": "D3F78536-999B-4FAA-9F7D-C35621384E87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.0.0", + "versionEndIncluding": "13.1.1.22432", + "matchCriteriaId": "BED878DD-2908-49CE-8248-1A950D9F750D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2023.1.0.15510", + "versionEndIncluding": "2023.3.0.23028", + "matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2024.1.0.23997", + "versionEndIncluding": "2024.2.1.25153", + "matchCriteriaId": "CEE05FE1-67A3-4AE1-B49B-3C497E7D944B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2024.2.1.25153", + "matchCriteriaId": "525AF74D-C7F7-466E-9501-60B489C7803F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-450xx/CVE-2024-45061.json b/CVE-2024/CVE-2024-450xx/CVE-2024-45061.json index 1350c30eb6e..5e05f9399a0 100644 --- a/CVE-2024/CVE-2024-450xx/CVE-2024-45061.json +++ b/CVE-2024/CVE-2024-450xx/CVE-2024-45061.json @@ -2,8 +2,8 @@ "id": "CVE-2024-45061", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-01-15T15:15:11.730", - "lastModified": "2025-01-15T17:15:15.113", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:25:15.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -51,14 +71,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:observium:observium:24.4.13528:*:*:*:community:*:*:*", + "matchCriteriaId": "95117B86-A048-44B0-A349-F891B304A09E" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2092", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2092", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-470xx/CVE-2024-47002.json b/CVE-2024/CVE-2024-470xx/CVE-2024-47002.json index c478bf1cfb1..cebc064824f 100644 --- a/CVE-2024/CVE-2024-470xx/CVE-2024-47002.json +++ b/CVE-2024/CVE-2024-470xx/CVE-2024-47002.json @@ -2,8 +2,8 @@ "id": "CVE-2024-47002", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-01-15T15:15:11.963", - "lastModified": "2025-01-15T17:15:15.883", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:22:31.360", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -51,14 +71,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:observium:observium:24.4.13528:*:*:*:community:*:*:*", + "matchCriteriaId": "95117B86-A048-44B0-A349-F891B304A09E" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2091", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2091", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-470xx/CVE-2024-47065.json b/CVE-2024/CVE-2024-470xx/CVE-2024-47065.json index 7cd7275225d..e0e9ccfd0c5 100644 --- a/CVE-2024/CVE-2024-470xx/CVE-2024-47065.json +++ b/CVE-2024/CVE-2024-470xx/CVE-2024-47065.json @@ -2,8 +2,8 @@ "id": "CVE-2024-47065", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-11T17:15:31.167", - "lastModified": "2025-07-15T13:14:49.980", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:01:46.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } ] }, "weaknesses": [ @@ -73,10 +95,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:meshtastic:meshtastic_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.5.1", + "matchCriteriaId": "E439DDC9-06DB-4E86-A0E4-4D5FF73E9870" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/meshtastic/firmware/security/advisories/GHSA-4hjx-54gf-2jh7", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-471xx/CVE-2024-47140.json b/CVE-2024/CVE-2024-471xx/CVE-2024-47140.json index a29f1277372..85d202a62a9 100644 --- a/CVE-2024/CVE-2024-471xx/CVE-2024-47140.json +++ b/CVE-2024/CVE-2024-471xx/CVE-2024-47140.json @@ -2,8 +2,8 @@ "id": "CVE-2024-47140", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-01-15T15:15:12.123", - "lastModified": "2025-01-15T17:15:15.997", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:19:46.550", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -51,14 +71,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:observium:observium:24.4.13528:*:*:*:community:*:*:*", + "matchCriteriaId": "95117B86-A048-44B0-A349-F891B304A09E" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2090", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2090", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-506xx/CVE-2024-50644.json b/CVE-2024/CVE-2024-506xx/CVE-2024-50644.json new file mode 100644 index 00000000000..d2d38eb8c02 --- /dev/null +++ b/CVE-2024/CVE-2024-506xx/CVE-2024-50644.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2024-50644", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:31.640", + "lastModified": "2025-08-22T17:15:31.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gitee.com/fushuling/cve/blob/master/CVE-2024-50644.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/zhisheng17/blog", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/zhisheng17/blog/issues/64", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-525xx/CVE-2024-52599.json b/CVE-2024/CVE-2024-525xx/CVE-2024-52599.json index cc65c025d28..ea5d6b7ea3d 100644 --- a/CVE-2024/CVE-2024-525xx/CVE-2024-52599.json +++ b/CVE-2024/CVE-2024-525xx/CVE-2024-52599.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52599", "sourceIdentifier": "security-advisories@github.com", "published": "2024-12-09T19:15:13.863", - "lastModified": "2024-12-09T19:15:13.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:19:06.600", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,69 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionEndExcluding": "16.0-7", + "matchCriteriaId": "F6A1C564-201D-43CA-BD24-E7DE7B2F8C2E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*", + "versionEndExcluding": "16.1.99.50", + "matchCriteriaId": "D6B1E987-E529-41F7-AE4E-83EEA8C7240B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.1", + "versionEndExcluding": "16.1-4", + "matchCriteriaId": "0163CCD1-23B5-4295-A36C-5621C4CA5C3B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Enalean/tuleap/commit/d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Enalean/tuleap/security/advisories/GHSA-489c-fm2j-qjw7", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory", + "Patch" + ] }, { "url": "https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://tuleap.net/plugins/tracker/?aid=40459", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory", + "Issue Tracking", + "Patch", + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-534xx/CVE-2024-53494.json b/CVE-2024/CVE-2024-534xx/CVE-2024-53494.json new file mode 100644 index 00000000000..0b937095fed --- /dev/null +++ b/CVE-2024/CVE-2024-534xx/CVE-2024-53494.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-53494", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:31.813", + "lastModified": "2025-08-22T17:15:31.813", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gitee.com/fushuling/cve/blob/master/CVE-2024-53494.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/caozongpeng/SpringBootBlog/issues/23", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-03xx/CVE-2025-0333.json b/CVE-2025/CVE-2025-03xx/CVE-2025-0333.json index eefb32a033e..be4e863286d 100644 --- a/CVE-2025/CVE-2025-03xx/CVE-2025-0333.json +++ b/CVE-2025/CVE-2025-03xx/CVE-2025-0333.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0333", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T05:15:08.453", - "lastModified": "2025-01-09T17:15:18.077", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:41:07.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,73 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:leiyuxi:cy-fast:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9FEF83C3-4D95-4EFB-82E1-96FC50BC0E3B" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit" + ] }, { "url": "https://vuldb.com/?ctiid.290820", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290820", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.475297", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-03xx/CVE-2025-0334.json b/CVE-2025/CVE-2025-03xx/CVE-2025-0334.json index 36bc95d32ac..c1fe1196026 100644 --- a/CVE-2025/CVE-2025-03xx/CVE-2025-0334.json +++ b/CVE-2025/CVE-2025-03xx/CVE-2025-0334.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0334", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T06:15:15.610", - "lastModified": "2025-01-09T06:15:15.610", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:35:17.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,66 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:leiyuxi:cy-fast:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9FEF83C3-4D95-4EFB-82E1-96FC50BC0E3B" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli2.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit" + ] }, { "url": "https://vuldb.com/?ctiid.290821", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290821", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.475302", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-03xx/CVE-2025-0344.json b/CVE-2025/CVE-2025-03xx/CVE-2025-0344.json index 16b0e6a3a84..eb9013277c7 100644 --- a/CVE-2025/CVE-2025-03xx/CVE-2025-0344.json +++ b/CVE-2025/CVE-2025-03xx/CVE-2025-0344.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0344", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T08:15:30.517", - "lastModified": "2025-01-09T08:15:30.517", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:32:49.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,67 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:leiyuxi:cy-fast:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9FEF83C3-4D95-4EFB-82E1-96FC50BC0E3B" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli3.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.290857", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290857", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.475747", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-03xx/CVE-2025-0345.json b/CVE-2025/CVE-2025-03xx/CVE-2025-0345.json index 79932ba0a29..203184922f9 100644 --- a/CVE-2025/CVE-2025-03xx/CVE-2025-0345.json +++ b/CVE-2025/CVE-2025-03xx/CVE-2025-0345.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0345", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-09T09:15:09.220", - "lastModified": "2025-01-09T09:15:09.220", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:28:28.197", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,66 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:leiyuxi:cy-fast:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "9FEF83C3-4D95-4EFB-82E1-96FC50BC0E3B" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli4.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit" + ] }, { "url": "https://vuldb.com/?ctiid.290858", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.290858", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.475748", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-221xx/CVE-2025-22129.json b/CVE-2025/CVE-2025-221xx/CVE-2025-22129.json index 729f5d4caa2..58b9907b810 100644 --- a/CVE-2025/CVE-2025-221xx/CVE-2025-22129.json +++ b/CVE-2025/CVE-2025-221xx/CVE-2025-22129.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22129", "sourceIdentifier": "security-advisories@github.com", "published": "2025-02-03T22:15:28.040", - "lastModified": "2025-02-04T19:15:33.360", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:19:54.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,72 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionEndExcluding": "16.2-5", + "matchCriteriaId": "41FE2568-290E-4F8B-A68A-9DB729C3AEEE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*", + "versionEndExcluding": "16.3.99.1736242932", + "matchCriteriaId": "DFA88343-F810-4A5C-8E92-6A254B7B88A0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.3", + "versionEndExcluding": "16.3-2", + "matchCriteriaId": "9D9BF98E-1188-4BB7-865E-0836EBD2E60C" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Enalean/tuleap/security/advisories/GHSA-f34g-wc2m-mf76", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory", + "Patch" + ] }, { "url": "https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=3edf8158ba40be66f0b661888b8b2805784795d1", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://tuleap.net/plugins/tracker/?aid=41434", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory", + "Exploit", + "Issue Tracking", + "Patch" + ] }, { "url": "https://tuleap.net/plugins/tracker/?aid=41434", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Vendor Advisory", + "Exploit", + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-247xx/CVE-2025-24798.json b/CVE-2025/CVE-2025-247xx/CVE-2025-24798.json index 98303fd260f..5fe1a034bd8 100644 --- a/CVE-2025/CVE-2025-247xx/CVE-2025-24798.json +++ b/CVE-2025/CVE-2025-247xx/CVE-2025-24798.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24798", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-10T22:15:24.387", - "lastModified": "2025-07-15T13:14:49.980", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:02:31.793", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -51,18 +71,47 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:meshtastic:meshtastic_firmware:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.2.1", + "versionEndExcluding": "2.6.2", + "matchCriteriaId": "80418279-3324-462A-ACDE-87C2D3BB35DD" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/meshtastic/firmware/blob/cdcbf4c61550e45c125e17a20aff4275e9389655/src/modules/RoutingModule.cpp#L44-L48", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/meshtastic/firmware/commit/dc100e4d3e3dfbf58d3ead8141a49cddb0cbdc19", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/meshtastic/firmware/security/advisories/GHSA-4q84-546j-3mf5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-273xx/CVE-2025-27397.json b/CVE-2025/CVE-2025-273xx/CVE-2025-27397.json index fcc36a3d64a..981ee0de25c 100644 --- a/CVE-2025/CVE-2025-273xx/CVE-2025-27397.json +++ b/CVE-2025/CVE-2025-273xx/CVE-2025-27397.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27397", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:19.083", - "lastModified": "2025-03-11T10:15:19.083", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:58:09.643", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -95,10 +95,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.0", + "matchCriteriaId": "1F8FD0DA-AB97-43DC-A9FB-DEFB7804036B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:*", + "matchCriteriaId": "52A77C9D-E59C-4397-B834-797D7B334A6B" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-075201.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-273xx/CVE-2025-27398.json b/CVE-2025/CVE-2025-273xx/CVE-2025-27398.json index 1030aba67ac..a903f556b35 100644 --- a/CVE-2025/CVE-2025-273xx/CVE-2025-27398.json +++ b/CVE-2025/CVE-2025-273xx/CVE-2025-27398.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27398", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:19.247", - "lastModified": "2025-03-11T10:15:19.247", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:51:58.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -95,10 +95,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.0", + "matchCriteriaId": "1F8FD0DA-AB97-43DC-A9FB-DEFB7804036B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:*", + "matchCriteriaId": "52A77C9D-E59C-4397-B834-797D7B334A6B" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-075201.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27401.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27401.json index 938bdca474d..9292a08cf68 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27401.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27401.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27401", "sourceIdentifier": "security-advisories@github.com", "published": "2025-03-04T17:15:19.547", - "lastModified": "2025-03-04T17:15:19.547", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:00:59.597", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,18 +51,62 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionEndExcluding": "16.3-11", + "matchCriteriaId": "44FFF09C-980B-4D7E-AF34-BBAECB1B179D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*", + "versionEndExcluding": "16.4.99.1740498975", + "matchCriteriaId": "5609916B-3E6B-4009-8837-701EF159FF6F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.4", + "versionEndExcluding": "16.4-6", + "matchCriteriaId": "54A72640-277F-4E54-A2F4-8948FF0F16E2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Enalean/tuleap/commit/0070fef5c3b27fd402d3232041c6e03f79a84ffd", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Enalean/tuleap/security/advisories/GHSA-3rjf-87rf-h8m9", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory", + "Patch" + ] }, { "url": "https://tuleap.net/plugins/tracker/?aid=41850", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory", + "Exploit", + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27493.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27493.json index 432bb934d2d..24c56d74cbb 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27493.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27493.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27493", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:19.577", - "lastModified": "2025-03-11T10:15:19.577", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:50:58.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.5, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 } ] }, @@ -95,10 +115,71 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:sipass_integrated_ac5102_\\(acc-g2\\)_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.9", + "matchCriteriaId": "E417E572-D776-4664-9BBB-06579C14A9D9" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:sipass_integrated_ac5102_\\(acc-g2\\):-:*:*:*:*:*:*:*", + "matchCriteriaId": "0691F0D6-FC6C-41FC-8601-393AECB1E6E9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.9", + "matchCriteriaId": "F867548F-CC8D-4B1F-87C3-9138DCB7F6E3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:sipass_integrated_acc-ap:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7E714A08-D557-4F6F-B089-89E3FFB7105A" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-515903.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27494.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27494.json index b3b1132d64b..4ae6a473c5f 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27494.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27494.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27494", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:19.783", - "lastModified": "2025-03-11T10:15:19.783", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:49:43.953", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ] }, @@ -93,12 +113,83 @@ "value": "CWE-20" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:sipass_integrated_ac5102_\\(acc-g2\\)_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.9", + "matchCriteriaId": "E417E572-D776-4664-9BBB-06579C14A9D9" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:sipass_integrated_ac5102_\\(acc-g2\\):-:*:*:*:*:*:*:*", + "matchCriteriaId": "0691F0D6-FC6C-41FC-8601-393AECB1E6E9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.9", + "matchCriteriaId": "F867548F-CC8D-4B1F-87C3-9138DCB7F6E3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:siemens:sipass_integrated_acc-ap:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7E714A08-D557-4F6F-B089-89E3FFB7105A" + } + ] + } + ] } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-515903.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27496.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27496.json index 56d0207e489..63d31a78161 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27496.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27496.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27496", "sourceIdentifier": "security-advisories@github.com", "published": "2025-03-13T19:15:52.050", - "lastModified": "2025-03-13T19:15:52.050", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:42:18.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:snowflake:snowflake_jdbc:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.13", + "versionEndExcluding": "3.23.1", + "matchCriteriaId": "940CB581-6281-4238-9A49-CFEC2FC946B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/snowflakedb/snowflake-jdbc/commit/ef81582ce2f1dbc3c8794a696c94f4fe65fad507", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-q298-375f-5q63", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-293xx/CVE-2025-29365.json b/CVE-2025/CVE-2025-293xx/CVE-2025-29365.json new file mode 100644 index 00000000000..0120562a1f3 --- /dev/null +++ b/CVE-2025/CVE-2025-293xx/CVE-2025-29365.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-29365", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:34.797", + "lastModified": "2025-08-22T16:15:34.797", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + }, + { + "lang": "en", + "value": "CWE-125" + }, + { + "lang": "en", + "value": "CWE-274" + }, + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://gist.github.com/Giles-one/3a80cd1c7014e50601bd1c0dd9d41663", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug1-out-of-bounds-write-in-read_input-function", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-293xx/CVE-2025-29366.json b/CVE-2025/CVE-2025-293xx/CVE-2025-29366.json new file mode 100644 index 00000000000..90575dd121c --- /dev/null +++ b/CVE-2025/CVE-2025-293xx/CVE-2025-29366.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-29366", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:35.030", + "lastModified": "2025-08-22T16:15:35.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary commands on the host machine." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/Giles-one/f4ea405c2a26000bb4ff4cfb9622be49", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Giles-one/mupen64plusEscape/tree/main/BUG1", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/mupen64plus/mupen64plus-core/blob/2.6.0/src/device/rdram/rdram.c#L159", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L50", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L60", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35966.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35966.json index 50f198f4906..ccd81f5860c 100644 --- a/CVE-2025/CVE-2025-359xx/CVE-2025-35966.json +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35966.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35966", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:26.913", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:16:02.100", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:*", + "matchCriteriaId": "2B7BA78E-2D63-4122-BD8D-B3BBCD719556" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Third Party Advisory", + "Exploit" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Third Party Advisory", + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-365xx/CVE-2025-36512.json b/CVE-2025/CVE-2025-365xx/CVE-2025-36512.json index 4e4b7bfed62..117d1758d82 100644 --- a/CVE-2025/CVE-2025-365xx/CVE-2025-36512.json +++ b/CVE-2025/CVE-2025-365xx/CVE-2025-36512.json @@ -2,8 +2,8 @@ "id": "CVE-2025-36512", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:27.117", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:18:21.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:*", + "matchCriteriaId": "2B7BA78E-2D63-4122-BD8D-B3BBCD719556" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json b/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json index 0c3718015cc..eeae69bd44c 100644 --- a/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json +++ b/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json @@ -2,8 +2,8 @@ "id": "CVE-2025-36520", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:27.320", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:18:09.797", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:*", + "matchCriteriaId": "2B7BA78E-2D63-4122-BD8D-B3BBCD719556" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38619.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38619.json new file mode 100644 index 00000000000..cfca0f4c0cb --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38619.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-38619", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.177", + "lastModified": "2025-08-22T16:15:35.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ti: j721e-csi2rx: fix list_del corruption\n\nIf ti_csi2rx_start_dma() fails in ti_csi2rx_dma_callback(), the buffer is\nmarked done with VB2_BUF_STATE_ERROR but is not removed from the DMA queue.\nThis causes the same buffer to be retried in the next iteration, resulting\nin a double list_del() and eventual list corruption.\n\nFix this by removing the buffer from the queue before calling\nvb2_buffer_done() on error.\n\nThis resolves a crash due to list_del corruption:\n[ 37.811243] j721e-csi2rx 30102000.ticsi2rx: Failed to queue the next buffer for DMA\n[ 37.832187] slab kmalloc-2k start ffff00000255b000 pointer offset 1064 size 2048\n[ 37.839761] list_del corruption. next->prev should be ffff00000255bc28, but was ffff00000255d428. (next=ffff00000255b428)\n[ 37.850799] ------------[ cut here ]------------\n[ 37.855424] kernel BUG at lib/list_debug.c:65!\n[ 37.859876] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP\n[ 37.866061] Modules linked in: i2c_dev usb_f_rndis u_ether libcomposite dwc3 udc_core usb_common aes_ce_blk aes_ce_cipher ghash_ce gf128mul sha1_ce cpufreq_dt dwc3_am62 phy_gmii_sel sa2ul\n[ 37.882830] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3+ #28 VOLUNTARY\n[ 37.890851] Hardware name: Bosch STLA-GSRV2-B0 (DT)\n[ 37.895737] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 37.902703] pc : __list_del_entry_valid_or_report+0xdc/0x114\n[ 37.908390] lr : __list_del_entry_valid_or_report+0xdc/0x114\n[ 37.914059] sp : ffff800080003db0\n[ 37.917375] x29: ffff800080003db0 x28: 0000000000000007 x27: ffff800080e50000\n[ 37.924521] x26: 0000000000000000 x25: ffff0000016abb50 x24: dead000000000122\n[ 37.931666] x23: ffff0000016abb78 x22: ffff0000016ab080 x21: ffff800080003de0\n[ 37.938810] x20: ffff00000255bc00 x19: ffff00000255b800 x18: 000000000000000a\n[ 37.945956] x17: 20747562202c3832 x16: 6362353532303030 x15: 0720072007200720\n[ 37.953101] x14: 0720072007200720 x13: 0720072007200720 x12: 00000000ffffffea\n[ 37.960248] x11: ffff800080003b18 x10: 00000000ffffefff x9 : ffff800080f5b568\n[ 37.967396] x8 : ffff800080f5b5c0 x7 : 0000000000017fe8 x6 : c0000000ffffefff\n[ 37.974542] x5 : ffff00000fea6688 x4 : 0000000000000000 x3 : 0000000000000000\n[ 37.981686] x2 : 0000000000000000 x1 : ffff800080ef2b40 x0 : 000000000000006d\n[ 37.988832] Call trace:\n[ 37.991281] __list_del_entry_valid_or_report+0xdc/0x114 (P)\n[ 37.996959] ti_csi2rx_dma_callback+0x84/0x1c4\n[ 38.001419] udma_vchan_complete+0x1e0/0x344\n[ 38.005705] tasklet_action_common+0x118/0x310\n[ 38.010163] tasklet_action+0x30/0x3c\n[ 38.013832] handle_softirqs+0x10c/0x2e0\n[ 38.017761] __do_softirq+0x14/0x20\n[ 38.021256] ____do_softirq+0x10/0x20\n[ 38.024931] call_on_irq_stack+0x24/0x60\n[ 38.028873] do_softirq_own_stack+0x1c/0x40\n[ 38.033064] __irq_exit_rcu+0x130/0x15c\n[ 38.036909] irq_exit_rcu+0x10/0x20\n[ 38.040403] el1_interrupt+0x38/0x60\n[ 38.043987] el1h_64_irq_handler+0x18/0x24\n[ 38.048091] el1h_64_irq+0x6c/0x70\n[ 38.051501] default_idle_call+0x34/0xe0 (P)\n[ 38.055783] do_idle+0x1f8/0x250\n[ 38.059021] cpu_startup_entry+0x34/0x3c\n[ 38.062951] rest_init+0xb4/0xc0\n[ 38.066186] console_on_rootfs+0x0/0x6c\n[ 38.070031] __primary_switched+0x88/0x90\n[ 38.074059] Code: b00037e0 91378000 f9400462 97e9bf49 (d4210000)\n[ 38.080168] ---[ end trace 0000000000000000 ]---\n[ 38.084795] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt\n[ 38.092197] SMP: stopping secondary CPUs\n[ 38.096139] Kernel Offset: disabled\n[ 38.099631] CPU features: 0x0000,00002000,02000801,0400420b\n[ 38.105202] Memory Limit: none\n[ 38.108260] ---[ end Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt ]---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/68e5579f4de12207b23c41b44a4c0778b6c2858f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/92d0188f36ca8082af7989d743eb5b44c2d259f7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a4a8cb0889927d59ebd839458c8f038bc5298ef9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ae42c6fe531425ef2f47e82f96851427d24bbf6b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38620.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38620.json new file mode 100644 index 00000000000..9d7f178d2d1 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38620.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38620", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.320", + "lastModified": "2025-08-22T16:15:35.320", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nzloop: fix KASAN use-after-free of tag set\n\nWhen a zoned loop device, or zloop device, is removed, KASAN enabled\nkernel reports \"BUG KASAN use-after-free\" in blk_mq_free_tag_set(). The\nBUG happens because zloop_ctl_remove() calls put_disk(), which invokes\nzloop_free_disk(). The zloop_free_disk() frees the memory allocated for\nthe zlo pointer. However, after the memory is freed, zloop_ctl_remove()\ncalls blk_mq_free_tag_set(&zlo->tag_set), which accesses the freed zlo.\nHence the KASAN use-after-free.\n\n zloop_ctl_remove()\n put_disk(zlo->disk)\n put_device()\n kobject_put()\n ...\n zloop_free_disk()\n kvfree(zlo)\n blk_mq_free_tag_set(&zlo->tag_set)\n\nTo avoid the BUG, move the call to blk_mq_free_tag_set(&zlo->tag_set)\nfrom zloop_ctl_remove() into zloop_free_disk(). This ensures that\nthe tag_set is freed before the call to kvfree(zlo)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/765761851d89c772f482494d452e266795460278", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c7c87046b41a9ef28ee7ac476c369da5b5228bc5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38621.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38621.json new file mode 100644 index 00000000000..8f68abed27a --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38621.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38621", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.460", + "lastModified": "2025-08-22T16:15:35.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: make rdev_addable usable for rcu mode\n\nOur testcase trigger panic:\n\nBUG: kernel NULL pointer dereference, address: 00000000000000e0\n...\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 2 UID: 0 PID: 85 Comm: kworker/2:1 Not tainted 6.16.0+ #94\nPREEMPT(none)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nWorkqueue: md_misc md_start_sync\nRIP: 0010:rdev_addable+0x4d/0xf0\n...\nCall Trace:\n \n md_start_sync+0x329/0x480\n process_one_work+0x226/0x6d0\n worker_thread+0x19e/0x340\n kthread+0x10f/0x250\n ret_from_fork+0x14d/0x180\n ret_from_fork_asm+0x1a/0x30\n \nModules linked in: raid10\nCR2: 00000000000000e0\n---[ end trace 0000000000000000 ]---\nRIP: 0010:rdev_addable+0x4d/0xf0\n\nmd_spares_need_change in md_start_sync will call rdev_addable which\nprotected by rcu_read_lock/rcu_read_unlock. This rcu context will help\nprotect rdev won't be released, but rdev->mddev will be set to NULL\nbefore we call synchronize_rcu in md_kick_rdev_from_array. Fix this by\nusing READ_ONCE and check does rdev->mddev still alive." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/13017b427118f4311471ee47df74872372ca8482", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b5fbe940862339cdcc34dea7a057ad18d18fa137", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38622.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38622.json new file mode 100644 index 00000000000..05e12a31b56 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38622.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38622", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.603", + "lastModified": "2025-08-22T16:15:35.603", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: drop UFO packets in udp_rcv_segment()\n\nWhen sending a packet with virtio_net_hdr to tun device, if the gso_type\nin virtio_net_hdr is SKB_GSO_UDP and the gso_size is less than udphdr\nsize, below crash may happen.\n\n ------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:4572!\n Oops: invalid opcode: 0000 [#1] SMP NOPTI\n CPU: 0 UID: 0 PID: 62 Comm: mytest Not tainted 6.16.0-rc7 #203 PREEMPT(voluntary)\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n RIP: 0010:skb_pull_rcsum+0x8e/0xa0\n Code: 00 00 5b c3 cc cc cc cc 8b 93 88 00 00 00 f7 da e8 37 44 38 00 f7 d8 89 83 88 00 00 00 48 8b 83 c8 00 00 00 5b c3 cc cc cc cc <0f> 0b 0f 0b 66 66 2e 0f 1f 84 00 000\n RSP: 0018:ffffc900001fba38 EFLAGS: 00000297\n RAX: 0000000000000004 RBX: ffff8880040c1000 RCX: ffffc900001fb948\n RDX: ffff888003e6d700 RSI: 0000000000000008 RDI: ffff88800411a062\n RBP: ffff8880040c1000 R08: 0000000000000000 R09: 0000000000000001\n R10: ffff888003606c00 R11: 0000000000000001 R12: 0000000000000000\n R13: ffff888004060900 R14: ffff888004050000 R15: ffff888004060900\n FS: 000000002406d3c0(0000) GS:ffff888084a19000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000020000040 CR3: 0000000004007000 CR4: 00000000000006f0\n Call Trace:\n \n udp_queue_rcv_one_skb+0x176/0x4b0 net/ipv4/udp.c:2445\n udp_queue_rcv_skb+0x155/0x1f0 net/ipv4/udp.c:2475\n udp_unicast_rcv_skb+0x71/0x90 net/ipv4/udp.c:2626\n __udp4_lib_rcv+0x433/0xb00 net/ipv4/udp.c:2690\n ip_protocol_deliver_rcu+0xa6/0x160 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x72/0x90 net/ipv4/ip_input.c:233\n ip_sublist_rcv_finish+0x5f/0x70 net/ipv4/ip_input.c:579\n ip_sublist_rcv+0x122/0x1b0 net/ipv4/ip_input.c:636\n ip_list_rcv+0xf7/0x130 net/ipv4/ip_input.c:670\n __netif_receive_skb_list_core+0x21d/0x240 net/core/dev.c:6067\n netif_receive_skb_list_internal+0x186/0x2b0 net/core/dev.c:6210\n napi_complete_done+0x78/0x180 net/core/dev.c:6580\n tun_get_user+0xa63/0x1120 drivers/net/tun.c:1909\n tun_chr_write_iter+0x65/0xb0 drivers/net/tun.c:1984\n vfs_write+0x300/0x420 fs/read_write.c:593\n ksys_write+0x60/0xd0 fs/read_write.c:686\n do_syscall_64+0x50/0x1c0 arch/x86/entry/syscall_64.c:63\n \n\nTo trigger gso segment in udp_queue_rcv_skb(), we should also set option\nUDP_ENCAP_ESPINUDP to enable udp_sk(sk)->encap_rcv. When the encap_rcv\nhook return 1 in udp_queue_rcv_one_skb(), udp_csum_pull_header() will try\nto pull udphdr, but the skb size has been segmented to gso size, which\nleads to this crash.\n\nPrevious commit cf329aa42b66 (\"udp: cope with UDP GRO packet misdirection\")\nintroduces segmentation in UDP receive path only for GRO, which was never\nintended to be used for UFO, so drop UFO packets in udp_rcv_segment()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0c639c6479ec4480372901a5fc566f7588cf5522", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/0d45954034f8edd6d4052e0190d3d6335c37e4de", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/791f32c5eab33ca3a153f8f6f763aa0df1ddc320", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c0ec2e47f1e92d69b42b17a4a1e543256778393e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d46e51f1c78b9ab9323610feb14238d06d46d519", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fc45b3f9599b657d4a64bcf423d2a977b3e13a49", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38623.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38623.json new file mode 100644 index 00000000000..e1763d1d445 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38623.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38623", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.760", + "lastModified": "2025-08-22T16:15:35.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: pnv_php: Fix surprise plug detection and recovery\n\nThe existing PowerNV hotplug code did not handle surprise plug events\ncorrectly, leading to a complete failure of the hotplug system after device\nremoval and a required reboot to detect new devices.\n\nThis comes down to two issues:\n\n 1) When a device is surprise removed, often the bridge upstream\n port will cause a PE freeze on the PHB. If this freeze is not\n cleared, the MSI interrupts from the bridge hotplug notification\n logic will not be received by the kernel, stalling all plug events\n on all slots associated with the PE.\n\n 2) When a device is removed from a slot, regardless of surprise or\n programmatic removal, the associated PHB/PE ls left frozen.\n If this freeze is not cleared via a fundamental reset, skiboot\n is unable to clear the freeze and cannot retrain / rescan the\n slot. This also requires a reboot to clear the freeze and redetect\n the device in the slot.\n\nIssue the appropriate unfreeze and rescan commands on hotplug events,\nand don't oops on hotplug if pci_bus_to_OF_node() returns NULL.\n\n[bhelgaas: tidy comments]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1d2f63680c5719a5da92639e981c6c9a87fcee08", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/473999ba937eac9776be791deed7c84a21d7880b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/48c6935a34981bb56f35be0774ec1f30c6e386f8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6e7b24c71e530a6c1d656e73d8a30ee081656844", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/78d20b8c13075eae3d884c21db7a09a6bbdda5b2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a2a2a6fc2469524caa713036297c542746d148dc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38624.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38624.json new file mode 100644 index 00000000000..2f884d0d25c --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38624.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38624", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:35.910", + "lastModified": "2025-08-22T16:15:35.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: pnv_php: Clean up allocated IRQs on unplug\n\nWhen the root of a nested PCIe bridge configuration is unplugged, the\npnv_php driver leaked the allocated IRQ resources for the child bridges'\nhotplug event notifications, resulting in a panic.\n\nFix this by walking all child buses and deallocating all its IRQ resources\nbefore calling pci_hp_remove_devices().\n\nAlso modify the lifetime of the workqueue at struct pnv_php_slot::wq so\nthat it is only destroyed in pnv_php_free_slot(), instead of\npnv_php_disable_irq(). This is required since pnv_php_disable_irq() will\nnow be called by workers triggered by hot unplug interrupts, so the\nworkqueue needs to stay allocated.\n\nThe abridged kernel panic that occurs without this patch is as follows:\n\n WARNING: CPU: 0 PID: 687 at kernel/irq/msi.c:292 msi_device_data_release+0x6c/0x9c\n CPU: 0 UID: 0 PID: 687 Comm: bash Not tainted 6.14.0-rc5+ #2\n Call Trace:\n msi_device_data_release+0x34/0x9c (unreliable)\n release_nodes+0x64/0x13c\n devres_release_all+0xc0/0x140\n device_del+0x2d4/0x46c\n pci_destroy_dev+0x5c/0x194\n pci_hp_remove_devices+0x90/0x128\n pci_hp_remove_devices+0x44/0x128\n pnv_php_disable_slot+0x54/0xd4\n power_write_file+0xf8/0x18c\n pci_slot_attr_store+0x40/0x5c\n sysfs_kf_write+0x64/0x78\n kernfs_fop_write_iter+0x1b0/0x290\n vfs_write+0x3bc/0x50c\n ksys_write+0x84/0x140\n system_call_exception+0x124/0x230\n system_call_vectored_common+0x15c/0x2ec\n\n[bhelgaas: tidy comments]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38625.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38625.json new file mode 100644 index 00000000000..ce0ee2d0029 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38625.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38625", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.057", + "lastModified": "2025-08-22T16:15:36.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pds: Fix missing detach_ioas op\n\nWhen CONFIG_IOMMUFD is enabled and a device is bound to the pds_vfio_pci\ndriver, the following WARN_ON() trace is seen and probe fails:\n\nWARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio]\n<...>\npds_vfio_pci 0000:08:00.1: probe with driver pds_vfio_pci failed with error -22\n\nThis is because the driver's vfio_device_ops.detach_ioas isn't set.\n\nFix this by using the generic vfio_iommufd_physical_detach_ioas\nfunction." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1df8150ab4cc422bddfbd312d6758c50b688a971", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7dbfae90c5a33f6b694e7068bc9522cc2655373d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/88b962fbd0ac30a65d2869c68d2f145be46ebe4d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b265dff9fcf047f660976a5c92c83e7c414a2d95", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fe24d5bc635e103a517ec201c3cb571eeab8be2f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38626.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38626.json new file mode 100644 index 00000000000..f2e3b6eca0c --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38626.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38626", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.193", + "lastModified": "2025-08-22T16:15:36.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode\n\nw/ \"mode=lfs\" mount option, generic/299 will cause system panic as below:\n\n------------[ cut here ]------------\nkernel BUG at fs/f2fs/segment.c:2835!\nCall Trace:\n \n f2fs_allocate_data_block+0x6f4/0xc50\n f2fs_map_blocks+0x970/0x1550\n f2fs_iomap_begin+0xb2/0x1e0\n iomap_iter+0x1d6/0x430\n __iomap_dio_rw+0x208/0x9a0\n f2fs_file_write_iter+0x6b3/0xfa0\n aio_write+0x15d/0x2e0\n io_submit_one+0x55e/0xab0\n __x64_sys_io_submit+0xa5/0x230\n do_syscall_64+0x84/0x2f0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\nRIP: 0010:new_curseg+0x70f/0x720\n\nThe root cause of we run out-of-space is: in f2fs_map_blocks(), f2fs may\ntrigger foreground gc only if it allocates any physical block, it will be\na little bit later when there is multiple threads writing data w/\naio/dio/bufio method in parallel, since we always use OPU in lfs mode, so\nf2fs_map_blocks() does block allocations aggressively.\n\nIn order to fix this issue, let's give a chance to trigger foreground\ngc in prior to block allocation in f2fs_map_blocks()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1005a3ca28e90c7a64fa43023f866b960a60f791", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/264ede8a52f18647ed5bb5f2bd9bf54f556ad8f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/385e64a0744584397b4b52b27c96703516f39968", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/82765ce5c7a56f9309ee45328e763610eaf11253", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f289690f50a01c3e085d87853392d5b7436a4cee", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38627.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38627.json new file mode 100644 index 00000000000..be1d92d067c --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38627.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38627", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.337", + "lastModified": "2025-08-22T16:15:36.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic\n\nThe decompress_io_ctx may be released asynchronously after\nI/O completion. If this file is deleted immediately after read,\nand the kworker of processing post_read_wq has not been executed yet\ndue to high workloads, It is possible that the inode(f2fs_inode_info)\nis evicted and freed before it is used f2fs_free_dic.\n\n The UAF case as below:\n Thread A Thread B\n - f2fs_decompress_end_io\n - f2fs_put_dic\n - queue_work\n add free_dic work to post_read_wq\n - do_unlink\n - iput\n - evict\n - call_rcu\n This file is deleted after read.\n\n Thread C kworker to process post_read_wq\n - rcu_do_batch\n - f2fs_free_inode\n - kmem_cache_free\n inode is freed by rcu\n - process_scheduled_works\n - f2fs_late_free_dic\n - f2fs_free_dic\n - f2fs_release_decomp_mem\n read (dic->inode)->i_compress_algorithm\n\nThis patch store compress_algorithm and sbi in dic to avoid inode UAF.\n\nIn addition, the previous solution is deprecated in [1] may cause system hang.\n[1] https://lore.kernel.org/all/c36ab955-c8db-4a8b-a9d0-f07b5f426c3f@kernel.org" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/39868685c2a94a70762bc6d77dc81d781d05bff5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8fae5b6addd5f6895e03797b56e3c7b9f9cd15c9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38628.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38628.json new file mode 100644 index 00000000000..08da1f877e9 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38628.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-38628", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.470", + "lastModified": "2025-08-22T16:15:36.470", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa/mlx5: Fix release of uninitialized resources on error path\n\nThe commit in the fixes tag made sure that mlx5_vdpa_free()\nis the single entrypoint for removing the vdpa device resources\nadded in mlx5_vdpa_dev_add(), even in the cleanup path of\nmlx5_vdpa_dev_add().\n\nThis means that all functions from mlx5_vdpa_free() should be able to\nhandle uninitialized resources. This was not the case though:\nmlx5_vdpa_destroy_mr_resources() and mlx5_cmd_cleanup_async_ctx()\nwere not able to do so. This caused the splat below when adding\na vdpa device without a MAC address.\n\nThis patch fixes these remaining issues:\n\n- Makes mlx5_vdpa_destroy_mr_resources() return early if called on\n uninitialized resources.\n\n- Moves mlx5_cmd_init_async_ctx() early on during device addition\n because it can't fail. This means that mlx5_cmd_cleanup_async_ctx()\n also can't fail. To mirror this, move the call site of\n mlx5_cmd_cleanup_async_ctx() in mlx5_vdpa_free().\n\nAn additional comment was added in mlx5_vdpa_free() to document\nthe expectations of functions called from this context.\n\nSplat:\n\n mlx5_core 0000:b5:03.2: mlx5_vdpa_dev_add:3950:(pid 2306) warning: No mac address provisioned?\n ------------[ cut here ]------------\n WARNING: CPU: 13 PID: 2306 at kernel/workqueue.c:4207 __flush_work+0x9a/0xb0\n [...]\n Call Trace:\n \n ? __try_to_del_timer_sync+0x61/0x90\n ? __timer_delete_sync+0x2b/0x40\n mlx5_vdpa_destroy_mr_resources+0x1c/0x40 [mlx5_vdpa]\n mlx5_vdpa_free+0x45/0x160 [mlx5_vdpa]\n vdpa_release_dev+0x1e/0x50 [vdpa]\n device_release+0x31/0x90\n kobject_cleanup+0x37/0x130\n mlx5_vdpa_dev_add+0x327/0x890 [mlx5_vdpa]\n vdpa_nl_cmd_dev_add_set_doit+0x2c1/0x4d0 [vdpa]\n genl_family_rcv_msg_doit+0xd8/0x130\n genl_family_rcv_msg+0x14b/0x220\n ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [vdpa]\n genl_rcv_msg+0x47/0xa0\n ? __pfx_genl_rcv_msg+0x10/0x10\n netlink_rcv_skb+0x53/0x100\n genl_rcv+0x24/0x40\n netlink_unicast+0x27b/0x3b0\n netlink_sendmsg+0x1f7/0x430\n __sys_sendto+0x1fa/0x210\n ? ___pte_offset_map+0x17/0x160\n ? next_uptodate_folio+0x85/0x2b0\n ? percpu_counter_add_batch+0x51/0x90\n ? filemap_map_pages+0x515/0x660\n __x64_sys_sendto+0x20/0x30\n do_syscall_64+0x7b/0x2c0\n ? do_read_fault+0x108/0x220\n ? do_pte_missing+0x14a/0x3e0\n ? __handle_mm_fault+0x321/0x730\n ? count_memcg_events+0x13f/0x180\n ? handle_mm_fault+0x1fb/0x2d0\n ? do_user_addr_fault+0x20c/0x700\n ? syscall_exit_work+0x104/0x140\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n RIP: 0033:0x7f0c25b0feca\n [...]\n ---[ end trace 0000000000000000 ]---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/37f26b9013b46457b0a96633fc3a7dc977d8beb1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6de4ef950dd56a6a81daf92d8a1d864fc6a56971", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cc51a66815999afb7e9cd845968de4fdf07567b7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cf4fc23d0d3d5b89b36f0d79f2674510bb574d8e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38629.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38629.json new file mode 100644 index 00000000000..5acf134c4f0 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38629.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38629", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.620", + "lastModified": "2025-08-22T16:15:36.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb: scarlett2: Fix missing NULL check\n\nscarlett2_input_select_ctl_info() sets up the string arrays allocated\nvia kasprintf(), but it misses NULL checks, which may lead to NULL\ndereference Oops. Let's add the proper NULL check." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2c735fcaee81ad8056960659dc9dc460891e76b0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d558db85920b124bac36f8a7ddc5de0aa7491bdd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/df485a4b2b3ee5b35c80f990beb554e38a8a5fb1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38630.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38630.json new file mode 100644 index 00000000000..3f4759ce360 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38630.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38630", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.750", + "lastModified": "2025-08-22T16:15:36.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref\n\nfb_add_videomode() can fail with -ENOMEM when its internal kmalloc() cannot\nallocate a struct fb_modelist. If that happens, the modelist stays empty but\nthe driver continues to register. Add a check for its return value to prevent\npoteintial null-ptr-deref, which is similar to the commit 17186f1f90d3 (\"fbdev:\nFix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var\")." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/40f0a51f6c54d46a94b9f1180339ede7ca7ee190", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/49377bac9e3bec1635065a033c9679214fe7593e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4b5d36cc3014986e6fac12eaa8433fe56801d4ce", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ac16154cccda8be10ee3ae188f10a06f3890bc5d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/da11e6a30e0bb8e911288bdc443b3dc8f6a7cac7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f060441c153495750804133555cf0a211a856892", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38631.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38631.json new file mode 100644 index 00000000000..e495aa670a4 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38631.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-38631", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:36.893", + "lastModified": "2025-08-22T16:15:36.893", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: imx95-blk-ctl: Fix synchronous abort\n\nWhen enabling runtime PM for clock suppliers that also belong to a power\ndomain, the following crash is thrown:\nerror: synchronous external abort: 0000000096000010 [#1] PREEMPT SMP\nWorkqueue: events_unbound deferred_probe_work_func\npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : clk_mux_get_parent+0x60/0x90\nlr : clk_core_reparent_orphans_nolock+0x58/0xd8\n Call trace:\n clk_mux_get_parent+0x60/0x90\n clk_core_reparent_orphans_nolock+0x58/0xd8\n of_clk_add_hw_provider.part.0+0x90/0x100\n of_clk_add_hw_provider+0x1c/0x38\n imx95_bc_probe+0x2e0/0x3f0\n platform_probe+0x70/0xd8\n\nEnabling runtime PM without explicitly resuming the device caused\nthe power domain cut off after clk_register() is called. As a result,\na crash happens when the clock hardware provider is added and attempts\nto access the BLK_CTL register.\n\nFix this by using devm_pm_runtime_enable() instead of pm_runtime_enable()\nand getting rid of the pm_runtime_disable() in the cleanup path." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/533dc3cb375cabd8a2beba293d63ef2acd3d0005", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9f0ee0baf25b46bb82655c687718ebb0ae1def7b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b08217a257215ed9130fce93d35feba66b49bf0a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c1dead8bb303f86905ea6a09e5acda931165453b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38632.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38632.json new file mode 100644 index 00000000000..121905b2094 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38632.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38632", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.033", + "lastModified": "2025-08-22T16:15:37.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: fix race causing mux_owner NULL with active mux_usecount\n\ncommit 5a3e85c3c397 (\"pinmux: Use sequential access to access\ndesc->pinmux data\") tried to address the issue when two client of the\nsame gpio calls pinctrl_select_state() for the same functionality, was\nresulting in NULL pointer issue while accessing desc->mux_owner.\nHowever, issue was not completely fixed due to the way it was handled\nand it can still result in the same NULL pointer.\n\nThe issue occurs due to the following interleaving:\n\n cpu0 (process A) cpu1 (process B)\n\n pin_request() { pin_free() {\n\n mutex_lock()\n desc->mux_usecount--; //becomes 0\n ..\n mutex_unlock()\n\n mutex_lock(desc->mux)\n desc->mux_usecount++; // becomes 1\n desc->mux_owner = owner;\n mutex_unlock(desc->mux)\n\n mutex_lock(desc->mux)\n desc->mux_owner = NULL;\n mutex_unlock(desc->mux)\n\nThis sequence leads to a state where the pin appears to be in use\n(`mux_usecount == 1`) but has no owner (`mux_owner == NULL`), which can\ncause NULL pointer on next pin_request on the same pin.\n\nEnsure that updates to mux_usecount and mux_owner are performed\natomically under the same lock. Only clear mux_owner when mux_usecount\nreaches zero and no new owner has been assigned." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0b075c011032f88d1cfde3b45d6dcf08b44140eb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/22b585cbd67d14df3b91529d1b990661c300faa9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9b2a3e7189028aa7c4d53a84364f2ea9fb209787", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9ea3f6b9a67be3476e331ce51cac316c2614a564", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b7bd6e3971eb7f0e34d2fdce1b18b08094e0c804", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38633.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38633.json new file mode 100644 index 00000000000..bd6bb96b0d7 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38633.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38633", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.173", + "lastModified": "2025-08-22T16:15:37.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: spacemit: mark K1 pll1_d8 as critical\n\nThe pll1_d8 clock is enabled by the boot loader, and is ultimately a\nparent for numerous clocks, including those used by APB and AXI buses.\nGuodong Xu discovered that this clock got disabled while responding to\ngetting -EPROBE_DEFER when requesting a reset controller.\n\nThe needed clock (CLK_DMA, along with its parents) had already been\nenabled. To respond to the probe deferral return, the CLK_DMA clock\nwas disabled, and this led to parent clocks also reducing their enable\ncount. When the enable count for pll1_d8 was decremented it became 0,\nwhich caused it to be disabled. This led to a system hang.\n\nMarking that clock critical resolves this by preventing it from being\ndisabled.\n\nDefine a new macro CCU_FACTOR_GATE_DEFINE() to allow clock flags to\nbe supplied for a CCU_FACTOR_GATE clock." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/10948c00e548e9ad2ce9d765baf26dce2d9b806b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7554729de27daf6d54bcf8689d863bbe267828bf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38634.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38634.json new file mode 100644 index 00000000000..35e11730f54 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38634.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38634", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.307", + "lastModified": "2025-08-22T16:15:37.307", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: cpcap-charger: Fix null check for power_supply_get_by_name\n\nIn the cpcap_usb_detect() function, the power_supply_get_by_name()\nfunction may return `NULL` instead of an error pointer.\nTo prevent potential null pointer dereferences, Added a null check." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/27001e4f146624c4b3389b029bdc0f8049819560", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8e9bdb563916287ba1b4258812434e0585ac6d00", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9784d832d7c103539cd9afb376534eaa35815d3d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a2436263144980cc99a9860c7b43335847afbe53", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d9fa3aae08f99493e67fb79413c0e95d30fca5e9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f642500aa7ed93d2606e4f929244cce9c7467b3a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38635.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38635.json new file mode 100644 index 00000000000..a384461c721 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38635.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38635", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.450", + "lastModified": "2025-08-22T16:15:37.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: davinci: Add NULL check in davinci_lpsc_clk_register()\n\ndevm_kasprintf() returns NULL when memory allocation fails. Currently,\ndavinci_lpsc_clk_register() does not check for this case, which results\nin a NULL pointer dereference.\n\nAdd NULL check after devm_kasprintf() to prevent this issue and ensuring\nno resources are left allocated." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/105e8115944a9f93e9412abe7bb07ed96725adf9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/13de464f445d42738fe18c9a28bab056ba3a290a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1d92608a29251278015f57f3572bc950db7519f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/23f564326deaafacfd7adf6104755b15216d8320", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6fb19cdcf040e1dec052a9032acb66cc2ad1d43f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7943ed1f05f5cb7372dca2aa227f848747a98791", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38636.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38636.json new file mode 100644 index 00000000000..e5f4cc6eafc --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38636.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38636", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.587", + "lastModified": "2025-08-22T16:15:37.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrv: Use strings in da monitors tracepoints\n\nUsing DA monitors tracepoints with KASAN enabled triggers the following\nwarning:\n\n BUG: KASAN: global-out-of-bounds in do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n Read of size 32 at addr ffffffffaada8980 by task ...\n Call Trace:\n \n [...]\n do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n ? __pfx_do_trace_event_raw_event_event_da_monitor+0x10/0x10\n ? trace_event_sncid+0x83/0x200\n trace_event_sncid+0x163/0x200\n [...]\n The buggy address belongs to the variable:\n automaton_snep+0x4e0/0x5e0\n\nThis is caused by the tracepoints reading 32 bytes __array instead of\n__string from the automata definition. Such strings are literals and\nreading 32 bytes ends up in out of bound memory accesses (e.g. the next\nautomaton's data in this case).\nThe error is harmless as, while printing the string, we stop at the null\nterminator, but it should still be fixed.\n\nUse the __string facilities while defining the tracepoints to avoid\nreading out of bound memory." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0ebc70d973ce7a81826b5c4f55f743e07f5864d9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7f904ff6e58d398c4336f3c19c42b338324451f7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38638.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38638.json new file mode 100644 index 00000000000..584f72c2554 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38638.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38638", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.713", + "lastModified": "2025-08-22T16:15:37.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: add a retry logic in net6_rt_notify()\n\ninet6_rt_notify() can be called under RCU protection only.\nThis means the route could be changed concurrently\nand rt6_fill_node() could return -EMSGSIZE.\n\nRe-size the skb when this happens and retry, removing\none WARN_ON() that syzbot was able to trigger:\n\nWARNING: CPU: 3 PID: 6291 at net/ipv6/route.c:6342 inet6_rt_notify+0x475/0x4b0 net/ipv6/route.c:6342\nModules linked in:\nCPU: 3 UID: 0 PID: 6291 Comm: syz.0.77 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\n RIP: 0010:inet6_rt_notify+0x475/0x4b0 net/ipv6/route.c:6342\nCode: fc ff ff e8 6d 52 ea f7 e9 47 fc ff ff 48 8b 7c 24 08 4c 89 04 24 e8 5a 52 ea f7 4c 8b 04 24 e9 94 fd ff ff e8 9c fe 84 f7 90 <0f> 0b 90 e9 bd fd ff ff e8 6e 52 ea f7 e9 bb fb ff ff 48 89 df e8\nRSP: 0018:ffffc900035cf1d8 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffffc900035cf540 RCX: ffffffff8a36e790\nRDX: ffff88802f7e8000 RSI: ffffffff8a36e9d4 RDI: 0000000000000005\nRBP: ffff88803c230f00 R08: 0000000000000005 R09: 00000000ffffffa6\nR10: 00000000ffffffa6 R11: 0000000000000001 R12: 00000000ffffffa6\nR13: 0000000000000900 R14: ffff888032ea4100 R15: 0000000000000000\nFS: 00007fac7b89a6c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fac7b899f98 CR3: 0000000034b3f000 CR4: 0000000000352ef0\nCall Trace:\n \n ip6_route_mpath_notify+0xde/0x280 net/ipv6/route.c:5356\n ip6_route_multipath_add+0x1181/0x1bd0 net/ipv6/route.c:5536\n inet6_rtm_newroute+0xe4/0x1a0 net/ipv6/route.c:5647\n rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6944\n netlink_rcv_skb+0x155/0x420 net/netlink/af_netlink.c:2552\n netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]\n netlink_unicast+0x58d/0x850 net/netlink/af_netlink.c:1346\n netlink_sendmsg+0x8d1/0xdd0 net/netlink/af_netlink.c:1896\n sock_sendmsg_nosec net/socket.c:712 [inline]\n __sock_sendmsg net/socket.c:727 [inline]\n ____sys_sendmsg+0xa95/0xc70 net/socket.c:2566\n ___sys_sendmsg+0x134/0x1d0 net/socket.c:2620" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0bdca3439a22c70eb8f404acd61bf7aca5d731b0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ea2f921db7a483a526058c5b5b8162edd88dabe5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38639.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38639.json new file mode 100644 index 00000000000..29960cce4f2 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38639.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38639", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:37.850", + "lastModified": "2025-08-22T16:15:37.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_nfacct: don't assume acct name is null-terminated\n\nBUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721\nRead of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851\n[..]\n string+0x231/0x2b0 lib/vsprintf.c:721\n vsnprintf+0x739/0xf00 lib/vsprintf.c:2874\n [..]\n nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41\n xt_check_match+0x3d1/0xab0 net/netfilter/x_tables.c:523\n\nnfnl_acct_find_get() handles non-null input, but the error\nprintk relied on its presence." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/58004aa21e79addaf41667bfe65e93ec51653f18", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/58007fc7b94fb2702000045ff401eb7f5bde7828", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7c1ae471da69c09242834e956218ea6a42dd405a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf58e667af7d96c8eb9411f926a0a0955f41ce21", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e18939176e657a3a20bfbed357b8c55a9f82aba3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38640.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38640.json new file mode 100644 index 00000000000..b98b13a5fd9 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38640.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38640", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.007", + "lastModified": "2025-08-22T16:15:38.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Disable migration in nf_hook_run_bpf().\n\nsyzbot reported that the netfilter bpf prog can be called without\nmigration disabled in xmit path.\n\nThen the assertion in __bpf_prog_run() fails, triggering the splat\nbelow. [0]\n\nLet's use bpf_prog_run_pin_on_cpu() in nf_hook_run_bpf().\n\n[0]:\nBUG: assuming non migratable context at ./include/linux/filter.h:703\nin_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5829, name: sshd-session\n3 locks held by sshd-session/5829:\n #0: ffff88807b4e4218 (sk_lock-AF_INET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1667 [inline]\n #0: ffff88807b4e4218 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 net/ipv4/tcp.c:1395\n #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]\n #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]\n #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x69/0x26c0 net/ipv4/ip_output.c:470\n #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]\n #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]\n #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xb2/0x680 include/linux/netfilter.h:241\nCPU: 0 UID: 0 PID: 5829 Comm: sshd-session Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120\n __cant_migrate kernel/sched/core.c:8860 [inline]\n __cant_migrate+0x1c7/0x250 kernel/sched/core.c:8834\n __bpf_prog_run include/linux/filter.h:703 [inline]\n bpf_prog_run include/linux/filter.h:725 [inline]\n nf_hook_run_bpf+0x83/0x1e0 net/netfilter/nf_bpf_link.c:20\n nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline]\n nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623\n nf_hook+0x370/0x680 include/linux/netfilter.h:272\n NF_HOOK_COND include/linux/netfilter.h:305 [inline]\n ip_output+0x1bc/0x2a0 net/ipv4/ip_output.c:433\n dst_output include/net/dst.h:459 [inline]\n ip_local_out net/ipv4/ip_output.c:129 [inline]\n __ip_queue_xmit+0x1d7d/0x26c0 net/ipv4/ip_output.c:527\n __tcp_transmit_skb+0x2686/0x3e90 net/ipv4/tcp_output.c:1479\n tcp_transmit_skb net/ipv4/tcp_output.c:1497 [inline]\n tcp_write_xmit+0x1274/0x84e0 net/ipv4/tcp_output.c:2838\n __tcp_push_pending_frames+0xaf/0x390 net/ipv4/tcp_output.c:3021\n tcp_push+0x225/0x700 net/ipv4/tcp.c:759\n tcp_sendmsg_locked+0x1870/0x42b0 net/ipv4/tcp.c:1359\n tcp_sendmsg+0x2e/0x50 net/ipv4/tcp.c:1396\n inet_sendmsg+0xb9/0x140 net/ipv4/af_inet.c:851\n sock_sendmsg_nosec net/socket.c:712 [inline]\n __sock_sendmsg net/socket.c:727 [inline]\n sock_write_iter+0x4aa/0x5b0 net/socket.c:1131\n new_sync_write fs/read_write.c:593 [inline]\n vfs_write+0x6c7/0x1150 fs/read_write.c:686\n ksys_write+0x1f8/0x250 fs/read_write.c:738\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fe7d365d407\nCode: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff\nRSP:" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0a356da16fb933abbeeb7aea038c351f3342cd3f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/17ce3e5949bc37557305ad46316f41c7875d6366", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/62f6175d145e00fc999fd2fcbffad3f59253c66a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e0199c28167a8a4adec036005a8df268b2b68529", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ee2502485702e4398cd74dbfb288bfa111d25e62", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38641.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38641.json new file mode 100644 index 00000000000..89d46f9b531 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38641.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38641", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.150", + "lastModified": "2025-08-22T16:15:38.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: Fix potential NULL dereference on kmalloc failure\n\nAvoid potential NULL pointer dereference by checking the return value of\nkmalloc and handling allocation failure properly." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5029d80bfc30b60ff57c70ccb04e027acb404f6a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b505902c66a282dcb01bcdc015aa1fdfaaa075db", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38642.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38642.json new file mode 100644 index 00000000000..d88ce37a26a --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38642.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38642", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.283", + "lastModified": "2025-08-22T16:15:38.283", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix WARN_ON for monitor mode on some devices\n\nOn devices without WANT_MONITOR_VIF (and probably without\nchannel context support) we get a WARN_ON for changing the\nper-link setting of a monitor interface.\n\nSince we already skip AP_VLAN interfaces and MONITOR with\nWANT_MONITOR_VIF and/or NO_VIRTUAL_MONITOR should update\nthe settings, catch this in the link change code instead\nof the warning." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1e10ded6b0f9b0eeefaacbb6c6c6afff3f702812", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c57e5b9819dfd16d709bcd6cb633301ed0829a66", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ff15498ebaa49c5429a74e70a1951dede60cd14c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38643.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38643.json new file mode 100644 index 00000000000..7ba6250c7c8 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38643.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38643", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.417", + "lastModified": "2025-08-22T16:15:38.417", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()\n\nCallers of wdev_chandef() must hold the wiphy mutex.\n\nBut the worker cfg80211_propagate_cac_done_wk() never takes the lock.\nWhich triggers the warning below with the mesh_peer_connected_dfs\ntest from hostapd and not (yet) released mac80211 code changes:\n\nWARNING: CPU: 0 PID: 495 at net/wireless/chan.c:1552 wdev_chandef+0x60/0x165\nModules linked in:\nCPU: 0 UID: 0 PID: 495 Comm: kworker/u4:2 Not tainted 6.14.0-rc5-wt-g03960e6f9d47 #33 13c287eeabfe1efea01c0bcc863723ab082e17cf\nWorkqueue: cfg80211 cfg80211_propagate_cac_done_wk\nStack:\n 00000000 00000001 ffffff00 6093267c\n 00000000 6002ec30 6d577c50 60037608\n 00000000 67e8d108 6063717b 00000000\nCall Trace:\n [<6002ec30>] ? _printk+0x0/0x98\n [<6003c2b3>] show_stack+0x10e/0x11a\n [<6002ec30>] ? _printk+0x0/0x98\n [<60037608>] dump_stack_lvl+0x71/0xb8\n [<6063717b>] ? wdev_chandef+0x60/0x165\n [<6003766d>] dump_stack+0x1e/0x20\n [<6005d1b7>] __warn+0x101/0x20f\n [<6005d3a8>] warn_slowpath_fmt+0xe3/0x15d\n [<600b0c5c>] ? mark_lock.part.0+0x0/0x4ec\n [<60751191>] ? __this_cpu_preempt_check+0x0/0x16\n [<600b11a2>] ? mark_held_locks+0x5a/0x6e\n [<6005d2c5>] ? warn_slowpath_fmt+0x0/0x15d\n [<60052e53>] ? unblock_signals+0x3a/0xe7\n [<60052f2d>] ? um_set_signals+0x2d/0x43\n [<60751191>] ? __this_cpu_preempt_check+0x0/0x16\n [<607508b2>] ? lock_is_held_type+0x207/0x21f\n [<6063717b>] wdev_chandef+0x60/0x165\n [<605f89b4>] regulatory_propagate_dfs_state+0x247/0x43f\n [<60052f00>] ? um_set_signals+0x0/0x43\n [<605e6bfd>] cfg80211_propagate_cac_done_wk+0x3a/0x4a\n [<6007e460>] process_scheduled_works+0x3bc/0x60e\n [<6007d0ec>] ? move_linked_works+0x4d/0x81\n [<6007d120>] ? assign_work+0x0/0xaa\n [<6007f81f>] worker_thread+0x220/0x2dc\n [<600786ef>] ? set_pf_worker+0x0/0x57\n [<60087c96>] ? to_kthread+0x0/0x43\n [<6008ab3c>] kthread+0x2d3/0x2e2\n [<6007f5ff>] ? worker_thread+0x0/0x2dc\n [<6006c05b>] ? calculate_sigpending+0x0/0x56\n [<6003b37d>] new_thread_handler+0x4a/0x64\nirq event stamp: 614611\nhardirqs last enabled at (614621): [<00000000600bc96b>] __up_console_sem+0x82/0xaf\nhardirqs last disabled at (614630): [<00000000600bc92c>] __up_console_sem+0x43/0xaf\nsoftirqs last enabled at (614268): [<00000000606c55c6>] __ieee80211_wake_queue+0x933/0x985\nsoftirqs last disabled at (614266): [<00000000606c52d6>] __ieee80211_wake_queue+0x643/0x985" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2c5dee15239f3f3e31aa5c8808f18996c039e2c1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7022df2248c08c6f75a01714163ac902333bf3db", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dbce810607726408f889d3358f4780fd1436861e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38644.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38644.json new file mode 100644 index 00000000000..a87d3ffe39f --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38644.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38644", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.567", + "lastModified": "2025-08-22T16:15:38.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: reject TDLS operations when station is not associated\n\nsyzbot triggered a WARN in ieee80211_tdls_oper() by sending\nNL80211_TDLS_ENABLE_LINK immediately after NL80211_CMD_CONNECT,\nbefore association completed and without prior TDLS setup.\n\nThis left internal state like sdata->u.mgd.tdls_peer uninitialized,\nleading to a WARN_ON() in code paths that assumed it was valid.\n\nReject the operation early if not in station mode or not associated." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0c84204cf0bbe89e454a5caccc6a908bc7db1542", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/16ecdab5446f15a61ec88eb0d23d25d009821db0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/31af06b574394530f68a4310c45ecbe2f68853c4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/378ae9ccaea3f445838a087962a067b5cb2e8577", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4df663d4c1ca386dcab2f743dfc9f0cc07aef73c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/af72badd5ee423eb16f6ad7fe0a62f1b4252d848", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38645.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38645.json new file mode 100644 index 00000000000..4a0fa85ee09 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38645.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38645", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.727", + "lastModified": "2025-08-22T16:15:38.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Check device memory pointer before usage\n\nAdd a NULL check before accessing device memory to prevent a crash if\ndev->dm allocation in mlx5_init_once() fails." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3046b011d368162b1b9ca9453eee0fea930e0a93", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4249f1307932f1b6bbb8b7eba60d82f0b7e44430", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/62d7cf455c887941ed6f105cd430ba04ee0b6c9f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/70f238c902b8c0461ae6fbb8d1a0bbddc4350eea", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/da899a1fd7c40e2e4302af1db7d0b8540fb22283", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/eebb225fe6c9103293807b8edabcbad59f9589bc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38646.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38646.json new file mode 100644 index 00000000000..5d462d7a185 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38646.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38646", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:38.870", + "lastModified": "2025-08-22T16:15:38.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band\n\nWith a quite rare chance, RX report might be problematic to make SW think\na packet is received on 6 GHz band even if the chip does not support 6 GHz\nband actually. Since SW won't initialize stuffs for unsupported bands, NULL\ndereference will happen then in the sequence, rtw89_vif_rx_stats_iter() ->\nrtw89_core_cancel_6ghz_probe_tx(). So, add a check to avoid it.\n\nThe following is a crash log for this case.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000032\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 1 PID: 1907 Comm: irq/131-rtw89_p Tainted: G U 6.6.56-05896-g89f5fb0eb30b #1 (HASH:1400 4)\n Hardware name: Google Telith/Telith, BIOS Google_Telith.15217.747.0 11/12/2024\n RIP: 0010:rtw89_vif_rx_stats_iter+0xd2/0x310 [rtw89_core]\n Code: 4c 89 7d c8 48 89 55 c0 49 8d 44 24 02 48 89 45 b8 45 31 ff eb 11\n 41 c6 45 3a 01 41 b7 01 4d 8b 6d 00 4d 39 f5 74 42 8b 43 10 <41> 33 45\n 32 0f b7 4b 14 66 41 33 4d 36 0f b7 c9 09 c1 74 d8 4d 85\n RSP: 0018:ffff9f3080138ca0 EFLAGS: 00010246\n RAX: 00000000b8bf5770 RBX: ffff91b5e8c639c0 RCX: 0000000000000011\n RDX: ffff91b582de1be8 RSI: 0000000000000000 RDI: ffff91b5e8c639e6\n RBP: ffff9f3080138d00 R08: 0000000000000000 R09: 0000000000000000\n R10: ffff91b59de70000 R11: ffffffffc069be50 R12: ffff91b5e8c639e4\n R13: 0000000000000000 R14: ffff91b5828020b8 R15: 0000000000000000\n FS: 0000000000000000(0000) GS:ffff91b8efa40000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000032 CR3: 00000002bf838000 CR4: 0000000000750ee0\n PKRU: 55555554\n Call Trace:\n \n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x4f/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? __pfx_rtw89_vif_rx_stats_iter+0x10/0x10 [rtw89_core (HASH:1400 5)]\n ? rtw89_vif_rx_stats_iter+0xd2/0x310 [rtw89_core (HASH:1400 5)]\n __iterate_interfaces+0x59/0x110 [mac80211 (HASH:1400 6)]\n ? __pfx_rtw89_vif_rx_stats_iter+0x10/0x10 [rtw89_core (HASH:1400 5)]\n ? __pfx_rtw89_vif_rx_stats_iter+0x10/0x10 [rtw89_core (HASH:1400 5)]\n ieee80211_iterate_active_interfaces_atomic+0x36/0x50 [mac80211 (HASH:1400 6)]\n rtw89_core_rx_to_mac80211+0xfd/0x1b0 [rtw89_core (HASH:1400 5)]\n rtw89_core_rx+0x43a/0x980 [rtw89_core (HASH:1400 5)]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/4b525630729082f026e7030eafccf89e3add7eae", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/77a7a48f87d673a68664bebf044214821decbfda", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7e04f01bb94fe61c73cc59f0495c3b6c16a83231", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/892b29eab44b1803d2cad8e50f1bc2144ef478cb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f3527ac15a00916e68ecb495b74dbe6a6c62a06f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38647.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38647.json new file mode 100644 index 00000000000..e7328007088 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38647.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38647", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:39.337", + "lastModified": "2025-08-22T16:15:39.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi\n\nThe following assertion is triggered on the rtw89 driver startup. It\nlooks meaningless to hold wiphy lock on the early init stage so drop the\nassertion.\n\n WARNING: CPU: 7 PID: 629 at drivers/net/wireless/realtek/rtw89/sar.c:502 rtw89_set_sar_from_acpi+0x365/0x4d0 [rtw89_core]\n CPU: 7 UID: 0 PID: 629 Comm: (udev-worker) Not tainted 6.15.0+ #29 PREEMPT(lazy)\n Hardware name: LENOVO 21D0/LNVNB161216, BIOS J6CN50WW 09/27/2024\n RIP: 0010:rtw89_set_sar_from_acpi+0x365/0x4d0 [rtw89_core]\n Call Trace:\n \n rtw89_sar_init+0x68/0x2c0 [rtw89_core]\n rtw89_core_init+0x188e/0x1e50 [rtw89_core]\n rtw89_pci_probe+0x530/0xb50 [rtw89_pci]\n local_pci_probe+0xd9/0x190\n pci_call_probe+0x183/0x540\n pci_device_probe+0x171/0x2c0\n really_probe+0x1e1/0x890\n __driver_probe_device+0x18c/0x390\n driver_probe_device+0x4a/0x120\n __driver_attach+0x1a0/0x530\n bus_for_each_dev+0x10b/0x190\n bus_add_driver+0x2eb/0x540\n driver_register+0x1a3/0x3a0\n do_one_initcall+0xd5/0x450\n do_init_module+0x2cc/0x8f0\n init_module_from_file+0xe1/0x150\n idempotent_init_module+0x226/0x760\n __x64_sys_finit_module+0xcd/0x150\n do_syscall_64+0x94/0x380\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFound by Linux Verification Center (linuxtesting.org)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/6fe21445f7e801de5527d420f8e25e97b0cdd7e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f7ac6df92eee030151476078069dc3eb0002dfb0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38648.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38648.json new file mode 100644 index 00000000000..29e43e81bf8 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38648.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38648", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:39.480", + "lastModified": "2025-08-22T16:15:39.480", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: stm32: Check for cfg availability in stm32_spi_probe\n\nThe stm32_spi_probe function now includes a check to ensure that the\npointer returned by of_device_get_match_data is not NULL before\naccessing its members. This resolves a warning where a potential NULL\npointer dereference could occur when accessing cfg->has_device_mode.\n\nBefore accessing the 'has_device_mode' member, we verify that 'cfg' is\nnot NULL. If 'cfg' is NULL, an error message is logged.\n\nThis change ensures that the driver does not attempt to access\nconfiguration data if it is not available, thus preventing a potential\nsystem crash due to a NULL pointer dereference." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/21f1c800f6620e43f31dfd76709dbac8ebaa5a16", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3a571a8d52272cc26858ab1bc83d0f66e5dee938", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6031a54f4eac921efe6122a561d44df89b37f2d4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a7645815edf4478f3258bb0db95a08986a77f5c0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cc063d23ad80ef7d201c41b2716b1bae7c662cf9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38649.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38649.json new file mode 100644 index 00000000000..66cfc8b0ac3 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38649.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38649", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:39.617", + "lastModified": "2025-08-22T16:15:39.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight\n\nAn infinite loop has been created by the Coresight devices. When only a\nsource device is enabled, the coresight_find_activated_sysfs_sink function\nis recursively invoked in an attempt to locate an active sink device,\nultimately leading to a stack overflow and system crash. Therefore, disable\nthe replicator1 to break the infinite loop and prevent a potential stack\noverflow.\n\nreplicator1_out -> funnel_swao_in6 -> tmc_etf_swao_in -> tmc_etf_swao_out\n | |\nreplicator1_in replicator_swao_in\n | |\nreplicator0_out1 replicator_swao_out0\n | |\nreplicator0_in funnel_in1_in3\n | |\ntmc_etf_out <- tmc_etf_in <- funnel_merg_out <- funnel_merg_in1 <- funnel_in1_out\n\n[call trace]\n dump_backtrace+0x9c/0x128\n show_stack+0x20/0x38\n dump_stack_lvl+0x48/0x60\n dump_stack+0x18/0x28\n panic+0x340/0x3b0\n nmi_panic+0x94/0xa0\n panic_bad_stack+0x114/0x138\n handle_bad_stack+0x34/0xb8\n __bad_stack+0x78/0x80\n coresight_find_activated_sysfs_sink+0x28/0xa0 [coresight]\n coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]\n coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]\n coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]\n coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]\n ...\n coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]\n coresight_enable_sysfs+0x80/0x2a0 [coresight]\n\nside effect after the change:\nOnly trace data originating from AOSS can reach the ETF_SWAO and EUD sinks." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/a9aaadcb0a6ce0c19616c46525112bc947c6f2b1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bd4f35786d5f0798cc1f8c187a81a7c998e6c58f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fbe5be7893b8c7f58c999a26839cd30bc07654c6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38650.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38650.json new file mode 100644 index 00000000000..1600a24b234 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38650.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38650", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:39.760", + "lastModified": "2025-08-22T16:15:39.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: remove mutex_lock check in hfsplus_free_extents\n\nSyzbot reported an issue in hfsplus filesystem:\n\n------------[ cut here ]------------\nWARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346\n\thfsplus_free_extents+0x700/0xad0\nCall Trace:\n\nhfsplus_file_truncate+0x768/0xbb0 fs/hfsplus/extents.c:606\nhfsplus_write_begin+0xc2/0xd0 fs/hfsplus/inode.c:56\ncont_expand_zero fs/buffer.c:2383 [inline]\ncont_write_begin+0x2cf/0x860 fs/buffer.c:2446\nhfsplus_write_begin+0x86/0xd0 fs/hfsplus/inode.c:52\ngeneric_cont_expand_simple+0x151/0x250 fs/buffer.c:2347\nhfsplus_setattr+0x168/0x280 fs/hfsplus/inode.c:263\nnotify_change+0xe38/0x10f0 fs/attr.c:420\ndo_truncate+0x1fb/0x2e0 fs/open.c:65\ndo_sys_ftruncate+0x2eb/0x380 fs/open.c:193\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nTo avoid deadlock, Commit 31651c607151 (\"hfsplus: avoid deadlock\non file truncation\") unlock extree before hfsplus_free_extents(),\nand add check wheather extree is locked in hfsplus_free_extents().\n\nHowever, when operations such as hfsplus_file_release,\nhfsplus_setattr, hfsplus_unlink, and hfsplus_get_block are executed\nconcurrently in different files, it is very likely to trigger the\nWARN_ON, which will lead syzbot and xfstest to consider it as an\nabnormality.\n\nThe comment above this warning also describes one of the easy\ntriggering situations, which can easily trigger and cause\nxfstest&syzbot to report errors.\n\n[task A]\t\t\t[task B]\n->hfsplus_file_release\n ->hfsplus_file_truncate\n ->hfs_find_init\n ->mutex_lock\n ->mutex_unlock\n\t\t\t\t->hfsplus_write_begin\n\t\t\t\t ->hfsplus_get_block\n\t\t\t\t ->hfsplus_file_extend\n\t\t\t\t ->hfsplus_ext_read_extent\n\t\t\t\t ->hfs_find_init\n\t\t\t\t\t ->mutex_lock\n ->hfsplus_free_extents\n WARN_ON(mutex_is_locked) !!!\n\nSeveral threads could try to lock the shared extents tree.\nAnd warning can be triggered in one thread when another thread\nhas locked the tree. This is the wrong behavior of the code and\nwe need to remove the warning." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/084933961ecda7561dedfb78c4676ccb90c91ada", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/314310166ba1fdff7660dfd9d18ea42d7058f7ae", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5055b7db94110f228961dea6b74eed0a93a50b01", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9764b8bb9f5f94df105cd2ac43829dd0d2c82b9f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a19ce9230b22a0866313932e7964cf05557a6008", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fcb96956c921f1aae7e7b477f2435c56f77a31b4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38651.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38651.json new file mode 100644 index 00000000000..288d85c6766 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38651.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38651", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:39.907", + "lastModified": "2025-08-22T16:15:39.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlandlock: Fix warning from KUnit tests\n\nget_id_range() expects a positive value as first argument but\nget_random_u8() can return 0. Fix this by clamping it.\n\nValidated by running the test in a for loop for 1000 times.\n\nNote that MAX() is wrong as it is only supposed to be used for\nconstants, but max() is good here.\n\n [..] ok 9 test_range2_rand1\n [..] ok 10 test_range2_rand2\n [..] ok 11 test_range2_rand15\n [..] ------------[ cut here ]------------\n [..] WARNING: CPU: 6 PID: 104 at security/landlock/id.c:99 test_range2_rand16 (security/landlock/id.c:99 (discriminator 1) security/landlock/id.c:234 (discriminator 1))\n [..] Modules linked in:\n [..] CPU: 6 UID: 0 PID: 104 Comm: kunit_try_catch Tainted: G N 6.16.0-rc1-dev-00001-g314a2f98b65f #1 PREEMPT(undef)\n [..] Tainted: [N]=TEST\n [..] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n [..] RIP: 0010:test_range2_rand16 (security/landlock/id.c:99 (discriminator 1) security/landlock/id.c:234 (discriminator 1))\n [..] Code: 49 c7 c0 10 70 30 82 4c 89 ff 48 c7 c6 a0 63 1e 83 49 c7 45 a0 e0 63 1e 83 e8 3f 95 17 00 e9 1f ff ff ff 0f 0b e9 df fd ff ff <0f> 0b ba 01 00 00 00 e9 68 fe ff ff 49 89 45 a8 49 8d 4d a0 45 31\n\n [..] RSP: 0000:ffff888104eb7c78 EFLAGS: 00010246\n [..] RAX: 0000000000000000 RBX: 000000000870822c RCX: 0000000000000000\n ^^^^^^^^^^^^^^^^\n [..]\n [..] Call Trace:\n [..]\n [..] ---[ end trace 0000000000000000 ]---\n [..] ok 12 test_range2_rand16\n [..] # landlock_id: pass:12 fail:0 skip:0 total:12\n [..] # Totals: pass:12 fail:0 skip:0 total:12\n [..] ok 1 landlock_id\n\n[mic: Minor cosmetic improvements]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/127183361b69dbb7ac3246ad4726f93400481249", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7d9ec2cfe12dd0d7c1a58213b9bef1bec66a3189", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e0a69cf2c03e61bd8069becb97f66c173d0d1fa1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38652.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38652.json new file mode 100644 index 00000000000..9880a81c7b8 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38652.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38652", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.057", + "lastModified": "2025-08-22T16:15:40.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid out-of-boundary access in devs.path\n\n- touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123\n- truncate -s $((1024*1024*1024)) \\\n /mnt/f2fs/012345678901234567890123456789012345678901234567890123\n- touch /mnt/f2fs/file\n- truncate -s $((1024*1024*1024)) /mnt/f2fs/file\n- mkfs.f2fs /mnt/f2fs/012345678901234567890123456789012345678901234567890123 \\\n -c /mnt/f2fs/file\n- mount /mnt/f2fs/012345678901234567890123456789012345678901234567890123 \\\n /mnt/f2fs/loop\n\n[16937.192225] F2FS-fs (loop0): Mount Device [ 0]: /mnt/f2fs/012345678901234567890123456789012345678901234567890123\\xff\\x01, 511, 0 - 3ffff\n[16937.192268] F2FS-fs (loop0): Failed to find devices\n\nIf device path length equals to MAX_PATH_LEN, sbi->devs.path[] may\nnot end up w/ null character due to path array is fully filled, So\naccidently, fields locate after path[] may be treated as part of\ndevice path, result in parsing wrong device path.\n\nstruct f2fs_dev_info {\n...\n\tchar path[MAX_PATH_LEN];\n...\n};\n\nLet's add one byte space for sbi->devs.path[] to store null\ncharacter of device path string." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1b1efa5f0e878745e94a98022e8edc675a87d78e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/345fc8d1838f3f8be7c8ed08d86a13dedef67136", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3466721f06edff834f99d9f49f23eabc6b2cb78e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5661998536af52848cc4d52a377e90368196edea", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/70849d33130a2cf1d6010069ed200669c8651fbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/755427093e4294ac111c3f9e40d53f681a0fbdaa", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38653.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38653.json new file mode 100644 index 00000000000..c639a124c72 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38653.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-38653", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.200", + "lastModified": "2025-08-22T16:15:40.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nproc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al\n\nCheck pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. \nIt's a gap in proc_reg_open() after commit 654b33ada4ab(\"proc: fix UAF in\nproc_get_inode()\"). Followed by AI Viro's suggestion, fix it in same\nmanner." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1fccbfbae1dd36198dc47feac696563244ad81d3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/33c778ea0bd0fa62ff590497e72562ff90f82b13", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c35b0feb80b48720dfbbf4e33759c7be3faaebb6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d136502e04d8853a9aecb335d07bbefd7a1519a8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fc1072d934f687e1221d685cf1a49a5068318f34", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ff7ec8dc1b646296f8d94c39339e8d3833d16c05", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38654.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38654.json new file mode 100644 index 00000000000..43d79a3134d --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38654.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38654", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.357", + "lastModified": "2025-08-22T16:15:40.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: canaan: k230: Fix order of DT parse and pinctrl register\n\nMove DT parse before pinctrl register. This ensures that device tree\nparsing is done before calling devm_pinctrl_register() to prevent using\nuninitialized pin resources." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/02c1deb1bff2b6d242e29a51e56107495979a2b8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/0ec03251d01494ef207089b5bd626becfd05fd86", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d94a32ac688f953dc9a9f12b5b4139ecad841bbb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38655.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38655.json new file mode 100644 index 00000000000..7bd770e25a3 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38655.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38655", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.493", + "lastModified": "2025-08-22T16:15:40.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: canaan: k230: add NULL check in DT parse\n\nAdd a NULL check for the return value of of_get_property() when\nretrieving the \"pinmux\" property in the group parser. This avoids\na potential NULL pointer dereference if the property is missing\nfrom the device tree node.\n\nAlso fix a typo (\"sintenel\") in the device ID match table comment,\ncorrecting it to \"sentinel\"." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5d324b262c0ff256b8d603596574d66267b6394f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/65bd0be486390fc12a84eafaad78758c5e5a55e6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b5ae84aeff60b8819e8568ff0c57590caed9e6d3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38656.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38656.json new file mode 100644 index 00000000000..9607069762a --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38656.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38656", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.633", + "lastModified": "2025-08-22T16:15:40.633", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()\n\nPreserve the error code if iwl_setup_deferred_work() fails. The current\ncode returns ERR_PTR(0) (which is NULL) on this path. I believe the\nmissing error code potentially leads to a use after free involving\ndebugfs." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38657.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38657.json new file mode 100644 index 00000000000..3b5e830f171 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38657.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38657", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.777", + "lastModified": "2025-08-22T16:15:40.777", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()\n\nThe \"link_id\" value comes from the user via debugfs. If it's larger\nthan BITS_PER_LONG then that would result in shift wrapping and\npotentially an out of bounds access later. In fact, we can limit it\nto IEEE80211_MLD_MAX_NUM_LINKS (15).\n\nFortunately, only root can write to debugfs files so the security\nimpact is minimal." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/417cfa9cc44fbe6bceab786f9a4ee5a210f1288e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/53cf488927a0f79968f9c03c4d1e00d2a79731c3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38658.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38658.json new file mode 100644 index 00000000000..e721dbbe0aa --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38658.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38658", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:40.907", + "lastModified": "2025-08-22T16:15:40.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails\n\nHave nvmet_req_init() and req->execute() complete failed commands.\n\nDescription of the problem:\nnvmet_req_init() calls __nvmet_req_complete() internally upon failure,\ne.g., unsupported opcode, which calls the \"queue_response\" callback,\nthis results in nvmet_pci_epf_queue_response() being called, which will\ncall nvmet_pci_epf_complete_iod() if data_len is 0 or if dma_dir is\ndifferent from DMA_TO_DEVICE. This results in a double completion as\nnvmet_pci_epf_exec_iod_work() also calls nvmet_pci_epf_complete_iod()\nwhen nvmet_req_init() fails.\n\nSteps to reproduce:\nOn the host send a command with an unsupported opcode with nvme-cli,\nFor example the admin command \"security receive\"\n$ sudo nvme security-recv /dev/nvme0n1 -n1 -x4096\n\nThis triggers a double completion as nvmet_req_init() fails and\nnvmet_pci_epf_queue_response() is called, here iod->dma_dir is still\nin the default state of \"DMA_NONE\" as set by default in\nnvmet_pci_epf_alloc_iod(), so nvmet_pci_epf_complete_iod() is called.\nBecause nvmet_req_init() failed nvmet_pci_epf_complete_iod() is also\ncalled in nvmet_pci_epf_exec_iod_work() leading to a double completion.\nThis not only sends two completions to the host but also corrupts the\nstate of the PCI NVMe target leading to kernel oops.\n\nThis patch lets nvmet_req_init() and req->execute() complete all failed\ncommands, and removes the double completion case in\nnvmet_pci_epf_exec_iod_work() therefore fixing the edge cases where\ndouble completions occurred." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/746d0ac5a07d5da952ef258dd4d75f0b26c96476", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a535c0b10060bc8c174a7964b0f98064ee0c4774", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38659.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38659.json new file mode 100644 index 00000000000..bd094dda629 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38659.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38659", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.053", + "lastModified": "2025-08-22T16:15:41.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: No more self recovery\n\nWhen a node withdraws and it turns out that it is the only node that has\nthe filesystem mounted, gfs2 currently tries to replay the local journal\nto bring the filesystem back into a consistent state. Not only is that\na very bad idea, it has also never worked because gfs2_recover_func()\nwill refuse to do anything during a withdraw.\n\nHowever, before even getting to this point, gfs2_recover_func()\ndereferences sdp->sd_jdesc->jd_inode. This was a use-after-free before\ncommit 04133b607a78 (\"gfs2: Prevent double iput for journal on error\")\nand is a NULL pointer dereference since then.\n\nSimply get rid of self recovery to fix that." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1a91ba12abef628b43cada87478328274d988e88", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6784367b2f3cd7b89103de35764f37f152590dbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/97c94c7dbddc34d353c83b541b3decabf98d04af", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/deb016c1669002e48c431d6fd32ea1c20ef41756", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f5426ffbec971a8f7346a57392d3a901bdee5a9b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38660.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38660.json new file mode 100644 index 00000000000..48a2e60d701 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38660.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-38660", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.193", + "lastModified": "2025-08-22T16:15:41.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\n[ceph] parse_longname(): strrchr() expects NUL-terminated string\n\n... and parse_longname() is not guaranteed that. That's the reason\nwhy it uses kmemdup_nul() to build the argument for kstrtou64();\nthe problem is, kstrtou64() is not the only thing that need it.\n\nJust get a NUL-terminated copy of the entire thing and be done\nwith that..." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/101841c38346f4ca41dc1802c867da990ffb32eb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3145b2b11492d61c512bbc59660bb823bc757f48", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/493479af8af3ab907f49e99323777d498a4fbd2b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bb80f7618832d26f7e395f52f82b1dac76223e5f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38661.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38661.json new file mode 100644 index 00000000000..ea0d1f2fd3e --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38661.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38661", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.330", + "lastModified": "2025-08-22T16:15:41.330", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array\n\nAdd missing empty member to `awcc_dmi_table`." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/660bcd9f1f94e623e1316b869b2172b36eb516d7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8346c6af27f1c1410eb314f4be5875fdf1579a10", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38662.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38662.json new file mode 100644 index 00000000000..3c984fbdcef --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38662.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38662", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.450", + "lastModified": "2025-08-22T16:15:41.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv\n\nGiven mt8365_dai_set_priv allocate priv_size space to copy priv_data which\nmeans we should pass mt8365_i2s_priv[i] or \"struct mtk_afe_i2s_priv\"\ninstead of afe_priv which has the size of \"struct mt8365_afe_private\".\n\nOtherwise the KASAN complains about.\n\n[ 59.389765] BUG: KASAN: global-out-of-bounds in mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]\n...\n[ 59.394789] Call trace:\n[ 59.395167] dump_backtrace+0xa0/0x128\n[ 59.395733] show_stack+0x20/0x38\n[ 59.396238] dump_stack_lvl+0xe8/0x148\n[ 59.396806] print_report+0x37c/0x5e0\n[ 59.397358] kasan_report+0xac/0xf8\n[ 59.397885] kasan_check_range+0xe8/0x190\n[ 59.398485] asan_memcpy+0x3c/0x98\n[ 59.399022] mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]\n[ 59.399928] mt8365_dai_i2s_register+0x1e8/0x2b0 [snd_soc_mt8365_pcm]\n[ 59.400893] mt8365_afe_pcm_dev_probe+0x4d0/0xdf0 [snd_soc_mt8365_pcm]\n[ 59.401873] platform_probe+0xcc/0x228\n[ 59.402442] really_probe+0x340/0x9e8\n[ 59.402992] driver_probe_device+0x16c/0x3f8\n[ 59.403638] driver_probe_device+0x64/0x1d8\n[ 59.404256] driver_attach+0x1dc/0x4c8\n[ 59.404840] bus_for_each_dev+0x100/0x190\n[ 59.405442] driver_attach+0x44/0x68\n[ 59.405980] bus_add_driver+0x23c/0x500\n[ 59.406550] driver_register+0xf8/0x3d0\n[ 59.407122] platform_driver_register+0x68/0x98\n[ 59.407810] mt8365_afe_pcm_driver_init+0x2c/0xff8 [snd_soc_mt8365_pcm]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1dc0ed16cfbc3c28a07a89904071cfa802fdcee1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6bea85979d05470e6416a2bb504a9bcd9178304c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6e621dd99c57db916842865debaa65f20bbd6d8e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38663.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38663.json new file mode 100644 index 00000000000..74056cd9de9 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38663.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38663", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.590", + "lastModified": "2025-08-22T16:15:41.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: reject invalid file types when reading inodes\n\nTo prevent inodes with invalid file types from tripping through the vfs\nand causing malfunctions or assertion failures, add a missing sanity check\nwhen reading an inode from a block device. If the file type is not valid,\ntreat it as a filesystem error." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1a5c204e175a78556b8ef1f7683249fa5197295a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/42cd46b3a8b1497b9258dc7ac445dbd6beb73e2f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4aead50caf67e01020c8be1945c3201e8a972a27", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/79663a15a1c70ca84f86f2dbba07b423fe7d5d4f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf585ee198bba4ff25b0d80a0891df4656cb0d08", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38664.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38664.json new file mode 100644 index 00000000000..aaa76b9bd52 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38664.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38664", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.723", + "lastModified": "2025-08-22T16:15:41.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix a null pointer dereference in ice_copy_and_init_pkg()\n\nAdd check for the return value of devm_kmemdup()\nto prevent potential null pointer dereference." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38665.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38665.json new file mode 100644 index 00000000000..04c9c28323e --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38665.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38665", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:41.860", + "lastModified": "2025-08-22T16:15:41.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode\n\nAndrei Lalaev reported a NULL pointer deref when a CAN device is\nrestarted from Bus Off and the driver does not implement the struct\ncan_priv::do_set_mode callback.\n\nThere are 2 code path that call struct can_priv::do_set_mode:\n- directly by a manual restart from the user space, via\n can_changelink()\n- delayed automatic restart after bus off (deactivated by default)\n\nTo prevent the NULL pointer deference, refuse a manual restart or\nconfigure the automatic restart delay in can_changelink() and report\nthe error via extack to user space.\n\nAs an additional safety measure let can_restart() return an error if\ncan_priv::do_set_mode is not set instead of dereferencing it\nunchecked." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0ca816a96fdcf32644c80cbe7a82c7b6ce6ddda5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6acceb46180f9e160d4f0c56fcaf39ba562822ae", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6bbcf37c5114926c99a1d1e6993a5b35689d2599", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c1f3f9797c1f44a762e6f5f72520b2e520537b52", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cf81a60a973358dea163f6b14062f17831ceb894", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38666.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38666.json new file mode 100644 index 00000000000..144d200eaaf --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38666.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38666", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.000", + "lastModified": "2025-08-22T16:15:42.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: appletalk: Fix use-after-free in AARP proxy probe\n\nThe AARP proxy\u2010probe routine (aarp_proxy_probe_network) sends a probe,\nreleases the aarp_lock, sleeps, then re-acquires the lock. During that\nwindow an expire timer thread (__aarp_expire_timer) can remove and\nkfree() the same entry, leading to a use-after-free.\n\nrace condition:\n\n cpu 0 | cpu 1\n atalk_sendmsg() | atif_proxy_probe_device()\n aarp_send_ddp() | aarp_proxy_probe_network()\n mod_timer() | lock(aarp_lock) // LOCK!!\n timeout around 200ms | alloc(aarp_entry)\n and then call | proxies[hash] = aarp_entry\n aarp_expire_timeout() | aarp_send_probe()\n | unlock(aarp_lock) // UNLOCK!!\n lock(aarp_lock) // LOCK!! | msleep(100);\n __aarp_expire_timer(&proxies[ct]) |\n free(aarp_entry) |\n unlock(aarp_lock) // UNLOCK!! |\n | lock(aarp_lock) // LOCK!!\n | UAF aarp_entry !!\n\n==================================================================\nBUG: KASAN: slab-use-after-free in aarp_proxy_probe_network+0x560/0x630 net/appletalk/aarp.c:493\nRead of size 4 at addr ffff8880123aa360 by task repro/13278\n\nCPU: 3 UID: 0 PID: 13278 Comm: repro Not tainted 6.15.2 #3 PREEMPT(full)\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x116/0x1b0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xc1/0x630 mm/kasan/report.c:521\n kasan_report+0xca/0x100 mm/kasan/report.c:634\n aarp_proxy_probe_network+0x560/0x630 net/appletalk/aarp.c:493\n atif_proxy_probe_device net/appletalk/ddp.c:332 [inline]\n atif_ioctl+0xb58/0x16c0 net/appletalk/ddp.c:857\n atalk_ioctl+0x198/0x2f0 net/appletalk/ddp.c:1818\n sock_do_ioctl+0xdc/0x260 net/socket.c:1190\n sock_ioctl+0x239/0x6a0 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:906 [inline]\n __se_sys_ioctl fs/ioctl.c:892 [inline]\n __x64_sys_ioctl+0x194/0x200 fs/ioctl.c:892\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcb/0x250 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \n\nAllocated:\n aarp_alloc net/appletalk/aarp.c:382 [inline]\n aarp_proxy_probe_network+0xd8/0x630 net/appletalk/aarp.c:468\n atif_proxy_probe_device net/appletalk/ddp.c:332 [inline]\n atif_ioctl+0xb58/0x16c0 net/appletalk/ddp.c:857\n atalk_ioctl+0x198/0x2f0 net/appletalk/ddp.c:1818\n\nFreed:\n kfree+0x148/0x4d0 mm/slub.c:4841\n __aarp_expire net/appletalk/aarp.c:90 [inline]\n __aarp_expire_timer net/appletalk/aarp.c:261 [inline]\n aarp_expire_timeout+0x480/0x6e0 net/appletalk/aarp.c:317\n\nThe buggy address belongs to the object at ffff8880123aa300\n which belongs to the cache kmalloc-192 of size 192\nThe buggy address is located 96 bytes inside of\n freed 192-byte region [ffff8880123aa300, ffff8880123aa3c0)\n\nMemory state around the buggy address:\n ffff8880123aa200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff8880123aa280: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc\n>ffff8880123aa300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff8880123aa380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc\n ffff8880123aa400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n==================================================================" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2a6209e4649d45fd85d4193abc481911858ffc6f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5f02ea0f63dd38c41539ea290fcc1693c73aa8e5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6c4a92d07b0850342d3becf2e608f805e972467c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e4f1564c5b699eb89b3040688fd6b4e57922f1f6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f90b6bb203f3f38bf2b3d976113d51571df9a482", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38667.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38667.json new file mode 100644 index 00000000000..e0eadda098c --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38667.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38667", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.150", + "lastModified": "2025-08-22T16:15:42.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: fix potential out-of-bound write\n\nThe buffer is set to 20 characters. If a caller write more characters,\ncount is truncated to the max available space in \"simple_write_to_buffer\".\nTo protect from OoB access, check that the input size fit into buffer and\nadd a zero terminator after copy to the end of the copied data." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/16285a0931869baa618b1f5d304e1e9d090470a8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/81a635b6eccd6fc889f6d07ab9583b705f739ce1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38668.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38668.json new file mode 100644 index 00000000000..5d1546f7394 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38668.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38668", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.283", + "lastModified": "2025-08-22T16:15:42.283", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: fix NULL dereference on unbind due to stale coupling data\n\nFailing to reset coupling_desc.n_coupled after freeing coupled_rdevs can\nlead to NULL pointer dereference when regulators are accessed post-unbind.\n\nThis can happen during runtime PM or other regulator operations that rely\non coupling metadata.\n\nFor example, on ridesx4, unbinding the 'reg-dummy' platform device triggers\na panic in regulator_lock_recursive() due to stale coupling state.\n\nEnsure n_coupled is set to 0 to prevent access to invalid pointers." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/233d3c54c9620e95193923859ea1d0b0f5d748ca", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5d4261dbb3335221fd9c6e69f909ba79ee6663a7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/800a2cfb2df7f96b3fb48910fc595e0215f6b019", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ca46946a482238b0cdea459fb82fc837fb36260e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d7e59c5fd7a0f5e16e75a30a89ea2c4ab88612b8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38669.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38669.json new file mode 100644 index 00000000000..af37c18db40 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38669.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38669", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.423", + "lastModified": "2025-08-22T16:15:42.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"drm/gem-shmem: Use dma_buf from GEM object instance\"\n\nThis reverts commit 1a148af06000e545e714fe3210af3d77ff903c11.\n\nThe dma_buf field in struct drm_gem_object is not stable over the\nobject instance's lifetime. The field becomes NULL when user space\nreleases the final GEM handle on the buffer object. This resulted\nin a NULL-pointer deref.\n\nWorkarounds in commit 5307dce878d4 (\"drm/gem: Acquire references on\nGEM handles for framebuffers\") and commit f6bfc9afc751 (\"drm/framebuffer:\nAcquire internal references on GEM handles\") only solved the problem\npartially. They especially don't work for buffer objects without a DRM\nframebuffer associated.\n\nHence, this revert to going back to using .import_attach->dmabuf.\n\nv3:\n- cc stable" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/291a77604858a8b47cf6640a12b76e97f99e00ed", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6d496e9569983a0d7a05be6661126d0702cf94f7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38670.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38670.json new file mode 100644 index 00000000000..410969ae3e8 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38670.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-38670", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.547", + "lastModified": "2025-08-22T16:15:42.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()\n\n`cpu_switch_to()` and `call_on_irq_stack()` manipulate SP to change\nto different stacks along with the Shadow Call Stack if it is enabled.\nThose two stack changes cannot be done atomically and both functions\ncan be interrupted by SErrors or Debug Exceptions which, though unlikely,\nis very much broken : if interrupted, we can end up with mismatched stacks\nand Shadow Call Stack leading to clobbered stacks.\n\nIn `cpu_switch_to()`, it can happen when SP_EL0 points to the new task,\nbut x18 stills points to the old task's SCS. When the interrupt handler\ntries to save the task's SCS pointer, it will save the old task\nSCS pointer (x18) into the new task struct (pointed to by SP_EL0),\nclobbering it.\n\nIn `call_on_irq_stack()`, it can happen when switching from the task stack\nto the IRQ stack and when switching back. In both cases, we can be\ninterrupted when the SCS pointer points to the IRQ SCS, but SP points to\nthe task stack. The nested interrupt handler pushes its return addresses\non the IRQ SCS. It then detects that SP points to the task stack,\ncalls `call_on_irq_stack()` and clobbers the task SCS pointer with\nthe IRQ SCS pointer, which it will also use !\n\nThis leads to tasks returning to addresses on the wrong SCS,\nor even on the IRQ SCS, triggering kernel panics via CONFIG_VMAP_STACK\nor FPAC if enabled.\n\nThis is possible on a default config, but unlikely.\nHowever, when enabling CONFIG_ARM64_PSEUDO_NMI, DAIF is unmasked and\ninstead the GIC is responsible for filtering what interrupts the CPU\nshould receive based on priority.\nGiven the goal of emulating NMIs, pseudo-NMIs can be received by the CPU\neven in `cpu_switch_to()` and `call_on_irq_stack()`, possibly *very*\nfrequently depending on the system configuration and workload, leading\nto unpredictable kernel panics.\n\nCompletely mask DAIF in `cpu_switch_to()` and restore it when returning.\nDo the same in `call_on_irq_stack()`, but restore and mask around\nthe branch.\nMask DAIF even if CONFIG_SHADOW_CALL_STACK is not enabled for consistency\nof behaviour between all configurations.\n\nIntroduce and use an assembly macro for saving and masking DAIF,\nas the existing one saves but only masks IF." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0f67015d72627bad72da3c2084352e0aa134416b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/708fd522b86d2a9544c34ec6a86fa3fc23336525", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9433a5f437b0948d6a2d8a02ad7a42ab7ca27a61", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d42e6c20de6192f8e4ab4cf10be8c694ef27e8cb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38671.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38671.json new file mode 100644 index 00000000000..f6d1f28bb78 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38671.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-38671", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.683", + "lastModified": "2025-08-22T16:15:42.683", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: qup: jump out of the loop in case of timeout\n\nOriginal logic only sets the return value but doesn't jump out of the\nloop if the bus is kept active by a client. This is not expected. A\nmalicious or buggy i2c client can hang the kernel in this case and\nshould be avoided. This is observed during a long time test with a\nPCA953x GPIO extender.\n\nFix it by changing the logic to not only sets the return value, but also\njumps out of the loop and return to the caller with -ETIMEDOUT." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0d33913fce67a93c1eb83396c3c9d6b411dcab33", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/42c4471b30fa203249f476dd42321cd7efb7f6a8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/89459f168b78e5c801dc8b7ad037b62898bc4f57", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a7982a14b3012527a9583d12525cd0dc9f8d8934", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c523bfba46c4b4d7676fb050909533a766698ecd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38672.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38672.json new file mode 100644 index 00000000000..9e2d1beeeb0 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38672.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38672", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.820", + "lastModified": "2025-08-22T16:15:42.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"drm/gem-dma: Use dma_buf from GEM object instance\"\n\nThis reverts commit e8afa1557f4f963c9a511bd2c6074a941c308685.\n\nThe dma_buf field in struct drm_gem_object is not stable over the\nobject instance's lifetime. The field becomes NULL when user space\nreleases the final GEM handle on the buffer object. This resulted\nin a NULL-pointer deref.\n\nWorkarounds in commit 5307dce878d4 (\"drm/gem: Acquire references on\nGEM handles for framebuffers\") and commit f6bfc9afc751 (\"drm/framebuffer:\nAcquire internal references on GEM handles\") only solved the problem\npartially. They especially don't work for buffer objects without a DRM\nframebuffer associated.\n\nHence, this revert to going back to using .import_attach->dmabuf.\n\nv3:\n- cc stable" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1918e79be908b8a2c8757640289bc196c14d928a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e7bdb3104a2f71ec1439d37f8e6e2f201dbcd7cf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38673.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38673.json new file mode 100644 index 00000000000..c7b7c9333b9 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38673.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38673", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:42.953", + "lastModified": "2025-08-22T16:15:42.953", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"drm/gem-framebuffer: Use dma_buf from GEM object instance\"\n\nThis reverts commit cce16fcd7446dcff7480cd9d2b6417075ed81065.\n\nThe dma_buf field in struct drm_gem_object is not stable over the\nobject instance's lifetime. The field becomes NULL when user space\nreleases the final GEM handle on the buffer object. This resulted\nin a NULL-pointer deref.\n\nWorkarounds in commit 5307dce878d4 (\"drm/gem: Acquire references on\nGEM handles for framebuffers\") and commit f6bfc9afc751 (\"drm/framebuffer:\nAcquire internal references on GEM handles\") only solved the problem\npartially. They especially don't work for buffer objects without a DRM\nframebuffer associated.\n\nHence, this revert to going back to using .import_attach->dmabuf.\n\nv3:\n- cc stable" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2712ca878b688682ac2ce02aefc413fc76019cd9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e31f5a1c2cd38bf977736cdfa79444e19d4005ec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38674.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38674.json new file mode 100644 index 00000000000..92bd6ed8add --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38674.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-38674", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:43.090", + "lastModified": "2025-08-22T16:15:43.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"drm/prime: Use dma_buf from GEM object instance\"\n\nThis reverts commit f83a9b8c7fd0557b0c50784bfdc1bbe9140c9bf8.\n\nThe dma_buf field in struct drm_gem_object is not stable over the\nobject instance's lifetime. The field becomes NULL when user space\nreleases the final GEM handle on the buffer object. This resulted\nin a NULL-pointer deref.\n\nWorkarounds in commit 5307dce878d4 (\"drm/gem: Acquire references on\nGEM handles for framebuffers\") and commit f6bfc9afc751 (\"drm/framebuffer:\nAcquire internal references on GEM handles\") only solved the problem\npartially. They especially don't work for buffer objects without a DRM\nframebuffer associated.\n\nHence, this revert to going back to using .import_attach->dmabuf.\n\nv3:\n- cc stable" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5f05d83ce689a8930a70dfa73f879604aef8cc03", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fb4ef4a52b79a22ad382bfe77332642d02aef773", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-386xx/CVE-2025-38675.json b/CVE-2025/CVE-2025-386xx/CVE-2025-38675.json new file mode 100644 index 00000000000..3ca9eaafe18 --- /dev/null +++ b/CVE-2025/CVE-2025-386xx/CVE-2025-38675.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-38675", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-22T16:15:43.217", + "lastModified": "2025-08-22T16:15:43.217", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: state: initialize state_ptrs earlier in xfrm_state_find\n\nIn case of preemption, xfrm_state_look_at will find a different\npcpu_id and look up states for that other CPU. If we matched a state\nfor CPU2 in the state_cache while the lookup started on CPU1, we will\njump to \"found\", but the \"best\" state that we got will be ignored and\nwe will enter the \"acquire\" block. This block uses state_ptrs, which\nisn't initialized at this point.\n\nLet's initialize state_ptrs just after taking rcu_read_lock. This will\nalso prevent a possible misuse in the future, if someone adjusts this\nfunction." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/463562f9591742be62ddde3b426a0533ed496955", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6bf2daafc51bcb9272c0fdff2afd38217337d0d3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/94d077c331730510d5611b438640a292097341f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-437xx/CVE-2025-43751.json b/CVE-2025/CVE-2025-437xx/CVE-2025-43751.json new file mode 100644 index 00000000000..49d7d4367c1 --- /dev/null +++ b/CVE-2025/CVE-2025-437xx/CVE-2025-43751.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-43751", + "sourceIdentifier": "security@liferay.com", + "published": "2025-08-22T16:15:43.423", + "lastModified": "2025-08-22T16:15:43.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10 and 7.4 GA through update 92 allows remote attackers to determine if an account exist in the application via the create account page." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@liferay.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@liferay.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-203" + } + ] + } + ], + "references": [ + { + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43751", + "source": "security@liferay.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json index 0976904d73e..1e6d58a57ce 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46354", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:29.697", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:17:53.963", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:*", + "matchCriteriaId": "2B7BA78E-2D63-4122-BD8D-B3BBCD719556" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-467xx/CVE-2025-46789.json b/CVE-2025/CVE-2025-467xx/CVE-2025-46789.json index e259e2f3c06..628c7d30c17 100644 --- a/CVE-2025/CVE-2025-467xx/CVE-2025-46789.json +++ b/CVE-2025/CVE-2025-467xx/CVE-2025-46789.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46789", "sourceIdentifier": "security@zoom.us", "published": "2025-07-10T16:15:24.573", - "lastModified": "2025-07-15T13:24:41.097", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-08-22T17:09:50.280", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:zoom:-:*:*:*:*:windows:*:*", + "matchCriteriaId": "88E5023D-FEB6-43FE-99BD-F60EBD507020" + } + ] + } + ] + } + ], "references": [ { "url": "https://https://www.zoom.com/en/trust/security-bulletin/zsb-25024/", - "source": "security@zoom.us" + "source": "security@zoom.us", + "tags": [ + "Broken Link", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json index 61c23a2bf71..76d52537c95 100644 --- a/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48498", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:29.877", - "lastModified": "2025-07-25T15:29:44.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:17:43.833", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:*", + "matchCriteriaId": "2B7BA78E-2D63-4122-BD8D-B3BBCD719556" + } + ] + } + ] + } + ], "references": [ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199", - "source": "talos-cna@cisco.com" + "source": "talos-cna@cisco.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json b/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json index bf80de3c831..3a98368ce3c 100644 --- a/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json +++ b/CVE-2025/CVE-2025-495xx/CVE-2025-49557.json @@ -2,13 +2,13 @@ "id": "CVE-2025-49557", "sourceIdentifier": "psirt@adobe.com", "published": "2025-08-12T18:15:29.300", - "lastModified": "2025-08-15T15:40:43.247", - "vulnStatus": "Analyzed", + "lastModified": "2025-08-22T17:15:32.147", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. These scripts may be used to escalate privileges within the application or compromise sensitive user data. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed." + "value": "Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "psirt@adobe.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-506xx/CVE-2025-50674.json b/CVE-2025/CVE-2025-506xx/CVE-2025-50674.json new file mode 100644 index 00000000000..6edba41413e --- /dev/null +++ b/CVE-2025/CVE-2025-506xx/CVE-2025-50674.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-50674", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:43.607", + "lastModified": "2025-08-22T16:15:43.607", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalate privileges to root." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "http://openmediavault.com", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/xbz0n/4b98e9291ddd5bb5e6232609e36b2082", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-507xx/CVE-2025-50733.json b/CVE-2025/CVE-2025-507xx/CVE-2025-50733.json new file mode 100644 index 00000000000..134132cdf91 --- /dev/null +++ b/CVE-2025/CVE-2025-507xx/CVE-2025-50733.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-50733", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:43.820", + "lastModified": "2025-08-22T16:15:43.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute arbitrary JavaScript code when HTML content is rendered in the AI chat interface. The vulnerability occurs because user-influenced HTML from AI responses is rendered in an iframe with 'allow-scripts' sandbox permission without proper sanitization. This can be exploited through specifically crafted prompts that cause the AI to generate malicious HTML/JavaScript code. When a user views the HTML preview, the injected JavaScript executes in the user's browser context, potentially allowing attackers to exfiltrate sensitive information (including API keys stored in localStorage), perform actions on behalf of the user, and steal session data." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/fai1424/Vulnerability-Research/blob/main/CVE-2025-50733/README.md", + "source": "cve@mitre.org" + }, + { + "url": "https://hackmd.io/@fai1424/BkgqMnNxgl", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-507xx/CVE-2025-50738.json b/CVE-2025/CVE-2025-507xx/CVE-2025-50738.json index 1b56bbc21b1..41caf61f086 100644 --- a/CVE-2025/CVE-2025-507xx/CVE-2025-50738.json +++ b/CVE-2025/CVE-2025-507xx/CVE-2025-50738.json @@ -2,8 +2,8 @@ "id": "CVE-2025-50738", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-29T15:15:35.543", - "lastModified": "2025-08-06T20:54:37.777", - "vulnStatus": "Analyzed", + "lastModified": "2025-08-22T16:15:43.973", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -70,6 +70,10 @@ } ], "references": [ + { + "url": "https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738", + "source": "cve@mitre.org" + }, { "url": "https://github.com/usememos/memos", "source": "cve@mitre.org", diff --git a/CVE-2025/CVE-2025-516xx/CVE-2025-51605.json b/CVE-2025/CVE-2025-516xx/CVE-2025-51605.json new file mode 100644 index 00000000000..5bcbdce3088 --- /dev/null +++ b/CVE-2025/CVE-2025-516xx/CVE-2025-51605.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-51605", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:44.187", + "lastModified": "2025-08-22T16:15:44.187", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-346" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250512-02.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-518xx/CVE-2025-51818.json b/CVE-2025/CVE-2025-518xx/CVE-2025-51818.json index ca7dd227bcc..391c4a8b767 100644 --- a/CVE-2025/CVE-2025-518xx/CVE-2025-51818.json +++ b/CVE-2025/CVE-2025-518xx/CVE-2025-51818.json @@ -2,13 +2,17 @@ "id": "CVE-2025-51818", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-21T14:15:40.990", - "lastModified": "2025-08-21T18:15:34.423", + "lastModified": "2025-08-22T16:15:44.400", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands" + }, + { + "lang": "es", + "value": "MCCMS 2.7.0 es vulnerable a la eliminaci\u00f3n arbitraria de archivos en el componente Backups.php. Esto permite que un atacante ejecute comandos arbitrarios." } ], "metrics": { @@ -18,19 +22,19 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", - "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", - "privilegesRequired": "NONE", + "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 2.8, "impactScore": 2.5 } ] @@ -42,7 +46,7 @@ "description": [ { "lang": "en", - "value": "CWE-77" + "value": "CWE-552" } ] } diff --git a/CVE-2025/CVE-2025-520xx/CVE-2025-52094.json b/CVE-2025/CVE-2025-520xx/CVE-2025-52094.json new file mode 100644 index 00000000000..375097367fa --- /dev/null +++ b/CVE-2025/CVE-2025-520xx/CVE-2025-52094.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-52094", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:44.583", + "lastModified": "2025-08-22T16:15:44.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \\HKLM\\SYSTEM\\Setup\\SmartDeploy component" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://specterops.io/blog/2025/08/12/hklmsystemsetupsmartdeploy-the-static-keys-to-abusing-pdq-smartdeploy/", + "source": "cve@mitre.org" + }, + { + "url": "https://www.pdq.com/", + "source": "cve@mitre.org" + }, + { + "url": "https://www.pdq.com/products/smartdeploy/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-520xx/CVE-2025-52095.json b/CVE-2025/CVE-2025-520xx/CVE-2025-52095.json new file mode 100644 index 00000000000..bd193aa00c1 --- /dev/null +++ b/CVE-2025/CVE-2025-520xx/CVE-2025-52095.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-52095", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:44.740", + "lastModified": "2025-08-22T16:15:44.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://specterops.io/blog/2025/08/12/hklmsystemsetupsmartdeploy-the-static-keys-to-abusing-pdq-smartdeploy/", + "source": "cve@mitre.org" + }, + { + "url": "https://www.pdq.com/", + "source": "cve@mitre.org" + }, + { + "url": "https://www.pdq.com/products/smartdeploy/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-524xx/CVE-2025-52473.json b/CVE-2025/CVE-2025-524xx/CVE-2025-52473.json index 91fe16090c8..832a9b49850 100644 --- a/CVE-2025/CVE-2025-524xx/CVE-2025-52473.json +++ b/CVE-2025/CVE-2025-524xx/CVE-2025-52473.json @@ -2,8 +2,8 @@ "id": "CVE-2025-52473", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-10T19:15:25.387", - "lastModified": "2025-07-15T13:14:49.980", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:04:49.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -49,16 +69,50 @@ "value": "CWE-200" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:openquantumsafe:liboqs:*:*:*:*:*:*:*:*", + "versionEndExcluding": "0.14.0", + "matchCriteriaId": "8ABA5BA0-A380-42A4-B53A-3EF8E18C1F99" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/open-quantum-safe/liboqs/commit/4215362acbf69b88fe1777c4c052f154e29f9897", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53363.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53363.json new file mode 100644 index 00000000000..4c1e89721fa --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53363.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-53363", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T16:15:44.887", + "lastModified": "2025-08-22T16:15:44.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetFromUri function in app/application/http/controller/compose.go, where the uri parameter is passed directly to os.ReadFile without proper validation or access control. A logged-in attacker can exploit this flaw to read sensitive files from the host system, leading to information disclosure. No patched version is available as of this writing." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + }, + { + "lang": "en", + "value": "CWE-73" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/donknap/dpanel/security/advisories/GHSA-gcqf-pxgg-gw8q", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-536xx/CVE-2025-53637.json b/CVE-2025/CVE-2025-536xx/CVE-2025-53637.json index 753d9a1493a..eafd0164e3f 100644 --- a/CVE-2025/CVE-2025-536xx/CVE-2025-53637.json +++ b/CVE-2025/CVE-2025-536xx/CVE-2025-53637.json @@ -2,8 +2,8 @@ "id": "CVE-2025-53637", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-10T22:15:24.580", - "lastModified": "2025-07-15T13:14:49.980", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:02:16.093", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 } ] }, @@ -51,14 +71,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:meshtastic:meshtastic_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.6.6", + "matchCriteriaId": "CB44176B-8A75-41E4-BE44-4555A24CCA18" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/meshtastic/firmware/blob/3fd47d9713e7d1b6866c48cf218e2435741651a2/.github/workflows/main_matrix.yml#L34-L41", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/meshtastic/firmware/security/advisories/GHSA-6mwm-v2vv-pp96", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-536xx/CVE-2025-53642.json b/CVE-2025/CVE-2025-536xx/CVE-2025-53642.json index 677f24605cd..215c57be9de 100644 --- a/CVE-2025/CVE-2025-536xx/CVE-2025-53642.json +++ b/CVE-2025/CVE-2025-536xx/CVE-2025-53642.json @@ -2,8 +2,8 @@ "id": "CVE-2025-53642", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-11T18:15:35.123", - "lastModified": "2025-07-15T13:14:49.980", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T16:52:08.603", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 } ] }, @@ -51,10 +71,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:psu:haxcms-nodejs:*:*:*:*:*:node.js:*:*", + "versionEndExcluding": "11.0.6", + "matchCriteriaId": "C760A93C-A6C5-457F-9913-4CFFBC00E20E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:psu:haxcms-php:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.0.6", + "matchCriteriaId": "17EB8163-34F7-4A85-BC57-B0050F8A2AA6" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g4f5-5w5j-p5jg", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54254.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54254.json index 3dd7d68c5c5..2451dbb7556 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54254.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54254.json @@ -2,13 +2,13 @@ "id": "CVE-2025-54254", "sourceIdentifier": "psirt@adobe.com", "published": "2025-08-05T17:15:29.460", - "lastModified": "2025-08-13T18:54:27.140", - "vulnStatus": "Analyzed", + "lastModified": "2025-08-22T17:15:32.407", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system. Exploitation of this issue does not require user interaction." + "value": "Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope is changed. Exploitation of this issue does not require user interaction." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "psirt@adobe.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54410.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54410.json index 68dc606a148..6deac51006d 100644 --- a/CVE-2025/CVE-2025-544xx/CVE-2025-54410.json +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54410.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54410", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-30T14:15:28.900", - "lastModified": "2025-07-31T18:42:37.870", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:27:29.677", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 5.2, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 2.7 } ] }, @@ -51,14 +71,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*", + "versionEndExcluding": "25.0.13", + "matchCriteriaId": "8DC8F613-EFA5-4497-854B-582A8F22759A" + } + ] + } + ] + } + ], "references": [ { "url": "https://firewalld.org/documentation/howto/reload-firewalld.html", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/moby/moby/security/advisories/GHSA-4vq8-7jfc-9cvp", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55010.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55010.json index 9d5574d8839..bfeff3c8c9b 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55010.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55010.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55010", "sourceIdentifier": "security-advisories@github.com", "published": "2025-08-12T16:15:28.540", - "lastModified": "2025-08-13T17:34:12.350", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:28:18.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ] }, @@ -51,22 +71,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.2.47", + "matchCriteriaId": "8725B482-0964-41C2-9E52-AB3DB5BE0976" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/kanboard/kanboard/blob/b033c0e0f982f8158e240bce8ab54c29727f8efe/app/Formatter/ProjectActivityEventFormatter.php#L43-L57", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/kanboard/kanboard/commit/7148ac092e5db6b33e0fc35e04bca328d96c1f6f", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/kanboard/kanboard/security/advisories/GHSA-359x-c69j-q64r", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/kanboard/kanboard/security/advisories/GHSA-359x-c69j-q64r", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55011.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55011.json index 9eab04c7435..17403ff2ec1 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55011.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55011.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55011", "sourceIdentifier": "security-advisories@github.com", "published": "2025-08-12T16:15:28.700", - "lastModified": "2025-08-13T17:34:12.350", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-22T17:15:47.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 2.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 } ] }, @@ -51,22 +71,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.2.47", + "matchCriteriaId": "8725B482-0964-41C2-9E52-AB3DB5BE0976" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/kanboard/kanboard/blob/b2e35ac520add67cff792aab960b3c002c48e3d0/app/Api/Procedure/TaskFileProcedure.php#L47-L57", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/kanboard/kanboard/commit/523a6135e944b6884c091a3fd7605af8ef133681", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/kanboard/kanboard/security/advisories/GHSA-26f4-rx96-xc55", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/kanboard/kanboard/security/advisories/GHSA-26f4-rx96-xc55", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-553xx/CVE-2025-55398.json b/CVE-2025/CVE-2025-553xx/CVE-2025-55398.json new file mode 100644 index 00000000000..2b1e392f41c --- /dev/null +++ b/CVE-2025/CVE-2025-553xx/CVE-2025-55398.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55398", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:32.570", + "lastModified": "2025-08-22T17:15:32.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In UPER (Unaligned Packed Encoding Rules), asn1c-generated decoders fail to enforce INTEGER constraints when the bound is positive and exceeds 32 bits in length, potentially allowing incorrect or malicious input to be processed." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/mouse07410/asn1c/issues/222", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-555xx/CVE-2025-55599.json b/CVE-2025/CVE-2025-555xx/CVE-2025-55599.json new file mode 100644 index 00000000000..fb5daf821a0 --- /dev/null +++ b/CVE-2025/CVE-2025-555xx/CVE-2025-55599.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55599", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.220", + "lastModified": "2025-08-22T16:15:45.220", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the parameter f_wds_wepKey." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_65/65.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55602.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55602.json new file mode 100644 index 00000000000..01ccdfead51 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55602.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-55602", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.370", + "lastModified": "2025-08-22T16:15:45.370", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_79/79.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.dlink.com/en/security-bulletin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55603.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55603.json new file mode 100644 index 00000000000..2a338487520 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55603.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55603", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.517", + "lastModified": "2025-08-22T16:15:45.517", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_45/45.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55605.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55605.json new file mode 100644 index 00000000000..b3a9fa8abb8 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55605.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55605", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.650", + "lastModified": "2025-08-22T16:15:45.650", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_46/46.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55606.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55606.json new file mode 100644 index 00000000000..7f9ce3f0e4d --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55606.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55606", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.790", + "lastModified": "2025-08-22T16:15:45.790", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_44/44.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55611.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55611.json new file mode 100644 index 00000000000..989c260a9ee --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55611.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55611", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T16:15:45.940", + "lastModified": "2025-08-22T16:15:45.940", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_80/80.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json new file mode 100644 index 00000000000..f74403f44ce --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-55619", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:32.727", + "lastModified": "2025-08-22T17:15:32.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerability to decrypt access tokens and web session tokens stored inside the app via reverse engineering." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://cwe.mitre.org/data/definitions/321.html", + "source": "cve@mitre.org" + }, + { + "url": "https://cwe.mitre.org/data/definitions/329.html", + "source": "cve@mitre.org" + }, + { + "url": "https://developer.android.com/reference/kotlin/androidx/security/crypto/EncryptedSharedPreferences", + "source": "cve@mitre.org" + }, + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25173", + "source": "cve@mitre.org" + }, + { + "url": "https://www.notion.so/Reolink-Android-App-Uses-Hardcoded-AES-Key-and-IV-for-Sensitive-Data-Decryption-21a43700364280dc95bedcf6ac1a5db0", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json new file mode 100644 index 00000000000..bac88877121 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55620", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:32.877", + "lastModified": "2025-08-22T17:15:32.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a crafted payload." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-javascript-injection-qr-code-21a43700364280eaa76fd56a01b25410", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json new file mode 100644 index 00000000000..52d8ff005a7 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55621", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:33.023", + "lastModified": "2025-08-22T17:15:33.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-Download-a-profile-due-to-IDOR-21a43700364280ef9fc1ffb9c484a03e?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json new file mode 100644 index 00000000000..112881115ee --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55622", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:33.187", + "lastModified": "2025-08-22T17:15:33.187", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-Task-Hijacking-21a437003642808ba21fd79530a21e96", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json new file mode 100644 index 00000000000..2f50248d3fe --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55623", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:33.327", + "lastModified": "2025-08-22T17:15:33.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debug Bridge)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-App-lock-screen-Bypass-21a437003642804f869fde8535d18a3f?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json new file mode 100644 index 00000000000..bf6befd9577 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55624", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.107", + "lastModified": "2025-08-22T17:15:34.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-Intent-Redirection-21a43700364280cabb8bcce817ab1879?pvs=143", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json new file mode 100644 index 00000000000..f99e08a9c40 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-55625", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.250", + "lastModified": "2025-08-22T17:15:34.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://cwe.mitre.org/data/definitions/601.html", + "source": "cve@mitre.org" + }, + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-Deeplink-Redirect-21b437003642804a865af2fb02942f66", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55626.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55626.json new file mode 100644 index 00000000000..8ec4440f760 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55626.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55626", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.400", + "lastModified": "2025-08-22T17:15:34.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Access-the-Administrator-Settings-page-with-IDOR-23c43700364280c3a8fccc2bbdcda78c?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55627.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55627.json new file mode 100644 index 00000000000..9659fa9b884 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55627.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55627", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.550", + "lastModified": "2025-08-22T17:15:34.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows authenticated attackers to create accounts with elevated privileges." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Account-Takeover-Create-Account-23c43700364280c2b0bddba94a9362ed", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55629.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55629.json new file mode 100644 index 00000000000..038cd80cb17 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55629.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55629", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.730", + "lastModified": "2025-08-22T17:15:34.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Account-Takeover-Change-password-23c437003642806bb821fec983aedb9f?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55630.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55630.json new file mode 100644 index 00000000000..c0ab534f1a1 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55630.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55630", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:34.873", + "lastModified": "2025-08-22T17:15:34.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 when entering the wrong username and password allows attackers to enumerate existing accounts." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/User-Enumeration-Vulnerability-23c43700364280b6a46ae6302818b77e?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55631.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55631.json new file mode 100644 index 00000000000..3ac1b967647 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55631.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-55631", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:35.017", + "lastModified": "2025-08-22T17:15:35.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to manage users' sessions system wide instead of an account-by-account basis, potentially leading to a Denial of Service (DoS) via resource exhaustion." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://relieved-knuckle-264.notion.site/Token-max-Dos-23c437003642804db673cbd5449fcc67?source=copy_link", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55634.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55634.json new file mode 100644 index 00000000000..62b26519e40 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55634.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-55634", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:35.163", + "lastModified": "2025-08-22T17:15:35.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous ffmpeg-based stream pushes." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://cwe.mitre.org/data/definitions/306.html", + "source": "cve@mitre.org" + }, + { + "url": "https://cwe.mitre.org/data/definitions/400.html", + "source": "cve@mitre.org" + }, + { + "url": "https://relieved-knuckle-264.notion.site/RTMP-Injection-DoS-through-Unauthenticated-Stream-Publish-23c437003642800297c8c128b6117885?pvs=74", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55637.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55637.json new file mode 100644 index 00000000000..89d8ef66ed5 --- /dev/null +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55637.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-55637", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:35.303", + "lastModified": "2025-08-22T17:15:35.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerability via the setddns_pip_system() function." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://cwe.mitre.org/data/definitions/78.html", + "source": "cve@mitre.org" + }, + { + "url": "https://relieved-knuckle-264.notion.site/Reolink-camera-command-injection-Ddns-username-23f437003642800f83aef6b07f914212?pvs=74", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55741.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55741.json new file mode 100644 index 00000000000..ce501f761f8 --- /dev/null +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55741.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-55741", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T16:15:46.087", + "lastModified": "2025-08-22T17:15:35.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. In versions 0.3.0 and earlier, users without the Delete privilege for products are unable to delete individual products via the standard endpoint, as expected. However, these users can bypass intended access controls by issuing requests to the mass-delete endpoint, allowing them to delete products without proper authorization. This vulnerability allows unauthorized product deletion, leading to potential data loss and business disruption. The issue is fixed in version 0.3.1. No known workarounds exist." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + }, + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/unopim/unopim/commit/c14eebe653aafd8dc713ca729165177e63315989", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/unopim/unopim/security/advisories/GHSA-8p2f-fx4q-75cx", + "source": "security-advisories@github.com" + }, + { + "url": "https://www.youtube.com/watch?v=J_WV8fCXlJM", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/unopim/unopim/security/advisories/GHSA-8p2f-fx4q-75cx", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.youtube.com/watch?v=J_WV8fCXlJM", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55745.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55745.json new file mode 100644 index 00000000000..691cec1ad7f --- /dev/null +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55745.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-55745", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T17:15:35.647", + "lastModified": "2025-08-22T17:15:35.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to inject malicious content into exported CSV files. When the CSV file is opened in spreadsheet applications such as Microsoft Excel, the malicious input may be interpreted as a formula or command, potentially resulting in the execution of arbitrary code on the victim's device. Successful exploitation can lead to remote code execution, including the establishment of a reverse shell. Users are advised to upgrade to version 0.3.1 or later." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1236" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/unopim/unopim/commit/b25db9496fc147842a519d1dd42ec03c3bf00a34", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/unopim/unopim/security/advisories/GHSA-74rg-6f92-g6wx", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-571xx/CVE-2025-57105.json b/CVE-2025/CVE-2025-571xx/CVE-2025-57105.json new file mode 100644 index 00000000000..61d41d7a1d0 --- /dev/null +++ b/CVE-2025/CVE-2025-571xx/CVE-2025-57105.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-57105", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-08-22T17:15:35.843", + "lastModified": "2025-08-22T17:15:35.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D28 function in in mng_platform.asp, and sub_4A12DC function in wayos_ac_server.asp of the jhttpd program, with the parameter ac_mng_srv_host." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://di-7400.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/xyh4ck/iot_poc", + "source": "cve@mitre.org" + }, + { + "url": "https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-7400G%2B", + "source": "cve@mitre.org" + }, + { + "url": "https://www.dlink.com/en/security-bulletin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-577xx/CVE-2025-57770.json b/CVE-2025/CVE-2025-577xx/CVE-2025-57770.json new file mode 100644 index 00000000000..22b4bc9f1c5 --- /dev/null +++ b/CVE-2025/CVE-2025-577xx/CVE-2025-57770.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-57770", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T17:15:35.997", + "lastModified": "2025-08-22T17:15:35.997", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security feature, Ignoring unknown usernames, that is intended to prevent username enumeration by returning a generic response for both valid and invalid usernames. This vulnerability allows an unauthenticated attacker to bypass this protection by submitting arbitrary userIDs to the select account page and distinguishing between valid and invalid accounts based on the system's response. For effective exploitation, an attacker needs to iterate through possible userIDs, but the impact can be limited by implementing rate limiting or similar measures. The issue has been patched in versions 4.0.3, 3.4.0, and 2.71.15." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-203" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/zitadel/zitadel/commit/7abe759c95cb360524d88b51744d03cbb6e4dcdb", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/zitadel/zitadel/releases/tag/v2.71.15", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/zitadel/zitadel/releases/tag/v3.4.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/zitadel/zitadel/releases/tag/v4.0.3", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/zitadel/zitadel/security/advisories/GHSA-g9c3-xh6v-fr86", + "source": "security-advisories@github.com" + }, + { + "url": "https://zitadel.com/docs/self-hosting/manage/production#limits-and-quotas", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-577xx/CVE-2025-57771.json b/CVE-2025/CVE-2025-577xx/CVE-2025-57771.json new file mode 100644 index 00000000000..1c2b217f1ac --- /dev/null +++ b/CVE-2025/CVE-2025-577xx/CVE-2025-57771.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-57771", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T17:15:36.183", + "lastModified": "2025-08-22T17:15:36.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions prior to 3.25.5, Roo-Code fails to properly handle process substitution and single ampersand characters in the command parsing logic for auto-execute commands. If a user has enabled auto-approved execution for a command such as ls, an attacker who can submit crafted prompts to the agent may inject arbitrary commands to be executed alongside the intended command. Exploitation requires attacker access to submit prompts and for the user to have enabled auto-approved command execution, which is disabled by default. This vulnerability could allow an attacker to execute arbitrary code. The issue is fixed in version 3.25.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/RooCodeInc/Roo-Code/commit/de359a465c67aefc67553aa2b464591b602c4bdc", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-wrh9-463x-7wvv", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-578xx/CVE-2025-57800.json b/CVE-2025/CVE-2025-578xx/CVE-2025-57800.json new file mode 100644 index 00000000000..5c93cab6032 --- /dev/null +++ b/CVE-2025/CVE-2025-578xx/CVE-2025-57800.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-57800", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-22T17:15:36.377", + "lastModified": "2025-08-22T17:15:36.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a login link that causes Audiobookshelf to store an arbitrary callback in a cookie, which is later used to redirect the user after authentication. The server then issues a 302 redirect to the attacker-controlled URL, appending sensitive OIDC tokens as query parameters. This allows an attacker to obtain the victim's tokens and perform full account takeover, including creating persistent admin users if the victim is an administrator. Tokens are further leaked via browser history, Referer headers, and server logs. This vulnerability impacts all Audiobookshelf deployments using OIDC; no IdP misconfiguration is required. The issue is fixed in version 2.28.0. No known workarounds exist." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-523" + }, + { + "lang": "en", + "value": "CWE-598" + }, + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/advplyr/audiobookshelf/commit/99a3867ce934b797e21e6ba5390d4b679e35f7cb", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-vpc2-w73p-39px", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 76be321d3ff..9b91043436d 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-08-22T16:00:12.066425+00:00 +2025-08-22T18:00:12.057661+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-08-22T15:59:15.257000+00:00 +2025-08-22T17:58:09.643000+00:00 ``` ### Last Data Feed Release @@ -33,55 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -306565 +306659 ``` ### CVEs added in the last Commit -Recently added CVEs: `11` +Recently added CVEs: `94` -- [CVE-2009-10006](CVE-2009/CVE-2009-100xx/CVE-2009-10006.json) (`2025-08-22T14:15:44.363`) -- [CVE-2024-56179](CVE-2024/CVE-2024-561xx/CVE-2024-56179.json) (`2025-08-22T14:15:45.670`) -- [CVE-2024-58239](CVE-2024/CVE-2024-582xx/CVE-2024-58239.json) (`2025-08-22T14:15:45.840`) -- [CVE-2025-33120](CVE-2025/CVE-2025-331xx/CVE-2025-33120.json) (`2025-08-22T15:15:32.273`) -- [CVE-2025-36042](CVE-2025/CVE-2025-360xx/CVE-2025-36042.json) (`2025-08-22T15:15:32.483`) -- [CVE-2025-38616](CVE-2025/CVE-2025-386xx/CVE-2025-38616.json) (`2025-08-22T14:15:46.017`) -- [CVE-2025-38617](CVE-2025/CVE-2025-386xx/CVE-2025-38617.json) (`2025-08-22T14:15:46.160`) -- [CVE-2025-38618](CVE-2025/CVE-2025-386xx/CVE-2025-38618.json) (`2025-08-22T14:15:46.303`) -- [CVE-2025-50691](CVE-2025/CVE-2025-506xx/CVE-2025-50691.json) (`2025-08-22T14:15:46.453`) -- [CVE-2025-51825](CVE-2025/CVE-2025-518xx/CVE-2025-51825.json) (`2025-08-22T14:15:46.833`) -- [CVE-2025-55573](CVE-2025/CVE-2025-555xx/CVE-2025-55573.json) (`2025-08-22T15:15:32.683`) +- [CVE-2025-55602](CVE-2025/CVE-2025-556xx/CVE-2025-55602.json) (`2025-08-22T16:15:45.370`) +- [CVE-2025-55603](CVE-2025/CVE-2025-556xx/CVE-2025-55603.json) (`2025-08-22T16:15:45.517`) +- [CVE-2025-55605](CVE-2025/CVE-2025-556xx/CVE-2025-55605.json) (`2025-08-22T16:15:45.650`) +- [CVE-2025-55606](CVE-2025/CVE-2025-556xx/CVE-2025-55606.json) (`2025-08-22T16:15:45.790`) +- [CVE-2025-55611](CVE-2025/CVE-2025-556xx/CVE-2025-55611.json) (`2025-08-22T16:15:45.940`) +- [CVE-2025-55619](CVE-2025/CVE-2025-556xx/CVE-2025-55619.json) (`2025-08-22T17:15:32.727`) +- [CVE-2025-55620](CVE-2025/CVE-2025-556xx/CVE-2025-55620.json) (`2025-08-22T17:15:32.877`) +- [CVE-2025-55621](CVE-2025/CVE-2025-556xx/CVE-2025-55621.json) (`2025-08-22T17:15:33.023`) +- [CVE-2025-55622](CVE-2025/CVE-2025-556xx/CVE-2025-55622.json) (`2025-08-22T17:15:33.187`) +- [CVE-2025-55623](CVE-2025/CVE-2025-556xx/CVE-2025-55623.json) (`2025-08-22T17:15:33.327`) +- [CVE-2025-55624](CVE-2025/CVE-2025-556xx/CVE-2025-55624.json) (`2025-08-22T17:15:34.107`) +- [CVE-2025-55625](CVE-2025/CVE-2025-556xx/CVE-2025-55625.json) (`2025-08-22T17:15:34.250`) +- [CVE-2025-55626](CVE-2025/CVE-2025-556xx/CVE-2025-55626.json) (`2025-08-22T17:15:34.400`) +- [CVE-2025-55627](CVE-2025/CVE-2025-556xx/CVE-2025-55627.json) (`2025-08-22T17:15:34.550`) +- [CVE-2025-55629](CVE-2025/CVE-2025-556xx/CVE-2025-55629.json) (`2025-08-22T17:15:34.730`) +- [CVE-2025-55630](CVE-2025/CVE-2025-556xx/CVE-2025-55630.json) (`2025-08-22T17:15:34.873`) +- [CVE-2025-55631](CVE-2025/CVE-2025-556xx/CVE-2025-55631.json) (`2025-08-22T17:15:35.017`) +- [CVE-2025-55634](CVE-2025/CVE-2025-556xx/CVE-2025-55634.json) (`2025-08-22T17:15:35.163`) +- [CVE-2025-55637](CVE-2025/CVE-2025-556xx/CVE-2025-55637.json) (`2025-08-22T17:15:35.303`) +- [CVE-2025-55741](CVE-2025/CVE-2025-557xx/CVE-2025-55741.json) (`2025-08-22T16:15:46.087`) +- [CVE-2025-55745](CVE-2025/CVE-2025-557xx/CVE-2025-55745.json) (`2025-08-22T17:15:35.647`) +- [CVE-2025-57105](CVE-2025/CVE-2025-571xx/CVE-2025-57105.json) (`2025-08-22T17:15:35.843`) +- [CVE-2025-57770](CVE-2025/CVE-2025-577xx/CVE-2025-57770.json) (`2025-08-22T17:15:35.997`) +- [CVE-2025-57771](CVE-2025/CVE-2025-577xx/CVE-2025-57771.json) (`2025-08-22T17:15:36.183`) +- [CVE-2025-57800](CVE-2025/CVE-2025-578xx/CVE-2025-57800.json) (`2025-08-22T17:15:36.377`) ### CVEs modified in the last Commit -Recently modified CVEs: `59` +Recently modified CVEs: `63` -- [CVE-2024-39789](CVE-2024/CVE-2024-397xx/CVE-2024-39789.json) (`2025-08-22T14:01:39.230`) -- [CVE-2024-39790](CVE-2024/CVE-2024-397xx/CVE-2024-39790.json) (`2025-08-22T14:01:34.613`) -- [CVE-2024-39793](CVE-2024/CVE-2024-397xx/CVE-2024-39793.json) (`2025-08-22T14:01:07.923`) -- [CVE-2024-39794](CVE-2024/CVE-2024-397xx/CVE-2024-39794.json) (`2025-08-22T14:00:58.083`) -- [CVE-2024-39795](CVE-2024/CVE-2024-397xx/CVE-2024-39795.json) (`2025-08-22T14:00:48.967`) -- [CVE-2025-24029](CVE-2025/CVE-2025-240xx/CVE-2025-24029.json) (`2025-08-22T15:59:15.257`) -- [CVE-2025-24975](CVE-2025/CVE-2025-249xx/CVE-2025-24975.json) (`2025-08-22T15:00:28.307`) -- [CVE-2025-27150](CVE-2025/CVE-2025-271xx/CVE-2025-27150.json) (`2025-08-22T15:53:42.620`) -- [CVE-2025-27156](CVE-2025/CVE-2025-271xx/CVE-2025-27156.json) (`2025-08-22T15:57:26.430`) -- [CVE-2025-27402](CVE-2025/CVE-2025-274xx/CVE-2025-27402.json) (`2025-08-22T15:37:24.217`) -- [CVE-2025-51606](CVE-2025/CVE-2025-516xx/CVE-2025-51606.json) (`2025-08-22T14:15:46.620`) -- [CVE-2025-51989](CVE-2025/CVE-2025-519xx/CVE-2025-51989.json) (`2025-08-22T14:15:46.983`) -- [CVE-2025-52899](CVE-2025/CVE-2025-528xx/CVE-2025-52899.json) (`2025-08-22T15:34:29.893`) -- [CVE-2025-53096](CVE-2025/CVE-2025-530xx/CVE-2025-53096.json) (`2025-08-22T14:28:45.230`) -- [CVE-2025-53368](CVE-2025/CVE-2025-533xx/CVE-2025-53368.json) (`2025-08-22T14:20:41.683`) -- [CVE-2025-53370](CVE-2025/CVE-2025-533xx/CVE-2025-53370.json) (`2025-08-22T14:19:32.820`) -- [CVE-2025-5372](CVE-2025/CVE-2025-53xx/CVE-2025-5372.json) (`2025-08-22T14:01:21.240`) -- [CVE-2025-53902](CVE-2025/CVE-2025-539xx/CVE-2025-53902.json) (`2025-08-22T15:30:09.243`) -- [CVE-2025-54129](CVE-2025/CVE-2025-541xx/CVE-2025-54129.json) (`2025-08-22T15:21:08.543`) -- [CVE-2025-54137](CVE-2025/CVE-2025-541xx/CVE-2025-54137.json) (`2025-08-22T15:20:26.940`) -- [CVE-2025-54139](CVE-2025/CVE-2025-541xx/CVE-2025-54139.json) (`2025-08-22T15:19:58.083`) -- [CVE-2025-54989](CVE-2025/CVE-2025-549xx/CVE-2025-54989.json) (`2025-08-22T15:00:46.357`) -- [CVE-2025-8281](CVE-2025/CVE-2025-82xx/CVE-2025-8281.json) (`2025-08-22T15:15:32.970`) -- [CVE-2025-8672](CVE-2025/CVE-2025-86xx/CVE-2025-8672.json) (`2025-08-22T15:24:02.933`) -- [CVE-2025-9074](CVE-2025/CVE-2025-90xx/CVE-2025-9074.json) (`2025-08-22T14:15:47.790`) +- [CVE-2025-0345](CVE-2025/CVE-2025-03xx/CVE-2025-0345.json) (`2025-08-22T16:28:28.197`) +- [CVE-2025-22129](CVE-2025/CVE-2025-221xx/CVE-2025-22129.json) (`2025-08-22T16:19:54.547`) +- [CVE-2025-24798](CVE-2025/CVE-2025-247xx/CVE-2025-24798.json) (`2025-08-22T16:02:31.793`) +- [CVE-2025-27397](CVE-2025/CVE-2025-273xx/CVE-2025-27397.json) (`2025-08-22T17:58:09.643`) +- [CVE-2025-27398](CVE-2025/CVE-2025-273xx/CVE-2025-27398.json) (`2025-08-22T17:51:58.517`) +- [CVE-2025-27401](CVE-2025/CVE-2025-274xx/CVE-2025-27401.json) (`2025-08-22T16:00:59.597`) +- [CVE-2025-27493](CVE-2025/CVE-2025-274xx/CVE-2025-27493.json) (`2025-08-22T17:50:58.940`) +- [CVE-2025-27494](CVE-2025/CVE-2025-274xx/CVE-2025-27494.json) (`2025-08-22T17:49:43.953`) +- [CVE-2025-27496](CVE-2025/CVE-2025-274xx/CVE-2025-27496.json) (`2025-08-22T17:42:18.167`) +- [CVE-2025-35966](CVE-2025/CVE-2025-359xx/CVE-2025-35966.json) (`2025-08-22T16:16:02.100`) +- [CVE-2025-36512](CVE-2025/CVE-2025-365xx/CVE-2025-36512.json) (`2025-08-22T16:18:21.207`) +- [CVE-2025-36520](CVE-2025/CVE-2025-365xx/CVE-2025-36520.json) (`2025-08-22T16:18:09.797`) +- [CVE-2025-46354](CVE-2025/CVE-2025-463xx/CVE-2025-46354.json) (`2025-08-22T16:17:53.963`) +- [CVE-2025-46789](CVE-2025/CVE-2025-467xx/CVE-2025-46789.json) (`2025-08-22T17:09:50.280`) +- [CVE-2025-48498](CVE-2025/CVE-2025-484xx/CVE-2025-48498.json) (`2025-08-22T16:17:43.833`) +- [CVE-2025-49557](CVE-2025/CVE-2025-495xx/CVE-2025-49557.json) (`2025-08-22T17:15:32.147`) +- [CVE-2025-50738](CVE-2025/CVE-2025-507xx/CVE-2025-50738.json) (`2025-08-22T16:15:43.973`) +- [CVE-2025-51818](CVE-2025/CVE-2025-518xx/CVE-2025-51818.json) (`2025-08-22T16:15:44.400`) +- [CVE-2025-52473](CVE-2025/CVE-2025-524xx/CVE-2025-52473.json) (`2025-08-22T17:04:49.530`) +- [CVE-2025-53637](CVE-2025/CVE-2025-536xx/CVE-2025-53637.json) (`2025-08-22T16:02:16.093`) +- [CVE-2025-53642](CVE-2025/CVE-2025-536xx/CVE-2025-53642.json) (`2025-08-22T16:52:08.603`) +- [CVE-2025-54254](CVE-2025/CVE-2025-542xx/CVE-2025-54254.json) (`2025-08-22T17:15:32.407`) +- [CVE-2025-54410](CVE-2025/CVE-2025-544xx/CVE-2025-54410.json) (`2025-08-22T17:27:29.677`) +- [CVE-2025-55010](CVE-2025/CVE-2025-550xx/CVE-2025-55010.json) (`2025-08-22T17:28:18.667`) +- [CVE-2025-55011](CVE-2025/CVE-2025-550xx/CVE-2025-55011.json) (`2025-08-22T17:15:47.513`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 3cd50080bb2..4cd8d1cca24 100644 --- a/_state.csv +++ b/_state.csv @@ -37675,7 +37675,7 @@ CVE-2009-10002,0,0,148adec32204ebcdab07eac6019f5d4fbfe83a5baec6c593b489c14951480 CVE-2009-10003,0,0,5af5479095a49693c5def9c35ca1a4543f61474794b6e57af40dd5e56767ac8a,2024-11-21T01:01:25.890000 CVE-2009-10004,0,0,9e6718b0a5e4f51d36b3f7a021f30d05886a3c692674101c002ec70c717d0b84,2024-11-21T01:01:26.070000 CVE-2009-10005,0,0,92cbf719e929e886326d6980b9ed895f66de7c098482914e2fc6dcb45753c68f,2025-08-20T16:15:32.100000 -CVE-2009-10006,1,1,06c9058ff7a6ed1729fa75f955aac1339c923f5628e1cacb6985e61228984990,2025-08-22T14:15:44.363000 +CVE-2009-10006,0,0,06c9058ff7a6ed1729fa75f955aac1339c923f5628e1cacb6985e61228984990,2025-08-22T14:15:44.363000 CVE-2009-1001,0,0,0ecfcfe4d07f6220bc2f4b1e00dc3f9d8237e61dd9ea420afa7c6cdfdf2cc3a4,2025-04-09T00:30:58.490000 CVE-2009-1002,0,0,1d58d44eff68da7396b4a64ea6825a4d28a3e78f5bcffeaab311ef99fa7825e0,2025-04-09T00:30:58.490000 CVE-2009-1003,0,0,78ddc50059464610b1b9d025a34bad27ba450fc87dcff406c412bff60aec4c37,2025-04-09T00:30:58.490000 @@ -38642,9 +38642,9 @@ CVE-2009-1998,0,0,88e292e65a632133a2862e603a1149f524c5b3fb7bd1e47d294a95b274ca22 CVE-2009-1999,0,0,b30652910fac854f1349768ad802623d4d000dba2477f15bbf2af75be1247cc6,2025-04-09T00:30:58.490000 CVE-2009-2000,0,0,6fb82f9a06b9c4ca94c156373d83ffd1b9578b73d055c11711eba168d958ada5,2025-04-09T00:30:58.490000 CVE-2009-20001,0,0,f08db554df2f0fd964373473f9a286667c99fd1225bdbb0570dd8dbd8e6d42be,2024-11-21T01:03:53.800000 -CVE-2009-20002,0,0,f97750b57aaeba4aa9b9d894c8ad61fd748df7e340a6478e04dc58fa5766cf14,2025-08-21T21:15:32.207000 +CVE-2009-20002,0,1,474ccd269f766f1b22082e474d3c4970c441c12ace379e7a3fcd4962d1b35164,2025-08-22T16:15:30.107000 CVE-2009-20003,0,0,8b97cf8ad268750934d27e799c8cb6789d7c08472e7bfcb9588ac361d270b40e,2025-08-21T21:15:32.897000 -CVE-2009-20004,0,0,7f1d03c82cc8b90afc3e8176a0f0ea45f63ad4e0c6eb58ef436cf813568de7a6,2025-08-21T21:15:33.087000 +CVE-2009-20004,0,1,6882e7598d0b34feb1159b9f094fa70932874d98bdb4d819edcafa641bec751c,2025-08-22T16:15:31.230000 CVE-2009-2001,0,0,cc76413713859d8dea7b674b40d792e78702ab8a89b21957d1ceaa969e926cb7,2025-04-09T00:30:58.490000 CVE-2009-2002,0,0,3c5dc3abf68f08cc656b2506a535149b35c5144f37794ad0d42010d7452174c9,2025-04-09T00:30:58.490000 CVE-2009-2003,0,0,9ca49d8c388fa52de7710a9a658f3c842490ff29c523ee5cc4ba482ce7b0cd67,2025-04-09T00:30:58.490000 @@ -42731,8 +42731,8 @@ CVE-2010-10010,0,0,4bfb530acb00e83b09681488b98d06bac29754f3b62a552bc042f27341459 CVE-2010-10011,0,0,61f49d31fe31d7a749919479cb3a44541367b1881ec2f5154c0d19b574109a0b,2024-11-21T01:13:24.237000 CVE-2010-10012,0,0,c708bc63d9f88add799ffff60edff471eaa8d09462a19e8d58cb0bddb9d0d25c,2025-07-25T15:29:44.523000 CVE-2010-10013,0,0,c9f0131c32b939bdaf7dfb6c95ca79502b55a4f2b5f21728fda8a3cdff449fa0,2025-08-08T20:30:18.180000 -CVE-2010-10014,0,0,3ab9f5e472f3b90c3d7aa837baca2d40e9519534674ad9da36bdf54240fd4d65,2025-08-20T16:15:33.227000 -CVE-2010-10015,0,0,c421280ee001887db714fa0df5c1af8ac0a449afec5b420aec52691b8b8af698,2025-08-21T20:15:30.633000 +CVE-2010-10014,0,1,346e3e84772e8417d2ce0309f65b5e5d342272be501762546290804c47c3b2fe,2025-08-22T16:15:31.377000 +CVE-2010-10015,0,1,1ab3760856cf395753c4a8cf2f078e910a1e9be8748715c17651e1986abc39a1,2025-08-22T16:15:31.530000 CVE-2010-1003,0,0,25355236c571e9cdc8d1fe6c84f0e3d2d797a3681a4309d8ec76537dec4215bf,2025-04-11T00:51:21.963000 CVE-2010-1004,0,0,5e374f407edae5811e2464d25bee678a9761a3da1ee2e5e867b0781d4964643a,2025-04-11T00:51:21.963000 CVE-2010-1005,0,0,e326f97b0acc52fa7829741f3e5d33dfe8ca25f6cd55ad532bf0bb4aad212060,2025-04-11T00:51:21.963000 @@ -43717,39 +43717,39 @@ CVE-2010-1997,0,0,ec1db73b423e9d0c90b1821691af606e5fd27594ece27da39b7055cd265a33 CVE-2010-1998,0,0,a7ddcc65dfa2b1b20712bfd09d95312e097d8ba05375bc0c0e1cbdda89999b09,2025-04-11T00:51:21.963000 CVE-2010-1999,0,0,832844afe3511a3df68e7d120d8d0e5253ec29b9356f884d0bb5c2eb122cf0e9,2025-04-11T00:51:21.963000 CVE-2010-2000,0,0,2c48296f32e1a0c82d8b37fe06abf8f66eced8cb7d56819f79d6ea65b841b704,2025-04-11T00:51:21.963000 -CVE-2010-20007,0,0,d17f7154c74c660ff6955a4379d5c6d95e6071983a7e6a7aa625b51243ebe1a7,2025-08-21T21:15:33.267000 +CVE-2010-20007,0,1,ee5835ecbbb6f549adb99674d549a265e0b0442230508bac07374e47a9a14088,2025-08-22T16:15:31.683000 CVE-2010-2001,0,0,ec765795f2515b1cea6273d2f22651ba723c04b7200cdc0700753f7f504e6346,2025-04-11T00:51:21.963000 CVE-2010-20010,0,0,494b34a64bdfe74ae45ee0ba09424842f1013098a29d68185683a5c4ef2218e2,2025-08-20T17:15:33.023000 CVE-2010-2002,0,0,a66789f0370b2dfa10bceeda2c8d6f2555c9cfe47b035929bd3f397b58bbf007,2025-04-11T00:51:21.963000 CVE-2010-2003,0,0,a0acc8e6ab0e7017602b04488204d711cf7b5df1ed1db6c3918bcf3283f7f8ca,2025-04-11T00:51:21.963000 -CVE-2010-20034,0,0,98ccc0c468b5d1158863ef985a3feeb89a1d8a872e13d7f4e0b1ebd9a39c8752,2025-08-21T21:15:33.443000 +CVE-2010-20034,0,1,4812cbf8f4622fa4b38c4df377d8cb1521eeb4b50d69db1a8c27a74f9e75770d,2025-08-22T16:15:31.830000 CVE-2010-2004,0,0,4821bd030c2f202f3cc5d8434feddd9700d50b9445b83b05e0917cdf51711dbb,2025-04-11T00:51:21.963000 CVE-2010-20042,0,0,40e07dae5edb40beb077d8885de7064b731a35f057237787067ae94320437b57,2025-08-20T16:15:33.413000 CVE-2010-20045,0,0,a62500aa0872aa78f4c801bb31c511b16d93583de284c392abe1e40b8c8118b0,2025-08-20T16:15:33.597000 -CVE-2010-20049,0,0,563412445c0dbf2db4b911dc9567910a4dc0d43f013c81c4c81f5bc7307b51f1,2025-08-20T16:15:33.773000 +CVE-2010-20049,0,1,378e206af5f81cbc0e6b6845c67301758f7f8a0c05e2dfffe181b8ef47b06a86,2025-08-22T17:15:29.750000 CVE-2010-2005,0,0,d0e518bb4945078ab981e431a8dba230e4b5bc42e80d194a39dfbe0247b3d287,2025-04-11T00:51:21.963000 -CVE-2010-20059,0,0,c9ee40360ac45bbea766a67acb1662bbf6defa69548edb58de2fc55d1f07d00b,2025-08-20T16:15:33.953000 +CVE-2010-20059,0,1,7d589c7cfa75612d4a748e98d942f5fe4b378e354cf852a50823192ff614920c,2025-08-22T17:15:30.833000 CVE-2010-2006,0,0,e9812077806aeafafe9859298e2650f2d21bd1b98335ce7cb20e9e95a37872af,2025-04-11T00:51:21.963000 CVE-2010-2007,0,0,db297675af7aad74d91bad53f4b82a113feee810b4d1af00cfce9c9e6d838a20,2025-04-11T00:51:21.963000 CVE-2010-2008,0,0,2efe9ef37adab232f278e408f1b4a62d1799c275371d7ee86168680ceb6a5930,2025-04-11T00:51:21.963000 CVE-2010-2009,0,0,78456f7cedd233b0a2df261c915e6472b4112ce45c03e5badb2bd7fa3463daed,2025-04-11T00:51:21.963000 CVE-2010-2010,0,0,308bc2409f8eb2c95fc95d1b9af0cd8f3ae119ff7ea96cac4280f3c7af9fde61,2025-04-11T00:51:21.963000 -CVE-2010-20103,0,0,a2753df8f49795dc9c0a7dba7a298022afbf22450445f3f96e85969b4f52558f,2025-08-20T16:15:34.137000 -CVE-2010-20107,0,0,7f8662246558036b2ae835b8e944b4b95f1820130b148f91c05d09ec9bb9e188,2025-08-21T21:15:33.610000 -CVE-2010-20108,0,0,58b17ca4e09e4221fe766345292492f68737d5062b89f143fe1dde41a0142711,2025-08-21T21:15:33.780000 +CVE-2010-20103,0,1,8f9da45c576e99e2a0022f2f0e571cc85f0d2786a8bb67c0fa2604c23a5aacbc,2025-08-22T16:15:31.983000 +CVE-2010-20107,0,1,7598f94ad30dc02ba096438a88055d97918f4a50d517c521b54b395c7fa8b0c9,2025-08-22T16:15:32.130000 +CVE-2010-20108,0,1,16d99d1874f676b429c5c9dd53bea397b56b8a6383cd804e2ace93e7ab274c3c,2025-08-22T16:15:32.273000 CVE-2010-20109,0,0,234c41177fa6b352f09a9c1cd742b9cf298b12a62150692b9e798a5112ac1ce4,2025-08-21T20:15:30.870000 CVE-2010-2011,0,0,1817578cfddc613ff6b713e5c8d125726500a10a2b49197a92345274d22db128,2025-04-11T00:51:21.963000 CVE-2010-20111,0,0,88ea718975e14db108b75f3d32ea5568993b3d94c58dcac087edfcb0e733fbd8,2025-08-21T20:15:31.043000 -CVE-2010-20112,0,0,03ee0ec3fca41d745d2088d3c0bca2c40f2442eabfbf9b5445cf93b2e592d505,2025-08-21T20:15:31.217000 -CVE-2010-20113,0,0,cb2012ad1c545015b07d132d9d96afbe776979af2cba8c3f2718cebd9e74ce5e,2025-08-21T21:15:33.957000 +CVE-2010-20112,0,1,35f58b908955b6120c671b3e5650ecfe075b08e9294eb3d1e2e71518fe5b7434,2025-08-22T16:15:32.420000 +CVE-2010-20113,0,1,9ef3a960de411ca9d9478039325295ae13c5b0088d7ea05fa1ea3ea952ad8f79,2025-08-22T16:15:32.563000 CVE-2010-20114,0,0,77dbb6a1aa9d20e195663c3a7e01cde3a239477a68d195a211cbfe66ff33408c,2025-08-21T21:15:34.123000 CVE-2010-20115,0,0,a58d648b3b5b98dc40a79b89ad19dacf8ce6d9492203b2d71a1069d68c81dab5,2025-08-21T21:15:34.313000 CVE-2010-20119,0,0,f1788286f97a3b52d6f3ac2ee7e37dc9dfe650f53c85c5744f1bf37ed29fe27d,2025-08-21T20:15:31.400000 CVE-2010-2012,0,0,18134b5214e001e69e0398ba5c79e5afa403457b54443be9f1d4cc5d36db53e1,2025-04-11T00:51:21.963000 -CVE-2010-20120,0,0,30ad19c35e8c683eb3965a48056d1afccdb073f5c97e384953c09ed9474dedfc,2025-08-21T21:15:34.507000 -CVE-2010-20121,0,0,568a0c69011393b3d4800ec6595caeae4ee248303a743c767639564547a1c01d,2025-08-21T20:15:31.610000 +CVE-2010-20120,0,1,898906148b5fd56d17e7794a1f9ae29ded5012588fda4b6fd54647285c605fda,2025-08-22T16:15:32.710000 +CVE-2010-20121,0,1,740c5502042a7083419c325a8fab06eccf40c608454e4147580489acd492c0e1,2025-08-22T16:15:32.850000 CVE-2010-20122,0,0,999f3fbaab34a5afdcca5d12f5f99d9bc9042aecd0092e5b3f3a4f3d4559f560,2025-08-21T21:15:34.680000 -CVE-2010-20123,0,0,76d465c090415dc4468b27379c7baeec174e841f60e3ccec1f4a1d20bb0c8291,2025-08-21T21:15:34.853000 +CVE-2010-20123,0,1,0887c0d50630c03042e74aaab8a65af0ed3f7a0258108583a28ef55c385e4a92,2025-08-22T16:15:33.003000 CVE-2010-2013,0,0,6345e71dbca94958519ccd9859537207327d4c2a4b53a2630cfb6d8f4e0cb686,2025-04-11T00:51:21.963000 CVE-2010-2014,0,0,db553f1458dd2d3381bcdba0c45b364a51bb6e94e8787f9566fea331e00a2be9,2025-04-11T00:51:21.963000 CVE-2010-2015,0,0,579771dde5f9aebda0b8f05797f2856f5940d97174edac992105113f25679f3e,2025-04-11T00:51:21.963000 @@ -47894,18 +47894,18 @@ CVE-2011-10017,0,0,e4906910f3ceee36eae1c95b723b546db11872da92115e6d29a0c9f5c2025 CVE-2011-10018,0,0,6e94ca91d43359cec45dbc22c8bac9e01660607f22f03edd756ee28b9112a260,2025-08-14T17:42:18.333000 CVE-2011-10019,0,0,6f4e43401e1ce040767cfbdf19749aa74b17235de68257b64f002f1d10a24867,2025-08-18T21:15:28.570000 CVE-2011-1002,0,0,d33347c721e3b89d36f002b1fe6013c7e41d667ea328068299497443349dd1dd,2025-04-11T00:51:21.963000 -CVE-2011-10020,0,0,c0374fa782af0d57dc8709894cf0c37eafb36f534606be4206598ebe3f8312df,2025-08-20T16:15:34.327000 -CVE-2011-10021,0,0,1f07e5d135bfd260d1fad406f4f408e690a36882ee689a21c4db1ea045a1879c,2025-08-20T16:15:34.510000 +CVE-2011-10020,0,1,59463f6135c3e23dc98aa11d788064c1b464da585932c1889f85787ce82c3e41,2025-08-22T17:15:30.977000 +CVE-2011-10021,0,1,1206ce91fba44027bd85ed47b6a5538ba2ae415eceb93ef9fa08c513afbcc801,2025-08-22T17:15:31.127000 CVE-2011-10022,0,0,53134ec80224e945c93f6582c1a284def4537e6157d84cdd3cbceccfab19bb29,2025-08-20T16:15:34.687000 -CVE-2011-10023,0,0,0b12764335acab54e7c07de946799ef5bb42633131f0eb67e3915ac7f56b4aeb,2025-08-20T16:15:34.870000 -CVE-2011-10024,0,0,32f9f142763c8ecc168064b89f16dd241bc22a42acda73abcbee1527365dc165,2025-08-20T16:15:35.057000 +CVE-2011-10023,0,1,389ca7541c8cf2d20bb1214c30a12f22a624a814ee4a77aa10c9d0ffd88d0898,2025-08-22T17:15:31.267000 +CVE-2011-10024,0,1,a982abe0e79032dc458b466ae89de5208077ca6326a1343644ee7b7e176941cd,2025-08-22T17:15:31.400000 CVE-2011-10025,0,0,3cb98f3f945fc035bed74daa76b72f0ea6e1c4444b6fae363a510492f69c874d,2025-08-20T16:15:35.257000 CVE-2011-10026,0,0,279f8c864c5ed87c7f17c26f2e59272d668a527b0c91f05131d5d5831aa1229e,2025-08-20T16:15:35.440000 CVE-2011-10027,0,0,67ba461cdeea1b73704bd7b8afd55dd61cba691d4876195dbb5dba24fa0f6dde,2025-08-20T16:15:35.617000 CVE-2011-10028,0,0,53f275a4b2e11e9fb730ed3d4cf0582ae75d12598d5e7337195df7f565e3cce6,2025-08-21T18:15:31.740000 CVE-2011-10029,0,0,21e3497b51366072b20f18203b53a1e3dc3d58115fb3c2ddb8a9bc4bfa287950,2025-08-20T16:15:35.973000 CVE-2011-1003,0,0,d7e1f3fe9a186593ca7a3a72b1b932ddf10706cfcc913dbcaa45bff48d214fa4,2025-04-11T00:51:21.963000 -CVE-2011-10030,0,0,a9b8369fea5a91c1a098064c9604b93fa773476f432fcac51ae7d7593d54623d,2025-08-20T16:15:36.150000 +CVE-2011-10030,0,1,e31ea69e96fdcbf1cf92873b8f75ffdd2649f02f304e8608ffbb0e65d5e5fa3a,2025-08-22T16:15:33.140000 CVE-2011-1004,0,0,a38b17200a4783a791b75f629337fa16d3282f2fffb6fa6a8bb0916d37953e64,2025-04-11T00:51:21.963000 CVE-2011-1005,0,0,94c55b66c993a5537f11fde2d98c14315ccd2dc9c5965bcd3f59f0af0eea936e,2025-04-11T00:51:21.963000 CVE-2011-1006,0,0,c381b8885d54809d5ae482f3bc3535cdf4621a1d316d57568cc2b1630434b88e,2025-04-11T00:51:21.963000 @@ -104469,8 +104469,8 @@ CVE-2017-3887,0,0,823cbbb91f3a1447a934fea55d90eb6165338283a2369eb45c8b60d934fc3b CVE-2017-3888,0,0,48b2bd94d164382bb70d868b6dca985ef77fed289b201cdbd7b0eb1930301dfa,2025-04-20T01:37:25.860000 CVE-2017-3889,0,0,df3f7b57bc3182ac771a26ebb908e793c963299ec2f59ec629784b572b5fc529,2025-04-20T01:37:25.860000 CVE-2017-3890,0,0,b88821d1c141be7180edfe99544f44daa6303d9a811211d6d3084dd9bcdcce7d,2025-04-20T01:37:25.860000 -CVE-2017-3891,0,1,ad5c76fec02726c04253e5f4a3e51658be6dabca2b3532c5c9f4a3766268431e,2025-08-22T15:15:30.053000 -CVE-2017-3892,0,1,1638b6d1f5ca9d75609dece06d43890277a80550fd0338427d05387caa588195,2025-08-22T15:15:30.307000 +CVE-2017-3891,0,0,ad5c76fec02726c04253e5f4a3e51658be6dabca2b3532c5c9f4a3766268431e,2025-08-22T15:15:30.053000 +CVE-2017-3892,0,0,1638b6d1f5ca9d75609dece06d43890277a80550fd0338427d05387caa588195,2025-08-22T15:15:30.307000 CVE-2017-3893,0,0,3e6d66f6c392fa0ca9ec3d050f02994f76445f8a289f093ce40518e4e6af2aa6,2025-07-22T16:15:24.910000 CVE-2017-3894,0,0,ba39fc84e3c5e0f6325c4659065ac9087f56e975cd0cf66104900d467067d5bf,2025-04-20T01:37:25.860000 CVE-2017-3895,0,0,28d85be5da425d90802a147aa1d4912909d3483f19af82cefefd7029b7189aee,2023-11-07T02:44:17.423000 @@ -109400,7 +109400,7 @@ CVE-2017-9367,0,0,bdc0dccb83f6baadbf806d2ea4fcc0ec35f9b756d67c15dc6755e1f9a4acdf CVE-2017-9368,0,0,8b44babe743b8d976115f08bdbf63352de52f4fc288fc45e2f18ddfad58984d4,2025-04-20T01:37:25.860000 CVE-2017-9369,0,0,d3e40b7d52d4c9d6dd8cb78ee3c572f1471842efd21812f617ce1baa878c17e0,2025-04-20T01:37:25.860000 CVE-2017-9370,0,0,3d25480f53e3929ab0ae01a688c1839b50aa1ea42d08ab67377a708d07bc4d90,2025-04-20T01:37:25.860000 -CVE-2017-9371,0,1,6ac847cd6adef23e6f4ee2f0498d4b4b083b246aaa8a5aea69919d1880328fcb,2025-08-22T15:15:30.517000 +CVE-2017-9371,0,0,6ac847cd6adef23e6f4ee2f0498d4b4b083b246aaa8a5aea69919d1880328fcb,2025-08-22T15:15:30.517000 CVE-2017-9372,0,0,c705123da22159ba0253c5c95f71f38d63b16b84d6b1fa019b67e398d52139e9,2025-04-20T01:37:25.860000 CVE-2017-9373,0,0,4c1400d2b79e86553f89ec4ebadc4661b35d6dda60766335638c62b426f3e6a6,2025-04-20T01:37:25.860000 CVE-2017-9374,0,0,34b34e54378c4f86fa4bccbab0de1eca8f339d0a4981742d7e3de8f76c3568e7,2025-04-20T01:37:25.860000 @@ -143637,7 +143637,7 @@ CVE-2019-8994,0,0,acd37daa65b3e66281fbcd61a573b6eba244c7107824fc50ee9f65e1d910ea CVE-2019-8995,0,0,8ba8411929519663385ce756baf15b38669e161b614b13961bc5bd82d05dd0a7,2024-11-21T04:50:46.910000 CVE-2019-8996,0,0,212e5953f0a8b56eeb28f6a44a0e02c66e8c420b6b03c9296f1e25fa7932ddc9,2024-11-21T04:50:47.030000 CVE-2019-8997,0,0,7ce54a99bd327b95e5d6bdb3b44f44197e1c9655da97441dab00eb036ae00b96,2024-11-21T04:50:47.170000 -CVE-2019-8998,0,0,15096597d581f64f931b4e3825d666c5ee586737fc46768859226e97bf745832,2024-11-21T04:50:47.273000 +CVE-2019-8998,0,1,ccb72416f8dd312dd2091098abedf101fb541e315e296161fbed1b6ad34efcdb,2025-08-22T16:15:33.343000 CVE-2019-8999,0,0,6dfc7650497b487d852fc007d0e43c74ccc723e4bf586190e95dfa4d9dd68977,2024-11-21T04:50:47.383000 CVE-2019-9002,0,0,47c8eeb868dcc29c553038429e99dbc8c5f0b58c607d7981be065bfcec820bd7,2024-11-21T04:50:47.490000 CVE-2019-9003,0,0,02edcfadb2a4c67e49fdcd142d2ad42a9047c76ca731d55e429eb290c9901f77,2024-11-21T04:50:47.627000 @@ -162538,7 +162538,7 @@ CVE-2020-6921,0,0,a6803465531bf6efb497dba6689fb6797c27304b443ea84d31d5e6a6b68b4d CVE-2020-6922,0,0,df410b871b786c8a370d2640b1a0fc44521e2f6d70eba111aa62117def84df7d,2024-11-21T05:36:21.743000 CVE-2020-6923,0,0,dc401491f2a9a934546984521cd80fec118d7399531a3273cc21572553dc1e42,2024-12-19T19:15:06.030000 CVE-2020-6931,0,0,d35ff7f109bd87987257ec2569f6e496391c4876e3bb031b8b04f36e996f8bf7,2024-11-21T05:36:21.840000 -CVE-2020-6932,0,0,f97a4203cc6642e70b01887182480836158915ff5077454de0a7752cac053be0,2024-11-21T05:36:21.940000 +CVE-2020-6932,0,1,b24510c4e9fee9f5f2b548d2690824251e61288c011835406d369af192fa901f,2025-08-22T16:15:33.570000 CVE-2020-6933,0,0,99c391d48138f3d235de4258e8f6bf6e153439ed5ff734d1043851eec434b322,2024-11-21T05:36:22.040000 CVE-2020-6937,0,0,91b841be049fde939621299f731effc791b4469dd39c3a7f4b21c1f9576ea28c,2024-11-21T05:36:22.137000 CVE-2020-6938,0,0,fff99ba294d0850595298fa2352478fe77ef67e7fb7df00ab00199d066d0ff3d,2024-11-21T05:36:22.230000 @@ -168909,7 +168909,7 @@ CVE-2021-22152,0,0,e4294e75bb4d7e723cfb57d563b8f9c2f336f46a7aa8b29b793ecf4c95e45 CVE-2021-22153,0,0,20529b642f6641964edaafbb54813113d7248ccdce4dc36707d789dfeca3a03c,2024-11-21T05:49:36.637000 CVE-2021-22154,0,0,0d73ba3d5c1ed398e548d0699040ad35f042466cbe38698c471cf76dc98d6f35,2024-11-21T05:49:36.740000 CVE-2021-22155,0,0,7b7fdade405a3ae2d2071b9fc19eeefee9a9a1a48aebe9f73a3875c542be49e5,2024-11-21T05:49:36.847000 -CVE-2021-22156,0,0,8efb7304f3758a1fa5074400539d3e3a4cb271547d37035625b7e7ff3f863f1b,2024-11-21T05:49:36.947000 +CVE-2021-22156,0,1,374e406b80f62769e687c3db336590e4590a7207164d0e15863457ecddb1864e,2025-08-22T16:15:33.777000 CVE-2021-22157,0,0,9f422e26ed862c220ea14258d6b0971df5539a34c1487574057e2e2b1cb091e9,2024-11-21T05:49:37.050000 CVE-2021-22158,0,0,5f009069c4d85936ebc5772126e360af7ebf961fdece07bb491f983e85717836,2024-11-21T05:49:37.193000 CVE-2021-22159,0,0,3cf91b214a7bc7a8e9d4ac2689827ed8d82a7cf8e382a5328cc7457bfc37a75e,2024-11-21T05:49:37.330000 @@ -176493,7 +176493,7 @@ CVE-2021-32021,0,0,b4f0223b26295b89543e00a809e1ef05b354472031685479d669f043a1a93 CVE-2021-32022,0,0,e619f427d9e4f8224d46cc2332df5586ffe6855f7bc07e34feb91c3a95032228,2024-11-21T06:06:44.017000 CVE-2021-32023,0,0,098299186f36d0699909b4ac5245abbaa40fc70fc37c8b2aa7b9a4e86b2b709d,2024-11-21T06:06:44.123000 CVE-2021-32024,0,0,cefd335e0763de40661e0d5996c8c6d9d4564ca89e235293d368c22475fcdfaf,2024-11-21T06:06:44.233000 -CVE-2021-32025,0,0,be1366e60cdc64085a7ca3378dd8b2945646288a6056d66d9eaf86e564481eb2,2024-11-21T06:06:44.353000 +CVE-2021-32025,0,1,64838f50ef918d7fdbc9da6122614fa45030daa0720610d16d93b8f66dc585fd,2025-08-22T16:15:34.010000 CVE-2021-32027,0,0,5ee2aa7a5aa3fa8bb911c577fd863dbdb076a0ad3ef0512d7dd32317414b22da,2024-11-21T06:06:44.467000 CVE-2021-32028,0,0,84c85cca513953c25777bc582de148d107114d46d9b13227dc0a8bf544f4d415,2024-11-21T06:06:44.593000 CVE-2021-32029,0,0,56c471bfaedf8eeeae330cda0d2954472dbd44261f536849dbc437841365a531,2024-11-21T06:06:44.717000 @@ -189328,7 +189328,7 @@ CVE-2022-1238,0,0,d63394dcb4ef11cfc6d423a18172c728594824feb8b943055d353facf14cd2 CVE-2022-1239,0,0,f12b3f9d4357ca6d33ce6c39d86fbe18447eb7c43c3776b8265eddd486b9cc30,2024-11-21T06:40:19.367000 CVE-2022-1240,0,0,11d19d2461122d055d17c8b78dbd2a9a418498614d46dcac335a75beb7fb8279,2024-11-21T06:40:19.473000 CVE-2022-1241,0,0,673c1b757ab6edd381e368028fd46ae2fbde04d6f255356e581d5638dc032a2e,2024-11-21T06:40:19.600000 -CVE-2022-1242,0,1,b6edfe001961e559477fa5633ae0f1a073c21287715d96bf7c9449667bab13df,2025-08-22T15:48:00.753000 +CVE-2022-1242,0,0,b6edfe001961e559477fa5633ae0f1a073c21287715d96bf7c9449667bab13df,2025-08-22T15:48:00.753000 CVE-2022-1243,0,0,c2ef34d7a4096e4c1ca5e1b1702b10916426d430c6145e0af182dc81ae75ebf2,2024-11-21T06:40:19.820000 CVE-2022-1244,0,0,0a2cfb189cf94a20e54f8df0c3defbfab7a162ceec95cd66d690396b83850b8f,2024-11-21T06:40:19.933000 CVE-2022-1245,0,0,5e45d08cac6a518015ad0df0cd44afa19aa4a0a8a755e99fdae23beea7aad545,2024-11-21T06:40:20.053000 @@ -214321,7 +214321,7 @@ CVE-2022-49666,0,0,8598dfccdf9c584e0209dcf02091970feb361c53d26f0fc48a520e93fcea7 CVE-2022-49667,0,0,72f1b0b989d90809ec0cd114e5ae8a25fd2b0d4f3fa29d2ec01097f6b9346f5c,2025-03-24T19:07:43.713000 CVE-2022-49668,0,0,b0cde9a0e4e6f7761912bcde752cc58ebf5a2f5a40aad6a0b384f45a33e93fa6,2025-03-11T22:09:28.633000 CVE-2022-49669,0,0,b5c85e80a0f53096f53139203634bf12011ca03dba8534984937e3c34c92c658,2025-03-24T19:27:11.643000 -CVE-2022-4967,0,1,147036b91eeca0cca529e4a4dd1fde3aa91907905d4a33570d0bf57c1e4b1145,2025-08-22T15:04:16.253000 +CVE-2022-4967,0,0,147036b91eeca0cca529e4a4dd1fde3aa91907905d4a33570d0bf57c1e4b1145,2025-08-22T15:04:16.253000 CVE-2022-49670,0,0,d1ae10f6e206def3b91114823fd55ccb66046b7f0fa7ba911303a50c040699a3,2025-03-11T22:26:35.913000 CVE-2022-49671,0,0,3cf9fca3e710c5d1a728f13c9f3d3f156864daa791bc1cb6dcf94af86b63acb4,2025-03-11T22:27:13.447000 CVE-2022-49672,0,0,763cf2f8dc77a55f6861bc701351ab42ebbedc4a74019f430082d7357628e1c8,2025-02-26T07:01:42.130000 @@ -227285,7 +227285,7 @@ CVE-2023-32698,0,0,8c71e47c7feffb3fe435e8801eff9fc9013d144ba9e56e9e07defdc1a6842 CVE-2023-32699,0,0,749bd2fd7c9325fab33e4b75710e1a6f9a35707a90a035a89a315166b3d15c48,2024-11-21T08:03:52.693000 CVE-2023-3270,0,0,69fb24414bda547f82f8a9e91ecaf60886cf8c1dea71a5623010b3e4d89ccd51,2024-11-21T08:16:52.190000 CVE-2023-32700,0,0,f9eed0bcc38f01d19213068b0b27bbe4070ac921d9965b2e65a67a9fa7113095,2025-01-31T16:15:29.803000 -CVE-2023-32701,0,0,70f3d5b2a314c90f5efe43173ef139096dfb668d722c47d0b7dc9164366e4495,2024-11-21T08:03:52.980000 +CVE-2023-32701,0,1,1ef139c3e2defe50affcf20e7209615c56dcf2512aa0a501bac0c4084e929405,2025-08-22T16:15:34.237000 CVE-2023-32706,0,0,41a17a739bb404f01503c849ee1c4461346713656f8b82e529ab08cf062ff505,2024-11-21T08:03:53.107000 CVE-2023-32707,0,0,3e94af58aba7c3b886fe708c1645dd63ba926c5f42a7c9599692a272c8800874,2024-11-21T08:03:53.250000 CVE-2023-32708,0,0,04ffa8296d19770c18a4661f6970449e064615df56c77632b471039a87289435,2024-11-21T08:03:53.407000 @@ -238324,7 +238324,7 @@ CVE-2023-47209,0,0,79e2d58ef9eac2058fdc458d425e6476b111a0f8f60bf975ef8d7b5e658e7 CVE-2023-4721,0,0,5838ef29e69f27d6ea0271ccad9df90b06092ed93741e34ee635df2345bda343,2024-11-21T08:35:49.690000 CVE-2023-47210,0,0,b1f72e309a869eb2b0908d32f615abb10d5fa1939f542b825879cc3281368383,2024-11-21T08:29:57.657000 CVE-2023-47211,0,0,b4b52275e6500768d2e17f63a710e570eda8b27dd840cf43c49e7ffa94630ccc,2024-11-21T08:29:57.783000 -CVE-2023-47212,0,1,74f7693910043e465aff1dced37c7f7995880758c32b5aa451539e801c44555b,2025-08-22T14:35:34.047000 +CVE-2023-47212,0,0,74f7693910043e465aff1dced37c7f7995880758c32b5aa451539e801c44555b,2025-08-22T14:35:34.047000 CVE-2023-47213,0,0,3f541ceca572e2565841fe25b15444fbdb604d5e4c749a2f011cd97ecf0296de,2024-11-21T08:29:58.057000 CVE-2023-47215,0,0,91042ce0e6acb6f781f0e65642ca1a1455d7f41ba3a18ce6f022abf8ef9dc6c5,2024-11-21T08:29:58.297000 CVE-2023-47216,0,0,83a1d35e7e411350f2ecd241e02cdd22c5ed04226349144110de14ea128817a7,2024-11-21T08:29:58.430000 @@ -240122,7 +240122,7 @@ CVE-2023-49600,0,0,e8cd8de4b2ab88bf4f8aa920e4b463bde1ee47923e6fd2d0106580cacd664 CVE-2023-49602,0,0,a12c06e1c2027365532346b2edbb24aca3a0ac358acd9f611803ef679cef3d63,2024-12-16T19:59:21.097000 CVE-2023-49603,0,0,f58d77fe3b83a54efd36e03481394249b1ba956a42002e122efd004ff9e97d2f,2025-02-12T22:15:30.623000 CVE-2023-49604,0,0,f9b0beee4775c1fa0cb607b85a243a298339c39ec20770099d304180602750e2,2025-05-28T22:15:20.233000 -CVE-2023-49606,0,1,42c6bcb9bb9c6c9edd1155e30037641f06877bbf6385888f3d09a6a28e3ba156,2025-08-22T14:44:51.160000 +CVE-2023-49606,0,0,42c6bcb9bb9c6c9edd1155e30037641f06877bbf6385888f3d09a6a28e3ba156,2025-08-22T14:44:51.160000 CVE-2023-49607,0,0,c1d47d2485033d1538c7cfb6f323c8c3e048cbbcf85417d72c0ec588b46db7a8,2024-11-21T08:33:37.887000 CVE-2023-49609,0,0,b73f422c5984e5dd46d62810faadf6b16f12bf840c2578305d1ce83f9f9cc28b,2024-02-14T18:15:46.380000 CVE-2023-4961,0,0,4fd30b7ce60140a70719e18b694005001db9514006d55fc73b4a295c09f84e64,2024-11-21T08:36:20.927000 @@ -248574,7 +248574,7 @@ CVE-2024-12808,0,0,c2bbaa9c21df8f37ad99655da6b944046c7039fd80bd61ad996f98d1a6511 CVE-2024-12809,0,0,612259b2cda97c5061140929bc611da24ff06e8922b144348f21ead0b174d40b,2025-03-07T07:15:21.380000 CVE-2024-12810,0,0,bc7dd94c64fdb6b3a597ed11abbe18e14edfa7b16233c983106a27c836dd0fee,2025-03-27T01:33:31.260000 CVE-2024-12811,0,0,cbebe7e51738cd8bd29e461cde6a0001affb6783b830fde9fb7108c4a80fc1a2,2025-02-28T00:15:35.790000 -CVE-2024-12812,0,1,dccf0ede214c3c8da9f602988ae30c404ff230b3b84bd3e3b9d69633cfe3198c,2025-08-22T15:15:30.900000 +CVE-2024-12812,0,0,dccf0ede214c3c8da9f602988ae30c404ff230b3b84bd3e3b9d69633cfe3198c,2025-08-22T15:15:30.900000 CVE-2024-12813,0,0,3b639e8b48ce8f9359f78eb0fcbfb138e695095dcc7dc21b7df78520a10ef17d,2025-02-24T14:24:12.300000 CVE-2024-12814,0,0,9d88ed8035fdc2fe3c6fe32e0accb8f4976205d682521fcc6260cfe967c9dc43,2024-12-24T07:15:10.800000 CVE-2024-12815,0,0,98810fcf8648fec64bca31a85741fc1bbd90e62f5f053a778963e64e02a51f3a,2025-03-05T10:15:13.563000 @@ -248820,7 +248820,7 @@ CVE-2024-13046,0,0,7207b1a4f360c0854e5156d1a0656b15f6a07a63557c09ebaa0d17a10e070 CVE-2024-13047,0,0,415b9f918a3b4452de2c9cf279e3f708d869cdf08696ce9797e052981dd4e654,2025-08-08T17:21:06.790000 CVE-2024-13048,0,0,94a2ee661d49415ef9879a8fdb49c4d94786ce03ff75f61a25bcdcbd4a970a5b,2025-08-08T17:25:55.697000 CVE-2024-13049,0,0,ffa31decd5b800a1225aeada950d89ec566b4701148d181e33faefd4ea00fbb8,2025-08-08T17:21:13.607000 -CVE-2024-1305,0,1,341cf9e5864e627bf17c3dce8f03e0b0bb8339c8a135de5f0841888593b24741,2025-08-22T15:36:38.907000 +CVE-2024-1305,0,0,341cf9e5864e627bf17c3dce8f03e0b0bb8339c8a135de5f0841888593b24741,2025-08-22T15:36:38.907000 CVE-2024-13050,0,0,2f95f49a98ee2b927873c8a4799939050fe5a4ead743b8ced8639ef709fc00cc,2025-01-03T17:41:08.837000 CVE-2024-13051,0,0,e2bfef788998fb155c81675dd1f28141983b9837968453cab2c4ec820298fc19,2025-01-03T17:41:21.100000 CVE-2024-13052,0,0,5dffb894b36608d6b22aacc99d7f252feb22305e7a746eee0183dffbfd80b803,2025-05-13T21:10:05.200000 @@ -248973,9 +248973,9 @@ CVE-2024-13197,0,0,08b42fc0b1794dab55034bc81c9f23a2ecbb64e6e27956fbbe10ebbf9cefa CVE-2024-13198,0,0,e7d1da76c7b86eefe8989b3f7616a76a0de2b5dd6c9dae3822c042cb6fe51da7,2025-01-09T01:15:07.970000 CVE-2024-13199,0,0,2a5bc1a0e89d5fb44f0a2691d6eda6cbe7f12489cf7ff6f7b3c508fb81e8bbe5,2025-01-09T01:15:08.170000 CVE-2024-1320,0,0,aaaef1a9478a9ac2768f9b592c02529e1f1a3518e3f017f4f309a188cefbc9da,2025-01-15T21:23:22.623000 -CVE-2024-13200,0,0,d822abfe6e5e94a697ac2e9a1763a17382b3dffc110b1c5388c29c0804177820,2025-01-09T03:15:23.820000 -CVE-2024-13201,0,0,5d359878f9b931ff0ca27dbd2120d63d4ca3a12566a5da18deebf81e1b6c50cd,2025-01-09T03:15:24.020000 -CVE-2024-13202,0,0,f279d957bc8c15549a1fec1f8d734e200c7292a1f3e6ec699b88a8730e6ea9a0,2025-01-09T17:15:12.110000 +CVE-2024-13200,0,1,3a6f8066b58e7b831918c662e4aaf1c956697b6f19a4278718bc62c2a7442050,2025-08-22T16:54:51.633000 +CVE-2024-13201,0,1,ebaf9a3b0a4cb584696eef1b89cb5d4934ff9501d615d18f6a210649b756317f,2025-08-22T16:47:34.393000 +CVE-2024-13202,0,1,3a7c035ec3ab7e6c8cb667d63bc938fb37bcd9d51f9a7c2dca887ab863579a34,2025-08-22T16:46:09.560000 CVE-2024-13203,0,0,9705c29b8f871ad171b9611037f417cc06952b9e0e2c9a17f04e7637c3cf9fc8,2025-07-02T19:10:33.930000 CVE-2024-13204,0,0,8e44c9562524eef9dd90633de35532c3f176504884fae9d025814c79778b5e0e,2025-07-02T19:10:51.463000 CVE-2024-13205,0,0,dcea910338790025bd48cd39fb8d1254813858a4906d15f53839b63656fc82e1,2025-07-02T19:10:59.873000 @@ -254720,7 +254720,7 @@ CVE-2024-25571,0,0,8a68e54b2e23ebcb2672041b2be0c0d79b94a807b69a2bcde573f17191362 CVE-2024-25572,0,0,cbed3561a996d8fc0913552e9f85910773571a0e0f73b275ef35dc4399b8665b,2025-04-08T15:17:15.773000 CVE-2024-25573,0,0,3dc7890d0876aeda5fd7a0442bb26317035c49122a005c3f76672f2962b8f410,2025-06-16T12:32:18.840000 CVE-2024-25574,0,0,3a6d003e6549d6e7e9bf748f59f234891c4a95854309550ae4079efeefd3444d,2025-02-27T15:03:31.583000 -CVE-2024-25575,0,1,9a3d2b5a78f6a594cbbd0d10ed65734e66d6aaaa60fd344fb44d8577fbb63363,2025-08-22T14:59:40.297000 +CVE-2024-25575,0,0,9a3d2b5a78f6a594cbbd0d10ed65734e66d6aaaa60fd344fb44d8577fbb63363,2025-08-22T14:59:40.297000 CVE-2024-25576,0,0,8c96953d02c3ecec70b0880ceff32ab69ff1846b5ba0dbd1e89bf62fd8ac88d6,2024-09-06T20:17:14.003000 CVE-2024-25578,0,0,b291a1b14dff4847ec2fa465b23a0265b9bdb2f43730cb4d6c5224ff2fd0a984,2025-03-06T19:29:44.387000 CVE-2024-25579,0,0,53dc5740ced037e66b1a2ba8c7a85647afdc0321b2de6a97263699799a9bccc1,2024-11-26T08:15:04.400000 @@ -254793,7 +254793,7 @@ CVE-2024-25644,0,0,bb9e7893bb7621aad6f2b06abb4b1033461a51b4a97693e6738dfdfceaaa4 CVE-2024-25645,0,0,7cf37aaf4a1abce5343f2db3c0c82d152ab259b33688c08265422a7d4f35dde4,2025-02-07T17:24:54.693000 CVE-2024-25646,0,0,44fe52cac33c14917646765b719e0181c8f6a16956565ea90bcc52cfa7963b87,2024-11-21T09:01:08.960000 CVE-2024-25647,0,0,6ba463439932268f415cad2033565cebf5b38360197928ebbf36d39da23efd4d,2024-11-15T14:00:09.720000 -CVE-2024-25648,0,1,87dd188b0ee84de1ec6d667adc7b93759fa66b4732afbf58ee0b60ed140d7e27,2025-08-22T14:59:29.430000 +CVE-2024-25648,0,0,87dd188b0ee84de1ec6d667adc7b93759fa66b4732afbf58ee0b60ed140d7e27,2025-08-22T14:59:29.430000 CVE-2024-25649,0,0,f907c9f40ce075920b5c90cff36cf33b5eeb4558cee7c939a2d96c2ac6e6d098,2025-04-30T23:59:35.150000 CVE-2024-2565,0,0,a1a33c835df29d44841d5cf6492a04b326869914b3081ac90eeb608abd67499e,2025-03-05T16:24:27.963000 CVE-2024-25650,0,0,18495710df2a57190f017b2a6cef92a1bac75c91974d09788dde0fdae98c8263,2025-05-01T00:01:43.273000 @@ -254984,7 +254984,7 @@ CVE-2024-25934,0,0,9a55a9b213dabb90eeb6a85d70af346fca0c15be6aea213ded35cfd988d03 CVE-2024-25935,0,0,964e1f50a276713c43434665079f98de2ced69b9ac2920d0cb11348af9544ec9,2025-02-03T21:58:36.570000 CVE-2024-25936,0,0,883e76a8e3b646c5fa72740a548a845a65d2a06142b661c1322ccee0cc64fa50,2024-11-21T09:01:36.543000 CVE-2024-25937,0,0,cb10067b671faa373f2f54909e33ac3fe81f19290e3c4238d600501360a9d034,2025-01-24T18:42:26.510000 -CVE-2024-25938,0,1,243aa2f7a4bae38cbf40e42787ae16c37c6bc5c4e96a8b45583f2ada88b18577,2025-08-22T14:59:22.037000 +CVE-2024-25938,0,0,243aa2f7a4bae38cbf40e42787ae16c37c6bc5c4e96a8b45583f2ada88b18577,2025-08-22T14:59:22.037000 CVE-2024-25939,0,0,d6b571f5f23b867ce69433950ed89d967be31e9cda71de42a75794f9be84e6b7,2024-08-14T17:49:14.177000 CVE-2024-2594,0,0,3a1f288122800386d36f2e815177bd01da5eb9e044361ff5e7e4a451a5ea83d5,2025-04-17T21:02:41.620000 CVE-2024-25940,0,0,bb1f4d05aef3e28c9ada87610f93e59bbe24d667f71adaea41ae1f5078b6942f,2025-06-04T21:24:01.180000 @@ -257533,7 +257533,7 @@ CVE-2024-29069,0,0,4e2e8f90811126be2345b98ed47ab42149083ecf4f708fcaf6870de0665ab CVE-2024-2907,0,0,8a6e581ebae687003e5a40763537baad25936691b177cdef8ca8e50b5197442d,2025-05-14T17:45:21.637000 CVE-2024-29070,0,0,a8c8e3d38ce546cab4234f6e3b4e8b99465158c2d20c86c5490689b862e551ec,2025-07-10T18:24:57.027000 CVE-2024-29071,0,0,1ec265ffe73f91eb0b6fd3b45d9452bc68b5dec05ddaebfc5b194a5be162e0bc,2025-03-28T08:15:14.327000 -CVE-2024-29072,0,0,57f80ce7c236f332a7f5c114423b69d762766a5c42687b949a1667cb5c018eb1,2024-11-21T09:07:29.887000 +CVE-2024-29072,0,1,8ae9c0560a762724185e2ddacd7ae87bc4701e0f2524117b74338bcefa5f1612,2025-08-22T16:03:32.227000 CVE-2024-29073,0,0,a97c1130a7ff47c79178263365495d696944009337b55c711a86468fd2e28d23,2024-11-21T09:07:30.007000 CVE-2024-29074,0,0,37fef7b70252074605b40dcd9b7a5a1b496283b8ab455c06a52e22d00ddd7f49,2025-01-02T19:12:32.683000 CVE-2024-29075,0,0,c54939fdf2711f44320d1fc65a243f37f96762abe83d15bb484ae46355a45987,2024-11-12T13:55:21.227000 @@ -262958,7 +262958,7 @@ CVE-2024-3612,0,0,eafcef032147ebc414d668710ae239f023dad6821f9f27cd2830eda2f890a8 CVE-2024-36120,0,0,d6cf1ecd73523529b75192a706c4fa17a3e33adf503d661222f2ad69941c8e4c,2025-03-06T17:51:15.163000 CVE-2024-36121,0,0,ea5bca8e895d35d44db7855d1c126aa065d33ef7972857b1e702a1fb865283d8,2024-11-21T09:21:39.927000 CVE-2024-36122,0,0,c2aeae4cdd255ad31a0a91d4f75c2d56ebaea85629207dfb3b6b08cdce139743,2024-11-21T09:21:40.070000 -CVE-2024-36123,0,1,b91a57d4d37c17f539a90b8d6a314f264f9cea02515dcd7b5a91d4ca0f80ed35,2025-08-22T15:58:19.607000 +CVE-2024-36123,0,0,b91a57d4d37c17f539a90b8d6a314f264f9cea02515dcd7b5a91d4ca0f80ed35,2025-08-22T15:58:19.607000 CVE-2024-36124,0,0,e3862e88d4a5d6d33d0d66afb09f98577abcce8fd75bb226761b494dd96ec1f9,2025-03-06T17:57:19.197000 CVE-2024-36127,0,0,561d1d555f02c12c62e6101b2b5f8e1ac7be4167f3cb4d3847f27be6b4d55188,2024-11-21T09:21:40.483000 CVE-2024-36128,0,0,64d86fd38de118293b58a480f45da6320c6fd14e64e3f37e62e29a7a0f9d73bd,2025-01-03T16:24:06.250000 @@ -263785,7 +263785,7 @@ CVE-2024-37163,0,0,1447be2061e5d54d7a42e1e7b6b7d748cfca1a213c873b883e0653616559e CVE-2024-37164,0,0,bb9b09205854faaa97afcc283ba363b035a5582a0884d0c8a886be0c3f989002,2025-01-21T14:35:52.867000 CVE-2024-37165,0,0,c89b9f030ee1ad3ea7893bc91cf618acf95048a079562de20e10b44ce48be62f,2024-11-21T09:23:20.587000 CVE-2024-37166,0,0,61871d25eea33361de6fe5a7ac63dfcb89ce6a3c427c78a138646ac817fd9707,2024-11-21T09:23:20.727000 -CVE-2024-37167,0,1,16ef07d969b4f2a038a6f415d4105d30e4799b02df5bc847a67e5f5e19b25041,2025-08-22T15:43:40.777000 +CVE-2024-37167,0,0,16ef07d969b4f2a038a6f415d4105d30e4799b02df5bc847a67e5f5e19b25041,2025-08-22T15:43:40.777000 CVE-2024-37168,0,0,cb34ad2d15f4cfda0abbfe224ad8f3e0cedf6b9880ed97595f7f545a6c15a6ee,2024-11-21T09:23:20.993000 CVE-2024-37169,0,0,f6790cd981ff9b8f378d76dc0d5d7ea279c99a86af2aafdf62ea7ed01bba7cdf,2024-11-21T09:23:21.103000 CVE-2024-3717,0,0,a56786438ee5e4f187741d6bc75fccb824a9cda0ff8fdd4de0d36c7b816a6c48,2025-08-08T18:28:49.110000 @@ -266018,24 +266018,24 @@ CVE-2024-39755,0,0,c89983064fbb3672e96d95936bac6d3850b3b1cd085c9bdec08e8d8a80f60 CVE-2024-39756,0,0,5db8104517c9da1746e74b23c0d3bbcaf1cc0b970ce833587ae4e571d6675632,2025-08-21T20:50:32.920000 CVE-2024-39757,0,0,07b5dadb4b97842d3ba1ca3fe121952387d6fa6fe85d3297e2f9c38700bb5b53,2025-08-21T20:50:24.880000 CVE-2024-39758,0,0,29f21d7cdf321c99e8c181c60ab3aaedbef056ffb04ce4d5317e4da425ce2ac3,2025-05-16T14:43:56.797000 -CVE-2024-39759,0,1,c679b2f3de47ffa0f09c57f996f751c6e0aafd3985f5af5237808c34afdb41cc,2025-08-22T14:05:48.970000 +CVE-2024-39759,0,0,c679b2f3de47ffa0f09c57f996f751c6e0aafd3985f5af5237808c34afdb41cc,2025-08-22T14:05:48.970000 CVE-2024-3976,0,0,89b9f2bfad0101fdb297068974e6a1b1ac837daa17b49c152652ef38fe57f99f,2025-08-06T18:59:35.983000 -CVE-2024-39760,0,1,df75e05283e704c492574344307e3b1d252316115cf8465b70705d39027033ad,2025-08-22T14:05:44.287000 -CVE-2024-39761,0,1,8b3f42ea5472253130a35446ea866c3ce9457dd4a7342d822a4849b7f68a5a73,2025-08-22T14:05:39.383000 -CVE-2024-39762,0,1,f17be72ca5ee3243d849aa8403cb1c76c2cfe9d67295071e4a178a8b0bc9a2dd,2025-08-22T14:05:33.510000 -CVE-2024-39763,0,1,29bc44bd2e68b8874831cb963969f721eb0fe7d8b0a24d2db1110e6b1bf7adbd,2025-08-22T14:05:23.270000 -CVE-2024-39764,0,1,16bae55aa2296c2d22825d25fd3b6ea734bf3924d93d19f0e59777d9b01e0905,2025-08-22T14:05:16.630000 -CVE-2024-39765,0,1,8539ee284cf4d434a37021b4e2051d22f1220b8e3db6ad4ab4082956c726f1e6,2025-08-22T14:05:10.857000 +CVE-2024-39760,0,0,df75e05283e704c492574344307e3b1d252316115cf8465b70705d39027033ad,2025-08-22T14:05:44.287000 +CVE-2024-39761,0,0,8b3f42ea5472253130a35446ea866c3ce9457dd4a7342d822a4849b7f68a5a73,2025-08-22T14:05:39.383000 +CVE-2024-39762,0,0,f17be72ca5ee3243d849aa8403cb1c76c2cfe9d67295071e4a178a8b0bc9a2dd,2025-08-22T14:05:33.510000 +CVE-2024-39763,0,0,29bc44bd2e68b8874831cb963969f721eb0fe7d8b0a24d2db1110e6b1bf7adbd,2025-08-22T14:05:23.270000 +CVE-2024-39764,0,0,16bae55aa2296c2d22825d25fd3b6ea734bf3924d93d19f0e59777d9b01e0905,2025-08-22T14:05:16.630000 +CVE-2024-39765,0,0,8539ee284cf4d434a37021b4e2051d22f1220b8e3db6ad4ab4082956c726f1e6,2025-08-22T14:05:10.857000 CVE-2024-39766,0,0,5be5a9b91f8dc1641dc885e377e9d9239f6437d0433112022ac307204e1f49dc,2024-11-15T14:00:09.720000 CVE-2024-39767,0,0,9e1d98afeb59e9ce0a888e3ac87dc97f327ada5cf6782d1b11dbdfa8cede82ae,2024-11-21T09:28:20.950000 -CVE-2024-39768,0,1,04d6c723a43a78336d972e3a30769a6cddf196464d52d827a7ada546ae8d6739,2025-08-22T14:05:08.647000 -CVE-2024-39769,0,1,65d3a0b09bbd648f17c61d690a48fe41cae6db01bc9d6eb17794ec14bf6f136f,2025-08-22T14:05:05.150000 +CVE-2024-39768,0,0,04d6c723a43a78336d972e3a30769a6cddf196464d52d827a7ada546ae8d6739,2025-08-22T14:05:08.647000 +CVE-2024-39769,0,0,65d3a0b09bbd648f17c61d690a48fe41cae6db01bc9d6eb17794ec14bf6f136f,2025-08-22T14:05:05.150000 CVE-2024-3977,0,0,78ac860cc8a8d0c7c2aed6775586d6934117777782645dfe7099108b8d9721f9,2024-11-21T09:30:48.667000 -CVE-2024-39770,0,1,ce15169d024701a76d1b1fd03eed7c60e0ec6e2c1bc066f0e6545ee609e80f2c,2025-08-22T14:05:00.400000 +CVE-2024-39770,0,0,ce15169d024701a76d1b1fd03eed7c60e0ec6e2c1bc066f0e6545ee609e80f2c,2025-08-22T14:05:00.400000 CVE-2024-39771,0,0,1df971bb66b0c1de701e7eddfd6b346b8adfc589a7d21a831a453ad4d77573e3,2024-10-28T21:35:11.267000 CVE-2024-39772,0,0,7017d890106e3d10136c00096439024bf2193858f8fddc05716bf61dbd12f94d,2024-11-01T14:20:22.217000 -CVE-2024-39773,0,1,cb7fb841ae7b289a25702de0c3f3fc55fdd603deadf3927e1f773fa703981e8f,2025-08-22T14:04:55.387000 -CVE-2024-39774,0,1,32cd70d87ec7302a92e3b5201f41fc97e43e1a2b0b310f384a3265804e584b04,2025-08-22T14:04:23.657000 +CVE-2024-39773,0,0,cb7fb841ae7b289a25702de0c3f3fc55fdd603deadf3927e1f773fa703981e8f,2025-08-22T14:04:55.387000 +CVE-2024-39774,0,0,32cd70d87ec7302a92e3b5201f41fc97e43e1a2b0b310f384a3265804e584b04,2025-08-22T14:04:23.657000 CVE-2024-39775,0,0,9755b0d11cb128cbd71f3ab95f30a15bff4bad6969790236412ac10cc2cc2441,2024-09-04T16:34:51.113000 CVE-2024-39776,0,0,36ff47d7644cc2293de1ca9b3e12ae9b2cc1f30ffc129b4abf3c793df9c43920,2024-09-04T18:25:51.920000 CVE-2024-39777,0,0,d544fb5c8af3d11cc0bf86238933c07737b24f611dcb10d9d356ddde3e445899,2024-08-23T14:36:48.817000 @@ -266043,22 +266043,22 @@ CVE-2024-39778,0,0,9acf5afdd541cae045e7bdc26465b94e6c92b67cd02d0fd987512cce467c1 CVE-2024-39779,0,0,88a98cded7006229eb9e6198e6a0913ba739bc6556fc7067d144510fc57eacd4,2025-02-12T22:15:37.117000 CVE-2024-3978,0,0,482c21d01e49c69bca4dc15aede6173bfc8d79c5700a49fac23ff27e1403ed25,2024-11-21T09:30:48.857000 CVE-2024-39780,0,0,0d52b3d63f327022ed0a23e5cfa9e2e54e7c75050eea732ac8f7ade52d46cd32,2025-06-18T11:15:54.417000 -CVE-2024-39781,0,1,67d07c8f2ff8bc57bf4f1459ee86b5a591b6ad4f0a9f965be173149e12d2b92f,2025-08-22T14:04:13.520000 -CVE-2024-39782,0,1,e122fb7d94030874cc45d3719730c388febe1c58cb67adcec58615127c861e2c,2025-08-22T14:03:57.697000 -CVE-2024-39783,0,1,fe2e9af39f13b1c7345573b3738926ae5dc18c3b2147e3b726004ea40be5ff42,2025-08-22T14:03:42.773000 -CVE-2024-39784,0,1,12b5e5d8c17187512d3af7bb723950d5b5a3cd5f754728a0f1e195e7a3a45532,2025-08-22T14:03:05.787000 -CVE-2024-39785,0,1,4d5eb86ff72ff011e84d5a74c89a10b750242137040ac454bd8a119304005577,2025-08-22T14:02:58.147000 -CVE-2024-39786,0,1,e91bc31aa984204b3ba00bb67c4e478e24e035407f4ef27f1a44c244432a90c1,2025-08-22T14:02:25.633000 -CVE-2024-39787,0,1,b5050f75ed3c2e6955b98f5efffb6441d7a79913406d7ad55fe058ae2134c276,2025-08-22T14:02:05.030000 -CVE-2024-39788,0,1,3bd6c9898071fc309c7e763a922ce1d66027579eaf7eeecc9b5811b09a975701,2025-08-22T14:01:46.660000 -CVE-2024-39789,0,1,1e32c5becc35b9c0c0896aca5291f9df3203e0f7618b5237a9706f788dff0b1f,2025-08-22T14:01:39.230000 +CVE-2024-39781,0,0,67d07c8f2ff8bc57bf4f1459ee86b5a591b6ad4f0a9f965be173149e12d2b92f,2025-08-22T14:04:13.520000 +CVE-2024-39782,0,0,e122fb7d94030874cc45d3719730c388febe1c58cb67adcec58615127c861e2c,2025-08-22T14:03:57.697000 +CVE-2024-39783,0,0,fe2e9af39f13b1c7345573b3738926ae5dc18c3b2147e3b726004ea40be5ff42,2025-08-22T14:03:42.773000 +CVE-2024-39784,0,0,12b5e5d8c17187512d3af7bb723950d5b5a3cd5f754728a0f1e195e7a3a45532,2025-08-22T14:03:05.787000 +CVE-2024-39785,0,0,4d5eb86ff72ff011e84d5a74c89a10b750242137040ac454bd8a119304005577,2025-08-22T14:02:58.147000 +CVE-2024-39786,0,0,e91bc31aa984204b3ba00bb67c4e478e24e035407f4ef27f1a44c244432a90c1,2025-08-22T14:02:25.633000 +CVE-2024-39787,0,0,b5050f75ed3c2e6955b98f5efffb6441d7a79913406d7ad55fe058ae2134c276,2025-08-22T14:02:05.030000 +CVE-2024-39788,0,0,3bd6c9898071fc309c7e763a922ce1d66027579eaf7eeecc9b5811b09a975701,2025-08-22T14:01:46.660000 +CVE-2024-39789,0,0,1e32c5becc35b9c0c0896aca5291f9df3203e0f7618b5237a9706f788dff0b1f,2025-08-22T14:01:39.230000 CVE-2024-3979,0,0,0afe50bc44d6fa6b597cd86ec198fb5812e3efa26f9c96f16b2dc019765fb52b,2024-11-21T09:30:49.047000 -CVE-2024-39790,0,1,90cf45eac0df37fc8034b3f9d475915406dd8638c8ddb14753ed694e8609b7af,2025-08-22T14:01:34.613000 +CVE-2024-39790,0,0,90cf45eac0df37fc8034b3f9d475915406dd8638c8ddb14753ed694e8609b7af,2025-08-22T14:01:34.613000 CVE-2024-39791,0,0,73f8a3981e0c84be53fe7fd460bbb67a17b0e9a32c348157672e4620539b962c,2024-08-20T17:15:56.067000 CVE-2024-39792,0,0,57f8bb296023297433ac9c9fee5a34ae4aa8b7d8ae97325a419a4e8bc99cc59d,2024-08-19T16:20:28.967000 -CVE-2024-39793,0,1,b4e7035ce89733c3fe1dbe4a532a3fe7cacaf3566a4ceac89523cb4531f6fa78,2025-08-22T14:01:07.923000 -CVE-2024-39794,0,1,ca30f3e9a45801353e418146b8b756fd3fa1daf2b894c74fae8836243d84d470,2025-08-22T14:00:58.083000 -CVE-2024-39795,0,1,fb3ebcc1ae1dc5e8cd1c8d2758aae301a52354b7b0e3c57967846ca6a7867350,2025-08-22T14:00:48.967000 +CVE-2024-39793,0,0,b4e7035ce89733c3fe1dbe4a532a3fe7cacaf3566a4ceac89523cb4531f6fa78,2025-08-22T14:01:07.923000 +CVE-2024-39794,0,0,ca30f3e9a45801353e418146b8b756fd3fa1daf2b894c74fae8836243d84d470,2025-08-22T14:00:58.083000 +CVE-2024-39795,0,0,fb3ebcc1ae1dc5e8cd1c8d2758aae301a52354b7b0e3c57967846ca6a7867350,2025-08-22T14:00:48.967000 CVE-2024-39797,0,0,c8a3279b5e6db99b00044b18e6460e19b3a0e825fb0e5f1a12a8098a07d4fe90,2025-02-12T22:15:37.270000 CVE-2024-39798,0,0,110e5d1cb70a07c32f9018e2b92f9adb65f680d648cd462693d21b3e243b48d3,2025-08-21T20:50:17.163000 CVE-2024-39799,0,0,0daa7af8c02f0105f91b96d1cf48eb0bba3d08f806efb4f5ff54905d84ea8abd,2025-08-21T20:50:09.263000 @@ -269974,7 +269974,7 @@ CVE-2024-45058,0,0,3e754ab3cb6fad940a98b62e4ca382427f30f2cb78868fe21e22c59073e40 CVE-2024-45059,0,0,fdd80483995b4c7c79db3ad6a3187198cc00c2b4861efd53bac3b956fae10f81,2024-09-13T20:09:19.523000 CVE-2024-4506,0,0,41ef528e063e32c4adf1e507966b297efa562e99e88520bbc3af25885e416502,2025-08-21T18:19:25.750000 CVE-2024-45060,0,0,fdf3192e213f43713fe94dd4f660c140c402b48e19c6be5f44cc86908a9d0e81,2024-10-17T14:14:11.230000 -CVE-2024-45061,0,0,05b1c7309f8ac21a996408c3f436219993810ef39c6cdbea2d2923f33822314f,2025-01-15T17:15:15.113000 +CVE-2024-45061,0,1,63c34a2dc4d65a9552f430fb4fa4873f24816b5fec94470c6a6ddc4b066472bf,2025-08-22T16:25:15.987000 CVE-2024-45062,0,0,d3687840767e3102c2d159d2279e4beb13bd7fbacc2da87f4dd0a3a9e3f3334f,2025-08-20T14:40:17.713000 CVE-2024-45063,0,0,1409a1792fb044d0180db60765e18242d949607976f55c38d4cb7d3b87690fec,2024-09-06T17:35:18.370000 CVE-2024-45064,0,0,f9743d959694386bb54450caed4c891cbc8d8760238efdc92821b602741223ec,2025-04-02T22:15:17.837000 @@ -271365,7 +271365,7 @@ CVE-2024-46999,0,0,a1330ba0a227e6ff40481e86ab6b0bdb70a0529b3fd306e6ba8f29b9812f3 CVE-2024-4700,0,0,48a7655581864aa15f55691f63c8d89e3a8fa195b5aa78e2b7d2c1f9cf311152,2025-06-05T20:38:14.740000 CVE-2024-47000,0,0,ce23ce4b9613f5c8f0ce4188779adb11a16dd34934775d61761695a82b554738,2024-09-24T20:25:30.493000 CVE-2024-47001,0,0,82512b739d599a177453c09e314861017847d0227aaef8b1ee95f2f0a3f453a6,2024-09-20T12:30:51.220000 -CVE-2024-47002,0,0,5c919a7b5eed1045781701efd4624c6ef2b2f30ba79fe4aa6e689aa93aabf61c,2025-01-15T17:15:15.883000 +CVE-2024-47002,0,1,15e302f259d94f8ff60a2eb52e50cf2321e26793aa2fb3d1855895f767cb2c65,2025-08-22T16:22:31.360000 CVE-2024-47003,0,0,525372da90b89830fd41e0c884d9afded05f7a8947d62cb01c2a85154f0d7a86,2024-09-26T18:42:29.383000 CVE-2024-47005,0,0,d90719cbe514c55464440f47622554265d33eea28544c444cfe482b6e25c483f,2024-11-05T19:36:41.127000 CVE-2024-47006,0,0,a5ffe2b7ad54ff55d65f9390c0ed5e6cd5eaad0a5f45caa7e78e9b2fe8bf9e28,2025-02-12T22:15:39.453000 @@ -271428,7 +271428,7 @@ CVE-2024-47061,0,0,f64d0349b66721eed4f56e73b4a8f0b9e381fe2723201d46573bd287af5cf CVE-2024-47062,0,0,b3b63104ebe24d5ac0854429aa2316c01360697e86ab86cb21c5685eac0a249c,2024-09-26T13:32:55.343000 CVE-2024-47063,0,0,a7b450ffe23c280640761374e0ede2b74d61f32a6fe9b01571b60268e64b6d7f,2024-10-30T18:24:21 CVE-2024-47064,0,0,9c6f14c1eecb588934802602575d96b0c4b1255de8a28da01f81bc6411a2c7cd,2024-10-30T18:23:17.020000 -CVE-2024-47065,0,0,a32fb6375b42b29535be3fb469b23b923911656cc015dd0dfe10dfd144502840,2025-07-15T13:14:49.980000 +CVE-2024-47065,0,1,c20c7438e7ed6b14e2230fdf5c2d9a91461e298a0db209ac3315e86c1cfeac11,2025-08-22T16:01:46.497000 CVE-2024-47066,0,0,2b48b1af8fb46154297920d9f2960bc42b75c993bb490510a17fea508edeaf4e,2024-09-30T18:03:58.750000 CVE-2024-47067,0,0,e0e658b796505e2321c37877c576f1f1537c2acf4ac178b178942b6bfa506b31,2024-11-15T16:28:48.533000 CVE-2024-47068,0,0,f52848447d461de922a61ee579faa6bfa3ce88a9864d262e743f4d18fe9d7fed,2024-10-29T16:15:05.583000 @@ -271496,7 +271496,7 @@ CVE-2024-47137,0,0,fb6ebe05a92e5137fc180626cc4ef25cc14bad5ee91ece2d54c1a034c8819 CVE-2024-47138,0,0,9c50fc7e56ca68b114108961b153aa636254169eb487e0c0f03deb767da0e1ff,2024-11-22T23:15:05.213000 CVE-2024-47139,0,0,b1eb4b4e03fa81b7339536ea014b3b74c31311507e4a56701bfa70d84e784a3c,2025-08-06T15:02:44.007000 CVE-2024-4714,0,0,47d5d7aefed2522691682a339f6257f6ca2b345c3546dbafcb1d8203a99d9053,2025-02-19T18:57:48.610000 -CVE-2024-47140,0,0,0aedb372d21ea7e4d5e7f3a19624dbf9cc67b441956124253288590b6f7e20f0,2025-01-15T17:15:15.997000 +CVE-2024-47140,0,1,c6e67d0fb2491bc950b23c36b56cc0d362fbc1d39ef551870541efca42f2a789,2025-08-22T16:19:46.550000 CVE-2024-47141,0,0,29e8162a342f71a9d0eb588dbd3841bbfae0224374dd6e705367413d35f1293b,2025-01-31T15:52:41.007000 CVE-2024-47142,0,0,3b160aeed892b3de0fae2f0bd942190d42286dfc37500bd913fc0a3b0770ad8c,2024-11-22T02:15:21.280000 CVE-2024-47143,0,0,3b003320fa1fa7ccc982a3b5e65a734fbb00e48317441e43043d7c224437ceb3,2025-02-03T15:15:56.463000 @@ -274339,6 +274339,7 @@ CVE-2024-50637,0,0,3573fdf7511f1afbb09952fafdee9b7b91584db332a9118c347fee1735a7c CVE-2024-5064,0,0,f3128209b12028d04e6a7e837d64ac624476875032530ae637e0101f2bf4284a,2025-03-03T16:12:05.970000 CVE-2024-50640,0,0,cbe053d0367d2c517ce1cb52338acb2817f166b1512e6baa882f5430257da24e,2025-08-21T15:15:30.350000 CVE-2024-50641,0,0,816b28030f51ba1408cd63842a6d728856c5cb3dd2b7850a9db9dc4a8a87ffea,2025-08-21T19:15:37.357000 +CVE-2024-50644,1,1,1454ddf6b5d3649bb2f293fc118411bd06458e7585de3192e00fcb377c22ff4c,2025-08-22T17:15:31.640000 CVE-2024-50647,0,0,a8132e40e6415680c63502dcfb71c83170a27c8ae17ae2d8709790d4ecaf5c60,2024-12-03T17:15:11.193000 CVE-2024-50648,0,0,1dc37480c5040a05a50ea4a78ffa69d7a2a8f65fd6eef6e91530224e3cb9b576,2025-06-17T01:19:01.617000 CVE-2024-50649,0,0,ce601eca259ef9acd6c7f874be3687af9483cc217b821bf46f834948f36da2a0,2025-06-17T01:15:39.510000 @@ -275702,7 +275703,7 @@ CVE-2024-52595,0,0,897ee135760f31a40fde077940d0915d9d6eacc203929b9473ecd250bb6b6 CVE-2024-52596,0,0,525e9a2fcd58891ff468538751308d6eaa5810caed08dcfaba5b5fdc01d8e905,2024-12-02T17:15:12.353000 CVE-2024-52597,0,0,d54fa90d01c0179a6c078bb938202410ab19d6f9b6c11ffe717632cee1a24599,2025-08-04T16:57:38.327000 CVE-2024-52598,0,0,83822d6263ad2ce71ec3cca578f1f51f11830f68b183c8197919b9a7b6b16dfb,2025-08-04T15:24:02.550000 -CVE-2024-52599,0,0,0db0a011c2a72c6bb6dd64e9b34949435e5305b006875a178839b0fbb4bb2f3f,2024-12-09T19:15:13.863000 +CVE-2024-52599,0,1,d18e2ebbb7940596c23d1cba561c31d5677c315d5978b78f29f467dd806b372e,2025-08-22T16:19:06.600000 CVE-2024-5260,0,0,d4c0ade92faa077e751114eab3a8dcbc0117b4ccaa93b1dd6065e6d2ee777ea0,2025-07-11T20:02:19.207000 CVE-2024-52600,0,0,a943c0271bba15206eb04ad43ca34044fe44d51a2cff4ca3141bbb7e1938b0c4,2024-11-19T21:56:45.533000 CVE-2024-52601,0,0,ba5bce332594d5671a9e893b1a8e75d288baaec687b1afdf9cbb1145e8c9dddd,2025-08-01T18:39:53.140000 @@ -276347,6 +276348,7 @@ CVE-2024-53481,0,0,42295212f642a03e02fabce0223d7a7c34a9262a30bcd673c09d07650c426 CVE-2024-53484,0,0,0fc6633eb0bb323c7c1b56ffa21d5cd5b78570e350e583a38942d8a30f904a22,2024-12-03T16:15:23.980000 CVE-2024-5349,0,0,75911b9a04c41ba625bf561a6fda73d6a6249d16eb1736f313b0d58e1202f17d,2024-11-21T09:47:28.357000 CVE-2024-53490,0,0,229997de596954b948d854ed350eb8461ad79b06939654658f3b483b570ec130,2024-12-11T17:15:19.903000 +CVE-2024-53494,1,1,562977680152a53452bce2d87103874edb829ae595be7da00596030b069ac38e,2025-08-22T17:15:31.813000 CVE-2024-53495,0,0,3b2da8cebee3f90743f409c9774f3c5cd960f710760f91ef3b166d23229c9a12,2025-08-21T14:15:38.150000 CVE-2024-5350,0,0,96d11c8e31022561524caa809e0cd78f545854ba6dbf3bb0f9f80968626b9017,2025-03-01T02:41:15.660000 CVE-2024-53502,0,0,877c583ef29b126aadc317fdb70da023ced288d1cc148d9762da8722dde21234,2025-04-04T15:06:43.840000 @@ -277902,7 +277904,7 @@ CVE-2024-56173,0,0,92fbf86a02e8da1ce0b13e1ac7dee7a6adff80d02b155c38d0fb295ebeff0 CVE-2024-56174,0,0,0f3a8b68b98b0a266119805177d09fb748ae8f055cfc84268facc996261f94b7,2025-06-05T20:59:17.297000 CVE-2024-56175,0,0,dba90ff9c1cbd2e0bbc47d1b12b780c5635a5f3546a1812f47b063f6ce89019e,2025-06-05T20:59:27.300000 CVE-2024-56178,0,0,5e192747338bd9f0e88e598c725112a888b30130ca51c9dd4c8c023892000eb7,2025-04-18T02:16:13.783000 -CVE-2024-56179,1,1,61bd7927466ea73b93e6541123dd8e8cf9151551397f81d502886469e1421d3e,2025-08-22T15:15:31.750000 +CVE-2024-56179,0,0,61bd7927466ea73b93e6541123dd8e8cf9151551397f81d502886469e1421d3e,2025-08-22T15:15:31.750000 CVE-2024-5618,0,0,d2d97c727c060ec84f3174901af9ab7b075641151198c4f29457077453fd0cc0,2024-11-21T09:48:01.670000 CVE-2024-56180,0,0,fc64ce029575b1f0283774b9966aaa98b8891498b9a4f888968ef3ad73b17571,2025-07-14T13:07:40.770000 CVE-2024-56181,0,0,99320f5318c3c983e160c350f6cdf26bf8ee1c17fa626cf4ea95787b0c02e6c8,2025-06-10T16:15:35.567000 @@ -279295,7 +279297,7 @@ CVE-2024-5822,0,0,ccc5abd0f861908ac7486568b3dd97f9dd750098c37ef7d437754eb4a43c16 CVE-2024-5823,0,0,5123d89c111b48b404a1b53c7b20aef07938a088538cba82da9ac7e629cc09b9,2024-10-31T18:05:00.637000 CVE-2024-58237,0,0,a9a659ff9a145d233927dcaf4bc7e2c23ac24146151446db6a26d6ef517913e5,2025-05-09T08:15:19.030000 CVE-2024-58238,0,0,7e67548b3c788765bf4e603c0191e99296b08f12809269db294325a467194edb,2025-08-11T18:32:48.867000 -CVE-2024-58239,1,1,892a03354cd564fe61286a29506d3baa0c85f64fd590484e8c5d2f32580fc8d4,2025-08-22T14:15:45.840000 +CVE-2024-58239,0,0,892a03354cd564fe61286a29506d3baa0c85f64fd590484e8c5d2f32580fc8d4,2025-08-22T14:15:45.840000 CVE-2024-5824,0,0,e1bcdf6d43e3da8ae6ba6ab7de5f8d3f3eaee723b9a1ed9af8e8dbb46b2110c6,2024-11-21T09:48:24.360000 CVE-2024-58248,0,0,44d3bd7192675d499a169519ce32e74b191afadc084a35cb73d7fe83d11eebd1,2025-07-25T17:15:30.833000 CVE-2024-58249,0,0,46e082cbdc4436e2ec6bd62f3df3fb3fe143b90b067e29566efeb2e0b2706af9,2025-04-17T20:22:16.240000 @@ -283511,8 +283513,8 @@ CVE-2025-0329,0,0,03b8cf30421e1ae0f8fd0e493ceb87146261c231c81ab91ad0614180095edb CVE-2025-0330,0,0,4491caf0b40f4922d0170cd653a755e594625695ee931c2ddc153d3db2e4fc0e,2025-08-01T13:58:47.417000 CVE-2025-0331,0,0,afe60233c7b6cdef8297092a16561204e8a753655f7ac938d1ebdf4ff4457d4f,2025-01-09T17:15:17.933000 CVE-2025-0332,0,0,d0def84faa8b12076ff1e558a0ac55eb8953dfc2704b434c753c7e4d2ff98363,2025-07-03T18:30:06.820000 -CVE-2025-0333,0,0,81e4cc439859af53c1b986765c85b9db6681ddfd15355f617bb0f4d13181d40e,2025-01-09T17:15:18.077000 -CVE-2025-0334,0,0,a2752894f0956fdde9f25172948b20b0ef85e697939129012141ceedb1b495bc,2025-01-09T06:15:15.610000 +CVE-2025-0333,0,1,a0bb758bc763a2b3e16941301059605c2334b4bd5947cc7910de2d06b67a6e30,2025-08-22T16:41:07.243000 +CVE-2025-0334,0,1,3e40cc885a16d221e6b357f7fff7af428eec45972e78e93cb086b6aca41e8720,2025-08-22T16:35:17.467000 CVE-2025-0335,0,0,12528d0865cacb7295fe5a0c5bf2a492f9357b1638988dc28820f4aad345e47c,2025-02-26T22:08:38.937000 CVE-2025-0336,0,0,a8d295968a1763fc92e0890bcca1edac58501056f12e47cb68078ee815d1c013,2025-03-03T16:03:35.743000 CVE-2025-0337,0,0,9a3d52e58daf77927793e3693f1711d00c01f22653495d320b41e4375efc8e98,2025-03-06T17:15:22.303000 @@ -283521,8 +283523,8 @@ CVE-2025-0340,0,0,03a2ab417feda166d7ff39a32e874a242439ea141da8707119dad231de5925 CVE-2025-0341,0,0,828ae552e137a4413d634c888a00af19244c0eb8e8e4730c5409757f83e4d225,2025-03-04T19:59:10.833000 CVE-2025-0342,0,0,c3d7874eec4164f33c7d353dba3741a3062e4e9bbc797bc94eb66281cab90d49,2025-03-03T19:00:30.627000 CVE-2025-0343,0,0,17cf0317a10ceb1430f2c16ab9513f031b263e8f789a91f8fe29942479dff600,2025-03-24T16:15:33.270000 -CVE-2025-0344,0,0,fa9cdc375de2a99e7299b1ccdc9be76ceb7ad16da8244b21c453c84a18a28efa,2025-01-09T08:15:30.517000 -CVE-2025-0345,0,0,fdab4ab061ba34e7ae56477c0a30fa81f9f16f64f88fe386d4634a52d9c45ceb,2025-01-09T09:15:09.220000 +CVE-2025-0344,0,1,3c7935a8ca839069b0391b33c5b8dcea61b7eecee67e2f68865b416179cc99f0,2025-08-22T16:32:49.497000 +CVE-2025-0345,0,1,46a1e8d294d0e8620d9157df9e812ad5d89d1f0fbcfbef4520ccfe1c543ade0d,2025-08-22T16:28:28.197000 CVE-2025-0346,0,0,9faea85a80ad3242dfbf46080565c4d74a7c5ef005e74703ad17b5fadf8f5324,2025-02-27T02:38:41.310000 CVE-2025-0347,0,0,1538f5a52c276c2505bdc41680d48232362ef42691dec6a488d12fa9c340d7ff,2025-02-27T02:35:24.437000 CVE-2025-0348,0,0,84617176419be619be14af62d30367e1808be9613c5ee0ff4b39f3eefcc0d76a,2025-05-28T17:09:21.923000 @@ -286620,7 +286622,7 @@ CVE-2025-22125,0,0,4e16b6bb1574e3a218f15739af16c15ef140ff8d253a467b4d70d5fb76ed7 CVE-2025-22126,0,0,d69a5c7dd72e14d4efa2f34c1be80ca5e4fba4822f184eaebcbe35636daca26c,2025-04-25T11:15:45.880000 CVE-2025-22127,0,0,898c5f8b6d6c3ee9b5b4ca10ac404b174d880ebee4737f16cb9da67b382ebfa3,2025-04-17T20:22:16.240000 CVE-2025-22128,0,0,c22e8b1eb8d0add888c8393c1230acb32d4575dba49ea4835eebe607557b8796,2025-06-27T11:15:24.440000 -CVE-2025-22129,0,0,d84466451eb5813ecdb45d579943a91ad86a0d891b836c8fd8053b0ece067119,2025-02-04T19:15:33.360000 +CVE-2025-22129,0,1,1c422e246c168a9d0d3716f5ae5e698cc37768bf012c73a064cf87dd212c9bd3,2025-08-22T16:19:54.547000 CVE-2025-2213,0,0,7ebf2026b9bf93eb20c6ae8c15cd12311e1e77c6d1080f4262c739f27920a245,2025-03-11T23:15:38.430000 CVE-2025-22130,0,0,fe16d9f63e9545f97bce7adcca434385cbaf054f6f17003be6f1b5abf3fc1663,2025-01-08T16:15:38.543000 CVE-2025-22131,0,0,d687f60b88d755b1d518a9c66760b0427f03a61d3062d460851f78a9bd1eb978,2025-03-06T14:01:10.553000 @@ -288369,7 +288371,7 @@ CVE-2025-24025,0,0,d0deb6cc735d18f2d50160ca3518f33216e8d39f408db984acc4bbc8bf3a9 CVE-2025-24026,0,0,1597c800717e97646946b98e66199dd0796e2aad0e3d819ba033adc306fd4362,2025-08-01T18:39:05.150000 CVE-2025-24027,0,0,7aafd16a9bde691788eff3c983eb76660cc50c899ff68b8c3f8ccfb1cc458ed4,2025-01-22T15:15:27.090000 CVE-2025-24028,0,0,545c071838c816be977c3520d8d21408e612d6f5f92969ce1c4368203cb04b22,2025-04-18T01:57:17.133000 -CVE-2025-24029,0,1,20dffb5ab1e155f9955eec75288509a6ad47eb0c643c1d181f9a8e7e0d3e1739,2025-08-22T15:59:15.257000 +CVE-2025-24029,0,0,20dffb5ab1e155f9955eec75288509a6ad47eb0c643c1d181f9a8e7e0d3e1739,2025-08-22T15:59:15.257000 CVE-2025-2403,0,0,b5cb4cc5a4caaec298b38f5cf04bf1d285b2c4b89a56c26791ad1582cc36203c,2025-06-26T18:58:14.280000 CVE-2025-24030,0,0,53ed9f8c2f1606c3ac2d0893d8b45d45add03d54f0c0cb325356c13a37ba8b27,2025-01-23T04:15:07.100000 CVE-2025-24031,0,0,f001af7155fa77b1de37ced441ee4e39c1454b911ef9ca1ee83e5bda55f8dc14,2025-02-10T16:15:38.990000 @@ -289096,7 +289098,7 @@ CVE-2025-24794,0,0,c04b940ac82a2657417f797fe796501aa31f53e5a08053b008970823006b7 CVE-2025-24795,0,0,4e7d355e1e973178e45904614970e5915bed2547d76d074d93927fc694a1b13e,2025-01-29T21:15:21.533000 CVE-2025-24796,0,0,a9610c1be84a5c4d5741f879bb27b31db5774f479b1300b84fcf068018c2ff21,2025-03-06T19:15:26.953000 CVE-2025-24797,0,0,0e70cff373863f69d891845b371b346f401be60839c6f0598b5ae086d63af357,2025-04-15T18:39:27.967000 -CVE-2025-24798,0,0,7391f6d504cec89c9a1c827e79ed0534ed7c352bb45ddfb137a0c72d88aecebe,2025-07-15T13:14:49.980000 +CVE-2025-24798,0,1,a2501e7764b9e797923d65428f26262c35edeafadb1b55ecf157094ba57b930d,2025-08-22T16:02:31.793000 CVE-2025-24799,0,0,8b809b7f3e0f187e2f7ac819d1f649ed380390ac55a86913cb1ecb2c6dca8f99,2025-07-31T18:45:03.050000 CVE-2025-2480,0,0,8c114ab82f1a69ecb2cba58c867ae8116e5c5738533441fe65cb3b622f3d42be,2025-03-20T17:15:38.523000 CVE-2025-24800,0,0,7ed7267931cd5ab7815e3084be7a388ce38e4d4a267ef28098f1d5b3017953e4,2025-01-28T16:15:45.063000 @@ -289235,7 +289237,7 @@ CVE-2025-24971,0,0,793f718b4bfb5d7a7a1d927b157b1ca84e15924b7b8def879502f3162eb90 CVE-2025-24972,0,0,2bfeab49fb3f39eb9e65ce9ece026906b6d6d88216e33613e47c2e76c1f0f6a2,2025-03-27T16:45:27.850000 CVE-2025-24973,0,0,4e0ec487b13ad29adffd9e40afc6f86ee9194b71c6b3a7da9dc820821aed9598,2025-02-11T16:15:52.020000 CVE-2025-24974,0,0,214e30f9ad1dadb8e549793c24ba043d3276d9cc0ee2f6629636929f8ed1e7c0,2025-03-21T15:40:04.130000 -CVE-2025-24975,0,1,edbff6ef42b0cc4e3326cd63ca48db56cb2821c3f393b51d23066b34dcd0ea75,2025-08-22T15:00:28.307000 +CVE-2025-24975,0,0,edbff6ef42b0cc4e3326cd63ca48db56cb2821c3f393b51d23066b34dcd0ea75,2025-08-22T15:00:28.307000 CVE-2025-24976,0,0,d3c2a0ec7f5c1f646ba24311fc47878f0806891920501766ac3a68c935b89720,2025-02-11T16:15:52.163000 CVE-2025-24977,0,0,fe0fca2c6c6318e6beea794edfb03519262d1f56565ca8321082a46de541a192,2025-05-22T15:52:33.763000 CVE-2025-2498,0,0,b349ac007148253a990e8672c1604ae1ce48b34bbaf59278aca01845ba80d0b7,2025-08-15T16:25:17.323000 @@ -290641,13 +290643,13 @@ CVE-2025-27147,0,0,cc15abe63c8009f5954cdd7886ec7fb9c369870bd55cc8f200641b24b9796 CVE-2025-27148,0,0,a02be6d0e91bf8eda3626965312087a36b8be8d291da209d00439f9926ccce17,2025-02-25T21:15:18.073000 CVE-2025-27149,0,0,35e8d664c459a8935f76aaca698b432e24375a15caf94501d1688ba43e19f71d,2025-04-01T20:26:22.890000 CVE-2025-2715,0,0,9b86d209899e100764be1390e15dd32c759d3c6ac90bee191f2f3abd07adc820,2025-03-27T16:45:46.410000 -CVE-2025-27150,0,1,ed69fdfc840c58bb15950fe3ab99a4797846fbbb445dad305aecfb4847ed9dba,2025-08-22T15:53:42.620000 +CVE-2025-27150,0,0,ed69fdfc840c58bb15950fe3ab99a4797846fbbb445dad305aecfb4847ed9dba,2025-08-22T15:53:42.620000 CVE-2025-27151,0,0,bcab0f993c050755dff4bd035f714e6ae4e07aeabfc502b38944efa1320291a5,2025-08-21T22:28:57.630000 CVE-2025-27152,0,0,0648b2f50e1454bf7df312f45bec2e233def1fe7ff128aed2d0f80c1402a5bdd,2025-03-07T20:15:38.560000 CVE-2025-27153,0,0,153cf8367ada5823ec25665e9d6c2fdf2d2f49b909a08cc18d9c03f87f5c3ef3,2025-07-03T15:14:12.767000 CVE-2025-27154,0,0,1e975d72bebdf47d7d7a2300b98253c7dc68fea542f552a8278b41ed85b5f742,2025-04-07T18:24:53.463000 CVE-2025-27155,0,0,fe50098f1c1a4fccdc1685634a60bb1b96134199c7cebbbfad4a6dd5f2e55f84,2025-03-04T17:15:18.833000 -CVE-2025-27156,0,1,3ad4e3ea2e03ff74f739e2e70f21a8c9182049d0e3d988cc3a97f06638ed2f94,2025-08-22T15:57:26.430000 +CVE-2025-27156,0,0,3ad4e3ea2e03ff74f739e2e70f21a8c9182049d0e3d988cc3a97f06638ed2f94,2025-08-22T15:57:26.430000 CVE-2025-27157,0,0,a06e5d349f71e43bcccb784ccb112b077c14642c6a2918f31bf22dcf1ec99378,2025-06-24T15:59:59.633000 CVE-2025-27158,0,0,1173b5e3e510b18ffc5d6233ad15728e6c7bce39e1566a54fe423be1a60da9cb,2025-04-28T16:48:57.070000 CVE-2025-27159,0,0,2f9b24dfd027f02d1e6b8d6a62ae3d6a693e3eb8686197f20cc3a7089861a22d,2025-04-28T16:48:51.067000 @@ -290862,13 +290864,13 @@ CVE-2025-27393,0,0,9aa4954cdfb55771c6329747743598efb01c901ba627d142c3f74e9781c72 CVE-2025-27394,0,0,9ab042095b67e26d5f13118419be8527351f12f98ad54081c1d99788c408220c,2025-03-11T10:15:18.530000 CVE-2025-27395,0,0,a95e500250a93d404dab2fe8e2518f80b766c87a38ab2f1049c64fe0ab21f074,2025-03-11T10:15:18.700000 CVE-2025-27396,0,0,eadc58c9c625c288d8817b5497a9be2ced63972085e268f74b6cfbad20e39f72,2025-03-11T10:15:18.913000 -CVE-2025-27397,0,0,956a25b040033d89cdbeac3073d670e6783aa568f3a9850c3446f06c3a9a7f0e,2025-03-11T10:15:19.083000 -CVE-2025-27398,0,0,4873fb1d9330833240d0c3956ffddabe528327a366ea9eaa669a80b91d791657,2025-03-11T10:15:19.247000 +CVE-2025-27397,0,1,2d78b5050f177c132868c859fd9537667566386e2293baf160937945e8d9170e,2025-08-22T17:58:09.643000 +CVE-2025-27398,0,1,ebf364c0ccb054e720a3e22917e70052b632d29cdbc63624ab3c9099a22c7d54,2025-08-22T17:51:58.517000 CVE-2025-27399,0,0,8d68276eb1beeb0a13c26bb8b119cf87cd289fe5c8890131d3dee5eb013b75f4,2025-06-24T15:59:22.870000 CVE-2025-2740,0,0,7de5cde9a81344fb118b72fa031d4588332f2733b832f72f9ed4fbff74485bc2,2025-04-01T16:45:02.273000 CVE-2025-27400,0,0,b07d2c68a3d4f6b3578277ea99bc84b2505d5f9baf74a0ae2ec781a849ca1b01,2025-06-16T15:15:23.740000 -CVE-2025-27401,0,0,f4a40e6f24af923d22cbd4869ba6e62f802add03358279293f26a3440d2f2d83,2025-03-04T17:15:19.547000 -CVE-2025-27402,0,1,3393e36491e6e662aa57056e8430417aca942470d2356d142369c5d30d285fb8,2025-08-22T15:37:24.217000 +CVE-2025-27401,0,1,8f406bfa63dc966447b6894ecd20ea520b3e1aa63320bafa47a65b2a6d62fc08,2025-08-22T16:00:59.597000 +CVE-2025-27402,0,0,3393e36491e6e662aa57056e8430417aca942470d2356d142369c5d30d285fb8,2025-08-22T15:37:24.217000 CVE-2025-27403,0,0,2365358c45cf7b9698020c0be4d333c042cd80bd76b375b8fa4c18b6d6dddf3a,2025-03-11T15:15:45.570000 CVE-2025-27404,0,0,f80a6e0b0ff617e774bca7e64e458cfa660907a6400c54a226f66251cc6896a8,2025-08-01T15:18:18.470000 CVE-2025-27405,0,0,6aa793cade38ca74d69034306e04e92f1ce0f9d9d1002375a2d7332ba5ad588d,2025-08-01T15:15:28.260000 @@ -290963,10 +290965,10 @@ CVE-2025-2749,0,0,d5c23d9cde9d80aa1fbed3bbb517b5bdbcccd79985234132ec9559d4ffa36c CVE-2025-27490,0,0,17f33162195c2a6e1a0d6f888acf018823057d958d779b9d531dd48d35d649f3,2025-07-08T17:15:27.283000 CVE-2025-27491,0,0,9568d96d7e84e1d8d3c16e0e36e0bf12c76081198f179a2c2bf481505c291bc4,2025-07-08T17:16:00.837000 CVE-2025-27492,0,0,0a6803b6cb090d4d186dbc422f72aca475ab47e2fc18a332c5a864357b956f0c,2025-07-08T17:16:11.407000 -CVE-2025-27493,0,0,5ed706f73f968eaed2a73fc0af7fc79cff24d7e3704ee418b1a94e6ee4caf2fe,2025-03-11T10:15:19.577000 -CVE-2025-27494,0,0,629ff8926515d0723828ad76be68973f23d7843531167cb70ca06bf9d4ea120e,2025-03-11T10:15:19.783000 +CVE-2025-27493,0,1,1258d959f9a559dd4e65f383a2291db2c40e5dbaceb6d595b09916a005996c30,2025-08-22T17:50:58.940000 +CVE-2025-27494,0,1,fb4fbac0d1453892b254abfa9875bc72b249577be599502e481763893e247d15,2025-08-22T17:49:43.953000 CVE-2025-27495,0,0,b593b86af7a25e10c4eb0b2b88f2aa6a546a9d02a8c65a4f8534f8c94773413d,2025-08-19T14:49:42.453000 -CVE-2025-27496,0,0,ccff5911af72635aa70d4fd8c0ad1b78ee109057412ec57494c2c4bd15ca4a0a,2025-03-13T19:15:52.050000 +CVE-2025-27496,0,1,6328e32542aff0f11e8c5c2866821a31c31b02a756353da86725661e741577b0,2025-08-22T17:42:18.167000 CVE-2025-27497,0,0,743ee7f38dd6b9e10078c7bfc9ce8eb62501de8f23ae65ae5e5da5d98837ac89,2025-03-05T16:15:40.587000 CVE-2025-27498,0,0,7cb66b0e34a52fccf99fcea1075b68d5f7e08d30f7f5bc4fcc53c0689130dbca,2025-03-03T17:15:16.443000 CVE-2025-27499,0,0,5f67388884f61cbdff1996d64d628e46709b8560c17359d456ecd050bc05a679,2025-03-06T12:26:32.607000 @@ -291800,6 +291802,8 @@ CVE-2025-29360,0,0,ed14741daff1834760c72e16ee378def60a65b0e9a87d1935478af34c25ec CVE-2025-29361,0,0,b2f95f106e0dd76e26f1391bd8f7846c80b94f09c08fcd8760a1310b132a702c,2025-04-02T20:32:57.520000 CVE-2025-29362,0,0,86dc0e5304b5961e675a9da47c395a7a471345c88c21ef103a171cd044676cd8,2025-04-02T20:32:43.517000 CVE-2025-29363,0,0,a6428bd8ab492e7ec6daa63981c6084f5e6f0c666f66d3e852cb7bd2dbaeca54,2025-04-02T20:32:36.053000 +CVE-2025-29365,1,1,af3072c91cf19ebf14d8f4b04a71946805326bc7674fefb86ce7ba938999aa30,2025-08-22T16:15:34.797000 +CVE-2025-29366,1,1,455a4eb06ed6818faf4e72aa4edfacec6f74f36a8600545ed2e60104002a50e9,2025-08-22T16:15:35.030000 CVE-2025-29369,0,0,a98d3392b40832da04fc0e1b68fdd18273f24fb7f63efeafb19e7b1083ec0464,2025-04-22T15:20:07.247000 CVE-2025-2937,0,0,5ff3b30b97f24935fd2592c6b5ec41ce1474b550cca315d3349515ce1d8f7bb1,2025-08-15T16:31:10.727000 CVE-2025-2938,0,0,4243d6b406db6deccbaeb4370c8e79e292be2208bce68a3a7eac380dd06284e5,2025-08-12T14:42:33.660000 @@ -294885,7 +294889,7 @@ CVE-2025-33114,0,0,a2483d74239e5f2fb44f195aed9da71bbc940a8af33f4e0eb6cff2bfab954 CVE-2025-33117,0,0,f8aa31b261f522cd209fff5cfa9b6c6f385966de18d6667a11c00ee779920441,2025-07-25T17:42:17.010000 CVE-2025-33118,0,0,8487e282e605afd2fb4c464a3c6dd3bd4d81f0fb4f01660d2306d1af29fa0b46,2025-08-14T18:49:42.193000 CVE-2025-3312,0,0,d314cd0e3d98597c32289b5f3f4209f174e16c52e8e6ba2862a75de1162b07d0,2025-05-07T16:45:29.103000 -CVE-2025-33120,1,1,c8d8c37083629ce2399c9c9cd7d0f99940a2a7b64cf2f390adb3e3c088ecce37,2025-08-22T15:15:32.273000 +CVE-2025-33120,0,0,c8d8c37083629ce2399c9c9cd7d0f99940a2a7b64cf2f390adb3e3c088ecce37,2025-08-22T15:15:32.273000 CVE-2025-33121,0,0,930111752d29035281c584bc3b9306dc915fb7b3c0ff9bab537304b978a362b5,2025-07-25T17:42:30.307000 CVE-2025-33122,0,0,ddb2854c5b32b139f034678d802f29870b729be2b69f125a8d51de9fcfdf68ee,2025-07-03T20:53:32.687000 CVE-2025-3313,0,0,8c3e746212b0f7e34691b425d570770595ed2ddcf9c85476d8c05485bbf5b80a,2025-05-07T16:45:47.623000 @@ -295299,7 +295303,7 @@ CVE-2025-3594,0,0,26b99b5650ec88f178e123dd68f68bb7272812dc8f174965272ac280387e75 CVE-2025-35940,0,0,e1654e3276007056a3379a8c96a5fd620ef740e098f060ffb7c970ac065807be,2025-06-12T16:06:29.520000 CVE-2025-35941,0,0,c0f1005dafa96731728190c01e1c58a3d64892cc0becf767662ef579b6bd3552,2025-06-12T16:06:20.180000 CVE-2025-35965,0,0,4aa642d84377cde687111c4598cf1eaeacbb56cf1c939bfc9602ea66c09fbf1f,2025-04-29T13:52:47.470000 -CVE-2025-35966,0,0,8d013f6035e3c92d0a3b61100c8e09392c5939daea425f43f9566757b16cb593,2025-07-25T15:29:44.523000 +CVE-2025-35966,0,1,dead0d69132632e0573680290588f6796aa60d87db672cb8ea5bf55b79fa6ea3,2025-08-22T16:16:02.100000 CVE-2025-3597,0,0,d7f16eae83f55d018cc2fc04d9f80eccf613371d509c7f99733ac01645d2c6f1,2025-06-05T14:27:53.477000 CVE-2025-35970,0,0,bb7723f512185ca64c2587ece8d1c2c48aae3fd031d6ca117bacff51beb58499,2025-08-07T21:26:37.453000 CVE-2025-35975,0,0,ff6f53919e1d0edd41e3d119f9454f71c4e7dd5f4908d853817e3fb24cd36fe2,2025-05-02T13:52:51.693000 @@ -295328,7 +295332,7 @@ CVE-2025-36039,0,0,6a86c743f77d6c013ac93735703943b7b696f7036381f6d939c8917fc8c72 CVE-2025-3604,0,0,bccc0cdfe491469dc3b2e3966f2baae36ef8ff208c4e9d2ce152810d7801eb4c,2025-08-12T17:46:08.537000 CVE-2025-36040,0,0,826bfc6b99d193584c936c652a761f6ddd952e1068b3f76bc5503e6c1c5a6adf,2025-08-06T16:53:32.810000 CVE-2025-36041,0,0,76df275985c6d46adebc6605bbe824079cd2a59d18fd3c865df1320f8d6c6028,2025-06-16T12:32:18.840000 -CVE-2025-36042,1,1,dc3bbb9d6d3b0a09f795fd995354f935b4b30d9e5129cdb2fd55c255864a74d1,2025-08-22T15:15:32.483000 +CVE-2025-36042,0,0,dc3bbb9d6d3b0a09f795fd995354f935b4b30d9e5129cdb2fd55c255864a74d1,2025-08-22T15:15:32.483000 CVE-2025-36047,0,0,6aa4e5e32b89098eca267854b992ced154c1656c48c1065b97d332d0dac40b12,2025-08-18T17:25:11.113000 CVE-2025-36048,0,0,b9e5673fcb14d3cef795017fa309d05b4faf0fb501d3d325a270952f6a19a682,2025-08-13T14:12:38.570000 CVE-2025-36049,0,0,e630c7b4366a6c1ebddddfac2ed010f42b0fa79714baf0d7ae43001392bb70e1,2025-08-13T14:08:53.837000 @@ -295395,10 +295399,10 @@ CVE-2025-3649,0,0,df5be861cb9901de2ff346df6053edd181ced31f9d06ef10ebd9788e09b371 CVE-2025-36504,0,0,30afeffa7b8ef5e478f29856811f9be90f1ece9e22dbe373c856a36c842492cb,2025-05-08T14:39:09.683000 CVE-2025-36506,0,0,8e1d82c4693df84b708505ea767f870e37a12974d36fbc872c838daf3feb81a6,2025-06-16T12:32:18.840000 CVE-2025-3651,0,0,30e087cb1671b81c1bf0c1d2a4d51e77f706a32948b7aa67dbe7688506dce698,2025-04-17T20:21:48.243000 -CVE-2025-36512,0,0,51c2ad1c1ed44c2a37f40c162aca0c774d8624d09b079400b20b0c168dff1217,2025-07-25T15:29:44.523000 +CVE-2025-36512,0,1,4dadabfcfd2fb1b4fb19e2922456aa9f491165ba92f4586b0a8620131047cebf,2025-08-22T16:18:21.207000 CVE-2025-36513,0,0,40997ded6ccfa9f42a498c7fa3aba63677e185863eb779042a0e6b33a18b51a9,2025-06-06T14:07:28.330000 CVE-2025-36519,0,0,3a4d6f4137f15e2668d747832a5e9059e9f4241d7c90d7835bd0ba19f6e7da32,2025-06-26T18:58:14.280000 -CVE-2025-36520,0,0,92601126800e245991e4464e140f758e76c170cc3f200518e528b47ed7fdb089,2025-07-25T15:29:44.523000 +CVE-2025-36520,0,1,48ae8b61d0cddb7e23ae350b5b98ff0546ee1d3b223c77a496514c346261cf51,2025-08-22T16:18:09.797000 CVE-2025-36521,0,0,76dbe5c9e005eebc45d03f4e270884a68d88e62c1e707e433be80dfc20224dd6,2025-05-02T13:52:51.693000 CVE-2025-36525,0,0,9102790092d6e2cf5d66adf022393fb17d42679f868fc62ef62841755224cb1c,2025-08-18T16:01:02.097000 CVE-2025-36527,0,0,760bc907999d36f8a046dc03eb19c07cc3891fbdfc35cb8c53858aa720a6ac60,2025-06-16T15:15:28.320000 @@ -296537,15 +296541,71 @@ CVE-2025-38612,0,0,b2f3c8ba4ad107c7ecd808913f83c17457fde04ffbf4a5ff42ced32d9fc23 CVE-2025-38613,0,0,8cc9d2ed78516de882f1625d3f65cf7835da2de878ab64e2bc96112e39afa29b,2025-08-20T14:40:17.713000 CVE-2025-38614,0,0,4d2dd6001c76ef163ec8c332d6d7b1e53e125f1f44c62d67c2116f80f1f58cce,2025-08-20T18:15:31.897000 CVE-2025-38615,0,0,01de25b00fa705904754a3d8f3bf1050992f92a2beae4c7a1af1efca97cae443,2025-08-20T14:40:17.713000 -CVE-2025-38616,1,1,3f13d53fa28c6fd088cd5ca9114ddae2ba155356632b7348e4da4861a5e9425b,2025-08-22T14:15:46.017000 -CVE-2025-38617,1,1,b744e12bcc7df93b5cd80d4f3067d1681c1c76f2f9a7d4bc57813a5aa09e5663,2025-08-22T14:15:46.160000 -CVE-2025-38618,1,1,254a5a93808b89076f4a1830c5dbd8b1204b21afa8786aa28429b2c48c968a38,2025-08-22T14:15:46.303000 +CVE-2025-38616,0,0,3f13d53fa28c6fd088cd5ca9114ddae2ba155356632b7348e4da4861a5e9425b,2025-08-22T14:15:46.017000 +CVE-2025-38617,0,0,b744e12bcc7df93b5cd80d4f3067d1681c1c76f2f9a7d4bc57813a5aa09e5663,2025-08-22T14:15:46.160000 +CVE-2025-38618,0,0,254a5a93808b89076f4a1830c5dbd8b1204b21afa8786aa28429b2c48c968a38,2025-08-22T14:15:46.303000 +CVE-2025-38619,1,1,13e84e2f02041f8f8b45be609c39190d45f9bf5509660eb09604305e53641c04,2025-08-22T16:15:35.177000 CVE-2025-3862,0,0,d676afb0370748c9bc07d4c1748785041cfa500a37f539792fa3e468cbee2ce9,2025-06-04T22:57:04.867000 +CVE-2025-38620,1,1,c302c0f6ee85b0ec3a7c0d82ccf902fdab5da4a998641af057dbef4c148aa788,2025-08-22T16:15:35.320000 +CVE-2025-38621,1,1,e544d5a2496ca92ff704915f7248b7e77b6dbea0ae063f4bfc57eaaa69b4aea0,2025-08-22T16:15:35.460000 +CVE-2025-38622,1,1,9bd5c7f621e9f1c07f32087ee4a5aa2f6243ae8d38a10cc4f5abbe779faff176,2025-08-22T16:15:35.603000 +CVE-2025-38623,1,1,17120b2195436e8424a9041d921db5cde18c2d26909c18da31238bcaa00a9497,2025-08-22T16:15:35.760000 +CVE-2025-38624,1,1,75e709787ea7d8e9abfd0caff3e22999e0212ff405e66742580551ca6b1bfd89,2025-08-22T16:15:35.910000 +CVE-2025-38625,1,1,f444a058f670ff7a69491e9a651d77feffbdcdac3513c04c36276d9fecf77b90,2025-08-22T16:15:36.057000 +CVE-2025-38626,1,1,6d8249d56e924649a818d99194a00ba3de31d882921b59c51934983ccb97dca6,2025-08-22T16:15:36.193000 +CVE-2025-38627,1,1,85772238a97ad8718877ec2a965df959ae21d25e9585ae98d6c4625becd67ad1,2025-08-22T16:15:36.337000 +CVE-2025-38628,1,1,1e6535efbc7701e5a7efe98590cdfd2b97ca8306585b38a34263c9788d1aa5af,2025-08-22T16:15:36.470000 +CVE-2025-38629,1,1,f08f867e5841877502ada45ebeb701563b959f74d1c38a0ec665acad41738bba,2025-08-22T16:15:36.620000 CVE-2025-3863,0,0,e056e365cac040ee929035a529cad97e9304286854cf79144af5f0c76a9f248a,2025-07-03T17:09:19.293000 +CVE-2025-38630,1,1,8caece600779d20ec5d0b49e89bd4b3dbd5c4c45a07f49d04fea49091334cff3,2025-08-22T16:15:36.750000 +CVE-2025-38631,1,1,78d468080f5d93059c3e24dd67c80f35c7ad75548956de73e2579acb4a2ea694,2025-08-22T16:15:36.893000 +CVE-2025-38632,1,1,07eb29fefe7cbf33e73216acdf28fb3a59c30411416ca729e990fdda51cdb8aa,2025-08-22T16:15:37.033000 +CVE-2025-38633,1,1,b59888299e4b09b0b10937fef8332ed2b9c251af038fc963bc8d20ff4d8bb7a5,2025-08-22T16:15:37.173000 +CVE-2025-38634,1,1,148faf3599e70f1a1e98aa970fdd6d6b8081f05a58691e8f24dfcea1d131c58b,2025-08-22T16:15:37.307000 +CVE-2025-38635,1,1,ee921d80304788def129af83c45b6a91982c4abb7630a9b138d8c58d1bfba80a,2025-08-22T16:15:37.450000 +CVE-2025-38636,1,1,96f1c63311a9010b1801893281a45d7e1fbb5303ccbc2949f58091e1e2989485,2025-08-22T16:15:37.587000 CVE-2025-38637,0,0,8e0b7e01cf5cda931d029a9556a083a2937b1ed905193fce11df065c9e8763f0,2025-04-21T14:23:45.950000 +CVE-2025-38638,1,1,91f5c392463bb849b8909b64778e711b12100650c1d22950badd8ab071eb960b,2025-08-22T16:15:37.713000 +CVE-2025-38639,1,1,2bdf7dbb4e57488bc081236f45f2576ffa03a237f3581a70f7b887fc106d6f9a,2025-08-22T16:15:37.850000 CVE-2025-3864,0,0,444a554174f3a166bd8cf43652805e71b133026b842d6829548d5a78647f68f0,2025-05-28T15:01:30.720000 +CVE-2025-38640,1,1,5513128ec27a8eb6804dbc2f87d541f7144d9a4f4de3284fa2db4424b0514412,2025-08-22T16:15:38.007000 +CVE-2025-38641,1,1,4a67b693366b15f1b3e68627116230bd45b1bb250a04c36939588867363cdacd,2025-08-22T16:15:38.150000 +CVE-2025-38642,1,1,7c4012bb39e1df8f06eb862e90f64d191a916646688e0e86641171e4739bcc8f,2025-08-22T16:15:38.283000 +CVE-2025-38643,1,1,6389239bd7588027374be84ab64362298a31fa150e6cbe8d9789d8d3f71cb83a,2025-08-22T16:15:38.417000 +CVE-2025-38644,1,1,a91bde7a97b30e5ff66d30b5346e0f4cda048db2944d1e285f01ba55a3e94dd8,2025-08-22T16:15:38.567000 +CVE-2025-38645,1,1,888449f9c4264d12e7ecc9be6afe7a42ac13a85910dabe60c0352ecfb57a46c1,2025-08-22T16:15:38.727000 +CVE-2025-38646,1,1,a34212aa75a9c28e05bec5285f9e28c8c863e0626212d93ac0b4558868df999b,2025-08-22T16:15:38.870000 +CVE-2025-38647,1,1,28278351256c19ba6bdb722dd8a8d2e03f2c873aa26cdcfed1e51f6d68fc3cb3,2025-08-22T16:15:39.337000 +CVE-2025-38648,1,1,5595a96bc3272c7c769ad1926075d9f1e3fd0189bdeab821e40243e9cbbef53a,2025-08-22T16:15:39.480000 +CVE-2025-38649,1,1,11ca7e630bdd9be5fcc88c838856059daf9f391eb6e06f73611aeb37968a2865,2025-08-22T16:15:39.617000 +CVE-2025-38650,1,1,649a61dce4fb850278a21bc95ec27a1f7de963f5a8fbf43b2637967dfb9e04cd,2025-08-22T16:15:39.760000 +CVE-2025-38651,1,1,78f93a7b4d61c32215f3f8b1e1285b73c967daf53a6394361e05fd7b5d9f4ea8,2025-08-22T16:15:39.907000 +CVE-2025-38652,1,1,5ac005ec66dcbb44e0f61300a9fe60e088e7d54d7c8659998451a4302177c791,2025-08-22T16:15:40.057000 +CVE-2025-38653,1,1,654a75e5ad26973d1c6853386472a2c86fbf37b8ed29bf15069a0318d5ebec06,2025-08-22T16:15:40.200000 +CVE-2025-38654,1,1,432b5d35c346aad77284096e8ad004aa24c0fe2545270a516f271592237d2711,2025-08-22T16:15:40.357000 +CVE-2025-38655,1,1,7d2896be976868482a01f43c4512b9debd6024f390af6ff52fa8919397a36f37,2025-08-22T16:15:40.493000 +CVE-2025-38656,1,1,7b68fb675f26f1a03165035c6c2526e7e49c44b96910b342f75e11ac0768f6e7,2025-08-22T16:15:40.633000 +CVE-2025-38657,1,1,9e6757f22d29ec2143bf269cdc986a8f9e1007cde1bd85c21c6544939bb9375e,2025-08-22T16:15:40.777000 +CVE-2025-38658,1,1,c938f92e9cc57de78610c0fcf4c3554d4e52601f71ff911758596af70b4caee8,2025-08-22T16:15:40.907000 +CVE-2025-38659,1,1,590a48191e392a30aacd90781b1c2891d11e4517a9aa3eb2113d2ae084878976,2025-08-22T16:15:41.053000 CVE-2025-3866,0,0,0e2c2da6f7c5d300ded32bf87bd65ab48909f1dbdb45bd4cb4a0436c226bf428,2025-04-29T13:52:28.490000 +CVE-2025-38660,1,1,0da5b829a38a89db1da16cc847030eeb7e78d09b47d697bf182dc7aeda7855e9,2025-08-22T16:15:41.193000 +CVE-2025-38661,1,1,60c33c383b0d01fdd72cb011635b6ae8cdd3d5693bab5208c81c5907bd4f216e,2025-08-22T16:15:41.330000 +CVE-2025-38662,1,1,54d0ce67c17bd40460a12ae3d6cfe2cb4db01868e273468b792bb318a4f95456,2025-08-22T16:15:41.450000 +CVE-2025-38663,1,1,da4355622efaa64e895bbc2ff918c1ec5b89f1c44de12886bfd5de1a0615a0a1,2025-08-22T16:15:41.590000 +CVE-2025-38664,1,1,a5b823268ac0630475cc62737252bd28e729ced7c3626be1a74c4220bd1ed019,2025-08-22T16:15:41.723000 +CVE-2025-38665,1,1,c38e4892b691e3a84d6118f9297b7fafb6015e12c6e89ac239e06500cb475cde,2025-08-22T16:15:41.860000 +CVE-2025-38666,1,1,69d0505ee8dadd7e8fc4818a8c5fad4923b72e4ab9e4d40fdebc3f9a4229a45d,2025-08-22T16:15:42 +CVE-2025-38667,1,1,da4417e3f8077dff62cc58e41baed265d5758560be5f854d576daf85c00b2335,2025-08-22T16:15:42.150000 +CVE-2025-38668,1,1,7c42341ffce6c0e833aa5402901cee25c9f28f5002251ef2c3a6b3ea9c7a7908,2025-08-22T16:15:42.283000 +CVE-2025-38669,1,1,9d0bcd50e8ec262eaf7b6c33f1af42def8fe9fea6afa8db01eeafec50a356644,2025-08-22T16:15:42.423000 CVE-2025-3867,0,0,6bbe7b335b1e947d65c52a905afc6132aa2aaf1b01e07c3a3303c89ef02601f5,2025-04-29T13:52:28.490000 +CVE-2025-38670,1,1,716a5cf4fff5e9e7eabc7e290340665b977ea63790f44fd6a1cd716dc734626a,2025-08-22T16:15:42.547000 +CVE-2025-38671,1,1,8ef0a41513e1e7500e97d6d7933099183ce9dc7b52c2cbec04a4343d8da38317,2025-08-22T16:15:42.683000 +CVE-2025-38672,1,1,ac0d6efa60005426b83361986a024b7f876b3f8e23dcf2bb27c7724dc7c02d93,2025-08-22T16:15:42.820000 +CVE-2025-38673,1,1,b86c84520d96b951a9709a85d0fd7a8944c1e951923cc7b95a96a9185a46e64a,2025-08-22T16:15:42.953000 +CVE-2025-38674,1,1,a1419899a9de7fd5285d4cd916ee48acd8b83570c42a09f15400b81e57284ee6,2025-08-22T16:15:43.090000 +CVE-2025-38675,1,1,f032c8510728a0a90cbdb4182a02b1c1f4bf0f309b67f8e9e57f5f407c28c6e5,2025-08-22T16:15:43.217000 CVE-2025-3868,0,0,e109e29b4a56b298e188d2d4af5984428468734c332a2ae4218688aa746fb72a,2025-04-29T13:52:28.490000 CVE-2025-3869,0,0,2ed5e1c61b0b5cbdcdaac2742c798928f8b7c200c4ba02c1801cfc11d6f8048b,2025-05-28T14:58:52.920000 CVE-2025-3870,0,0,5d27427174a3606bfdd389a0cb245ecba9bd450174244992e8a6859595ce8c31,2025-04-29T13:52:28.490000 @@ -297823,6 +297883,7 @@ CVE-2025-43748,0,0,e0132cf7debd850f1224bd6d86862814fcb85ab03f038f134a2474688d232 CVE-2025-43749,0,0,9a61d585ae9ff11ac9951e7395877d1a220813ec2ea982b728d7153ad2f67966,2025-08-20T14:39:07.860000 CVE-2025-4375,0,0,b20f7ab0bc904a77bb54799caa478fe059549e18a1801d8a45b6880a04f0dc89,2025-05-12T17:32:52.810000 CVE-2025-43750,0,0,82bb49f7f8780b01c9f659ac86ff11d7a4a17dade59bc9a747ed8685d19ca310,2025-08-20T14:39:07.860000 +CVE-2025-43751,1,1,3f02fe4828f90863150e5fe46ebe7844f01e0c9799c0d5d3fb73b64e11c8d1b2,2025-08-22T16:15:43.423000 CVE-2025-43752,0,0,3e00d58dadf494c3680476fbf3b2a101427aecc62c7ca87f5f94b1137ec72c1f,2025-08-22T01:16:07.553000 CVE-2025-43753,0,0,165a5b227e797d53073668f0a2b39529ea0b033e8020152e120ce5752f39ba0f,2025-08-21T23:15:30.130000 CVE-2025-43754,0,0,3c2902cd14ae41e7edf90c4590de98db3cb46c2188efd10c1d5e987e462b45cd,2025-08-21T18:15:33.893000 @@ -298584,7 +298645,7 @@ CVE-2025-46349,0,0,1714a97271744ee922f4bd027ddde23d095fab400e525c7e78a72152293a3 CVE-2025-4635,0,0,dbd97ddcf9f06e6a17bd98831167ca852ef57632eda54b68ef8eca53b0008e92,2025-05-30T16:31:03.107000 CVE-2025-46350,0,0,e9c2d732d02d04db30379a06f4d06a3199d3f19fe29e090eebfdcec4aeb7f535,2025-05-09T13:57:36.823000 CVE-2025-46352,0,0,618391598a4bc31a1d4677ab5a474da78aeac6261ac4ae8b26099a8c01185f09,2025-05-30T16:31:03.107000 -CVE-2025-46354,0,0,882e7b78fc0c78f5888feda0827768b401d1019b3ffc4c251813f23f07df2e14,2025-07-25T15:29:44.523000 +CVE-2025-46354,0,1,74bb5401180d472eeb681301cb131df78fdf5ef0ffaf4656ae99f4eeed2fa39d,2025-08-22T16:17:53.963000 CVE-2025-46355,0,0,5a064c3f281b9d23670e4671cbb55d7d2442f434945aa8aa1f5e2ef16f08e8ac,2025-06-04T14:54:33.783000 CVE-2025-46358,0,0,0be29f1609d552944cbdd8572b2fc83c559b739741e7ce400140f44aa3c6635f,2025-07-15T13:14:49.980000 CVE-2025-46359,0,0,1d522ab60ba4223a7555df3abbcfdc0406b0926f9ef6adaa633dffa73b9dcbaa,2025-08-06T16:42:31.303000 @@ -298918,7 +298979,7 @@ CVE-2025-46783,0,0,8900d304e711a603ae98ae005db090006adc0e747b10f0d6548779ad58587 CVE-2025-46785,0,0,f1fba6f3bb1bdab78a725abf1f0ecceb2c79d1b69a562e56a93dd8c6ef255dc3,2025-08-19T19:14:44.837000 CVE-2025-46786,0,0,65c9b4d28548a814ac9da85c56a6b20b3ea8dfdc3f7521c8b14e0368cd0ae6bc,2025-05-16T14:43:56.797000 CVE-2025-46788,0,0,b0653478b8b74af232a45a1c2a67be42c27c0006b493e691723caa1b271bf72b,2025-08-05T13:42:34.270000 -CVE-2025-46789,0,0,aa1d51866c46e9bdfbcb388f809ccdf600cf91d4385253360f40b47726353f7e,2025-07-15T13:24:41.097000 +CVE-2025-46789,0,1,ba7f2ebe06ee2b260e29c1a92b46f2630951575b165a5a6465ba031563d15fea,2025-08-22T17:09:50.280000 CVE-2025-4679,0,0,cc3dda740502740cc994d57c277ece8f1a62925a2cb5b96df7fb77fee9065d62,2025-07-02T12:15:28.437000 CVE-2025-4680,0,0,410b15021d933bf8099dae9a6b4158c0db9b67d48c45336551eea48d0bc2bf92,2025-06-12T16:06:39.330000 CVE-2025-46801,0,0,11def8e560cfea337e905c8ff57c25c4d9f1a43db749a66daaa006ba67ef4e63,2025-05-19T13:35:20.460000 @@ -300196,7 +300257,7 @@ CVE-2025-48494,0,0,0329dcb313613e53f258f49f9571ad3f690e1a097f931b0aba423ffd21693 CVE-2025-48495,0,0,231a0a2df8efd4f811988b128f1772192e88580d1043466f8b361c6491441d56,2025-06-02T17:32:17.397000 CVE-2025-48496,0,0,928f57dde76bd5c33e78704f772ad597574444952a08bd78d9f4c3630309e71f,2025-07-15T13:14:49.980000 CVE-2025-48497,0,0,87864234e61d762b45107c5a61a3b1913d445c275f7eb7f6e202fd8227edee1b,2025-06-26T18:57:43.670000 -CVE-2025-48498,0,0,67e3a2370323260ea682bd2d9663fefa6a64a192f932f0892c0f0a3b90f71807,2025-07-25T15:29:44.523000 +CVE-2025-48498,0,1,1ac8e2bfcf7cbde5ddef2a3580a9d2abb7ed96637ceb83ec5e4ece93a0005e98,2025-08-22T16:17:43.833000 CVE-2025-48499,0,0,0737b67f12dad91da633d38071ccd0582f582990982d28e01d8ab02b58ec5d8d,2025-08-04T15:06:15.833000 CVE-2025-4850,0,0,f4734de71688bb34b47f04cb41c5af0cc568cf46c9e6cb90745360a2b3c7693b,2025-05-24T00:57:35.620000 CVE-2025-48500,0,0,84ea49cc8fc2e9a010115d1e59a927128f8086e29b6c44880e4072364239dd7d,2025-08-13T17:33:46.673000 @@ -300845,7 +300906,7 @@ CVE-2025-49551,0,0,6a3b273e713b0681470e6b66c827509dbb9079ea2aeb5d09d2d9a3f3b8172 CVE-2025-49554,0,0,96e1a8faf7d46f7ae442bedb7ebba6bb9b5d7305fa49e0d56a27cb55b3d506d8,2025-08-15T15:37:34.777000 CVE-2025-49555,0,0,60fb962ae2a5141d14bfae6fb7b603832cb1a571759b3eea8b5a59fa85cebe9b,2025-08-15T15:39:48.550000 CVE-2025-49556,0,0,17f3cadb64ce85a787c6c8a6e046656e1b03c5e7c861f32f7420d939181120c3,2025-08-15T15:39:58.133000 -CVE-2025-49557,0,0,7835f9b689f64acf7c9103adc48004d03366f42268ca42a64d087a5a660f4b63,2025-08-15T15:40:43.247000 +CVE-2025-49557,0,1,de11c69a43dcae3d9f8574c8d14291a8e7093b9cefad0da0604921241b32bb9a,2025-08-22T17:15:32.147000 CVE-2025-49558,0,0,293c94fb3acd8a445aea8de95233c827ed9177f1d19b329460c4fed9f2f35ef3,2025-08-15T15:40:51.597000 CVE-2025-49559,0,0,f23977da65c2b138e2f76c7d8f2284eee2194c7573860a0ea14c7809d2061dfa,2025-08-15T15:40:55.130000 CVE-2025-49560,0,0,74f915bbcb4ab5b3727b51047917eb90e73aeacac6325e006c762f8c1b19f4f6,2025-08-14T01:35:27.147000 @@ -301441,11 +301502,12 @@ CVE-2025-50641,0,0,5a561069ad44d5e644aadc4fe2dcb4fd7b9daec1324018e0ba4a0df9c5cd7 CVE-2025-5065,0,0,8fc53b66fe42da4959811ef54b22b91af2bd35c9f4f954731cade0848a818fac,2025-05-29T15:50:57.497000 CVE-2025-5066,0,0,c2e1df9fe6cae5990ac135a3976d91b02429d110b23d2797a3b2dababf03dd2d,2025-05-29T15:50:51.310000 CVE-2025-5067,0,0,cf2723dbc4b2f797991ebafc1c2cb069497cee2d74a6a84ebec9dcde1e0dd29e,2025-05-29T15:50:43.240000 +CVE-2025-50674,1,1,c31e206190e9f3b58bfdd9e2abbfd694e24789c731368695ccfccb85c1be9bbc,2025-08-22T16:15:43.607000 CVE-2025-50675,0,0,82fb2e236d189cc15b019c9755eeef8431e2145457ccb9f866f44cbfa9d1d2ad,2025-08-08T15:15:28.420000 CVE-2025-5068,0,0,743f6f8e9f7972849bbf135b58a69c40f5a6f921a1bb6da952423dea4534ee5a,2025-06-05T14:11:10.430000 CVE-2025-50688,0,0,604dbb565b59c1f364736b3ce7ba0d3eafc4e87fc316f0aeba1988a8c5aebf7d,2025-08-05T21:06:25.813000 CVE-2025-50690,0,0,a1db5655a36b739a92a087b3c903a87b7bb10fe41d8ee1836d711f1322552d72,2025-08-13T21:15:36.333000 -CVE-2025-50691,1,1,eca36c862b9f069c1f3820ea3a0306cd40614dcf4bb812f7eb161df2ed1c3ae4,2025-08-22T14:15:46.453000 +CVE-2025-50691,0,0,eca36c862b9f069c1f3820ea3a0306cd40614dcf4bb812f7eb161df2ed1c3ae4,2025-08-22T14:15:46.453000 CVE-2025-50692,0,0,f08d64c2d302ad89ee68b872a59f342968ca24d2bdfbd39b3781a6354628970b,2025-08-14T19:48:25.637000 CVE-2025-50693,0,0,e45af4df59709862d79fed94eba81f3c720eac46d3c47878fa15d033f0971882,2025-06-27T16:35:39.350000 CVE-2025-50695,0,0,accd627332da7d97b76cb5783ee219c402d198efaa23d938427a710819f5d635,2025-06-27T16:33:31.330000 @@ -301456,7 +301518,8 @@ CVE-2025-50708,0,0,b595196a78bf7846f881ed2e936a52a0568c440c29fd2e18e1cb5d414e18c CVE-2025-5071,0,0,81cbcdfb92d19533fb0f840b1913427ed307dafc4287f9c7007d04f8f02c558e,2025-08-11T18:11:51.800000 CVE-2025-5072,0,0,018794b89a334645a6a5efb53691bc8d4bdc43518fdcf52adffd3eaacbe48488,2025-07-03T15:14:12.767000 CVE-2025-5073,0,0,a1230535d583b5f466b5fe2615cca31afcba55333f600b324f190ec047a41d18,2025-06-05T20:13:49.707000 -CVE-2025-50738,0,0,d5ce8339dd64617b6176fdd1a5f6355ede2c0aa89ac2a2e62cf9f9df69f38273,2025-08-06T20:54:37.777000 +CVE-2025-50733,1,1,d261c0dd54114dc480fe5ae7856ddf8e9c7cf7fe9d1bff7d042a48584428150d,2025-08-22T16:15:43.820000 +CVE-2025-50738,0,1,bed0e0606dea2d270a63639d5c97b46375266cf3e08cc405aa6406622cbea9e7,2025-08-22T16:15:43.973000 CVE-2025-5074,0,0,b32e6a163eb96eec8f69e51ca7a85c7da766b8b9d224e7b4f2f300a52a5b9bc3,2025-06-05T20:14:07.020000 CVE-2025-50740,0,0,fd9d758ab55695390d44e3e357883f355662509b10fdb7b4bc3e706768168f20,2025-08-07T21:26:37.453000 CVE-2025-5075,0,0,84d47ffcc3b0444179dda95ea7f7a9076e7c3fde7adbf4a674f65dac66b933d7,2025-06-23T14:51:26.367000 @@ -301631,7 +301694,8 @@ CVE-2025-5158,0,0,afff8646a47910589978b020b75b5c91a2af0ed8317ed133e2c97048f31b56 CVE-2025-5159,0,0,7e4f9c87fa8cb36ab68827992685bd7dce5d985f906e0eb5e604d5603336b531,2025-06-03T15:49:57.750000 CVE-2025-51591,0,0,ffb6fffa938ff0a725cc30dd6958d4559d9e71d7b4ab3822128079c6793dd4a5,2025-07-15T13:14:49.980000 CVE-2025-5160,0,0,f919be7838aa30c255a76663bf4c9d8598a6f73a59956860ab06a9d9592b0c8c,2025-06-03T15:50:06.560000 -CVE-2025-51606,0,1,494379c56de3e0425e8402aa1af17c529c9cfb0c687f6e6f5aef9293465c9959,2025-08-22T14:15:46.620000 +CVE-2025-51605,1,1,4d2e01905917249dbdac4b6fbee8d55105c0c8c60aee2d13833e7d5a175f9243,2025-08-22T16:15:44.187000 +CVE-2025-51606,0,0,494379c56de3e0425e8402aa1af17c529c9cfb0c687f6e6f5aef9293465c9959,2025-08-22T14:15:46.620000 CVE-2025-5161,0,0,7d2724ee70b30412111ba9ccac6c315b2b363b98ec43755c244ae3101e4b62fd,2025-06-03T15:38:55.197000 CVE-2025-5162,0,0,6870380b991c455dda6522e17853c595e237b4e03d01755ee360cfa7a50a77d6,2025-06-03T15:39:22.517000 CVE-2025-51624,0,0,5499b7ac4cc3d917a4a8a313da6f07837baae713f15c705dc445e48ea7c5d91d,2025-08-06T20:23:37.600000 @@ -301673,11 +301737,11 @@ CVE-2025-5178,0,0,b7d5af1ba17b377b37a69a628a403977f14bd11fb2e46e9fb198f5c59eb3a2 CVE-2025-5179,0,0,268b5a1de38de37705630e8ff7b8d64567a8fb33e2605eff760f161300a9b9bf,2025-06-03T15:45:10.347000 CVE-2025-5180,0,0,ab929673d111ae96ba4c2d70b35d834abe0c052662b6c35081a74c590c6a8845,2025-06-03T15:45:24.887000 CVE-2025-5181,0,0,6b9678f1034433ee31ef41571152dcfee6247bf7f5825450a9a179b056095fc4,2025-06-03T15:45:42.630000 -CVE-2025-51818,0,0,5462986fe3bca44a26caa2db14ded25bae351031c08f7e4289ee141a4268cf54,2025-08-21T18:15:34.423000 +CVE-2025-51818,0,1,06f16914b745a5cc7f7907e9392bbe802abb41d64f6909035f1c746d69f81673,2025-08-22T16:15:44.400000 CVE-2025-5182,0,0,4eefedcebcd03f2aef74c4ef5b4b53fddb71d62561004fb9557d198433f5447c,2025-06-03T15:45:55.413000 CVE-2025-51823,0,0,229041482b5e52f8fea4dbe447f8d6b4e6d9373ab30ce7c53f835daebf86abc2,2025-08-14T16:24:01.587000 CVE-2025-51824,0,0,6b056e66e1701892d40904608c9b10160049ccf548939b5be009f1e88f8fb56f,2025-08-14T16:22:21.447000 -CVE-2025-51825,1,1,8066814242188d9bc281cb2db84f695c7fe3e71e8fca56a8dc31b44af67a3416,2025-08-22T14:15:46.833000 +CVE-2025-51825,0,0,8066814242188d9bc281cb2db84f695c7fe3e71e8fca56a8dc31b44af67a3416,2025-08-22T14:15:46.833000 CVE-2025-5183,0,0,c805e02643e0e27a9dd9169f81c14e80e19028c481797ace1339fadf2ddd19a0,2025-06-03T15:46:11.980000 CVE-2025-5184,0,0,0c83a5fa50189682781f691fc4b3c0711f14dbbbb155d47eaa329f84d4444e80,2025-06-03T15:46:21.597000 CVE-2025-5185,0,0,38d3e8df6b4bf723f8b7c203881d74ed487013508bbfe062800873a9ef93893c,2025-05-28T15:01:30.720000 @@ -301705,7 +301769,7 @@ CVE-2025-5197,0,0,30d703600cc14bde5841fe78448cc5e460d4d0697ab688475fa36143443798 CVE-2025-51970,0,0,9caa8db334579e8b9fa0c80c4395cb1732bd39675e13b02c52aeab4bc2fbcf9f,2025-08-06T20:45:54.200000 CVE-2025-5198,0,0,3f9004ba48baa83fab893b1c2178fc7674c79cdae605329d009f5824301e614c,2025-07-30T20:15:38.517000 CVE-2025-51986,0,0,c0abf644db0779c33108fd0d1221b191cb4078c2042392b8b948fede398ec6e9,2025-08-15T13:12:51.217000 -CVE-2025-51989,0,1,21515b7a77bdccc29cd1d2c530b8b45d5e77e33797d2339f49e0758efe461e03,2025-08-22T14:15:46.983000 +CVE-2025-51989,0,0,21515b7a77bdccc29cd1d2c530b8b45d5e77e33797d2339f49e0758efe461e03,2025-08-22T14:15:46.983000 CVE-2025-5199,0,0,6b296e1d0c0ce4b46a48e90697c3eeb91b35946258c7838a5d19548ef2b41051,2025-07-15T13:14:49.980000 CVE-2025-51990,0,0,24c1d1f52069577f0c1632becf8a4b473a3458dd307c26169973f9de16e25310,2025-08-20T16:15:38.143000 CVE-2025-51991,0,0,f344617153f7900591cc19c6a6ae7ed1b9a7253ce81279b95a4541803881feef,2025-08-20T16:15:38.340000 @@ -301725,6 +301789,8 @@ CVE-2025-52081,0,0,7524f7731467b567b46c74674744ad3887ba949b75e8ce073bef8fa516754 CVE-2025-52082,0,0,0ec82b69e74eb30bd0b3d1df89bdce9f6961a4649a70ca44f55c397ea4b6ab9c,2025-08-11T18:51:25.873000 CVE-2025-52089,0,0,4db2bbd7b0611fb7dc4cd21d979d1733621ec89437d924ce6ab169090e059238,2025-07-19T03:15:22.727000 CVE-2025-5209,0,0,1de988bb6fc9688228254af9049355449ffefba36f51df5a462735aed22ede34,2025-06-26T16:01:40.640000 +CVE-2025-52094,1,1,9816bcc6b7464f9df435c372b002d971ecfbad80485ed48e37d36ef9f3ed9feb,2025-08-22T16:15:44.583000 +CVE-2025-52095,1,1,b5ee4ea94a0b0788ef723b863081547aae88d36a6e4771b348a7760be64b9a94,2025-08-22T16:15:44.740000 CVE-2025-5210,0,0,7f798974cbc440c4e4dd8009e513c3eb9007b33b9ead67a41eab0bd81192fbbf,2025-06-05T14:13:54.527000 CVE-2025-52101,0,0,1b23d2beb05baae640dd99ba93a8a8abbf0de37e3d8eada8ebd734f4f0eba132,2025-07-03T15:14:12.767000 CVE-2025-5211,0,0,8f4ed9a6be734738ba7e8af34dfd90276884a544fade7898e9f11540d4e9c7c6,2025-06-05T14:13:12.777000 @@ -301832,7 +301898,7 @@ CVE-2025-52464,0,0,78f6019e85d48ab55c32d91e272573030421c73ef856e07219b800e332478 CVE-2025-52467,0,0,16105c9074c96ad94abfdf299814ac8afdc45b40f5844eda614417a0d3d4ca0b,2025-06-23T20:16:59.783000 CVE-2025-5247,0,0,54e3a381cfd9dfdb05827b9f71ff8bbd85014209bf716148a0d5df41e284d42b,2025-05-28T15:01:30.720000 CVE-2025-52471,0,0,c9e136f4feaaf26b374408b413355b4aba8d0c951d69f7f105837900c0eff9b5,2025-06-26T18:58:14.280000 -CVE-2025-52473,0,0,9159cf6eb3ea6e3484caefbc9519bcfa964fd29af6e5d0d05fd725f415303d81,2025-07-15T13:14:49.980000 +CVE-2025-52473,0,1,599a43919d13aa16547142219bd49d1b472546887d3b0762c506b6d43cc2e4f3,2025-08-22T17:04:49.530000 CVE-2025-52474,0,0,94d58cdf8dee3f7bebae9b7945bd1979c6a147e3a3b5c373d5576bf39c927951,2025-07-02T16:18:45.913000 CVE-2025-52477,0,0,ce815dac973895a3b3d0881eff1409816f7e382496ee85723b3784715da1fddc,2025-06-26T18:57:43.670000 CVE-2025-52478,0,0,540809891c93daa541f4e195cbffcdc716e48c9100b6cd956028464c4f6c7269,2025-08-20T14:40:17.713000 @@ -302048,7 +302114,7 @@ CVE-2025-52895,0,0,bf6a84ce227c6651ad1e6287ea85234c45b1c5e7a233207eada10b15918d5 CVE-2025-52896,0,0,b6456b9e394eb6acc90337bfe20f249fa2907ca3571ade780049f703e940f5f6,2025-07-08T14:10:33.893000 CVE-2025-52897,0,0,91482d54a18b3607593ef05c426ac77127beaebc178b5a8d2159284ee5c819cb,2025-08-04T18:55:55.277000 CVE-2025-52898,0,0,0f17ec88a3ab5b6aeafcfc9924dfe061181d4324d6f2c800366c9351e4ecb4d7,2025-07-08T14:43:50.023000 -CVE-2025-52899,0,1,64ab26fb2c323302914e374e0994f4f29f7b22507f111a147988c8de58710f32,2025-08-22T15:34:29.893000 +CVE-2025-52899,0,0,64ab26fb2c323302914e374e0994f4f29f7b22507f111a147988c8de58710f32,2025-08-22T15:34:29.893000 CVE-2025-5290,0,0,ad45f62f849dd27deb380b44d26b94809d4f0499166fbd95cf7b52d6d8099374,2025-06-02T17:32:17.397000 CVE-2025-52900,0,0,5656458967b1dddc7a3812ccee2f6a56da9bfdf67ab2e949504cdbdd122dacaf,2025-07-10T01:17:03.443000 CVE-2025-52901,0,0,8ccf317d4364e2da563b482cc1834724ec1404951575da5f9d375c3ba9c4df33,2025-08-04T18:15:35.040000 @@ -302178,7 +302244,7 @@ CVE-2025-53091,0,0,01f26f0e7340b37fe1b8d341679db61fcaf8487f7c9a90afcfb883f9a5365 CVE-2025-53093,0,0,74633fa37f55d3e4578f17a8a8e9cf5802a23514d8c74f36bbe49970c76e862b,2025-06-30T18:38:23.493000 CVE-2025-53094,0,0,418576393828aa4e87c8e5ad6e152067b9fe196eb6fcd7a235ffa2a208b13760,2025-06-30T18:38:23.493000 CVE-2025-53095,0,0,c479ffe1068b27b348c291bec098de3ddb294727b46371d056a5895eff3862f6,2025-08-22T13:44:40.643000 -CVE-2025-53096,0,1,d53a1da06caed9ebefee5a241fc27b15488d2181a94c140a5eb42423a2f87593,2025-08-22T14:28:45.230000 +CVE-2025-53096,0,0,d53a1da06caed9ebefee5a241fc27b15488d2181a94c140a5eb42423a2f87593,2025-08-22T14:28:45.230000 CVE-2025-53097,0,0,b4f020aa269a3e7b86908bda17779dfdc94eaacf2df957f9e5c8283f7aaff4ba,2025-06-30T18:38:23.493000 CVE-2025-53098,0,0,86a489c61d8b0c261dffdba74b45a8d7529ba3b5a0320954e472cd467c2a55fe,2025-07-01T14:15:40.843000 CVE-2025-53099,0,0,e89914116e34103a3cc024784ec25a23e081deba1d3153d660a820e63813f2f8,2025-07-03T15:14:12.767000 @@ -302382,14 +302448,15 @@ CVE-2025-53357,0,0,0689c155bfa13ecbe1f08be01e33d8745ff0b56723ee1f2c10d7d2917df72 CVE-2025-53358,0,0,3d97a4954e653a509d4005c71cf64fbb269b7293bb5ffaddd5ae485b7c74944b,2025-07-03T15:13:53.147000 CVE-2025-53359,0,0,45ed40db77640f47ba583ca32d5c60d80ffbacd98c4463b392cad98fdcfa3117,2025-07-03T15:13:53.147000 CVE-2025-5336,0,0,51ebbfc8a6c001d043ad92fbb70974a3ccedacbc8290bd5643cc8faeb9732c02,2025-06-16T12:32:18.840000 +CVE-2025-53363,1,1,512182387f1820524f0f7e97a0a9739e582f4b3008efee1ed8a8940781ccda9f,2025-08-22T16:15:44.887000 CVE-2025-53364,0,0,44750180878d423d96f0431c04d3ff22bbf7287b48791da69c5b8805f47601bb,2025-07-15T13:24:41.097000 CVE-2025-53365,0,0,3c9002ee138b7484cfeed75e07a2470c0191764d03998fbfcbcb0a841ea0deb3,2025-07-08T16:18:53.607000 CVE-2025-53366,0,0,54029052115dbda9488ad5cb5c8a51eeb10fcd2b8861589cbce76a5e29e84fef,2025-07-08T16:18:53.607000 CVE-2025-53367,0,0,92262bd8511e364242d6042d7ef06d2f68e7d4f967fa0ffb89171b91a83d811f,2025-07-18T16:15:27.073000 -CVE-2025-53368,0,1,deab7200b07565ece10f9f07a6866d2f1c39cee5ad937d9234b6cc832e111d96,2025-08-22T14:20:41.683000 +CVE-2025-53368,0,0,deab7200b07565ece10f9f07a6866d2f1c39cee5ad937d9234b6cc832e111d96,2025-08-22T14:20:41.683000 CVE-2025-53369,0,0,b4c2d2e474a422a92db7d4fa6fdce8616b89aaa3f904263ffee4c84bb923011d,2025-07-08T16:19:11.700000 CVE-2025-5337,0,0,2dbe571df1a354f6a2e0673ef8648a0adfd787cad2d8f0c947a0f1e201d12965,2025-07-09T19:22:40.480000 -CVE-2025-53370,0,1,12db2e30ff1ab204f190025066fa3209bb1193aebef7bbf259b4cbfb9a4e2212,2025-08-22T14:19:32.820000 +CVE-2025-53370,0,0,12db2e30ff1ab204f190025066fa3209bb1193aebef7bbf259b4cbfb9a4e2212,2025-08-22T14:19:32.820000 CVE-2025-53371,0,0,93f9aa00f15aae347d2029a81e0c1777fdffa5b482aa14f5e5092a721889f33e,2025-07-15T13:24:41.097000 CVE-2025-53372,0,0,5bbf147a32ab362f0c3f8fe3bc3d2d18089e92f32946dd1aec36e80fdd25cf99,2025-07-08T16:18:14.207000 CVE-2025-53373,0,0,6462ff63ab256fea4b5802febd9c983eb3c60586e1ba4b80bcc391c6b8469696,2025-07-08T16:18:34.923000 @@ -302548,13 +302615,13 @@ CVE-2025-53632,0,0,d28a89828d50688b967ee1a13e273dd7e18fd700d2d284ab0e163de0b7667 CVE-2025-53633,0,0,1e51adbe0bba3b7d3957827bef4de06ad40cbee8053e268d028e6c0c3591b49e,2025-08-14T20:44:46.470000 CVE-2025-53634,0,0,bcb1151f4b7c4673abd6a53742ff9e7dfb3d56d9e87dbdcd275d731e4b9c1333,2025-08-14T20:41:40.660000 CVE-2025-53636,0,0,757794f24a4f32d5b11040f0f2cd458915a214cddbeeada5c7aaf45f24381c40,2025-07-15T13:14:49.980000 -CVE-2025-53637,0,0,59aa29383fbb58e4cc3acdabdeb9e9e630228a698088b51e0c09248c03c4f30f,2025-07-15T13:14:49.980000 +CVE-2025-53637,0,1,d1ab7d84df3aba6ceeb4be8039472efa57969b3fabb0fc4e1c3018be794f10a7,2025-08-22T16:02:16.093000 CVE-2025-53638,0,0,3cbbef7565ea1dabc435a8c815b7f107592cf602166c10b5db96111f771a4856,2025-07-17T21:15:50.197000 CVE-2025-53639,0,0,d6d322a05c541bb2c3811e27250a8220e929f8c2b4739b1d99d8443b2202e40c,2025-07-15T13:14:24.053000 CVE-2025-5364,0,0,95a5e56210a5d35c1ea6e33ff22c35248d45f8b8e37cb258e052523a9909bca6,2025-06-03T15:34:20.917000 CVE-2025-53640,0,0,baa6f105b286703eb4e0c57d00ac059d9cb8191351ffc07879e56d3614950440,2025-07-22T16:15:33.047000 CVE-2025-53641,0,0,cc1f3ca6b03e162f06e3b621c8c42d7ed29182f9a502ee2a9ecd1af79580c252,2025-07-15T13:14:49.980000 -CVE-2025-53642,0,0,af73d300f0517a8fd313eef2dab1b6af9503fca34995515b27e085a948bea04b,2025-07-15T13:14:49.980000 +CVE-2025-53642,0,1,b1f465c0b7209812eb20a1ab94f8d0cd19cd6380f421302f0ed9d0f2876b7e6e,2025-08-22T16:52:08.603000 CVE-2025-53643,0,0,bfb03d50167c4481f0f9739a6b388eff4bc2a337dcba2d3d66c79d57e6e6caf5,2025-08-14T20:40:05.493000 CVE-2025-53644,0,0,2f3a70f91080f6fbfbcc77017794d96d36a450511fd90eebdd5736f13c49dd7d,2025-08-05T19:15:41.637000 CVE-2025-53645,0,0,3de463b32b112b4c3cf4525e6e0884d3c653d0323e05de63bd422a169fbd0da3,2025-07-22T16:15:33.187000 @@ -302616,7 +302683,7 @@ CVE-2025-53715,0,0,d6af28e22606aa64c2ca2916e734147734074e6b7d8b1ad7cfbaf64a716b3 CVE-2025-53716,0,0,861d84542c1cbc44c6d1385632bc816a411b246aadb446c9ae8d383235a61bff,2025-08-18T16:41:38.560000 CVE-2025-53718,0,0,db41e23aae60b8d2bd74b08048889b7337f4c2e017d49ea00b061f65b98eb3d1,2025-08-18T16:49:01.413000 CVE-2025-53719,0,0,73b169023d29f845ba0a0d55265091356eee466ab33db042d64634ba5e8a370d,2025-08-18T16:50:19.697000 -CVE-2025-5372,0,1,5701cb639e047f6d33795243c51af9c3723f8d14ed8d238145950b0c7dde2e01,2025-08-22T14:01:21.240000 +CVE-2025-5372,0,0,5701cb639e047f6d33795243c51af9c3723f8d14ed8d238145950b0c7dde2e01,2025-08-22T14:01:21.240000 CVE-2025-53720,0,0,c62f02ad7b553ec039679924594df3e094d7d79c1bb8801aef68aaee3f812c76,2025-08-18T16:51:08.793000 CVE-2025-53721,0,0,ddb660cf59b26d77f42cea242db49b1f0b2258694e929c18e62889d005b1bdab,2025-08-18T16:52:23.650000 CVE-2025-53722,0,0,a3e3ebfd0d42d0bf6df3a9be0aea844cfe1dbac61ed53596b1d80ce1f06e7f2e,2025-08-18T16:57:34.573000 @@ -302751,7 +302818,7 @@ CVE-2025-53893,0,0,40a5584be6022f0b850806732352317d88ea39c4617f5076209747b4cfbd2 CVE-2025-53895,0,0,e3960558e9249c74cb48507a2e1532eac4d7e4faeec0c282a65325b911de9361,2025-07-15T20:07:28.023000 CVE-2025-5390,0,0,039345fdea46e1731d2841f7a4397db225f36b8f7cd62f23d1ae898d97067564,2025-06-02T17:32:17.397000 CVE-2025-53901,0,0,5628bf14b761629b9406b74c7fb29cc0946aa27480ebf86c49da4317630d75ba,2025-07-22T13:06:27.983000 -CVE-2025-53902,0,1,8d1622db8a24a730d3e1974c14275cfdbba2658220795b7821ccb0461e2e37ed,2025-08-22T15:30:09.243000 +CVE-2025-53902,0,0,8d1622db8a24a730d3e1974c14275cfdbba2658220795b7821ccb0461e2e37ed,2025-08-22T15:30:09.243000 CVE-2025-53903,0,0,681553b6d533de7222c7e18024eb787a8db1cc5763d8bd4995c131347c4c3d0f,2025-07-15T20:07:28.023000 CVE-2025-53904,0,0,9448ba922d1c2f28292754bd9f94a965bf07b515601a15c4ec229a3c70280c16,2025-07-17T21:15:50.197000 CVE-2025-53905,0,0,867b87d2e1951598dd530023b71bb432169770690369901d3615d3df5bd01fc6,2025-08-14T01:41:04.043000 @@ -302913,7 +302980,7 @@ CVE-2025-54125,0,0,746a25f255ff12f800321455f79859f00afb6508a97370240b6df03fd07b0 CVE-2025-54126,0,0,0c34b500663a6b4b048a7b34f5104d2b313a000244dda734bdc7575e122db29c,2025-07-31T18:42:56.503000 CVE-2025-54127,0,0,3b8e9124b447079e3616d18c62c76c658265ef7c030ce9e2823177c319b9e3c7,2025-07-30T17:03:34.940000 CVE-2025-54128,0,0,f5fe1d651fd26d4066fff64ca0ab3ebcc07ae62ec6e29299df5802e47a13a3a5,2025-07-30T17:04:15.720000 -CVE-2025-54129,0,1,2cefba5c4751a5a2858f01d17ab99edc9c794ace987d951ba830f22ec6f31981,2025-08-22T15:21:08.543000 +CVE-2025-54129,0,0,2cefba5c4751a5a2858f01d17ab99edc9c794ace987d951ba830f22ec6f31981,2025-08-22T15:21:08.543000 CVE-2025-54130,0,0,fec9bca45f88653b25282088b6acd9b4bf8994e341bf2b196980de57a82130d3,2025-08-05T14:34:17.327000 CVE-2025-54131,0,0,49be0b204c4ff7589311e6df99f19e4a560f862f66c39f6881806cce63c623df,2025-08-04T15:06:15.833000 CVE-2025-54132,0,0,28a25cdc11d3570020d4595e1cf7cd7cae10468c83fd08c6331ca75c179cf31a,2025-08-04T15:06:15.833000 @@ -302921,9 +302988,9 @@ CVE-2025-54133,0,0,ddcb4d218339ad353bd4fb9d9c9cab5244b07e868afef988347f186e0b9ad CVE-2025-54134,0,0,25a646d13ace393ad6724c2e2cebb238dff076e67839dfabc6a9b5cf1d21a47b,2025-07-30T17:07:18.563000 CVE-2025-54135,0,0,828e9398a7eb6a7d5588f325b662d97b73d663b2790d727b6883cd45a6394770,2025-08-05T14:34:17.327000 CVE-2025-54136,0,0,bb94f5871049fbddb140513f334c0612ea73ac56c9a8463b436d8c9f51d2e01a,2025-08-04T15:06:15.833000 -CVE-2025-54137,0,1,cfcbfdcd09dab0e12b477a2fa65c3bcf6f93f073a2e50133052c569f1a84bb33,2025-08-22T15:20:26.940000 +CVE-2025-54137,0,0,cfcbfdcd09dab0e12b477a2fa65c3bcf6f93f073a2e50133052c569f1a84bb33,2025-08-22T15:20:26.940000 CVE-2025-54138,0,0,863b1da9293b7864acf647e5d1cc41753de26a412c5443b46a56ed10b1c838c9,2025-08-05T17:52:39.603000 -CVE-2025-54139,0,1,0480d0ac7b2974ac61b3a5e34a9a5a62c3015ff2c13b18926b61d2b912be1b67,2025-08-22T15:19:58.083000 +CVE-2025-54139,0,0,0480d0ac7b2974ac61b3a5e34a9a5a62c3015ff2c13b18926b61d2b912be1b67,2025-08-22T15:19:58.083000 CVE-2025-54140,0,0,a20c3ab2e1e3e6327b883271af3bd59823befc278ccad69052e3b8ee72e4b477,2025-07-25T15:29:44.523000 CVE-2025-54141,0,0,3f4a63ec5da842f2ae7681c42fe5ac29de8785736d8c35ad2c655229533b061e,2025-08-05T17:17:58.910000 CVE-2025-54143,0,0,186bc5669466fd17c597e26c84a3dcc2693f26041dc9ddf8f17cbee0f733718d,2025-08-21T18:39:55.587000 @@ -302993,7 +303060,7 @@ CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1 CVE-2025-5424,0,0,d8bab5ac57a00ec101c3134b14732d4532a6a47fc4bf5cdeb3768fab15f0c122,2025-06-18T15:15:23.703000 CVE-2025-5425,0,0,f606444a1d6aa9ebb0d9abea2da121b7bac702d032e173b190d1683a8bbeaca7,2025-06-18T15:15:13.637000 CVE-2025-54253,0,0,0efd7cfb21f5ef889597f1b69c5f5b415c4b4971cca12e142cb6c2888135b3a1,2025-08-13T18:56:02.910000 -CVE-2025-54254,0,0,46a048c5c782aa95032e68aba8f4d11402b3b5f81dcd36da639a107a65fb0104,2025-08-13T18:54:27.140000 +CVE-2025-54254,0,1,5e51233c9cfa27be5bdbcbfee93dbdc171395216049b5d293e01b1be4d134563,2025-08-22T17:15:32.407000 CVE-2025-5426,0,0,91d69104043a6386cfca11e8e329e92c24335e5efeef3d1a43c9e13795e3442e,2025-06-18T15:15:05.470000 CVE-2025-5427,0,0,5f63d9ad9dc6404e6fb72008382c641e46396609fcc52c5828eb2252185ffd4c,2025-06-18T15:14:51.873000 CVE-2025-5428,0,0,2e7c423ec5ae3bf4368570058331740a674fc62a4682da3d065e5fa91ab978f5,2025-06-16T16:18:13.987000 @@ -303062,7 +303129,7 @@ CVE-2025-54397,0,0,147df273e881636dd7bf7734b4ca143f22f79e191ed50490d563ce6a43e5e CVE-2025-5440,0,0,af2be9dcb24d92c343a6f8f918709518afa77f6a52ec237e760c0fddd3d435a5,2025-07-02T18:07:16.100000 CVE-2025-54409,0,0,96ea391d5f0684873af9b12fd8256396a3f4157feaa192113ff524af5833387d,2025-08-19T19:11:40.850000 CVE-2025-5441,0,0,c6ff5ab42d1240e0cc37d29d86c9b8d46c11cebf6de2cc16b691bc38d6128a44,2025-06-25T18:10:53.267000 -CVE-2025-54410,0,0,1ef63c4277fe3087a2d39c895c97c4b56c5d242eff2b4d156c764defa446ecc5,2025-07-31T18:42:37.870000 +CVE-2025-54410,0,1,3ae567a17cbf4427db6b2124052b0d563ff956383f1feefe773321f51c689166,2025-08-22T17:27:29.677000 CVE-2025-54411,0,0,7b2d1fb71e8ef8683116d8a350d5ca2284f7d8d938997beb4575280478d4680a,2025-08-20T14:40:17.713000 CVE-2025-54412,0,0,ff870a543867b8af3988ff01869e7ffb2cdf2c6f4776e73b22620d8e0a856cc7,2025-07-29T14:14:55.157000 CVE-2025-54413,0,0,33bb957eb83b1f15b3f88244e45c24ba5c2a42e444cdbe1def4dacc6930ccc02,2025-07-29T14:14:55.157000 @@ -303415,7 +303482,7 @@ CVE-2025-54980,0,0,735c32c18237a8bcb7f3f53d60aaf0b54fbd806d39435da675c1339660f43 CVE-2025-54982,0,0,fa48ca4820f1e2b7b3f838cd1cdd6fa097e4e8757c1bce4913fa5c6f41926b4e,2025-08-05T14:34:17.327000 CVE-2025-54987,0,0,d2de254dfdcfc0672b86eb2acbafd44549f01328c8b6721308a798843d2e4d72,2025-08-12T14:10:12.460000 CVE-2025-54988,0,0,457191b522b34cebb3342d5f9b6c5762cfbb9f048786d4ab73afc8fdf67fa8e0,2025-08-21T15:15:33.517000 -CVE-2025-54989,0,1,60a46985ed6ef9269eba4ca7281549a90c095664531501d6cf702d1b67c72e0d,2025-08-22T15:00:46.357000 +CVE-2025-54989,0,0,60a46985ed6ef9269eba4ca7281549a90c095664531501d6cf702d1b67c72e0d,2025-08-22T15:00:46.357000 CVE-2025-5499,0,0,cd3d3ed5d5fb8c8fbe27922589daeaa9197814d18c151184287c55023aa5ed53,2025-06-04T14:54:33.783000 CVE-2025-54992,0,0,fb1dbf93bab03c22211533483e4641e57a57f364754caf21ee9b5712ed26e3db,2025-08-12T14:25:33.177000 CVE-2025-54996,0,0,f0f0fcdeea3a85579e709e376ac5310aa30c8fab8a76e58bec061611047d03f2,2025-08-12T20:51:06.020000 @@ -303431,8 +303498,8 @@ CVE-2025-55006,0,0,e97e3322f74719f0f6397ca92964cbd94f7bfc4f289663ba5bbe84a54645a CVE-2025-55008,0,0,a5505c3afdf3f8b479c707c507e0fe8ceb9adb1e190b522aae1700dde726eaa1,2025-08-11T18:32:48.867000 CVE-2025-55009,0,0,43b8ecda03df9dea9338b8092f2411343608815313a30c29637f91e8768bcb37,2025-08-11T18:32:48.867000 CVE-2025-5501,0,0,a097e259dae348b4c900cdab5e79dbccb55b0685f34cb675d29fd38315defbae,2025-06-13T19:36:40.780000 -CVE-2025-55010,0,0,3c4f8c9a149a5a7fd799e0f6c18c674a64346c1fd5d49f62c8f57daa0f42dc99,2025-08-13T17:34:12.350000 -CVE-2025-55011,0,0,96463550183ba95d0c82cd4f430d83d154f643547e1b440367a010d3cd651c72,2025-08-13T17:34:12.350000 +CVE-2025-55010,0,1,4e81acf3ea9d6ce3757294a788711dc43f32e3237e073d68523f33c75f021def,2025-08-22T17:28:18.667000 +CVE-2025-55011,0,1,4e4ceddd02484fa5ed420cff223c5a93303ce98931f6ae3f114e875aefbc13d3,2025-08-22T17:15:47.513000 CVE-2025-55012,0,0,37a3846f957f28d709ee714b07221e69d2587506b7240ca90e1b94e43301567f,2025-08-12T14:25:33.177000 CVE-2025-55013,0,0,bc0da21d74353e0a83b34424e6ac890bd72c06850e12e40e937291b6df9ea2a2,2025-08-12T14:15:29.400000 CVE-2025-55014,0,0,e6f593cc6dcbe0f2821be8a11d442ac3faf8d6402e2c7e00054352485ea96629,2025-08-13T17:15:28.400000 @@ -303563,6 +303630,7 @@ CVE-2025-55371,0,0,4e06677e3bccef49e0f65af0ec85c68a168b3ed32f6504a48f7910959825a CVE-2025-5538,0,0,762f67a9ba2152c03c8ac60e588d19c417662c15009fd5c6802487e853ce4da9,2025-06-06T14:07:28.330000 CVE-2025-55383,0,0,e5198aa6b44e609d5f273f8e141f4c0ae9d449a68166012efa93a1a0e16100b9,2025-08-21T15:15:34.407000 CVE-2025-5539,0,0,7a5643d003f36ca8b8932bdab6466e950abe2199fea8285783168b175ee0e5ee,2025-07-10T14:21:01.203000 +CVE-2025-55398,1,1,2453c4845c9eec50bcace968091cac541c50800da0ea1196f2b05d594b193b8a,2025-08-22T17:15:32.570000 CVE-2025-5540,0,0,57e05c9ec7faa2cbc68ee71577ffbc16c32f2f955369f25c16652024ab3ec771,2025-07-11T14:29:47.347000 CVE-2025-5541,0,0,391135ebadea81125a316a68624bd1db152869e9dddfca42493d694df648dd89,2025-06-06T14:07:28.330000 CVE-2025-5542,0,0,3ecc2ef85a02a09c9be7e6dbf30040d86ff640f6ba754495a5d8dbf30a0806ed,2025-06-06T18:47:37.757000 @@ -303592,7 +303660,7 @@ CVE-2025-5554,0,0,bb973700fe34126bf117ec751e38d204eccbaefe0d39d643366a25cffb57f4 CVE-2025-5556,0,0,1f63a7f5a7a91cd0b5f15f9dd5246b4bb97c1dcec71534f8a57046e817922924,2025-06-10T15:16:25.960000 CVE-2025-55564,0,0,d95bb6f9c2d35a4ca1f6a30834ec66c27616520a39885d14659ab2f0119ef9fe,2025-08-21T18:15:35.243000 CVE-2025-5557,0,0,fd128465c0bc90cacbb5b3b2d601b7eb1c9da01523b98b89dfee1d497f1d2b1a,2025-06-10T15:16:34.460000 -CVE-2025-55573,1,1,e0608f18f9da44c806317afc83128bd850c0ad90968972c0c1854586535e1f4a,2025-08-22T15:15:32.683000 +CVE-2025-55573,0,0,e0608f18f9da44c806317afc83128bd850c0ad90968972c0c1854586535e1f4a,2025-08-22T15:15:32.683000 CVE-2025-5558,0,0,8898e8aec84c9da1e1a971bfb5f9893e56cc9688fb9183de0f88cf551a2dfd4a,2025-06-10T15:16:47.660000 CVE-2025-55584,0,0,de0480783b11410fe1ddcf8185f7ea482255df7e26debe611b17d7a0678d4db2,2025-08-21T14:10:05.993000 CVE-2025-55585,0,0,3b80716442d8ed8c8f05f40e2ed521ad0754dfc55de59d188787cd9e60c792e0,2025-08-21T14:10:17.493000 @@ -303603,10 +303671,30 @@ CVE-2025-55589,0,0,7c0e378edea9b24f55d6e3192ca48f54c437e717ae36ead1160bcab709e42 CVE-2025-5559,0,0,67de79146a8519543718c41957b10cfb5a5b004becfe95bff88fd04e522ec567,2025-07-16T15:25:26.087000 CVE-2025-55590,0,0,938d127bc24757e6a4c4e6d24fe44ef18c142cd57110b70852b74ac0a1dba8c3,2025-08-21T14:10:56.043000 CVE-2025-55591,0,0,5bce3d5ec535eeeb6333af1a5f5b9293f1c63a6a1cb1ac583982984f66194ff7,2025-08-21T14:11:06.290000 +CVE-2025-55599,1,1,1b55eff13aa7500905cf820cc0adec11f1d14b17c65c3d6059de75d011e2f066,2025-08-22T16:15:45.220000 CVE-2025-5560,0,0,21018256a4a41226bbfdbee889a1ff65b3ac04e2a1b78f1fe7522235e9af56b5,2025-06-10T15:10:58.590000 +CVE-2025-55602,1,1,835346440c93173399ffb8487b5321b876a6fde0151d40b7c1de73c29009d27c,2025-08-22T16:15:45.370000 +CVE-2025-55603,1,1,6b96f61b5d2bac326565b7edc4866b2a2a41619a34b50db7628a992f4432c0c3,2025-08-22T16:15:45.517000 +CVE-2025-55605,1,1,6fd9d84998c304ccd30b8f935f391cfced952370c571cca8e42c6c4a9d7aee3f,2025-08-22T16:15:45.650000 +CVE-2025-55606,1,1,67b740dc24e1c02a9d8597efa6254a5aeab33e3ed20a2bd9a625215233032a1b,2025-08-22T16:15:45.790000 CVE-2025-5561,0,0,37d583178eab41cfcaf572a9f55ac9ee56d529a81129a4bd0f0e52ba8e1b98bf,2025-06-10T15:10:51.040000 +CVE-2025-55611,1,1,4f9c6c83094421a44509b7c66a4584935c14236b433397b1bd9c8306ab7edc39,2025-08-22T16:15:45.940000 +CVE-2025-55619,1,1,ee79270c323fbd36d21d75ab22dda95d7d1a6b85e8db4615078e2e08b123c1f0,2025-08-22T17:15:32.727000 CVE-2025-5562,0,0,6240bc0a7dbaa1de6ee01e8085c281ab501398cc54d049e3ba52ef12d9151257,2025-06-10T15:10:36.680000 +CVE-2025-55620,1,1,811d31ccb1345ae0ad818f0c5e3dce8476f998d306f571f7ffcc8208f854c4f0,2025-08-22T17:15:32.877000 +CVE-2025-55621,1,1,77fc15c94cbd6de32fac8cb0fa49c360de34dd3ba7a2dedc1a81ba569c9495e3,2025-08-22T17:15:33.023000 +CVE-2025-55622,1,1,bc16fd1c49a1f53a3de65c602e891b4421f62b1cb958115169c74ddc31ab0089,2025-08-22T17:15:33.187000 +CVE-2025-55623,1,1,cab49d1115c2f98bca38262790668df1d61274bcb18b8e352bca7aa0c1e04792,2025-08-22T17:15:33.327000 +CVE-2025-55624,1,1,b6a471fa7e66c801e34976a179e8d03e7a43a0da41dd8bc59b160c2f78cc457d,2025-08-22T17:15:34.107000 +CVE-2025-55625,1,1,dcc8166c46d4295b2f2a6f7f56673f8f08fedc9d44067c7ca79c02ba2b41e5bb,2025-08-22T17:15:34.250000 +CVE-2025-55626,1,1,7832093131cf490708438ca4e876141b5590c51f319e8fec72e9719c0d73b340,2025-08-22T17:15:34.400000 +CVE-2025-55627,1,1,6ef122b9bae3e3c42ea2b8bc752982555e7757ab378509a1ddf6039773656a8e,2025-08-22T17:15:34.550000 +CVE-2025-55629,1,1,499c6d0952211af4ff5e4fb24e68315645738eca98c4f7d08b7f0a751c5cb913,2025-08-22T17:15:34.730000 CVE-2025-5563,0,0,abd05332a66da82c0a84bbcebb55ce866c616ee358de4033b1bc944eee92c5bd,2025-06-06T14:07:28.330000 +CVE-2025-55630,1,1,6b61583c33dfb2be413c2e9a5d3273ba9896738277c95b90aa2b41d874f141da,2025-08-22T17:15:34.873000 +CVE-2025-55631,1,1,5e0581fc83bfc496694e97df3796abed44dbdf0be15ee97a82549a03e330c7c7,2025-08-22T17:15:35.017000 +CVE-2025-55634,1,1,2ab5250cb54f0a2460dfac2828f61aa019ed03dce860d81f2587e083c73a7398,2025-08-22T17:15:35.163000 +CVE-2025-55637,1,1,322f8696cdca141ab689edaf1d1108ac3f69db1c120f41d978e1fd9d027d01f6,2025-08-22T17:15:35.303000 CVE-2025-5564,0,0,7809e1fdf6de89ef637777fde783c5f5ed408a93fc9e8800ee881fa5f62b3fb1,2025-06-26T18:57:43.670000 CVE-2025-5565,0,0,69057d9fcda3a9d391a6fdd2d36028e43e46d962e75d2a96d0e0e06e8f6deb95,2025-06-06T14:07:28.330000 CVE-2025-5566,0,0,779c860a161eb64dc6f40dd7f0ca399f4546b6e4ee22bf38748c51ae144c439c,2025-06-10T15:10:27.370000 @@ -303650,9 +303738,11 @@ CVE-2025-55736,0,0,1debde3816c0dfd9ad4612b728d3ea518dd798512f49f5c0bcccd247e6272 CVE-2025-55737,0,0,d262cc6d7a7c1c7834e8eaf957ea83d0fd028fee695c03679e2bf3cbfbc5eca0,2025-08-21T18:40:41.943000 CVE-2025-5574,0,0,7e7be3831b0299a7ae36546924c9d0572447f6adceed9e353cc4fce0d37f2ba9,2025-06-10T15:10:15.753000 CVE-2025-55740,0,0,c1d2feca1f1059d2b24a1ad728b6a352fad0dc20dc848e32ee3d8a0be4d4501c,2025-08-20T14:40:17.713000 +CVE-2025-55741,1,1,bf1e03f8a5a6ae0d3e35b31b2d874e3cf53ebe8030b4dee882900bc47311b279,2025-08-22T17:15:35.440000 CVE-2025-55742,0,0,1380e5f0025e74c97fa44527b524f8bf0c6644a47133eeae091f1cae8608a185,2025-08-21T16:15:34.280000 CVE-2025-55743,0,0,19f39a86676d4136a0f05ae8016d1d280536f0c5296dda8c5a5ea736f589ca29,2025-08-21T16:15:34.467000 CVE-2025-55744,0,0,4171a03243310a36f8e6777c0d43d7393241263cb357d3b629f48bf80fb6b354,2025-08-21T16:15:34.640000 +CVE-2025-55745,1,1,ad6b32a83f5b8a6524b5a43ab479546cd7f09222fd73d3ad59c9fc756ae8f5a4,2025-08-22T17:15:35.647000 CVE-2025-55746,0,0,cb79689c77a735f128e1d251112a9370c91a95e2f905f2e21e13fa992cf1d190,2025-08-20T18:15:35.183000 CVE-2025-5575,0,0,81a126dfb6ccad488366b77c36606cd2156f744efbd821f36b71a3dcd92de139,2025-06-05T14:07:21.913000 CVE-2025-55751,0,0,7e1ceb701ee97a414eb0b20813ce066a03425457bcf1694cb399bbc243c56e3d,2025-08-20T16:15:43.313000 @@ -303787,6 +303877,7 @@ CVE-2025-5707,0,0,03768732beb04d3dc090bc4628ded395b001fd130d28c1cae9e85e78d6c565 CVE-2025-5708,0,0,285708e0c4c2d406128211f3ff463fc512ae1852a2098261d0842fc5090a27ba,2025-06-10T15:00:17.787000 CVE-2025-5709,0,0,c194837df8957976fdf65b0a79b8ad4ab8ba025b71104af1ea83e4fe3936ff0d,2025-06-10T15:00:06.023000 CVE-2025-5710,0,0,22d317274e29d58e8d0f080c3cbfb50424283196345fb5d5b671f6ecde0eba5b,2025-06-10T14:59:55.803000 +CVE-2025-57105,1,1,ff1b56c56e8b4efb111ba806f18074c1dd8711ac10fa22da212587b257d26e56,2025-08-22T17:15:35.843000 CVE-2025-5711,0,0,4e07d34f832c4a98bdc02eca84c69019cff401001befb4bad883e986f4062c5b,2025-06-10T14:59:46.313000 CVE-2025-5712,0,0,cc03dc4f81a3344fe3967f9bdb8ddbd63656043638502f28d99f01c002367d7d,2025-06-10T15:46:43.267000 CVE-2025-5713,0,0,c84c8e527e1e1ce551be7423c38700a2e4568d28a15333ae5f635f2da6f31b6e,2025-06-09T14:15:24.137000 @@ -303882,6 +303973,8 @@ CVE-2025-57764,0,0,4905cfc9a33e75a8dca8c9418ec058bb69b2038fa709c6340ed512dbd77e4 CVE-2025-57765,0,0,ecdcf5949fdcae2a9d10ba82392cfb6ba4352d3cb886b5415e5c1f8424d17f74,2025-08-21T18:15:36.723000 CVE-2025-57768,0,0,bc9b1d934c8e4ce24b34560baeca9fde3b36c55645a031073e73f2e7aa9e93b1,2025-08-21T18:15:36.877000 CVE-2025-5777,0,0,604f0bfe85efbd364a3778a4d2a28a62356307a11e5961907cbc23c6a7d752ca,2025-08-14T14:52:35.357000 +CVE-2025-57770,1,1,4dbf199ff7f84f4ee783bf4a0d0b8236ee50296c3e22cacbf3d4afba47660429,2025-08-22T17:15:35.997000 +CVE-2025-57771,1,1,6e9e852f7a866aa1a30f002f4040ae2ce29dc9122ce9d796fb2a601db7d558ea,2025-08-22T17:15:36.183000 CVE-2025-5778,0,0,140692409fc95ff26393ed8887d01151701c9121b4140ca5aecbcdbfb9c14bfb,2025-07-30T15:59:22.090000 CVE-2025-57788,0,0,27c66c5c7d37f81d30e354da636999c3ee44a2ebbe4509e0170eef78b5cefb8d,2025-08-21T14:31:17.143000 CVE-2025-57789,0,0,d8468ebaec49bbc382d2ce00b864cccea64bce5c9936fcb6602b2572f3396a33,2025-08-21T14:40:24.883000 @@ -303889,6 +303982,7 @@ CVE-2025-5779,0,0,1e700fadb20c430a15a195537975215f0a5a558e649a2a5a5d9bb126f7483d CVE-2025-57790,0,0,a4cda78df04aaf6995f44fa4e7d3bc4086c2df309ccf2b79fd015491a5f3d937,2025-08-21T14:41:54.323000 CVE-2025-57791,0,0,6d83c729a560041070e6f8092d37818cdd5f114c73e56841e5c0c194135e9d4a,2025-08-21T14:42:18.350000 CVE-2025-5780,0,0,291144f4a381da80b9438fe643e4a6c8cc152547ccff2703d0e51362f127b808,2025-06-10T19:26:11.937000 +CVE-2025-57800,1,1,b7de9d0e1ee7c8f5036b58371e0d29030f0a204be98abd4009b98d151263c552,2025-08-22T17:15:36.377000 CVE-2025-5782,0,0,6972da12d61c944fe4bbea6f93b44a377d32b8a94e64404a2e1a04e310f27128,2025-06-10T15:42:31.557000 CVE-2025-57824,0,0,7b4fad823e7333c41b1356cfb8a02d40d8ba862aa55b50030b9d0e1a079a5c05,2025-08-21T04:15:57.743000 CVE-2025-57825,0,0,5e1025a705fcba7d94672b6d7cba880d7b226f6e6ee397d89cf673ecf91ee011,2025-08-21T04:15:58.207000 @@ -305918,7 +306012,7 @@ CVE-2025-8273,0,0,eeb444aeb73c516d14e3ebc74c4c337d66eb7259b364e6a40e5426ac6834b3 CVE-2025-8274,0,0,f469d9e552312616bb7be8d4c9b3924465a6012fade99baad12249c1c6021cfc,2025-08-06T17:13:50.557000 CVE-2025-8275,0,0,b8fe19de8a9f409d97799d3c85ceb6e16e9507653da58fe19a605df43ac077a9,2025-07-29T14:14:29.590000 CVE-2025-8279,0,0,692895b9179b143c08bfc051bb7feae65f665c830ff3248d0a28548a2d5f3d68,2025-08-11T18:59:40.013000 -CVE-2025-8281,0,1,c94904ed4fd655c55ef0ab664f7e0b65ece6c78ed02bcb744a282e94659d3371,2025-08-22T15:15:32.970000 +CVE-2025-8281,0,0,c94904ed4fd655c55ef0ab664f7e0b65ece6c78ed02bcb744a282e94659d3371,2025-08-22T15:15:32.970000 CVE-2025-8283,0,0,e48f412b8362566109f768e82efdf3fd9fee89b2184ab6501890b4a1b1be3e7d,2025-08-11T19:03:36.417000 CVE-2025-8284,0,0,287a952c84be6e729cc5a52b2d628a523d465fcee97859c6f3dff7aa0fc62e4a,2025-08-08T20:30:18.180000 CVE-2025-8285,0,0,b3dd55f519cc5d2d5ac33e807dff83800f020dab118abc8e2dc1d2872c9a757e,2025-08-12T14:25:33.177000 @@ -306161,7 +306255,7 @@ CVE-2025-8661,0,0,84a9ace257fd1cc010b841af2ab0e17cb6d2ffdc1188c3dfef5fc72cc70da7 CVE-2025-8665,0,0,1f096e564206647258c50fae007ee1456db32997ec82f86feabee4ef527759ee,2025-08-06T20:23:37.600000 CVE-2025-8667,0,0,a3f1a4fd22fa9588498dde86c93155f39fcd5beaf6180d236950f58f56fd9211,2025-08-06T20:23:37.600000 CVE-2025-8671,0,0,6f5d44f6d7ba923a2f8d32a12f83ffa83dec160968b1138c4b592ddffbc1872c,2025-08-17T15:15:25.687000 -CVE-2025-8672,0,1,e119587ef54aa018def0386901645f643b5699164d08ec38d90bd1f8c1cfa12b,2025-08-22T15:24:02.933000 +CVE-2025-8672,0,0,e119587ef54aa018def0386901645f643b5699164d08ec38d90bd1f8c1cfa12b,2025-08-22T15:24:02.933000 CVE-2025-8675,0,0,60f6496001d985566719d10ef5469d550fa3583c72fd49be678287207dbde40b,2025-08-21T19:53:49.397000 CVE-2025-8676,0,0,af2bfafa62401fc704e8faa4a4db8b14285a0f9304f73868914358c42860d494,2025-08-15T13:12:51.217000 CVE-2025-8678,0,0,0b763897b115d14f30ddfaa1909b15e640662e340e9cd5a923b3707c7b4d09e9,2025-08-22T08:15:31.017000 @@ -306443,7 +306537,7 @@ CVE-2025-9051,0,0,e804801e39bd0cbec0ad42df082dd2cdf1334921e9ce3a19cf197535114259 CVE-2025-9052,0,0,6ae07cbf744f73c82f0cc2304c63cba72ed7fc46d3e011c667b2e4c0857d2a86,2025-08-21T19:04:17.307000 CVE-2025-9053,0,0,3bfa63e3270039bb8f981c2785b26dd7d24524648aa259dbbb4213ded4653b48,2025-08-21T18:58:44.783000 CVE-2025-9060,0,0,e9eee4b261fa1fc302e3f3c389a4ed2fe42aeec88abcba4a1a09e8fc026ff451,2025-08-18T20:16:28.750000 -CVE-2025-9074,0,1,0f7f932f26664f74a5d866f9dce0f8dfe44f3c3391f21d99deea7ef732868253,2025-08-22T14:15:47.790000 +CVE-2025-9074,0,0,0f7f932f26664f74a5d866f9dce0f8dfe44f3c3391f21d99deea7ef732868253,2025-08-22T14:15:47.790000 CVE-2025-9087,0,0,4e33567b8612969a5a2ceb4556204c947f52a27272f60e1768a38813a3a70fa5,2025-08-21T16:13:12.350000 CVE-2025-9088,0,0,1e4d71eff229a938800e1851a1828273563616948a9108fa520d7c426335a93e,2025-08-21T16:12:57.193000 CVE-2025-9089,0,0,14e8e539678478bd88607eee4f6e3404779cd71727eef445f936d28d0e082530,2025-08-21T16:10:55.523000