From 5b1321eec06291e651e55c28d233cfc65c01043e Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 12 Nov 2025 11:04:02 +0000 Subject: [PATCH] Auto-Update: 2025-11-12T11:00:12.569990+00:00 --- CVE-2023/CVE-2023-465xx/CVE-2023-46595.json | 4 +- CVE-2024/CVE-2024-118xx/CVE-2024-11831.json | 6 +- CVE-2025/CVE-2025-119xx/CVE-2025-11962.json | 56 +++++++++++++++ CVE-2025/CVE-2025-123xx/CVE-2025-12382.json | 78 +++++++++++++++++++++ CVE-2025/CVE-2025-127xx/CVE-2025-12732.json | 68 ++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12903.json | 76 ++++++++++++++++++++ CVE-2025/CVE-2025-377xx/CVE-2025-37734.json | 56 +++++++++++++++ CVE-2025/CVE-2025-591xx/CVE-2025-59118.json | 53 ++++++++++++++ CVE-2025/CVE-2025-616xx/CVE-2025-61623.json | 53 ++++++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64401.json | 37 ++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64402.json | 41 +++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64403.json | 41 +++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64404.json | 41 +++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64405.json | 41 +++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64406.json | 41 +++++++++++ CVE-2025/CVE-2025-644xx/CVE-2025-64407.json | 41 +++++++++++ CVE-2025/CVE-2025-99xx/CVE-2025-9900.json | 6 +- README.md | 41 ++++++----- _state.csv | 48 ++++++++----- 19 files changed, 788 insertions(+), 40 deletions(-) create mode 100644 CVE-2025/CVE-2025-119xx/CVE-2025-11962.json create mode 100644 CVE-2025/CVE-2025-123xx/CVE-2025-12382.json create mode 100644 CVE-2025/CVE-2025-127xx/CVE-2025-12732.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12903.json create mode 100644 CVE-2025/CVE-2025-377xx/CVE-2025-37734.json create mode 100644 CVE-2025/CVE-2025-591xx/CVE-2025-59118.json create mode 100644 CVE-2025/CVE-2025-616xx/CVE-2025-61623.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64401.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64402.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64403.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64404.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64405.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64406.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64407.json diff --git a/CVE-2023/CVE-2023-465xx/CVE-2023-46595.json b/CVE-2023/CVE-2023-465xx/CVE-2023-46595.json index 7e7e46bf96d..0b2b2d1f646 100644 --- a/CVE-2023/CVE-2023-465xx/CVE-2023-46595.json +++ b/CVE-2023/CVE-2023-465xx/CVE-2023-46595.json @@ -2,13 +2,13 @@ "id": "CVE-2023-46595", "sourceIdentifier": "security.vulnerabilities@algosec.com", "published": "2023-11-02T08:15:08.040", - "lastModified": "2024-11-21T08:28:51.787", + "lastModified": "2025-11-12T09:15:40.030", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor\u00a0allows an attacker\u00a0to obtain victim\u2019s domain credentials and Net-NTLM hash which can lead\u00a0to relay domain attacks. Fixed in\u00a0A32.20 (b570 or above), A32.50 (b390 or above)\n\n" + "value": "Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor\u00a0allows an attacker\u00a0to obtain victim\u2019s domain credentials and Net-NTLM hash which can lead\u00a0to relay domain attacks. Fixed in\u00a0A32.20 (b570 or above), A32.50 (b390 or above)" }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json b/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json index afc22882262..7f3142c4fd8 100644 --- a/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json +++ b/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json @@ -2,7 +2,7 @@ "id": "CVE-2024-11831", "sourceIdentifier": "secalert@redhat.com", "published": "2025-02-10T16:15:37.080", - "lastModified": "2025-06-04T23:15:20.670", + "lastModified": "2025-11-12T09:15:40.290", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -64,6 +64,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:1468", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21068", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:4511", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11962.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11962.json new file mode 100644 index 00000000000..d45c5eb5ebd --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11962.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-11962", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-11-12T10:15:42.880", + "lastModified": "2025-11-12T10:15:42.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS.This issue affects Digital Corporate Warehouse: before v.4.8.2.22." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0393", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-123xx/CVE-2025-12382.json b/CVE-2025/CVE-2025-123xx/CVE-2025-12382.json new file mode 100644 index 00000000000..65398d4f686 --- /dev/null +++ b/CVE-2025/CVE-2025-123xx/CVE-2025-12382.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-12382", + "sourceIdentifier": "security.vulnerabilities@algosec.com", + "published": "2025-11-12T10:15:43.100", + "lastModified": "2025-11-12T10:15:43.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Algosec \n\nFirewall \n\nAnalyzer on Linux, 64 bit allows Path Traversal, Code Injection.This issue affects\u00a0Algosec \n\n\n\nFirewall \n\n Analyzer: A33.0 (up to build 320), A33.10 (up to build 210)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security.vulnerabilities@algosec.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:L/U:Amber", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NEGLIGIBLE", + "Automatable": "YES", + "Recovery": "USER", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER" + } + } + ] + }, + "weaknesses": [ + { + "source": "security.vulnerabilities@algosec.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12382.htm", + "source": "security.vulnerabilities@algosec.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12732.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12732.json new file mode 100644 index 00000000000..fbf085525e5 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12732.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-12732", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-12T09:15:40.573", + "lastModified": "2025-11-12T09:15:40.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The WP Import \u2013 Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting() function in all versions up to, and including, 7.33. This makes it possible for authenticated attackers, with Author-level access or higher, to extract sensitive information including OpenAI API keys configured through the plugin's admin interface." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php#L42", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php#L72", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3390161/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/25687ee6-a899-4089-966b-69578afd3fb6?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12903.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12903.json new file mode 100644 index 00000000000..d70d2b1313f --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12903.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-12903", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-12T09:15:40.800", + "lastModified": "2025-11-12T09:15:40.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaulted_nonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with permission_callback set to __return_true and processing user-supplied token IDs without verifying ownership or authentication. This makes it possible for unauthenticated attackers to retrieve payment method nonces for any stored payment token in the system, which can be used to create fraudulent transactions, charge customer credit cards, or attach payment methods to other subscriptions." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/woo-payment-gateway/tags/3.2.78/includes/api/class-wc-braintree-controller-3ds.php#L23", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/woo-payment-gateway/tags/3.2.78/includes/api/class-wc-braintree-controller-3ds.php#L35", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/woo-payment-gateway/tags/3.2.78/includes/api/class-wc-braintree-controller-3ds.php#L41", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3392259%40woo-payment-gateway&new=3392259%40woo-payment-gateway&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/89cd5429-39a0-441f-ba69-dea111eae5ed?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-377xx/CVE-2025-37734.json b/CVE-2025/CVE-2025-377xx/CVE-2025-37734.json new file mode 100644 index 00000000000..1b8f352759d --- /dev/null +++ b/CVE-2025/CVE-2025-377xx/CVE-2025-37734.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-37734", + "sourceIdentifier": "bressers@elastic.co", + "published": "2025-11-12T10:15:43.487", + "lastModified": "2025-11-12T10:15:43.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "bressers@elastic.co", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "bressers@elastic.co", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-346" + } + ] + } + ], + "references": [ + { + "url": "https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381", + "source": "bressers@elastic.co" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-591xx/CVE-2025-59118.json b/CVE-2025/CVE-2025-591xx/CVE-2025-59118.json new file mode 100644 index 00000000000..8a33a3edd28 --- /dev/null +++ b/CVE-2025/CVE-2025-591xx/CVE-2025-59118.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2025-59118", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T10:15:43.703", + "lastModified": "2025-11-12T10:15:43.703", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 24.09.03.\n\nUsers are recommended to upgrade to version 24.09.03, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://issues.apache.org/jira/browse/OFBIZ-13292", + "source": "security@apache.org" + }, + { + "url": "https://lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqpt", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/download.html", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/release-notes-24.09.03.html", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/security.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/1", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61623.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61623.json new file mode 100644 index 00000000000..6b847334541 --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61623.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2025-61623", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T10:15:43.903", + "lastModified": "2025-11-12T10:15:43.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reflected cross-site scripting vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 24.09.03.\n\nUsers are recommended to upgrade to version 24.09.03, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://issues.apache.org/jira/browse/OFBIZ-13295", + "source": "security@apache.org" + }, + { + "url": "https://lists.apache.org/thread/sb2mngrg766qbqt5g29fo0qblk3v4x5y", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/download.html", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/release-notes-24.09.03.html", + "source": "security@apache.org" + }, + { + "url": "https://ofbiz.apache.org/security.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/2", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64401.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64401.json new file mode 100644 index 00000000000..505565caa4c --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64401.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-64401", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:40.997", + "lastModified": "2025-11-12T09:15:40.997", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice\u00a0allowed an attacker to craft a document that would cause external links \nto be loaded without prompt.\u00a0In the affected versions of Apache OpenOffice, documents that used \"floating frames\" linked to external files would \nload the contents of those frames without prompting the user for \npermission to do so.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue.\n\nThe LibreOffice suite reported this issue as\u00a0CVE-2023-2255" + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/o00dtgvhr9tx8r4y8vf6y2mg7nn6mx6c", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64401.html", + "source": "security@apache.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64402.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64402.json new file mode 100644 index 00000000000..d1b73faffc9 --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64402.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64402", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:41.180", + "lastModified": "2025-11-12T09:15:41.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links \nto be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used \"OLE objects\" linked to external files would \nload the contents of those files without prompting the user for \npermission to do so.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/tssrl88tygjsgk6csllm6p2fb6tlv8d8", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64402.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/5", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64403.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64403.json new file mode 100644 index 00000000000..01e846fd49e --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64403.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64403", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:41.343", + "lastModified": "2025-11-12T09:15:41.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of \"external data sources\". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links \nto be loaded without prompt.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9f4h5trt", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64403.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/6", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64404.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64404.json new file mode 100644 index 00000000000..cc97c620839 --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64404.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64404", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:41.497", + "lastModified": "2025-11-12T10:15:44.083", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links \nto be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used background fill images, or bullet images, linked to external files would \nload the contents of those files without prompting the user for \npermission to do so.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/08n4mdx0pnhqsllnkc63d27sdgq3tygc", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64404.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/7", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64405.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64405.json new file mode 100644 index 00000000000..5039f1f2e25 --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64405.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64405", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:41.643", + "lastModified": "2025-11-12T10:15:44.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links \nto be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to external files would \nload the contents of those files without prompting the user for \npermission to do so.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/0jjftxkcc4l9kt7jjn630hfrh2ygfcbk", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64405.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/8", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64406.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64406.json new file mode 100644 index 00000000000..f6d5ee904dd --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64406.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64406", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T09:15:41.797", + "lastModified": "2025-11-12T10:15:44.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/py89gpogxfb2yo9c5vwv2h9x3m85pfmm", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64406.html", + "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/11/9", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64407.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64407.json new file mode 100644 index 00000000000..90f0ae22e64 --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64407.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-64407", + "sourceIdentifier": "security@apache.org", + "published": "2025-11-12T10:15:44.457", + "lastModified": "2025-11-12T10:15:44.457", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links \nto be loaded without prompt. Such links could also be used to transmit system information, such as environment variables or configuration settings.\n\nIn the affected versions of Apache OpenOffice, documents that used a certain URI scheme linking to external files would \nload the contents of such files without prompting the user for \npermission to do so. Such URI scheme allows to include system configuration data, that is not supposed to be transmitted externally.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue.\n\n\n\n\n\nThe LibreOffice suite reported this issue as\u00a0CVE-2024-12426." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + }, + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/4yg1gv71f14fw4ky4ds50o6xjq49594g", + "source": "security@apache.org" + }, + { + "url": "https://www.openoffice.org/security/cves/CVE-2025-64407.html", + "source": "security@apache.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json b/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json index 3a21a2249ac..11ba4d95531 100644 --- a/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json +++ b/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9900", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-23T17:15:38.357", - "lastModified": "2025-11-12T03:15:44.453", + "lastModified": "2025-11-12T09:15:42.140", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -100,6 +100,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:20998", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21060", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:21061", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index c3750b6773c..78c13302777 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-12T09:00:11.412899+00:00 +2025-11-12T11:00:12.569990+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-12T08:15:42.433000+00:00 +2025-11-12T10:15:44.457000+00:00 ``` ### Last Data Feed Release @@ -33,33 +33,36 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317876 +317890 ``` ### CVEs added in the last Commit -Recently added CVEs: `9` +Recently added CVEs: `14` -- [CVE-2025-12018](CVE-2025/CVE-2025-120xx/CVE-2025-12018.json) (`2025-11-12T08:15:40.590`) -- [CVE-2025-12113](CVE-2025/CVE-2025-121xx/CVE-2025-12113.json) (`2025-11-12T08:15:40.850`) -- [CVE-2025-12633](CVE-2025/CVE-2025-126xx/CVE-2025-12633.json) (`2025-11-12T08:15:41.073`) -- [CVE-2025-12869](CVE-2025/CVE-2025-128xx/CVE-2025-12869.json) (`2025-11-12T08:15:41.290`) -- [CVE-2025-12870](CVE-2025/CVE-2025-128xx/CVE-2025-12870.json) (`2025-11-12T08:15:41.513`) -- [CVE-2025-12871](CVE-2025/CVE-2025-128xx/CVE-2025-12871.json) (`2025-11-12T08:15:41.733`) -- [CVE-2025-12872](CVE-2025/CVE-2025-128xx/CVE-2025-12872.json) (`2025-11-12T08:15:41.970`) -- [CVE-2025-13046](CVE-2025/CVE-2025-130xx/CVE-2025-13046.json) (`2025-11-12T08:15:42.170`) -- [CVE-2025-13047](CVE-2025/CVE-2025-130xx/CVE-2025-13047.json) (`2025-11-12T08:15:42.433`) +- [CVE-2025-11962](CVE-2025/CVE-2025-119xx/CVE-2025-11962.json) (`2025-11-12T10:15:42.880`) +- [CVE-2025-12382](CVE-2025/CVE-2025-123xx/CVE-2025-12382.json) (`2025-11-12T10:15:43.100`) +- [CVE-2025-12732](CVE-2025/CVE-2025-127xx/CVE-2025-12732.json) (`2025-11-12T09:15:40.573`) +- [CVE-2025-12903](CVE-2025/CVE-2025-129xx/CVE-2025-12903.json) (`2025-11-12T09:15:40.800`) +- [CVE-2025-37734](CVE-2025/CVE-2025-377xx/CVE-2025-37734.json) (`2025-11-12T10:15:43.487`) +- [CVE-2025-59118](CVE-2025/CVE-2025-591xx/CVE-2025-59118.json) (`2025-11-12T10:15:43.703`) +- [CVE-2025-61623](CVE-2025/CVE-2025-616xx/CVE-2025-61623.json) (`2025-11-12T10:15:43.903`) +- [CVE-2025-64401](CVE-2025/CVE-2025-644xx/CVE-2025-64401.json) (`2025-11-12T09:15:40.997`) +- [CVE-2025-64402](CVE-2025/CVE-2025-644xx/CVE-2025-64402.json) (`2025-11-12T09:15:41.180`) +- [CVE-2025-64403](CVE-2025/CVE-2025-644xx/CVE-2025-64403.json) (`2025-11-12T09:15:41.343`) +- [CVE-2025-64404](CVE-2025/CVE-2025-644xx/CVE-2025-64404.json) (`2025-11-12T09:15:41.497`) +- [CVE-2025-64405](CVE-2025/CVE-2025-644xx/CVE-2025-64405.json) (`2025-11-12T09:15:41.643`) +- [CVE-2025-64406](CVE-2025/CVE-2025-644xx/CVE-2025-64406.json) (`2025-11-12T09:15:41.797`) +- [CVE-2025-64407](CVE-2025/CVE-2025-644xx/CVE-2025-64407.json) (`2025-11-12T10:15:44.457`) ### CVEs modified in the last Commit -Recently modified CVEs: `5` +Recently modified CVEs: `3` -- [CVE-2022-30228](CVE-2022/CVE-2022-302xx/CVE-2022-30228.json) (`2025-11-12T08:15:37.030`) -- [CVE-2022-30229](CVE-2022/CVE-2022-302xx/CVE-2022-30229.json) (`2025-11-12T08:15:39.427`) -- [CVE-2022-30230](CVE-2022/CVE-2022-302xx/CVE-2022-30230.json) (`2025-11-12T08:15:39.703`) -- [CVE-2022-30231](CVE-2022/CVE-2022-302xx/CVE-2022-30231.json) (`2025-11-12T08:15:39.943`) -- [CVE-2022-34464](CVE-2022/CVE-2022-344xx/CVE-2022-34464.json) (`2025-11-12T08:15:40.260`) +- [CVE-2023-46595](CVE-2023/CVE-2023-465xx/CVE-2023-46595.json) (`2025-11-12T09:15:40.030`) +- [CVE-2024-11831](CVE-2024/CVE-2024-118xx/CVE-2024-11831.json) (`2025-11-12T09:15:40.290`) +- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-12T09:15:42.140`) ## Download and Usage diff --git a/_state.csv b/_state.csv index d9a89a496fd..b1ce8bd67f8 100644 --- a/_state.csv +++ b/_state.csv @@ -199244,11 +199244,11 @@ CVE-2022-30223,0,0,8165847764696851c5862a8e2854184fe5f2b39d5b1fd0e93bb3cfec39079 CVE-2022-30224,0,0,1c3c71ce4764a611650b150bbd9e974dea8978a69e3c590bb5c383ed389fc572,2024-11-21T07:02:23.477000 CVE-2022-30225,0,0,4dab6514f6e2220d6a7429fafac7466e581506d3c02728b2aa071cb307a44d8e,2024-11-21T07:02:23.623000 CVE-2022-30226,0,0,752e2e1c44ea22a2071df9de4cf58794166a118175f727b9e5f09862bf099d7c,2024-11-21T07:02:23.777000 -CVE-2022-30228,0,1,9ebda679bd0b060a07d28dd80d6549e4b5a36dd6c50aa33af0263f6923195f8d,2025-11-12T08:15:37.030000 -CVE-2022-30229,0,1,7313f5bf770d51bf7276d9016c63cc1dca392db75db674d32d177c510250662a,2025-11-12T08:15:39.427000 +CVE-2022-30228,0,0,9ebda679bd0b060a07d28dd80d6549e4b5a36dd6c50aa33af0263f6923195f8d,2025-11-12T08:15:37.030000 +CVE-2022-30229,0,0,7313f5bf770d51bf7276d9016c63cc1dca392db75db674d32d177c510250662a,2025-11-12T08:15:39.427000 CVE-2022-3023,0,0,d9e0cb8c500f8f8e73e16d381e7c1ee73c4696b7d9d6bc863970dfebaae19010,2024-11-21T07:18:39.287000 -CVE-2022-30230,0,1,d9a7da673cf2ac6bde9e809206e084b555ae193018076f1b7ed740f8cd3daacc,2025-11-12T08:15:39.703000 -CVE-2022-30231,0,1,98fa44835a43a6a3114721301fc5f19cd173c58b18be4e680a1f05c863f0bddd,2025-11-12T08:15:39.943000 +CVE-2022-30230,0,0,d9a7da673cf2ac6bde9e809206e084b555ae193018076f1b7ed740f8cd3daacc,2025-11-12T08:15:39.703000 +CVE-2022-30231,0,0,98fa44835a43a6a3114721301fc5f19cd173c58b18be4e680a1f05c863f0bddd,2025-11-12T08:15:39.943000 CVE-2022-30232,0,0,e0b7d101fc44b8873ee4ee004f662191b79059f6954cafe4266ff825777e58b6,2024-11-21T07:02:24.360000 CVE-2022-30233,0,0,eaf206007c83760a675ce05b2b5579e4671862997772b2188be68f1a1dd76a05,2024-11-21T07:02:25.277000 CVE-2022-30234,0,0,6dde07bf33d979cf2353370cac3e732c058afd1a82657fc80c2b49cc301a4d83,2024-11-21T07:02:25.400000 @@ -202662,7 +202662,7 @@ CVE-2022-3446,0,0,dba0d711b78ef71236194d7eecfe0e61db1a675f74a18e2821ba5d4aa4e3b7 CVE-2022-34460,0,0,a80a9f35f00dba8775d46c4f4647dd79dce16322f06af64fa5b8161197f486c3,2024-11-21T07:09:36.983000 CVE-2022-34461,0,0,0299d6c0f6e05d6d3be8b92ff451c6934afa2052b0157530298098bfc946e8d2,2023-11-07T03:48:43.157000 CVE-2022-34462,0,0,1e55ebeea86ea0b3bd37c10514700dec12d3f8df47eae8f1029c857942831d37,2025-05-20T20:15:10.140000 -CVE-2022-34464,0,1,a315f2baf099f3f7ead0b141a9acb9eaf27f2acf832ecdb4826dc307f3cec9c6,2025-11-12T08:15:40.260000 +CVE-2022-34464,0,0,a315f2baf099f3f7ead0b141a9acb9eaf27f2acf832ecdb4826dc307f3cec9c6,2025-11-12T08:15:40.260000 CVE-2022-34465,0,0,5b07bee564f6ab4dba2efab52594fe12f368088d2c653e6cb77342e3391c5a53,2024-11-21T07:09:37.473000 CVE-2022-34466,0,0,2215dd1dfd86ef1f274dae91c41abf0820f178f983b82d8753f8cbc07cf64bdb,2024-11-21T07:09:37.600000 CVE-2022-34467,0,0,d6e1bea5599b3734744b717ef80fdd8ac947afc23240b02550e8c1fa86067c2e,2024-11-21T07:09:37.737000 @@ -238426,7 +238426,7 @@ CVE-2023-46587,0,0,f8b1a1a03fc086cb6516dbf5e055edd69bf23988e7df746656233e2291ed6 CVE-2023-46589,0,0,adf2806f10d694ac5634554913fec8d8235977b8b98a42e72bd32ee7f0dd4840,2025-08-07T11:15:28.180000 CVE-2023-4659,0,0,fc1fb5ba275e28ac9bcd6ba47b1a0daa8e1cd1073bf08afe0368ec6c3a409a04,2024-11-21T08:35:37.813000 CVE-2023-46590,0,0,c87c773abce542c3fb00fb6782dc26e8da76f201f27ebbfcedccb3e92f50413f,2024-11-21T08:28:51.553000 -CVE-2023-46595,0,0,e440a3c8e6b1dd0be0bb912f068fbd9841ed56e7c76a9429728accb6b6307eab,2024-11-21T08:28:51.787000 +CVE-2023-46595,0,1,81b5f1b8d838ebbbf33cd5238c2918cc849737cd37d474f9abda90d494981139,2025-11-12T09:15:40.030000 CVE-2023-46596,0,0,dc26ebc015c5e3b5f4291fce518c050a174bd59bdda9accef80c5dcc4b820f75,2025-01-23T17:43:12.833000 CVE-2023-46601,0,0,739bb1365ee90282b5f1d046dd503ea5eaf0a4d64f7dd95529af7b2550849adf,2024-11-21T08:28:52.213000 CVE-2023-46602,0,0,f59406848825161cde147d1e590fffa5776803a932b927e1ea2bcc795ebef0ce,2024-11-21T08:28:52.387000 @@ -248783,7 +248783,7 @@ CVE-2024-11828,0,0,2182fcc94d5c2924b387611eabcc64629aff0d6ea201e85bc92b19a7228cc CVE-2024-11829,0,0,69c985051f8ba94b9fa4dc84b0c753dff2563e51518549f413112c5cfd5d6732,2025-02-04T17:49:14.273000 CVE-2024-1183,0,0,97749a77e7c2882a54648ac616739708755e0c868fa63c722b7da01a5fcfca9c,2025-07-29T19:03:21.927000 CVE-2024-11830,0,0,2b9bcbcc6b8510fbe3715609ebd917cba06af0eebf5118baa1afa85039e0b1f0,2025-01-08T11:15:06.443000 -CVE-2024-11831,0,0,819f7f63288af73cd79ceed20eedceffc7f9b62310d3d18bfffbdc501c5f4454,2025-06-04T23:15:20.670000 +CVE-2024-11831,0,1,a310c0773850a578ef5f509bdf9ca41d1dce6343aa60f8d6bde34680080f03df,2025-11-12T09:15:40.290000 CVE-2024-11832,0,0,7a6414b8a97e02ea73c05598b642d3e1c0cc9c0557b16b568dca85c729ab2498,2025-01-07T18:12:54.040000 CVE-2024-11833,0,0,7cc64c24e134395676706c0bd8cc3e8d93fb8ed84226e3d021f04f0aff58e65e,2025-10-01T18:18:51.820000 CVE-2024-11834,0,0,455ffbb844f09547df9e6df00d4d9628c3ea979d80f671100bc08c2ebfdadf97,2025-10-01T18:17:44.143000 @@ -287204,6 +287204,7 @@ CVE-2025-11958,0,0,0fc55e49b05b781ff6489428ee891fa1ca82a55b1d046324447513a4bde29 CVE-2025-11959,0,0,5c97bb24dc748455000d4372a83f500b5ec63e6f6968759d6584b77482b57be0,2025-11-11T15:15:35.550000 CVE-2025-1196,0,0,dd006c25814afd256aa97758b279860261417526a6b19678795b25893f289a48,2025-02-20T20:38:49.990000 CVE-2025-11960,0,0,7b6ad288567e3dec8b5d3bc4e3baad5cfbb71d73f2e3b17e1462064d8d38aae9,2025-11-11T12:15:33.863000 +CVE-2025-11962,1,1,702d6434d343eadf8dc13807da610944b5f1bdcb2c5b1afbe6558df7bd66bc1d,2025-11-12T10:15:42.880000 CVE-2025-11965,0,0,2eabbb4599284d2563d93c27659b79ddd6c7c73e850f48946d732e4261db33e5,2025-10-22T21:12:48.953000 CVE-2025-11966,0,0,ed45c84545d2d6f073b1bdf77bbb7f09e48496e2e455ae7bcc29cb4b801ea40e,2025-10-22T21:12:48.953000 CVE-2025-11967,0,0,02e71df09c7858d9d772f76d65d2ea27e17d67839027cad5fbaf36369ce00626,2025-11-08T10:15:40.643000 @@ -287238,7 +287239,7 @@ CVE-2025-12010,0,0,4d47d6fdb82dae26f96cb7e98355d63086fbc44288f99e3d99cf03fcc980a CVE-2025-12014,0,0,e8cc6a0e92aeba8955b875fed929a655c336a6e5bf3eb0c264bf1ba3c48d98d5,2025-10-27T13:20:15.637000 CVE-2025-12016,0,0,3c29113f8d43ffdb46f73fa37f9b3bc3445319917f9a3b4d14238e23121ae3ac,2025-10-27T13:20:15.637000 CVE-2025-12017,0,0,0874e3e499033a3d4dfd22d251cbf33217720dc7128f29f2940c1f27adccb9d5,2025-10-27T13:20:15.637000 -CVE-2025-12018,1,1,ca75f2c2876429733dc425ab97f49bcd9a1b2bc4bb6c9058c442b6750f261b18,2025-11-12T08:15:40.590000 +CVE-2025-12018,0,0,ca75f2c2876429733dc425ab97f49bcd9a1b2bc4bb6c9058c442b6750f261b18,2025-11-12T08:15:40.590000 CVE-2025-12019,0,0,9c54cad48965c5fec2c27283f4dbf4470dae09b4737234b40bc04de334b31bfd,2025-11-11T04:15:45.797000 CVE-2025-1202,0,0,145e416d76817c96da29e1ee25f9dd444dc5ef4d95ddc6c06c93503cc4db41a1,2025-02-18T18:02:04.383000 CVE-2025-12020,0,0,c3ad30a470246201597754687ab80ab0397f7bb44d11c917dfeb10d2b724de90,2025-11-11T04:15:45.970000 @@ -287289,7 +287290,7 @@ CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a17 CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000 CVE-2025-12110,0,0,c80afae5094ee8cca3370edf3cac3d79851566b5d60ffb1a1b115fe5546cb937,2025-10-27T13:20:33.350000 CVE-2025-12112,0,0,6342fa464b85ae5f206f936ca9a40c0ed0fc57f4e325ccb04b5de32d3c62944a,2025-11-08T04:15:44.303000 -CVE-2025-12113,1,1,b454d8c2456a0ae50a9782fc4b8634a6fc2ffdcf92bb1b1dd973cfc283cd86f2,2025-11-12T08:15:40.850000 +CVE-2025-12113,0,0,b454d8c2456a0ae50a9782fc4b8634a6fc2ffdcf92bb1b1dd973cfc283cd86f2,2025-11-12T08:15:40.850000 CVE-2025-12114,0,0,5e86b06f168b3b331ccac030a6088360b8123bbceae40301ba0d207bfeb3d3eb,2025-11-10T15:08:27.637000 CVE-2025-12115,0,0,7b929290e0bbbf56e05a740612ad657f73a13306fa0173d8926620a068b34656,2025-11-04T15:41:31.450000 CVE-2025-12118,0,0,b6b99c55a4673baebdab7dba05ed42bf55535ab3cb2a1973e68ba787e4f13157,2025-11-04T15:41:31.450000 @@ -287498,6 +287499,7 @@ CVE-2025-12369,0,0,7138931d181b1186e76b17d1fe262d14551c9ffda7682171860d81fc16e05 CVE-2025-12371,0,0,728a3d354d73aa4b3531e521ba186b9f829eabbfe71fb19a23bbc9800f341ff3,2025-11-04T15:40:45.533000 CVE-2025-12378,0,0,c3a29d7df65813584da9089434d3fe18d740b7c41026db1ceb1b9e7f025e265b,2025-11-03T16:55:44.037000 CVE-2025-12380,0,0,bb60ed904b5cd07f28ccf0b8c547579a2eaedffe194eb86f05bbbc7c86475bc6,2025-10-30T15:05:32.197000 +CVE-2025-12382,1,1,97f61d4d0f966883aaa74f52ec9612167e74504db33ec587048c92619e362c5a,2025-11-12T10:15:43.100000 CVE-2025-12384,0,0,26981709d2e27415205054fd89b3ac36337e3e1c964199a4211178bc74a34fe1,2025-11-06T19:45:30.990000 CVE-2025-12388,0,0,4fba8586ead4e35723ba1383f9400c371521fe6c5c573183e8007f7470999e24,2025-11-06T19:45:30.990000 CVE-2025-12389,0,0,717f3ca6168cceaaf20050505e8a7873f912c0d856e33621015d5a9806e232e6,2025-11-04T15:40:45.533000 @@ -287649,7 +287651,7 @@ CVE-2025-12623,0,0,23c17e1337fdbeb99459b455e29fd2acb331dcf58649cff7cf6387651e482 CVE-2025-12626,0,0,f276b143e1401d6ba4de5aa0a3087fb7ea20c67d12627a1254026e93c517bbae,2025-11-04T15:41:31.450000 CVE-2025-12631,0,0,dc3e7576b08b6d7380ad3598af16cd68971129422524f688a544c58a27d2bd3c,2025-11-11T04:15:47.557000 CVE-2025-12632,0,0,5c34f9f7fcf2705ec66f28670e1cc6665e7bf20581ad94ecac4aca0c03736c2a,2025-11-11T04:15:47.730000 -CVE-2025-12633,1,1,9da3c1a411ca9ce2d9d8726eec77e33fb5aa01f8186c2e41b0f8873d6ed524aa,2025-11-12T08:15:41.073000 +CVE-2025-12633,0,0,9da3c1a411ca9ce2d9d8726eec77e33fb5aa01f8186c2e41b0f8873d6ed524aa,2025-11-12T08:15:41.073000 CVE-2025-12636,0,0,fcce88bf44f2af6e253a025b08cdfc6bf86825f7b385798576e12ccf2e287cbd,2025-11-06T23:15:35.693000 CVE-2025-12637,0,0,b5087d7c2bedd3f662b2e8dda7066052e6cd4acd40571061639633691b98bdf6,2025-11-11T04:15:47.893000 CVE-2025-1264,0,0,28c40552206eb9f5a0b03a9cca8beeb7d7df89ca0a5becb5749e460941f9fd5f,2025-04-07T14:17:50.220000 @@ -287688,6 +287690,7 @@ CVE-2025-12727,0,0,be13c0cf41090d5c6218266b475d7c8ee3f8fbad018f45a4f155b09d9361e CVE-2025-12728,0,0,3c2be3290a93688fab028c8f1b54aeb9fe5939fe89fc2d8faa1a6230fc65a1f1,2025-11-10T22:15:34.967000 CVE-2025-12729,0,0,884f48f1c4ee0204186440363ccf829eee119f016ee9061aad7d6f6d256efb9c,2025-11-10T21:15:38.390000 CVE-2025-1273,0,0,a53ca368fd1241998b0718bab24221bda830537b090b6087ccbff111a94c4582,2025-08-19T13:15:38.577000 +CVE-2025-12732,1,1,7cf70e0257d6081eb3e4cb5939f36e7d50dba2a6ef3c4d797f974f57d1dadbc1,2025-11-12T09:15:40.573000 CVE-2025-12735,0,0,8887e78958415b7bf6c14302f06726575e91114d0daf98d9d9f9ef8ab41ee6a5,2025-11-10T14:15:42.750000 CVE-2025-1274,0,0,5e5cfd476c5408f888f5b2f1a929101dbb2bd5e4199efa0bbbf5f7b5bb7dd7ed,2025-08-19T13:15:39.467000 CVE-2025-12745,0,0,98d6e6a936cfb7cbdefe188b4d47f3ebc52d27fa109ac61e902bd54f45f48f82,2025-11-06T19:45:30.990000 @@ -287732,11 +287735,11 @@ CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6b CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 -CVE-2025-12869,1,1,31cc7f2bf4571caab2b2f9f65dc24b9b03d5aef029fa5ee71fb317eebbf8a529,2025-11-12T08:15:41.290000 +CVE-2025-12869,0,0,31cc7f2bf4571caab2b2f9f65dc24b9b03d5aef029fa5ee71fb317eebbf8a529,2025-11-12T08:15:41.290000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 -CVE-2025-12870,1,1,d38f59c7db35917ba188e90af60fe7dc926caafe6ebfada961bd091a3b5fc9da,2025-11-12T08:15:41.513000 -CVE-2025-12871,1,1,48cfd821c8543bf12c62533eb75cd73677ec17a9e4de37a2dc1fe822b8401890,2025-11-12T08:15:41.733000 -CVE-2025-12872,1,1,24eea2225f79a4d2e8e56c612ff90b14c68590b145dce24e06cd7dd183f76a03,2025-11-12T08:15:41.970000 +CVE-2025-12870,0,0,d38f59c7db35917ba188e90af60fe7dc926caafe6ebfada961bd091a3b5fc9da,2025-11-12T08:15:41.513000 +CVE-2025-12871,0,0,48cfd821c8543bf12c62533eb75cd73677ec17a9e4de37a2dc1fe822b8401890,2025-11-12T08:15:41.733000 +CVE-2025-12872,0,0,24eea2225f79a4d2e8e56c612ff90b14c68590b145dce24e06cd7dd183f76a03,2025-11-12T08:15:41.970000 CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36 CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000 CVE-2025-1288,0,0,b1965e5e56da9cca6692b046a70ea7d7201f828830785c6cba9490cb387ee949,2025-06-12T16:38:01.743000 @@ -287747,6 +287750,7 @@ CVE-2025-12896,0,0,bbbe73b22f4921b9c0d9e7a886ac3ee77c029b540a5f442550b18b65389a6 CVE-2025-1290,0,0,70f64af7173fdd5eaa8c3bb12bbb9a202f3a61f363cc002adcadb414d2e25ec9,2025-07-11T13:55:52.760000 CVE-2025-12901,0,0,e1aad4657616fb7222ef99c7ab26237605bec91abd1eb6058cd7b5cd1763eeac,2025-11-12T05:15:43.787000 CVE-2025-12902,0,0,a6b3237a13c2876e723bb3050b418ae6366613eafca99c656ef553bec0bb5d41,2025-11-07T21:15:40.927000 +CVE-2025-12903,1,1,402dca6b7eadb752c88508b44529cc0aeca5a3ab54dedb880195494cf5bd2cf1,2025-11-12T09:15:40.800000 CVE-2025-12905,0,0,86ec2d3224eaff3940e604e00fb06d5463489f5df3dbcc22547a88cad85d9ab0,2025-11-10T16:15:43.447000 CVE-2025-12906,0,0,c3f6e07e42744527b97fe81ceecdc45462fc0e0a415e9fcf8c1c4b358ff712be,2025-11-10T16:15:43.607000 CVE-2025-12907,0,0,d23174d514ad438c60727bf978726d7fabf76abbec57f4a6f387d9b2ef8f0152,2025-11-10T16:15:43.750000 @@ -287814,8 +287818,8 @@ CVE-2025-13027,0,0,d61c353eb62c4500a223dc7643173d05525cbe28c1983f3512e6853c87819 CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000 CVE-2025-13032,0,0,5204316d545cc62899bef2a338497bb17d8d5a50fcc0091867520216f6456f51,2025-11-11T17:15:39.700000 CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000 -CVE-2025-13046,1,1,20b34d2f1ad3ee17f149b20614efe4e327ec025e96813095f8f9a280631279a2,2025-11-12T08:15:42.170000 -CVE-2025-13047,1,1,36f5dc9ed542918062442b5066d4bd581f88a38e822bbf3a3cd4c5e91f295eb8,2025-11-12T08:15:42.433000 +CVE-2025-13046,0,0,20b34d2f1ad3ee17f149b20614efe4e327ec025e96813095f8f9a280631279a2,2025-11-12T08:15:42.170000 +CVE-2025-13047,0,0,36f5dc9ed542918062442b5066d4bd581f88a38e822bbf3a3cd4c5e91f295eb8,2025-11-12T08:15:42.433000 CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000 CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000 CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000 @@ -300126,6 +300130,7 @@ CVE-2025-37728,0,0,69ffeaff35291cff0d1d657bd6eb3c49b042e2b843ed94c881ba2e530c41a CVE-2025-37729,0,0,900748b6f461b160fd6c71d30a8faa6022edfdf919a863f1520d9d0e4faa1f74,2025-10-14T19:36:29.240000 CVE-2025-3773,0,0,127c345d0c9944e71d79b72346a716db0de7f47cc0a48c9925a72066e74acd65,2025-06-26T18:57:43.670000 CVE-2025-37730,0,0,67e6e3825da3f11311501c243f4ff0e5cfb6a91fd935a3fdef62ae25a64429d2,2025-05-07T14:13:20.483000 +CVE-2025-37734,1,1,1bdbab4c3698965556fdb0b6a77fd865c34b820c04085b00e1da7816f734523f,2025-11-12T10:15:43.487000 CVE-2025-37735,0,0,52066b419973c6c4d4a807050067d24363e1cf9f581d518844e8d5da406c6d2f,2025-11-06T19:45:09.883000 CVE-2025-37736,0,0,d17930edd6ac07e47673272679e3bee1b4bcda2078fc5a4c7967148538e5a7a9,2025-11-07T23:15:44.350000 CVE-2025-37738,0,0,a3f58f2f9c9544276ee2ca8d44a33b33bf7f53f68470507ea9e792c7f9d7e516,2025-11-04T18:17:03.467000 @@ -312292,6 +312297,7 @@ CVE-2025-5908,0,0,c3bdac397497f976939b525dc79f8291172dbf44dec99bcb5b91f199e1f0d3 CVE-2025-5909,0,0,f82bb01110c9ead7795cebb5ea4e7190d1b79e236ac8da87e1f6c74c57a9946d,2025-06-16T17:14:56.647000 CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f3e,2025-06-16T17:13:58.870000 CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 +CVE-2025-59118,1,1,82038c4d4b43af71578b7898183c1d8352c080a44051da504973211044b6a317,2025-11-12T10:15:43.703000 CVE-2025-5912,0,0,10ff6acf965d367f7f73802da6c280421d13214babe0565635ffb936692b9383,2025-06-16T16:52:15.440000 CVE-2025-5913,0,0,4cba6ee8cf199de13dc8cd6aadd287347b651acc47698b712c4382a0d9737790,2025-06-16T16:49:15.273000 CVE-2025-59139,0,0,99dd209c1d4a413a58bb0483507147f4730401f0d7cf3d2183b150587aefb21d,2025-09-17T20:35:36.607000 @@ -313493,6 +313499,7 @@ CVE-2025-61606,0,0,1044f0e741f8562d6898f6c6ce98f5fb85aaef0fbea6a5314d5031d146ea1 CVE-2025-6161,0,0,3b5b0293126f56bad8c11cec7f09add92eba5f598363017bb2ec13d80dcc257b,2025-10-23T20:06:00.793000 CVE-2025-6162,0,0,e84675b06fecb8413603d644d7dc1a9c194bceeff6262adb1f964a4383ba4305,2025-06-23T19:20:50.197000 CVE-2025-61622,0,0,902ea1ce2d413d60237a89a3c7f860889082f40af086c54b10fa166fa2af6255,2025-11-04T22:16:36.280000 +CVE-2025-61623,1,1,e50bc893d23f46b1f0c372ebb536a8141225a687e0f716ad2403e056c249e4eb,2025-11-12T10:15:43.903000 CVE-2025-61626,0,0,1846ff78343d88c21d34c0bddc9fb0a6dc64bf209309a7b66ca9643f37572cf9,2025-09-30T11:37:42.080000 CVE-2025-61627,0,0,80e0da28d8f07808d5d7e372f590428b6df0b66f5aca041268709611569a761d,2025-09-30T11:37:42.173000 CVE-2025-61628,0,0,7673f12cc9a61639b2f914adbc8f18fdc511bdc85608d66d12d313b8d9e100bd,2025-09-30T11:37:42.243000 @@ -314715,6 +314722,13 @@ CVE-2025-64388,0,0,2eecfa9f17bf5a03b5fabe69ec62bc529fbb887562253545357097e84ae66 CVE-2025-64389,0,0,9652fddc7d81a01844cad76a2c3f4f4a5a7c1b7c9a5c040128a1b810282886e0,2025-11-04T15:41:31.450000 CVE-2025-6439,0,0,2d0ea447d8853dd809e141043bf0a840de4b7c2379c975462c88f39d09ce818b,2025-10-14T19:36:59.730000 CVE-2025-6440,0,0,ebe031ac229aca812e9e34f97822a62886ce48c0a6034adf419c1b0ce17582b7,2025-10-27T13:20:15.637000 +CVE-2025-64401,1,1,9f7a3193a0313c4c4c6481f716ef832e75519dcf64b6096fdc047f3d9590c1e4,2025-11-12T09:15:40.997000 +CVE-2025-64402,1,1,4f05337695ebc2c790beb6f10eab8c1c0c2158b6d4c7294a8c60d57590bad9be,2025-11-12T09:15:41.180000 +CVE-2025-64403,1,1,55e13eb872b87ef722073f103e9e9a609f5e9e0327ba14bfa184bef6ef06d897,2025-11-12T09:15:41.343000 +CVE-2025-64404,1,1,64c9ff281e6af7451f289047e4d20706177d284aa1909104d2bc9c95290c6090,2025-11-12T10:15:44.083000 +CVE-2025-64405,1,1,baa89931d2006f52dc91cda62c4b42b2baf38b931b42170163b4bc34b9522b92,2025-11-12T10:15:44.207000 +CVE-2025-64406,1,1,8b5c3686e52fddcc7e73627139451b945871f9b03ee6f4c78b8b3eac9b9d430f,2025-11-12T10:15:44.327000 +CVE-2025-64407,1,1,6fefd9d4e3ee3df690fb940d2e96a3832fc75149c7164cd498aeb2e18624b13e,2025-11-12T10:15:44.457000 CVE-2025-6441,0,0,5f4a27413c69d383060527884881b853295d4a7c7dc1a3a4886fa158fe5e2c24,2025-07-25T15:29:19.837000 CVE-2025-6442,0,0,f2a8efd197ba74ca2a1b2ff130838b4724ea1251750727f087a1eadb96ab9f14,2025-08-18T15:49:38.773000 CVE-2025-6443,0,0,febfa6bdb26020616171d91e3eef2bb96afa03cd76051b22022afd65700ef49d,2025-08-18T15:45:13.223000 @@ -317795,7 +317809,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,0,3b74ab3d062042afd3a0580e0b7fd9f6c8dd133a3f64f5e895d3672da0eecd2b,2025-11-12T03:15:44.453000 +CVE-2025-9900,0,1,db6cc4b155fa346a86b4960563117b5e59442ab787b3c0e08e09d9ddca071ed5,2025-11-12T09:15:42.140000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000