admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 09:44:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-08T21:00:11.600777+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-08 21:04:03 +00:00
1 parent 1d31652c2f
commit 532963d841
88 files changed
+7122 -959
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2022/CVE-2022-370xx/CVE-2022-37055.json
+39 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-37055",
"sourceIdentifier": "[email protected]",
"published": "2022-08-28T17:15:08.363",
"lastModified": "2025-01-06T15:15:09.830",
"lastModified": "2025-12-08T19:15:46.960",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -49,6 +69,16 @@
"value": "CWE-120"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"configurations": [
@@ -121,6 +151,14 @@
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-37055",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://www.fortiguard.com/outbreak-alert/d-link-multiple-devices-attack",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2023/CVE-2023-472xx/CVE-2023-47220.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47220",
"sourceIdentifier": "[email protected]",
"published": "2024-05-03T03:16:01.977",
"lastModified": "2024-11-21T08:29:58.917",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:30:38.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*",
"versionStartIncluding": "500.1.1.0",
"versionEndExcluding": "500.1.1.5",
"matchCriteriaId": "29AD5059-0F42-4E41-BB4E-84C1B8FC1A98"
}
]
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-24-15",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.qnap.com/en/security-advisory/qsa-24-15",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-133xx/CVE-2024-13342.json
+53 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13342",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T11:15:30.710",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:02:48.593",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -47,18 +67,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "7.2.5",
"matchCriteriaId": "CA46802B-22FB-4739-B767-1563083D59F2"
}
]
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.2.4/includes/class-wcj-checkout-files-upload.php#L452",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3262569/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5ac8a125-121c-4392-846e-625726043972?source=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-386xx/CVE-2024-38647.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-38647",
"sourceIdentifier": "[email protected]",
"published": "2024-11-22T16:15:25.387",
"lastModified": "2024-11-22T16:15:25.387",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:26:54.920",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -77,10 +99,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:qnap:ai_core:3.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "52E05649-6A58-4CA2-9693-49E4BD4B718B"
}
]
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-24-40",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-488xx/CVE-2024-48862.json
+54 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-48862",
"sourceIdentifier": "[email protected]",
"published": "2024-11-22T16:15:28.623",
"lastModified": "2024-11-22T16:15:28.623",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:18:50.053",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -73,10 +95,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.7.0.800",
"versionEndExcluding": "1.7.0.831",
"matchCriteriaId": "19E405B4-079C-4AA3-8B9A-EA0327AB6953"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.8.0.872",
"versionEndExcluding": "1.8.0.888",
"matchCriteriaId": "E7E8EFC1-F358-4C48-B881-CA5918B10170"
}
]
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-24-46",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58255.json
+66 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58255",
"sourceIdentifier": "[email protected]",
"published": "2025-08-08T04:15:59.047",
"lastModified": "2025-08-08T20:30:18.180",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:11:17.643",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.8,
"impactScore": 3.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
}
]
},
@@ -49,12 +69,55 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:enzoh-w5611t_firmware:1.07:*:*:*:*:*:*:*",
"matchCriteriaId": "73BAC613-69CA-48F5-B74F-94F91509369A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:huawei:enzoh-w5611t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6011889E-E129-40F6-9AE1-193DBA4A8DFB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-ocivihep-e73ab538",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"VDB Entry",
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58256.json
+65 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58256",
"sourceIdentifier": "[email protected]",
"published": "2025-08-08T04:16:03.380",
"lastModified": "2025-08-08T20:30:18.180",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:10:17.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.0,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -49,12 +69,54 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:enzoh-w5611t_firmware:1.07:*:*:*:*:*:*:*",
"matchCriteriaId": "73BAC613-69CA-48F5-B74F-94F91509369A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:huawei:enzoh-w5611t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6011889E-E129-40F6-9AE1-193DBA4A8DFB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-ocivihep-cn",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58257.json
+65 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58257",
"sourceIdentifier": "[email protected]",
"published": "2025-08-08T04:16:04.223",
"lastModified": "2025-08-08T20:30:18.180",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:08:30.030",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.5,
"impactScore": 3.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
}
]
},
@@ -49,12 +69,54 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:enzoh-w5611t_firmware:1.07:*:*:*:*:*:*:*",
"matchCriteriaId": "73BAC613-69CA-48F5-B74F-94F91509369A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:huawei:enzoh-w5611t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6011889E-E129-40F6-9AE1-193DBA4A8DFB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-ocivihep-1bcbfffa",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13639.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13639",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.623",
"lastModified": "2025-12-04T19:16:17.007",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-08T20:15:48.953",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-142xx/CVE-2025-14261.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-14261",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T19:15:48.197",
"lastModified": "2025-12-08T19:15:48.197",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-331"
}
]
}
],
"references": [
{
"url": "https://github.com/litmuschaos/litmus/pull/5324",
"source": "[email protected]"
},
{
"url": "https://research.jfrog.com/vulnerabilities/litmus-jwt-missing-entropy-elevation-jfsa-2025-001648159/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-31xx/CVE-2025-3199.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-3199",
"sourceIdentifier": "[email protected]",
"published": "2025-04-04T02:15:19.013",
"lastModified": "2025-08-26T01:06:32.670",
"lastModified": "2025-12-08T19:07:47.353",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -153,9 +153,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ageerle:ruoyi-ai:*:*:*:*:*:*:*:*",
"criteria": "cpe:2.3:a:pandarobot:ruoyi_ai:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.0.2",
"matchCriteriaId": "358008A9-D9D4-4A84-97C2-CA3C91C39C79"
"matchCriteriaId": "02166C4A-C9D6-4CFF-9A7F-2FABDC034384"
}
]
}
CVE-2025/CVE-2025-45xx/CVE-2025-4598.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-4598",
"sourceIdentifier": "[email protected]",
"published": "2025-05-30T14:15:23.557",
"lastModified": "2025-12-03T12:15:49.507",
"lastModified": "2025-12-08T19:15:50.203",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -200,6 +200,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:22660",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22868",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-4598",
"source": "[email protected]",
CVE-2025/CVE-2025-485xx/CVE-2025-48569.json
+89 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48569",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T18:15:51.273",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:50.210",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,96 @@
"value": "In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "02882AB1-7993-47DD-84A0-8DF4272D85ED"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/android-16-qpr2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48592.json
+69 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48592",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:16.407",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:46:47.080",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,79 @@
"value": "In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/av/+/8febdebcb5e8736ec013a7d64e70f50e87649b52",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48594.json
+74 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48594",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:16.523",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:45:49.347",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,84 @@
"value": "In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/ea2bcc66534263fac4c337f1a5149704c2262169",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48596.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48596",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:16.643",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:45:06.363",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/native/+/6ffdde944d4e0b440b1dfc1f232687299700e039",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48597.json
+104 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48597",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:16.767",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:44:40.860",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,114 @@
"value": "In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/68170bad52250399d2e4a1a8023a3e7aeda1887d",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48598.json
+94 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48598",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:16.897",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:44:15.560",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,104 @@
"value": "In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.7,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.7,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-610"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-441"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/packages/apps/Settings/+/83447688f8e3e8f009f1e7d275a14ea00ee7953a",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48599.json
+69 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48599",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.010",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:43:45.360",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,79 @@
"value": "In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/packages/apps/Settings/+/7a792e0b8f68bc4aeb939af703790fd76b51ccbd",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48600.json
+69 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48600",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.120",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:43:15.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,79 @@
"value": "In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/packages/modules/IntentResolver/+/bbe2dc3fb85fac9053b427b6d3c4af3506e0d9b4",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48601.json
+104 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48601",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.240",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:42:14.593",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,111 @@
"value": "In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48603.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48603",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.350",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:42:47.680",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/b4c6786312a217ad9dfd97041b2f1e2f77e39b94",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48604.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48604",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.463",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:41:46.743",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/packages/services/Mms/+/c60a828b9fa18f67260775a46c752f353fcc0d43",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48606.json
+60 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48606",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T18:15:51.563",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:36:04.857",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,67 @@
"value": "In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "02882AB1-7993-47DD-84A0-8DF4272D85ED"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/android-16-qpr2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48607.json
+69 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48607",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.577",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:41:21.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,79 @@
"value": "In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/03d7040699148c961df09dec301d8a1e982ee231",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48608.json
+89 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48608",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T18:15:51.683",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:50.400",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,96 @@
"value": "In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "02882AB1-7993-47DD-84A0-8DF4272D85ED"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/android-16-qpr2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48610.json
+69 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48610",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.687",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:40:59.640",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,82 @@
"value": "In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/19fbea31785113700731f4b458d7e20d05777729",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/kernel/common/+/cac44a0bcfc58c85082b13220b4adcac43ccf369",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48612.json
+109 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48612",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:17.810",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:40:36.177",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,119 @@
"value": "In multiple locations, there is a possible way for an application on a work profile to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/packages/apps/Settings/+/aa744e8988f0e7b77a71087edd4d2546b58d2f24",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48615.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48615",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.047",
"lastModified": "2025-12-08T18:55:47.207",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-08T20:15:50.597",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-770"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-486xx/CVE-2025-48618.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48618",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.163",
"lastModified": "2025-12-08T18:56:33.613",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-08T20:15:50.787",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.7,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-667"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-486xx/CVE-2025-48621.json
+114 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48621",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.407",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:50.950",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,127 @@
"value": "In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1188"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1188"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/6d1697c96c5cae5062f6aea58cf2665b7d646cb8",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/platform/frameworks/native/+/cc34c7b416b964c05a42ae3e9c2929b59b92c64f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48622.json
+119 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48622",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.530",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.120",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,135 @@
"value": "In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/cts/+/1bcf948f5e555ad7b9b54549698c3e569d7a0af5",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/platform/external/dng_sdk/+/de700ad461e35af50b28b861943a0b0753b10929",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/platform/external/skia/+/40c3f0a50fb9b47f543be0949f9004e77510f494",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48623.json
+103 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48623",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.653",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.297",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,116 @@
"value": "In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/3b6fab0ff24f7108c71a4d9c12567455cb2a5a81",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/kernel/common/+/e76cff4952af4ac4652dc74ffbd134ff57c47895",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48624.json
+97 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48624",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.767",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.470",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,107 @@
"value": "In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/0668e45a43398a07c3aa2ae08903097657efd87e",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48625.json
+90 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48625",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T18:15:51.797",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.643",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,97 @@
"value": "In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "02882AB1-7993-47DD-84A0-8DF4272D85ED"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/android-16-qpr2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48626.json
+84 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48626",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:18.893",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:04:59.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,97 @@
"value": "In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/9fb37191609f7cb7b2374531cafb2d00ec8b4bec",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/7628af9bf77f1d145359bf4075a6674574cae496",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48627.json
+69 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48627",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.010",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:07:00.753",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,79 @@
"value": "In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/d34ae40f870d4362a069940a035a4d58a536a231",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48628.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48628",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.130",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:17:07.450",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/9489a5dcd3cdd426d5b39d9caf6bb78142af2399",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48629.json
+74 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48629",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.250",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:17:49.113",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,11 +11,81 @@
"value": "In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1188"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48631.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48631",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.370",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:18:34.863",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/d6df825fda3aa29cff7af05357005322152210fd",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48632.json
+104 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48632",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.487",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.827",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,114 @@
"value": "In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/de27b16b1af86d4ce18c9134d85b53331a8d2147",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48633.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48633",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.610",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:39:11.610",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,89 @@
"value": "In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48637.json
+67 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48637",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.730",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:38:31.223",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,80 @@
"value": "In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/4cfc9c2d8815577832cafbfcd7f98025f0da718d",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48638.json
+101 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48638",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.847",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:51.997",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,114 @@
"value": "In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/kernel/common/+/0429b7af308cf65c84109c08d06b01950dcd57fe",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://android.googlesource.com/kernel/common/+/96ebe96170d67df5072afa2ce84622f5a0ff552a",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-486xx/CVE-2025-48639.json
+112 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48639",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:19.957",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:15:52.163",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,125 @@
"value": "In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
}
]
}
]
}
],
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/6d1697c96c5cae5062f6aea58cf2665b7d646cb8",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://android.googlesource.com/platform/frameworks/native/+/cc34c7b416b964c05a42ae3e9c2929b59b92c64f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-12-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54612.json
+43 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54612",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T02:15:47.413",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:20:05.820",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
@@ -51,10 +71,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54613.json
+43 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54613",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T02:15:47.567",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:19:16.083",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
@@ -51,10 +71,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54621.json
+43 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54621",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T02:15:48.810",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:18:02.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
@@ -51,10 +71,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54626.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54626",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T03:15:25.677",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:16:31.297",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54629.json
+78 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54629",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T03:15:26.133",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:14:52.400",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "32FBF39A-164F-4F98-AB49-28C50A430C36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "888C5BD7-421B-4A85-8719-BFEE3C215527"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2401DE15-9DBF-4645-A261-8C24D57C6342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6EA69843-EC8D-42E2-900E-017D2B502E9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54639.json
+28 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54639",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T04:16:10.967",
"lastModified": "2025-08-06T20:23:37.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:22:04.453",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,35 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/8/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54848.json
+35 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54848",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T16:15:53.723",
"lastModified": "2025-12-02T17:16:29.163",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:29:05.783",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,42 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:socomec:diris_digiware_m-70_firmware:1.6.9:*:*:*:*:*:*:*",
"matchCriteriaId": "741E83B6-F217-46E7-9E3A-8E446250C785"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:socomec:diris_digiware_m-70:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76CAA8C6-29FD-40F3-9702-790CD73F3052"
}
]
}
]
}
],
"references": [
{
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2248",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54849.json
+35 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54849",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T16:15:53.900",
"lastModified": "2025-12-02T17:16:29.163",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:23:54.010",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,42 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:socomec:diris_digiware_m-70_firmware:1.6.9:*:*:*:*:*:*:*",
"matchCriteriaId": "741E83B6-F217-46E7-9E3A-8E446250C785"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:socomec:diris_digiware_m-70:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76CAA8C6-29FD-40F3-9702-790CD73F3052"
}
]
}
]
}
],
"references": [
{
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2248",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-559xx/CVE-2025-55948.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-55948",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T21:16:08.687",
"lastModified": "2025-12-08T18:27:15.857",
"lastModified": "2025-12-08T20:15:52.430",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests when frontend menu updates (such as privilege revocation) fail to propagate to the backend permission table in real-time, creating a dangerous desynchronization. While users lose access to restricted functions through the web interface (as UI elements properly disappear), the stale permission records still validate unauthorized API requests when accessed directly through tools like Postman. Attackers exploiting this inconsistency can perform privileged operations including but not limited to: creating high-permission user accounts, accessing sensitive data beyond their clearance level, and executing admin-level commands."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-266"
}
]
}
],
"references": [
{
"url": "https://github.com/liuchengjie01/vuln_db/blob/master/x-springboot3x-vul/x-springboot3x-vul.md",
CVE-2025/CVE-2025-580xx/CVE-2025-58098.json
+30 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58098",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T14:15:49.153",
"lastModified": "2025-12-08T18:26:49.133",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:36:05.920",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.4.66",
"matchCriteriaId": "A3D22F90-E531-4EC1-B581-FF5068BC3A58"
}
]
}
]
}
],
"references": [
{
"url": "https://httpd.apache.org/security/vulnerabilities_24.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List",
"Vendor Advisory"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/12/04/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-596xx/CVE-2025-59696.json
+188 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59696",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.143",
"lastModified": "2025-12-02T19:15:50.373",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:31:25.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-596xx/CVE-2025-59697.json
+193 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59697",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.277",
"lastModified": "2025-12-02T19:15:50.590",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:31:35.443",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,206 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-596xx/CVE-2025-59698.json
+193 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59698",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.410",
"lastModified": "2025-12-03T16:15:57.937",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:42:20.173",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,18 +47,206 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-596xx/CVE-2025-59699.json
+188 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59699",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.537",
"lastModified": "2025-12-04T17:15:54.997",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:41:55.027",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59700.json
+212 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59700",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.667",
"lastModified": "2025-12-03T15:15:53.603",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:41:38.573",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,7 +11,30 @@
"value": "Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 3.9,
"baseSeverity": "LOW",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.3,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
@@ -24,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59701.json
+188 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59701",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.783",
"lastModified": "2025-12-02T19:15:50.810",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:40:05.490",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59702.json
+193 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59702",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.917",
"lastModified": "2025-12-02T19:15:51.033",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:39:46.283",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,206 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59703.json
+188 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59703",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T16:15:55.317",
"lastModified": "2025-12-03T15:15:53.760",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:39:02.430",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59704.json
+224 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59704",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T16:15:55.470",
"lastModified": "2025-12-02T17:16:29.163",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:38:42.513",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,234 @@
"value": "Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-597xx/CVE-2025-59705.json
+188 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59705",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:56.043",
"lastModified": "2025-12-03T15:15:54.127",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:39:23.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,198 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-613xx/CVE-2025-61318.json
+38 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61318",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T16:15:52.703",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T20:15:52.627",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -11,7 +11,42 @@
"value": "Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-24"
}
]
}
],
"references": [
{
"url": "https://github.com/AndyNull/em/blob/main/emlog%20pro%20-%20del%20vuln.md",
CVE-2025/CVE-2025-640xx/CVE-2025-64081.json
+63 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64081",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T18:15:52.720",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:49:02.740",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,73 @@
"value": "SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
}
]
}
]
}
],
"references": [
{
"url": "https://packetstorm.news/files/id/211592",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://www.sourcecodester.com/php/18348/patients-waiting-area-queue-management-system.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64331.json
+41 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64331",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T23:15:48.263",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:30:34.790",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -45,12 +45,50 @@
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0.13",
"matchCriteriaId": "AA4D86E3-44A3-4B0B-9CF4-9FC88091D3C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0",
"versionEndExcluding": "8.0.2",
"matchCriteriaId": "C93A731C-19AD-4067-B28C-17164C2D981D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/OISF/suricata/security/advisories/GHSA-v32w-j79x-pfj2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64335.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64335",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T23:15:48.913",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:30:05.393",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.0.0",
"versionEndExcluding": "8.0.2",
"matchCriteriaId": "C93A731C-19AD-4067-B28C-17164C2D981D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/OISF/suricata/commit/c935f08cd988600fd0a4f828a585b181dd5de012",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OISF/suricata/security/advisories/GHSA-v299-h7p3-q4f2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65229.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-65229",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T20:15:52.857",
"lastModified": "2025-12-08T20:15:52.857",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output encoding on the Information (Player Info) tab, causing the script to execute in the context of any user viewing that page."
}
],
"metrics": {},
"references": [
{
"url": "https://lyrion.org/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65230.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65230",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T20:15:52.993",
"lastModified": "2025-12-08T20:15:52.993",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65230",
"source": "[email protected]"
},
{
"url": "https://help.barix.com/instreamer/user-manual",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65231.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65231",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T19:15:50.420",
"lastModified": "2025-12-08T19:15:50.420",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65231",
"source": "[email protected]"
},
{
"url": "https://help.barix.com/instreamer/user-manual",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65271.json
+37
View File
@@ -0,0 +1,37 @@
{
"id": "CVE-2025-65271",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T19:15:50.540",
"lastModified": "2025-12-08T19:15:50.540",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/1337Skid/CVE-2025-65271",
"source": "[email protected]"
},
{
"url": "https://github.com/Azuriom/Azuriom",
"source": "[email protected]"
},
{
"url": "https://github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec",
"source": "[email protected]"
},
{
"url": "https://www.github.com/Azuriom/Azuriom",
"source": "[email protected]"
},
{
"url": "https://www.github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-653xx/CVE-2025-65363.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-65363",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:20.747",
"lastModified": "2025-12-08T18:26:19.900",
"lastModified": "2025-12-08T20:15:53.120",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "http://rg-ap720-l.com",
CVE-2025/CVE-2025-655xx/CVE-2025-65548.json
+41
View File
@@ -0,0 +1,41 @@
{
"id": "CVE-2025-65548",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T19:15:50.677",
"lastModified": "2025-12-08T19:15:50.677",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary data."
}
],
"metrics": {},
"references": [
{
"url": "https://bitcointalk.org/index.php?topic=5564329",
"source": "[email protected]"
},
{
"url": "https://delvingbitcoin.org/t/public-disclosure-denial-of-service-using-htlc-in-cashu/2090",
"source": "[email protected]"
},
{
"url": "https://github.com/cashubtc/nuts/blob/main/07.md",
"source": "[email protected]"
},
{
"url": "https://github.com/cashubtc/nuts/blob/main/14.md",
"source": "[email protected]"
},
{
"url": "https://github.com/jamesob/delving-bitcoin-archive/blob/master/archive/rendered-topics/2025-11-November/2025-11-02-public-disclosure-denial-of-service-using-htlc-in-cashu-id2090.md",
"source": "[email protected]"
},
{
"url": "https://preimage007.github.io/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-657xx/CVE-2025-65797.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-65797",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T17:16:21.207",
"lastModified": "2025-12-08T18:26:19.900",
"lastModified": "2025-12-08T20:15:53.307",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service (DoS)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "http://memos.com",
CVE-2025/CVE-2025-658xx/CVE-2025-65849.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-65849",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T19:15:50.817",
"lastModified": "2025-12-08T19:15:50.817",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction."
}
],
"metrics": {},
"references": [
{
"url": "https://altcha.org/docs/v2/obfuscation/",
"source": "[email protected]"
},
{
"url": "https://github.com/altcha-org/altcha/blob/154f874cbcdd4e639783463130d13988a2bd1bdc/src/helpers.ts#L170-L194",
"source": "[email protected]"
},
{
"url": "https://github.com/eternal-flame-AD/altcha-deobfs",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66208.json
+47 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66208",
"sourceIdentifier": "[email protected]",
"published": "2025-12-03T19:15:57.793",
"lastModified": "2025-12-04T17:15:08.283",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-08T19:37:15.947",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:collabora:online:*:*:*:*:*:*:*:*",
"versionEndExcluding": "25.04.702",
"matchCriteriaId": "CAAD1E3B-7009-44EC-B070-F6573B2A9716"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/CollaboraOnline/online/security/advisories/GHSA-j3q6-q5pc-v5wf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66327.json
+48 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66327",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:47.283",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:06:05.703",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 4.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,35 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66328.json
+43 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66328",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:47.437",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:05:41.343",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66330.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66330",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:47.750",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:05:20.617",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.7,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66331.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66331",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:47.910",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:04:00.960",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-494"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66332.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66332",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:48.070",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:03:48.997",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-494"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66333.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66333",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:48.220",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T20:03:30.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-494"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-663xx/CVE-2025-66334.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-66334",
"sourceIdentifier": "[email protected]",
"published": "2025-12-08T09:15:48.373",
"lastModified": "2025-12-08T18:26:19.900",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-08T19:35:40.020",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-494"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/12/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-666xx/CVE-2025-66644.json
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66644",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T19:15:53.293",
"lastModified": "2025-12-08T18:26:49.133",
"lastModified": "2025-12-08T19:15:51.330",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://x.com/ArraySupport/status/1921373397533032590",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-66644",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
README.md
+37 -55
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-08T19:00:11.291710+00:00
2025-12-08T21:00:11.600777+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-08T18:58:29.260000+00:00
2025-12-08T20:22:04.453000+00:00
```
### Last Data Feed Release
@@ -33,69 +33,51 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
320684
320691
```
### CVEs added in the last Commit
Recently added CVEs: `70`
Recently added CVEs: `7`
- [CVE-2025-48618](CVE-2025/CVE-2025-486xx/CVE-2025-48618.json) (`2025-12-08T17:16:18.163`)
- [CVE-2025-48620](CVE-2025/CVE-2025-486xx/CVE-2025-48620.json) (`2025-12-08T17:16:18.287`)
- [CVE-2025-48621](CVE-2025/CVE-2025-486xx/CVE-2025-48621.json) (`2025-12-08T17:16:18.407`)
- [CVE-2025-48622](CVE-2025/CVE-2025-486xx/CVE-2025-48622.json) (`2025-12-08T17:16:18.530`)
- [CVE-2025-48623](CVE-2025/CVE-2025-486xx/CVE-2025-48623.json) (`2025-12-08T17:16:18.653`)
- [CVE-2025-48624](CVE-2025/CVE-2025-486xx/CVE-2025-48624.json) (`2025-12-08T17:16:18.767`)
- [CVE-2025-48625](CVE-2025/CVE-2025-486xx/CVE-2025-48625.json) (`2025-12-08T18:15:51.797`)
- [CVE-2025-48626](CVE-2025/CVE-2025-486xx/CVE-2025-48626.json) (`2025-12-08T17:16:18.893`)
- [CVE-2025-48627](CVE-2025/CVE-2025-486xx/CVE-2025-48627.json) (`2025-12-08T17:16:19.010`)
- [CVE-2025-48628](CVE-2025/CVE-2025-486xx/CVE-2025-48628.json) (`2025-12-08T17:16:19.130`)
- [CVE-2025-48629](CVE-2025/CVE-2025-486xx/CVE-2025-48629.json) (`2025-12-08T17:16:19.250`)
- [CVE-2025-48631](CVE-2025/CVE-2025-486xx/CVE-2025-48631.json) (`2025-12-08T17:16:19.370`)
- [CVE-2025-48632](CVE-2025/CVE-2025-486xx/CVE-2025-48632.json) (`2025-12-08T17:16:19.487`)
- [CVE-2025-48633](CVE-2025/CVE-2025-486xx/CVE-2025-48633.json) (`2025-12-08T17:16:19.610`)
- [CVE-2025-48637](CVE-2025/CVE-2025-486xx/CVE-2025-48637.json) (`2025-12-08T17:16:19.730`)
- [CVE-2025-48638](CVE-2025/CVE-2025-486xx/CVE-2025-48638.json) (`2025-12-08T17:16:19.847`)
- [CVE-2025-48639](CVE-2025/CVE-2025-486xx/CVE-2025-48639.json) (`2025-12-08T17:16:19.957`)
- [CVE-2025-59391](CVE-2025/CVE-2025-593xx/CVE-2025-59391.json) (`2025-12-08T17:16:20.080`)
- [CVE-2025-63721](CVE-2025/CVE-2025-637xx/CVE-2025-63721.json) (`2025-12-08T17:16:20.230`)
- [CVE-2025-64081](CVE-2025/CVE-2025-640xx/CVE-2025-64081.json) (`2025-12-08T18:15:52.720`)
- [CVE-2025-65363](CVE-2025/CVE-2025-653xx/CVE-2025-65363.json) (`2025-12-08T17:16:20.747`)
- [CVE-2025-65795](CVE-2025/CVE-2025-657xx/CVE-2025-65795.json) (`2025-12-08T17:16:21.073`)
- [CVE-2025-65797](CVE-2025/CVE-2025-657xx/CVE-2025-65797.json) (`2025-12-08T17:16:21.207`)
- [CVE-2025-65799](CVE-2025/CVE-2025-657xx/CVE-2025-65799.json) (`2025-12-08T17:16:21.340`)
- [CVE-2025-65804](CVE-2025/CVE-2025-658xx/CVE-2025-65804.json) (`2025-12-08T18:15:53.980`)
- [CVE-2025-14261](CVE-2025/CVE-2025-142xx/CVE-2025-14261.json) (`2025-12-08T19:15:48.197`)
- [CVE-2025-65229](CVE-2025/CVE-2025-652xx/CVE-2025-65229.json) (`2025-12-08T20:15:52.857`)
- [CVE-2025-65230](CVE-2025/CVE-2025-652xx/CVE-2025-65230.json) (`2025-12-08T20:15:52.993`)
- [CVE-2025-65231](CVE-2025/CVE-2025-652xx/CVE-2025-65231.json) (`2025-12-08T19:15:50.420`)
- [CVE-2025-65271](CVE-2025/CVE-2025-652xx/CVE-2025-65271.json) (`2025-12-08T19:15:50.540`)
- [CVE-2025-65548](CVE-2025/CVE-2025-655xx/CVE-2025-65548.json) (`2025-12-08T19:15:50.677`)
- [CVE-2025-65849](CVE-2025/CVE-2025-658xx/CVE-2025-65849.json) (`2025-12-08T19:15:50.817`)
### CVEs modified in the last Commit
Recently modified CVEs: `488`
Recently modified CVEs: `79`
- [CVE-2025-66559](CVE-2025/CVE-2025-665xx/CVE-2025-66559.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66561](CVE-2025/CVE-2025-665xx/CVE-2025-66561.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66562](CVE-2025/CVE-2025-665xx/CVE-2025-66562.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66563](CVE-2025/CVE-2025-665xx/CVE-2025-66563.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66564](CVE-2025/CVE-2025-665xx/CVE-2025-66564.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66566](CVE-2025/CVE-2025-665xx/CVE-2025-66566.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66570](CVE-2025/CVE-2025-665xx/CVE-2025-66570.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66571](CVE-2025/CVE-2025-665xx/CVE-2025-66571.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66572](CVE-2025/CVE-2025-665xx/CVE-2025-66572.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66573](CVE-2025/CVE-2025-665xx/CVE-2025-66573.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66574](CVE-2025/CVE-2025-665xx/CVE-2025-66574.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66575](CVE-2025/CVE-2025-665xx/CVE-2025-66575.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66576](CVE-2025/CVE-2025-665xx/CVE-2025-66576.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-66577](CVE-2025/CVE-2025-665xx/CVE-2025-66577.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66581](CVE-2025/CVE-2025-665xx/CVE-2025-66581.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66623](CVE-2025/CVE-2025-666xx/CVE-2025-66623.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66624](CVE-2025/CVE-2025-666xx/CVE-2025-66624.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66629](CVE-2025/CVE-2025-666xx/CVE-2025-66629.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-66644](CVE-2025/CVE-2025-666xx/CVE-2025-66644.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-6946](CVE-2025/CVE-2025-69xx/CVE-2025-6946.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-6966](CVE-2025/CVE-2025-69xx/CVE-2025-6966.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-7195](CVE-2025/CVE-2025-71xx/CVE-2025-7195.json) (`2025-12-08T18:15:54.737`)
- [CVE-2025-8148](CVE-2025/CVE-2025-81xx/CVE-2025-8148.json) (`2025-12-08T18:26:49.133`)
- [CVE-2025-8854](CVE-2025/CVE-2025-88xx/CVE-2025-8854.json) (`2025-12-08T18:58:01.813`)
- [CVE-2025-9127](CVE-2025/CVE-2025-91xx/CVE-2025-9127.json) (`2025-12-08T18:27:15.857`)
- [CVE-2025-59696](CVE-2025/CVE-2025-596xx/CVE-2025-59696.json) (`2025-12-08T19:31:25.870`)
- [CVE-2025-59697](CVE-2025/CVE-2025-596xx/CVE-2025-59697.json) (`2025-12-08T19:31:35.443`)
- [CVE-2025-59698](CVE-2025/CVE-2025-596xx/CVE-2025-59698.json) (`2025-12-08T19:42:20.173`)
- [CVE-2025-59699](CVE-2025/CVE-2025-596xx/CVE-2025-59699.json) (`2025-12-08T19:41:55.027`)
- [CVE-2025-59700](CVE-2025/CVE-2025-597xx/CVE-2025-59700.json) (`2025-12-08T19:41:38.573`)
- [CVE-2025-59701](CVE-2025/CVE-2025-597xx/CVE-2025-59701.json) (`2025-12-08T19:40:05.490`)
- [CVE-2025-59702](CVE-2025/CVE-2025-597xx/CVE-2025-59702.json) (`2025-12-08T19:39:46.283`)
- [CVE-2025-59703](CVE-2025/CVE-2025-597xx/CVE-2025-59703.json) (`2025-12-08T19:39:02.430`)
- [CVE-2025-59704](CVE-2025/CVE-2025-597xx/CVE-2025-59704.json) (`2025-12-08T19:38:42.513`)
- [CVE-2025-59705](CVE-2025/CVE-2025-597xx/CVE-2025-59705.json) (`2025-12-08T19:39:23.170`)
- [CVE-2025-61318](CVE-2025/CVE-2025-613xx/CVE-2025-61318.json) (`2025-12-08T20:15:52.627`)
- [CVE-2025-64081](CVE-2025/CVE-2025-640xx/CVE-2025-64081.json) (`2025-12-08T19:49:02.740`)
- [CVE-2025-64331](CVE-2025/CVE-2025-643xx/CVE-2025-64331.json) (`2025-12-08T19:30:34.790`)
- [CVE-2025-64335](CVE-2025/CVE-2025-643xx/CVE-2025-64335.json) (`2025-12-08T19:30:05.393`)
- [CVE-2025-65363](CVE-2025/CVE-2025-653xx/CVE-2025-65363.json) (`2025-12-08T20:15:53.120`)
- [CVE-2025-65797](CVE-2025/CVE-2025-657xx/CVE-2025-65797.json) (`2025-12-08T20:15:53.307`)
- [CVE-2025-66208](CVE-2025/CVE-2025-662xx/CVE-2025-66208.json) (`2025-12-08T19:37:15.947`)
- [CVE-2025-66327](CVE-2025/CVE-2025-663xx/CVE-2025-66327.json) (`2025-12-08T20:06:05.703`)
- [CVE-2025-66328](CVE-2025/CVE-2025-663xx/CVE-2025-66328.json) (`2025-12-08T20:05:41.343`)
- [CVE-2025-66330](CVE-2025/CVE-2025-663xx/CVE-2025-66330.json) (`2025-12-08T20:05:20.617`)
- [CVE-2025-66331](CVE-2025/CVE-2025-663xx/CVE-2025-66331.json) (`2025-12-08T20:04:00.960`)
- [CVE-2025-66332](CVE-2025/CVE-2025-663xx/CVE-2025-66332.json) (`2025-12-08T20:03:48.997`)
- [CVE-2025-66333](CVE-2025/CVE-2025-663xx/CVE-2025-66333.json) (`2025-12-08T20:03:30.720`)
- [CVE-2025-66334](CVE-2025/CVE-2025-663xx/CVE-2025-66334.json) (`2025-12-08T19:35:40.020`)
- [CVE-2025-66644](CVE-2025/CVE-2025-666xx/CVE-2025-66644.json) (`2025-12-08T19:15:51.330`)
## Download and Usage
_state.csv
+597 -590
View File
File diff suppressed because it is too large. Load diff