From 5d528143735ed5f2383f490a6515686a70cc8107 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 28 Jul 2025 22:03:50 +0000 Subject: [PATCH] Auto-Update: 2025-07-28T22:00:11.032877+00:00 --- CVE-2014/CVE-2014-91xx/CVE-2014-9193.json | 45 ++++++-- CVE-2023/CVE-2023-311xx/CVE-2023-31100.json | 11 +- CVE-2023/CVE-2023-358xx/CVE-2023-35841.json | 6 +- CVE-2023/CVE-2023-50xx/CVE-2023-5058.json | 18 +--- CVE-2024/CVE-2024-07xx/CVE-2024-0762.json | 6 +- CVE-2024/CVE-2024-125xx/CVE-2024-12533.json | 4 +- CVE-2024/CVE-2024-15xx/CVE-2024-1598.json | 6 +- CVE-2024/CVE-2024-299xx/CVE-2024-29979.json | 4 +- CVE-2024/CVE-2024-299xx/CVE-2024-29980.json | 4 +- CVE-2025/CVE-2025-295xx/CVE-2025-29534.json | 60 +++++++++++ CVE-2025/CVE-2025-461xx/CVE-2025-46118.json | 14 +-- CVE-2025/CVE-2025-504xx/CVE-2025-50484.json | 39 ++++++- CVE-2025/CVE-2025-504xx/CVE-2025-50485.json | 64 +++++++++++ CVE-2025/CVE-2025-504xx/CVE-2025-50486.json | 64 +++++++++++ CVE-2025/CVE-2025-504xx/CVE-2025-50487.json | 39 ++++++- CVE-2025/CVE-2025-544xx/CVE-2025-54419.json | 68 ++++++++++++ CVE-2025/CVE-2025-544xx/CVE-2025-54423.json | 64 +++++++++++ CVE-2025/CVE-2025-544xx/CVE-2025-54426.json | 90 ++++++++++++++++ CVE-2025/CVE-2025-544xx/CVE-2025-54427.json | 90 ++++++++++++++++ CVE-2025/CVE-2025-544xx/CVE-2025-54428.json | 60 +++++++++++ CVE-2025/CVE-2025-544xx/CVE-2025-54429.json | 86 +++++++++++++++ CVE-2025/CVE-2025-72xx/CVE-2025-7241.json | 52 ++++++++- CVE-2025/CVE-2025-72xx/CVE-2025-7242.json | 52 ++++++++- CVE-2025/CVE-2025-72xx/CVE-2025-7243.json | 52 ++++++++- CVE-2025/CVE-2025-72xx/CVE-2025-7244.json | 52 ++++++++- CVE-2025/CVE-2025-72xx/CVE-2025-7246.json | 52 ++++++++- CVE-2025/CVE-2025-81xx/CVE-2025-8137.json | 65 ++++++++++-- CVE-2025/CVE-2025-81xx/CVE-2025-8138.json | 65 ++++++++++-- CVE-2025/CVE-2025-81xx/CVE-2025-8139.json | 65 ++++++++++-- CVE-2025/CVE-2025-81xx/CVE-2025-8140.json | 65 ++++++++++-- CVE-2025/CVE-2025-81xx/CVE-2025-8194.json | 10 +- README.md | 73 +++++++------ _state.csv | 111 +++++++++++--------- 33 files changed, 1369 insertions(+), 187 deletions(-) create mode 100644 CVE-2025/CVE-2025-295xx/CVE-2025-29534.json create mode 100644 CVE-2025/CVE-2025-504xx/CVE-2025-50485.json create mode 100644 CVE-2025/CVE-2025-504xx/CVE-2025-50486.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54419.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54423.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54426.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54427.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54428.json create mode 100644 CVE-2025/CVE-2025-544xx/CVE-2025-54429.json diff --git a/CVE-2014/CVE-2014-91xx/CVE-2014-9193.json b/CVE-2014/CVE-2014-91xx/CVE-2014-9193.json index 88934e1a4fc..eef2d250b3b 100644 --- a/CVE-2014/CVE-2014-91xx/CVE-2014-9193.json +++ b/CVE-2014/CVE-2014-91xx/CVE-2014-9193.json @@ -2,7 +2,7 @@ "id": "CVE-2014-9193", "sourceIdentifier": "ics-cert@hq.dhs.gov", "published": "2014-12-20T00:59:03.633", - "lastModified": "2025-04-12T10:46:40.837", + "lastModified": "2025-07-28T21:15:24.513", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -17,6 +17,29 @@ ], "metrics": { "cvssMetricV2": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", + "baseScore": 8.5, + "accessVector": "NETWORK", + "accessComplexity": "MEDIUM", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 6.8, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": true, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + }, { "source": "nvd@nist.gov", "type": "Primary", @@ -44,8 +67,18 @@ }, "weaknesses": [ { - "source": "nvd@nist.gov", + "source": "ics-cert@hq.dhs.gov", "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", "description": [ { "lang": "en", @@ -116,12 +149,8 @@ ] }, { - "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-352-02", - "source": "ics-cert@hq.dhs.gov", - "tags": [ - "Third Party Advisory", - "US Government Resource" - ] + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-352-02", + "source": "ics-cert@hq.dhs.gov" }, { "url": "http://www.innominate.com/data/downloads/software/innominate_security_advisory_20141217_001_en.pdf", diff --git a/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json b/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json index b262dd278fc..dd8ffcc001e 100644 --- a/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json +++ b/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json @@ -2,13 +2,13 @@ "id": "CVE-2023-31100", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2023-11-15T00:15:07.573", - "lastModified": "2024-11-21T08:01:25.060", + "lastModified": "2025-07-28T21:15:25.600", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Improper Access Control in SMI handler vulnerability in Phoenix SecureCore\u2122 Technology\u2122 4 allows SPI flash modification.\nThis issue affects SecureCore\u2122 Technology\u2122 4:\n\n\n * from 4.3.0.0 before 4.3.0.203\n * \n\nfrom \n\n4.3.1.0 before 4.3.1.163\n * \n\nfrom \n\n4.4.0.0 before 4.4.0.217\n * \n\nfrom \n\n4.5.0.0 before 4.5.0.138\n\n\n\n\n" + "value": "Improper Access Control in SMI handler vulnerability in Phoenix SecureCore\u2122 Technology\u2122 4 allows SPI flash modification.\nThis issue affects SecureCore\u2122 Technology\u2122 4:\n\n\n * from 4.3.0.0 before 4.3.0.203\n * \n\nfrom \n\n4.3.1.0 before 4.3.1.163\n * \n\nfrom \n\n4.4.0.0 before 4.4.0.217\n * \n\nfrom \n\n4.5.0.0 before 4.5.0.138" }, { "lang": "es", @@ -123,11 +123,8 @@ ], "references": [ { - "url": "https://www.phoenix.com/security-notifications/", - "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", - "tags": [ - "Vendor Advisory" - ] + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2023-31100/", + "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { "url": "https://www.phoenix.com/security-notifications/", diff --git a/CVE-2023/CVE-2023-358xx/CVE-2023-35841.json b/CVE-2023/CVE-2023-358xx/CVE-2023-35841.json index b44ab73b010..0999d74e8f6 100644 --- a/CVE-2023/CVE-2023-358xx/CVE-2023-35841.json +++ b/CVE-2023/CVE-2023-358xx/CVE-2023-35841.json @@ -2,13 +2,13 @@ "id": "CVE-2023-35841", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2024-05-14T16:15:36.953", - "lastModified": "2024-11-21T08:08:48.090", + "lastModified": "2025-07-28T21:15:25.780", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.\n\n" + "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0." }, { "lang": "es", @@ -65,7 +65,7 @@ "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { - "url": "https://www.phoenix.com/security-notifications/cve-2023-35841/", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { diff --git a/CVE-2023/CVE-2023-50xx/CVE-2023-5058.json b/CVE-2023/CVE-2023-50xx/CVE-2023-5058.json index 52dfefa7666..84cf877b73f 100644 --- a/CVE-2023/CVE-2023-50xx/CVE-2023-5058.json +++ b/CVE-2023/CVE-2023-50xx/CVE-2023-5058.json @@ -2,7 +2,7 @@ "id": "CVE-2023-5058", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2023-12-07T23:15:07.490", - "lastModified": "2024-11-21T08:40:59.497", + "lastModified": "2025-07-28T21:15:25.927", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -80,22 +80,12 @@ ], "references": [ { - "url": "https://www.kb.cert.org/vuls/id/811862", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2023-5058/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { - "url": "https://www.phoenix.com/security-notifications/", - "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", - "tags": [ - "Vendor Advisory" - ] - }, - { - "url": "https://www.phoenix.com/security-notifications/cve-2023-5058/", - "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", - "tags": [ - "Vendor Advisory" - ] + "url": "https://www.kb.cert.org/vuls/id/811862", + "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { "url": "https://www.kb.cert.org/vuls/id/811862", diff --git a/CVE-2024/CVE-2024-07xx/CVE-2024-0762.json b/CVE-2024/CVE-2024-07xx/CVE-2024-0762.json index 3b362904896..8b8307bd981 100644 --- a/CVE-2024/CVE-2024-07xx/CVE-2024-0762.json +++ b/CVE-2024/CVE-2024-07xx/CVE-2024-0762.json @@ -2,13 +2,13 @@ "id": "CVE-2024-0762", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2024-05-14T16:15:53.287", - "lastModified": "2025-03-20T14:15:16.470", + "lastModified": "2025-07-28T21:15:26.063", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Potential buffer overflow \nin unsafe UEFI variable handling \n\nin Phoenix SecureCore\u2122 for select Intel platforms\n\nThis issue affects:\n\nPhoenix \n\nSecureCore\u2122 for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;\n\nPhoenix \n\nSecureCore\u2122 for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;\n\nPhoenix \n\nSecureCore\u2122 for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;\n\nPhoenix \n\nSecureCore\u2122 for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;\n\nPhoenix \n\nSecureCore\u2122 for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;\n\nPhoenix \n\nSecureCore\u2122 for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;\n\nPhoenix \n\nSecureCore\u2122 for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;\n\nPhoenix \n\nSecureCore\u2122 for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;\n\nPhoenix \n\nSecureCore\u2122 for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15." + "value": "Potential buffer overflow \nin unsafe UEFI variable handling \n\nin Phoenix SecureCore\u2122 for select Intel platforms\n\n\nThis issue affects:\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;\n\n\nPhoenix \n\nSecureCore\u2122 for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15." }, { "lang": "es", @@ -61,7 +61,7 @@ "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { - "url": "https://www.phoenix.com/security-notifications/cve-2024-0762/", + "url": "https://phoenixtech.com/phoenix-security-notifications/CVE-2024-0762/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { diff --git a/CVE-2024/CVE-2024-125xx/CVE-2024-12533.json b/CVE-2024/CVE-2024-125xx/CVE-2024-12533.json index 83adfd281b3..45b6b53bedd 100644 --- a/CVE-2024/CVE-2024-125xx/CVE-2024-12533.json +++ b/CVE-2024/CVE-2024-125xx/CVE-2024-12533.json @@ -2,7 +2,7 @@ "id": "CVE-2024-12533", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2025-05-13T15:15:51.877", - "lastModified": "2025-05-13T19:35:18.080", + "lastModified": "2025-07-28T21:15:26.210", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -53,7 +53,7 @@ ], "references": [ { - "url": "https://www.phoenix.com/security-notifications/cve-2024-12533", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2024-12533/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" } ] diff --git a/CVE-2024/CVE-2024-15xx/CVE-2024-1598.json b/CVE-2024/CVE-2024-15xx/CVE-2024-1598.json index 3c2042c57e9..2c380cff008 100644 --- a/CVE-2024/CVE-2024-15xx/CVE-2024-1598.json +++ b/CVE-2024/CVE-2024-15xx/CVE-2024-1598.json @@ -2,13 +2,13 @@ "id": "CVE-2024-1598", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2024-05-14T16:15:59.443", - "lastModified": "2024-11-21T08:50:54.990", + "lastModified": "2025-07-28T21:15:26.340", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Potential buffer overflow \nin unsafe UEFI variable handling \n\nin Phoenix SecureCore\u2122 for Intel Gemini Lake.This issue affects:\n\nSecureCore\u2122 for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.\n\n" + "value": "Potential buffer overflow \nin unsafe UEFI variable handling \n\nin Phoenix SecureCore\u2122 for Intel Gemini Lake.This issue affects:\n\nSecureCore\u2122 for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567." }, { "lang": "es", @@ -53,7 +53,7 @@ ], "references": [ { - "url": "https://www.phoenix.com/security-notifications/cve-2024-1598/", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2024-1598/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" }, { diff --git a/CVE-2024/CVE-2024-299xx/CVE-2024-29979.json b/CVE-2024/CVE-2024-299xx/CVE-2024-29979.json index 281aaca6c38..09b2e63b049 100644 --- a/CVE-2024/CVE-2024-299xx/CVE-2024-29979.json +++ b/CVE-2024/CVE-2024-299xx/CVE-2024-29979.json @@ -2,7 +2,7 @@ "id": "CVE-2024-29979", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2025-01-14T16:15:28.423", - "lastModified": "2025-01-14T16:15:28.423", + "lastModified": "2025-07-28T21:15:26.460", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -97,7 +97,7 @@ ], "references": [ { - "url": "https://www.phoenix.com/phoenix-security-notifications/cve-2024-29979/", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2024-29979/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" } ] diff --git a/CVE-2024/CVE-2024-299xx/CVE-2024-29980.json b/CVE-2024/CVE-2024-299xx/CVE-2024-29980.json index a6481bdb9b7..3a855e5cad8 100644 --- a/CVE-2024/CVE-2024-299xx/CVE-2024-29980.json +++ b/CVE-2024/CVE-2024-299xx/CVE-2024-29980.json @@ -2,7 +2,7 @@ "id": "CVE-2024-29980", "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "published": "2025-01-14T16:15:28.600", - "lastModified": "2025-01-14T16:15:28.600", + "lastModified": "2025-07-28T21:15:26.590", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -97,7 +97,7 @@ ], "references": [ { - "url": "https://www.phoenix.com/phoenix-security-notifications/cve-2024-29980/", + "url": "https://phoenixtech.com/phoenix-security-notifications/cve-2024-29980/", "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" } ] diff --git a/CVE-2025/CVE-2025-295xx/CVE-2025-29534.json b/CVE-2025/CVE-2025-295xx/CVE-2025-29534.json new file mode 100644 index 00000000000..86a07f1ce41 --- /dev/null +++ b/CVE-2025/CVE-2025-295xx/CVE-2025-29534.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-29534", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-28T20:17:44.480", + "lastModified": "2025-07-28T20:17:44.480", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid credentials to execute arbitrary commands with root privileges. The issue stems from insufficient sanitization of user-supplied input in the /cgi-bin/cgi_vista.cgi executable, which is passed to a system-level function call." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "http://wave.com", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/EmptyButter/19b2c626f4589d1f9d4478632205a9eb", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46118.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46118.json index 9be5f34543c..be65ee41453 100644 --- a/CVE-2025/CVE-2025-461xx/CVE-2025-46118.json +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46118.json @@ -2,7 +2,7 @@ "id": "CVE-2025-46118", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-21T15:15:27.940", - "lastModified": "2025-07-22T17:15:31.680", + "lastModified": "2025-07-28T20:17:46.840", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -22,20 +22,20 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", - "baseScore": 7.3, - "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", - "integrityImpact": "LOW", - "availabilityImpact": "LOW" + "integrityImpact": "NONE", + "availabilityImpact": "NONE" }, "exploitabilityScore": 3.9, - "impactScore": 3.4 + "impactScore": 1.4 } ] }, diff --git a/CVE-2025/CVE-2025-504xx/CVE-2025-50484.json b/CVE-2025/CVE-2025-504xx/CVE-2025-50484.json index a976715c023..1d3cc8867c7 100644 --- a/CVE-2025/CVE-2025-504xx/CVE-2025-50484.json +++ b/CVE-2025/CVE-2025-504xx/CVE-2025-50484.json @@ -2,7 +2,7 @@ "id": "CVE-2025-50484", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-28T19:15:42.810", - "lastModified": "2025-07-28T19:15:42.810", + "lastModified": "2025-07-28T20:17:47.537", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-613" + } + ] + } + ], "references": [ { "url": "http://phpgurukul.com", diff --git a/CVE-2025/CVE-2025-504xx/CVE-2025-50485.json b/CVE-2025/CVE-2025-504xx/CVE-2025-50485.json new file mode 100644 index 00000000000..84af9435593 --- /dev/null +++ b/CVE-2025/CVE-2025-504xx/CVE-2025-50485.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-50485", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-28T20:17:47.687", + "lastModified": "2025-07-28T20:17:47.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-613" + } + ] + } + ], + "references": [ + { + "url": "http://online.com", + "source": "cve@mitre.org" + }, + { + "url": "http://phpgurukul.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/VasilVK/CVE/tree/main/CVE-2025-50485", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-504xx/CVE-2025-50486.json b/CVE-2025/CVE-2025-504xx/CVE-2025-50486.json new file mode 100644 index 00000000000..acb5beace8a --- /dev/null +++ b/CVE-2025/CVE-2025-504xx/CVE-2025-50486.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-50486", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-28T20:17:47.870", + "lastModified": "2025-07-28T20:17:47.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-613" + } + ] + } + ], + "references": [ + { + "url": "http://car.com", + "source": "cve@mitre.org" + }, + { + "url": "http://phpgurukul.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/sahel0708/CVE/tree/main/CVE-2025-50486", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-504xx/CVE-2025-50487.json b/CVE-2025/CVE-2025-504xx/CVE-2025-50487.json index 2fa06057cd4..29f377d1c5c 100644 --- a/CVE-2025/CVE-2025-504xx/CVE-2025-50487.json +++ b/CVE-2025/CVE-2025-504xx/CVE-2025-50487.json @@ -2,7 +2,7 @@ "id": "CVE-2025-50487", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-28T19:15:42.920", - "lastModified": "2025-07-28T19:15:42.920", + "lastModified": "2025-07-28T20:17:48.050", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-613" + } + ] + } + ], "references": [ { "url": "http://blood.com", diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54419.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54419.json new file mode 100644 index 00000000000..f9f822595cf --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54419.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-54419", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T20:17:48.403", + "lastModified": "2025-07-28T21:15:26.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the (unsigned) original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any character from the SAML assertion username. To conduct the attack an attacker would need a validly signed document from the identity provider (IdP). This is fixed in version 5.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + }, + { + "lang": "en", + "value": "CWE-347" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/node-saml/node-saml/releases/tag/v5.1.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/node-saml/node-saml/security/advisories/GHSA-4mxg-3p6v-xgq3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54423.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54423.json new file mode 100644 index 00000000000..856578b81f4 --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54423.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-54423", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T20:17:48.573", + "lastModified": "2025-07-28T20:17:48.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/9001/copyparty/commit/895880aeb0be0813ddf732487596633f8f9fc3a6", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/9001/copyparty/releases/tag/v1.18.5", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/9001/copyparty/security/advisories/GHSA-9q4r-x2hj-jmvr", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54426.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54426.json new file mode 100644 index 00000000000..70cf0354457 --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54426.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-54426", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T21:15:26.887", + "lastModified": "2025-07-28T21:15:26.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. In versions prior to commit 36f70d1, the Curve25519Add and Curve25519ScalarMul precompiles incorrectly handle invalid Ristretto point representations. Instead of returning an error, they silently treat invalid input bytes as the Ristretto identity element, leading to potentially incorrect cryptographic results. This is fixed in commit 36f70d1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-327" + } + ] + } + ], + "references": [ + { + "url": "https://dotpal.io/assets/files/frontier-srlabs-2505-718c3bfa5df9fed1862fed05de506859.pdf", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/commit/36f70d1defcaeaed5a453015f6c98c21bb5b121b", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/pull/1720/commits/8ed6053fb868495477ba2409f7e64f439df76f96", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/security/advisories/GHSA-v4q3-23rh-w5mw", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54427.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54427.json new file mode 100644 index 00000000000..dfdaba14eeb --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54427.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-54427", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T21:15:27.080", + "lastModified": "2025-07-28T21:15:27.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic note_min_gas_price_target is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which includes the check_inherent call. This allows other nodes to verify if the input (in this case, the target value) is correct. However, prior to commit a754b3d, the check_inherent function has not been implemented for note_min_gas_price_target. This lets the block producer set the target value without verification. The target is then used to set the MinGasPrice, which has an upper and lower bound defined in the on_initialize hook. The block producer can set the target to the upper bound. Which also increases the upper and lower bounds for the next block. Over time, this could result in continuously raising the gas price, making contract execution too expensive and ineffective for users. An attacker could use this flaw to manipulate the gas price, potentially leading to significantly inflated transaction fees. Such manipulation could render contract execution prohibitively expensive for users, effectively resulting in a denial-of-service condition for the network. This is fixed in version a754b3d." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-682" + }, + { + "lang": "en", + "value": "CWE-754" + } + ] + } + ], + "references": [ + { + "url": "https://dotpal.io/assets/files/frontier-srlabs-2505-718c3bfa5df9fed1862fed05de506859.pdf", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/commit/a754b3dc6e1b6da98f71aea7bb1fa08677b24186", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/security/advisories/GHSA-r6rj-gmqh-cv94", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54428.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54428.json new file mode 100644 index 00000000000..d966f0f05dd --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54428.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-54428", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T21:15:27.327", + "lastModified": "2025-07-28T21:15:27.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow unauthorized access to production or staging databases, potentially leading to data exfiltration, modification, or deletion. This is fixed in version 1.0.1. Workarounds include: immediately rotating credentials for the exposed database user, using a secret manager (like Vault, Doppler, AWS Secrets Manager, etc.) instead of storing secrets directly in code, or auditing recent access logs for suspicious activity." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-522" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/musombi123/RevelaCode-Backend/commit/95005cf4bacf1b005aef9d4b8e85237c98492d83", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/musombi123/RevelaCode-Backend/security/advisories/GHSA-m253-qvcr-cr48", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-544xx/CVE-2025-54429.json b/CVE-2025/CVE-2025-544xx/CVE-2025-54429.json new file mode 100644 index 00000000000..1eedfa17469 --- /dev/null +++ b/CVE-2025/CVE-2025-544xx/CVE-2025-54429.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54429", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-28T21:15:27.647", + "lastModified": "2025-07-28T21:15:27.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. There are various account address types in Frontier, e.g. precompiled contracts, smart contracts, and externally owned accounts. Some EVM mechanisms should be unreachable by certain types of accounts for safety. For precompiles to be callable by smart contracts they must be explicitly configured as CallableByContract. If this configuration is absent, then the precompile should be unreachable via smart contract accounts. In commits prior to 0822030, the underlying implementation of CallableByContract which returned the AddressType was incorrect. It considered the contract address running under CREATE or CREATE2 to be AddressType::EOA rather than correctly as AddressType::Contract. The issue only affects users who use custom precompile implementations that utilize AddressType::EOA and AddressType::Contract. It's not directly exploitable in any of the predefined precompiles in Frontier. This is fixed in version 0822030." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-704" + } + ] + } + ], + "references": [ + { + "url": "https://dotpal.io/assets/files/frontier-srlabs-2505-718c3bfa5df9fed1862fed05de506859.pdf", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/pull/1655", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/polkadot-evm/frontier/security/advisories/GHSA-fr62-ppwc-mc2h", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json index c59ea26881b..e116fea7562 100644 --- a/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7241", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-07-21T20:15:44.897", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T20:35:52.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,56 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x64:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "D04C3EC4-8E8B-4FF3-960C-1833F86B67A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x86:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "CD3AF73F-CA47-460E-BE55-ACC42C4CB22B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "44AB69A5-F65B-4A4D-A12C-FFB6317C39F4" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "D8298F15-CC7C-4927-BD5E-4F9034D48CA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-489/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json index ba3aa212e96..b6e3ddadbb8 100644 --- a/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7242", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-07-21T20:15:45.037", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T20:37:19.963", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,56 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x64:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "D04C3EC4-8E8B-4FF3-960C-1833F86B67A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x86:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "CD3AF73F-CA47-460E-BE55-ACC42C4CB22B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "44AB69A5-F65B-4A4D-A12C-FFB6317C39F4" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "D8298F15-CC7C-4927-BD5E-4F9034D48CA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-490/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json index b1cd6089f50..96afe9ddc31 100644 --- a/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7243", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-07-21T20:15:45.180", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T20:37:15.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,56 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x64:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "D04C3EC4-8E8B-4FF3-960C-1833F86B67A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x86:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "CD3AF73F-CA47-460E-BE55-ACC42C4CB22B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "44AB69A5-F65B-4A4D-A12C-FFB6317C39F4" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "D8298F15-CC7C-4927-BD5E-4F9034D48CA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-491/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json index 287b27a654b..cf7eeae515f 100644 --- a/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7244", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-07-21T20:15:45.317", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T20:37:10.920", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,56 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x64:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "D04C3EC4-8E8B-4FF3-960C-1833F86B67A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x86:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "CD3AF73F-CA47-460E-BE55-ACC42C4CB22B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "44AB69A5-F65B-4A4D-A12C-FFB6317C39F4" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "D8298F15-CC7C-4927-BD5E-4F9034D48CA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-497/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json index 4a5f06649d5..2e647b5fdb6 100644 --- a/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7246", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-07-21T20:15:45.453", - "lastModified": "2025-07-22T13:05:40.573", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T20:37:03.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,56 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x64:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "D04C3EC4-8E8B-4FF3-960C-1833F86B67A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cadsofttools:cadimage:*:*:*:*:*:irfanview:x86:*", + "versionEndExcluding": "15.0.0.8", + "matchCriteriaId": "CD3AF73F-CA47-460E-BE55-ACC42C4CB22B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "44AB69A5-F65B-4A4D-A12C-FFB6317C39F4" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "4.72", + "matchCriteriaId": "D8298F15-CC7C-4927-BD5E-4F9034D48CA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-498/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8137.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8137.json index 6543ef318d0..7ae97f6538e 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8137.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8137.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8137", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T08:15:26.330", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T21:16:59.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se ha detectado una vulnerabilidad en TOTOLINK A702R 4.0.0-B20230721.1521, clasificada como cr\u00edtica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /boafrm/formIpQoS del componente HTTP POST Request Handler. La manipulaci\u00f3n del argumento \"mac\" provoca un desbordamiento del b\u00fafer. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -120,26 +124,73 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20230721.1521:*:*:*:*:*:*:*", + "matchCriteriaId": "922980C0-D13C-43F6-8FB9-538FAFE5D218" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "49D3C58B-4632-464E-A0A6-33807E9A1842" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/panda666-888/vuls/blob/main/totolink/a702r/formIpQoS.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317533", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.317533", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.620483", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8138.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8138.json index 78c5893523c..9525def049d 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8138.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8138.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8138", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T08:15:26.550", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T21:17:03.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en TOTOLINK A702R 4.0.0-B20230721.1521, clasificada como cr\u00edtica. Este problema afecta a una funcionalidad desconocida del archivo /boafrm/formOneKeyAccessButton del componente HTTP POST Request Handler. La manipulaci\u00f3n del argumento submit-url provoca un desbordamiento del b\u00fafer. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -120,26 +124,73 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20230721.1521:*:*:*:*:*:*:*", + "matchCriteriaId": "922980C0-D13C-43F6-8FB9-538FAFE5D218" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "49D3C58B-4632-464E-A0A6-33807E9A1842" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/panda666-888/vuls/blob/main/totolink/a702r/formOneKeyAccessButton.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317534", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.317534", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.620484", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8139.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8139.json index d90d547086e..8a1fcdf8085 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8139.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8139.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8139", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T09:15:28.313", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T21:17:07.803", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en TOTOLINK A702R 4.0.0-B20230721.1521. Se ha clasificado como cr\u00edtica. Afecta una parte desconocida del archivo /boafrm/formPortFw del componente HTTP POST Request Handler. La manipulaci\u00f3n del argumento service_type provoca un desbordamiento del b\u00fafer. Es posible ejecutar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -120,26 +124,73 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20230721.1521:*:*:*:*:*:*:*", + "matchCriteriaId": "922980C0-D13C-43F6-8FB9-538FAFE5D218" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "49D3C58B-4632-464E-A0A6-33807E9A1842" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/panda666-888/vuls/blob/main/totolink/a702r/formPortFw.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317535", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.317535", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.620485", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8140.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8140.json index d4109d38bb2..0a6babd8f39 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8140.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8140.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8140", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T09:15:28.573", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-28T21:16:48.420", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en TOTOLINK A702R 4.0.0-B20230721.1521. Se ha declarado cr\u00edtica. Esta vulnerabilidad afecta al c\u00f3digo desconocido del archivo /boafrm/formWlanMultipleAP del componente HTTP POST Request Handler. La manipulaci\u00f3n del argumento \"submit-url\" provoca un desbordamiento del b\u00fafer. Es posible ejecutar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -120,26 +124,73 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a702r_firmware:4.0.0-b20230721.1521:*:*:*:*:*:*:*", + "matchCriteriaId": "922980C0-D13C-43F6-8FB9-538FAFE5D218" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "49D3C58B-4632-464E-A0A6-33807E9A1842" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/panda666-888/vuls/blob/main/totolink/a702r/formWlanMultipleAP.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317536", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.317536", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.620486", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8194.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8194.json index 16eaa24bf08..f0e8798b67d 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8194.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8194.json @@ -2,7 +2,7 @@ "id": "CVE-2025-8194", "sourceIdentifier": "cna@python.org", "published": "2025-07-28T19:15:43.793", - "lastModified": "2025-07-28T19:15:43.793", + "lastModified": "2025-07-28T20:17:49.123", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -48,6 +48,14 @@ } ], "references": [ + { + "url": "https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38", + "source": "cna@python.org" + }, + { + "url": "https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe", + "source": "cna@python.org" + }, { "url": "https://github.com/python/cpython/issues/130577", "source": "cna@python.org" diff --git a/README.md b/README.md index 0f1fa6a9200..a02e5c53639 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-07-28T20:00:11.898409+00:00 +2025-07-28T22:00:11.032877+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-07-28T19:15:43.957000+00:00 +2025-07-28T21:17:07.803000+00:00 ``` ### Last Data Feed Release @@ -33,51 +33,50 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -303450 +303459 ``` ### CVEs added in the last Commit -Recently added CVEs: `11` +Recently added CVEs: `9` -- [CVE-2025-43023](CVE-2025/CVE-2025-430xx/CVE-2025-43023.json) (`2025-07-28T18:15:25.030`) -- [CVE-2025-50484](CVE-2025/CVE-2025-504xx/CVE-2025-50484.json) (`2025-07-28T19:15:42.810`) -- [CVE-2025-50487](CVE-2025/CVE-2025-504xx/CVE-2025-50487.json) (`2025-07-28T19:15:42.920`) -- [CVE-2025-50488](CVE-2025/CVE-2025-504xx/CVE-2025-50488.json) (`2025-07-28T18:15:25.683`) -- [CVE-2025-50489](CVE-2025/CVE-2025-504xx/CVE-2025-50489.json) (`2025-07-28T18:15:25.903`) -- [CVE-2025-50491](CVE-2025/CVE-2025-504xx/CVE-2025-50491.json) (`2025-07-28T18:15:26.260`) -- [CVE-2025-50492](CVE-2025/CVE-2025-504xx/CVE-2025-50492.json) (`2025-07-28T18:15:26.370`) -- [CVE-2025-54298](CVE-2025/CVE-2025-542xx/CVE-2025-54298.json) (`2025-07-28T18:15:26.913`) -- [CVE-2025-54299](CVE-2025/CVE-2025-542xx/CVE-2025-54299.json) (`2025-07-28T18:15:27.113`) -- [CVE-2025-8194](CVE-2025/CVE-2025-81xx/CVE-2025-8194.json) (`2025-07-28T19:15:43.793`) -- [CVE-2025-8283](CVE-2025/CVE-2025-82xx/CVE-2025-8283.json) (`2025-07-28T19:15:43.957`) +- [CVE-2025-29534](CVE-2025/CVE-2025-295xx/CVE-2025-29534.json) (`2025-07-28T20:17:44.480`) +- [CVE-2025-50485](CVE-2025/CVE-2025-504xx/CVE-2025-50485.json) (`2025-07-28T20:17:47.687`) +- [CVE-2025-50486](CVE-2025/CVE-2025-504xx/CVE-2025-50486.json) (`2025-07-28T20:17:47.870`) +- [CVE-2025-54419](CVE-2025/CVE-2025-544xx/CVE-2025-54419.json) (`2025-07-28T20:17:48.403`) +- [CVE-2025-54423](CVE-2025/CVE-2025-544xx/CVE-2025-54423.json) (`2025-07-28T20:17:48.573`) +- [CVE-2025-54426](CVE-2025/CVE-2025-544xx/CVE-2025-54426.json) (`2025-07-28T21:15:26.887`) +- [CVE-2025-54427](CVE-2025/CVE-2025-544xx/CVE-2025-54427.json) (`2025-07-28T21:15:27.080`) +- [CVE-2025-54428](CVE-2025/CVE-2025-544xx/CVE-2025-54428.json) (`2025-07-28T21:15:27.327`) +- [CVE-2025-54429](CVE-2025/CVE-2025-544xx/CVE-2025-54429.json) (`2025-07-28T21:15:27.647`) ### CVEs modified in the last Commit -Recently modified CVEs: `21` +Recently modified CVEs: `22` -- [CVE-2020-15778](CVE-2020/CVE-2020-157xx/CVE-2020-15778.json) (`2025-07-28T18:12:45.213`) -- [CVE-2024-58261](CVE-2024/CVE-2024-582xx/CVE-2024-58261.json) (`2025-07-28T19:15:42.280`) -- [CVE-2025-34114](CVE-2025/CVE-2025-341xx/CVE-2025-34114.json) (`2025-07-28T19:15:42.540`) -- [CVE-2025-50185](CVE-2025/CVE-2025-501xx/CVE-2025-50185.json) (`2025-07-28T19:15:42.700`) -- [CVE-2025-50490](CVE-2025/CVE-2025-504xx/CVE-2025-50490.json) (`2025-07-28T18:15:26.070`) -- [CVE-2025-50493](CVE-2025/CVE-2025-504xx/CVE-2025-50493.json) (`2025-07-28T18:15:26.543`) -- [CVE-2025-50494](CVE-2025/CVE-2025-504xx/CVE-2025-50494.json) (`2025-07-28T18:15:26.697`) -- [CVE-2025-54378](CVE-2025/CVE-2025-543xx/CVE-2025-54378.json) (`2025-07-28T19:15:43.173`) -- [CVE-2025-54416](CVE-2025/CVE-2025-544xx/CVE-2025-54416.json) (`2025-07-28T19:15:43.387`) -- [CVE-2025-7365](CVE-2025/CVE-2025-73xx/CVE-2025-7365.json) (`2025-07-28T18:15:28.060`) -- [CVE-2025-8027](CVE-2025/CVE-2025-80xx/CVE-2025-8027.json) (`2025-07-28T18:30:57.710`) -- [CVE-2025-8028](CVE-2025/CVE-2025-80xx/CVE-2025-8028.json) (`2025-07-28T18:32:21.437`) -- [CVE-2025-8029](CVE-2025/CVE-2025-80xx/CVE-2025-8029.json) (`2025-07-28T18:34:31.310`) -- [CVE-2025-8030](CVE-2025/CVE-2025-80xx/CVE-2025-8030.json) (`2025-07-28T18:38:03.577`) -- [CVE-2025-8032](CVE-2025/CVE-2025-80xx/CVE-2025-8032.json) (`2025-07-28T18:40:44.780`) -- [CVE-2025-8033](CVE-2025/CVE-2025-80xx/CVE-2025-8033.json) (`2025-07-28T18:42:05.727`) -- [CVE-2025-8034](CVE-2025/CVE-2025-80xx/CVE-2025-8034.json) (`2025-07-28T18:47:38.100`) -- [CVE-2025-8035](CVE-2025/CVE-2025-80xx/CVE-2025-8035.json) (`2025-07-28T18:48:49.163`) -- [CVE-2025-8036](CVE-2025/CVE-2025-80xx/CVE-2025-8036.json) (`2025-07-28T18:49:44.900`) -- [CVE-2025-8037](CVE-2025/CVE-2025-80xx/CVE-2025-8037.json) (`2025-07-28T18:51:21.220`) -- [CVE-2025-8177](CVE-2025/CVE-2025-81xx/CVE-2025-8177.json) (`2025-07-28T19:15:43.643`) +- [CVE-2014-9193](CVE-2014/CVE-2014-91xx/CVE-2014-9193.json) (`2025-07-28T21:15:24.513`) +- [CVE-2023-31100](CVE-2023/CVE-2023-311xx/CVE-2023-31100.json) (`2025-07-28T21:15:25.600`) +- [CVE-2023-35841](CVE-2023/CVE-2023-358xx/CVE-2023-35841.json) (`2025-07-28T21:15:25.780`) +- [CVE-2023-5058](CVE-2023/CVE-2023-50xx/CVE-2023-5058.json) (`2025-07-28T21:15:25.927`) +- [CVE-2024-0762](CVE-2024/CVE-2024-07xx/CVE-2024-0762.json) (`2025-07-28T21:15:26.063`) +- [CVE-2024-12533](CVE-2024/CVE-2024-125xx/CVE-2024-12533.json) (`2025-07-28T21:15:26.210`) +- [CVE-2024-1598](CVE-2024/CVE-2024-15xx/CVE-2024-1598.json) (`2025-07-28T21:15:26.340`) +- [CVE-2024-29979](CVE-2024/CVE-2024-299xx/CVE-2024-29979.json) (`2025-07-28T21:15:26.460`) +- [CVE-2024-29980](CVE-2024/CVE-2024-299xx/CVE-2024-29980.json) (`2025-07-28T21:15:26.590`) +- [CVE-2025-46118](CVE-2025/CVE-2025-461xx/CVE-2025-46118.json) (`2025-07-28T20:17:46.840`) +- [CVE-2025-50484](CVE-2025/CVE-2025-504xx/CVE-2025-50484.json) (`2025-07-28T20:17:47.537`) +- [CVE-2025-50487](CVE-2025/CVE-2025-504xx/CVE-2025-50487.json) (`2025-07-28T20:17:48.050`) +- [CVE-2025-7241](CVE-2025/CVE-2025-72xx/CVE-2025-7241.json) (`2025-07-28T20:35:52.540`) +- [CVE-2025-7242](CVE-2025/CVE-2025-72xx/CVE-2025-7242.json) (`2025-07-28T20:37:19.963`) +- [CVE-2025-7243](CVE-2025/CVE-2025-72xx/CVE-2025-7243.json) (`2025-07-28T20:37:15.390`) +- [CVE-2025-7244](CVE-2025/CVE-2025-72xx/CVE-2025-7244.json) (`2025-07-28T20:37:10.920`) +- [CVE-2025-7246](CVE-2025/CVE-2025-72xx/CVE-2025-7246.json) (`2025-07-28T20:37:03.210`) +- [CVE-2025-8137](CVE-2025/CVE-2025-81xx/CVE-2025-8137.json) (`2025-07-28T21:16:59.540`) +- [CVE-2025-8138](CVE-2025/CVE-2025-81xx/CVE-2025-8138.json) (`2025-07-28T21:17:03.637`) +- [CVE-2025-8139](CVE-2025/CVE-2025-81xx/CVE-2025-8139.json) (`2025-07-28T21:17:07.803`) +- [CVE-2025-8140](CVE-2025/CVE-2025-81xx/CVE-2025-8140.json) (`2025-07-28T21:16:48.420`) +- [CVE-2025-8194](CVE-2025/CVE-2025-81xx/CVE-2025-8194.json) (`2025-07-28T20:17:49.123`) ## Download and Usage diff --git a/_state.csv b/_state.csv index f884c3905e5..7dd5341242e 100644 --- a/_state.csv +++ b/_state.csv @@ -72753,7 +72753,7 @@ CVE-2014-9189,0,0,1154ff3075ac38c0e1f231f894d78b5a62eb7f20333ebb05cdf2dd6935566f CVE-2014-9190,0,0,60bfff0d5926819dfba65db5fd3e885c45bc4cae293f6128e78e3192a23779fe,2025-07-24T23:15:25.860000 CVE-2014-9191,0,0,3bf8c4bb7ec940ea9cc784d9cff3f9dde25b0e5f8df72f5dc13fb9f37fba905c,2025-04-12T10:46:40.837000 CVE-2014-9192,0,0,2aaf8f67c905d5c4f2f08f01a871d857f9e7ef1e7cf673f0db79d2aa6aeb3f40,2025-07-25T17:15:27.680000 -CVE-2014-9193,0,0,139ccf8f2f86991ba81c88cc1ca9e4abbd699be0fd61f71f9cece6b97e1ad4ac,2025-04-12T10:46:40.837000 +CVE-2014-9193,0,1,ec837d3224b11e1c384b29b1714421dec58fdd04dde68dacd0aed1fead33cf93,2025-07-28T21:15:24.513000 CVE-2014-9194,0,0,b051c8e704a3cb51ac5c8989ea3baf0c96ccca9c8c43a81afa9df21588053523,2025-04-12T10:46:40.837000 CVE-2014-9195,0,0,e2486b18e31e71b44c76bec5b80423c19b588d15b09f31fbcbbc88825aae0832,2025-04-12T10:46:40.837000 CVE-2014-9196,0,0,20a07797c9d9c3d5911c5b028487b9bd968ebd21b4964b208fb9f7659690e3c1,2025-04-12T10:46:40.837000 @@ -150792,7 +150792,7 @@ CVE-2020-15774,0,0,5c32be050e26817d388a6dabb91b14a39a029530219ba9a4741d3ec24dd86 CVE-2020-15775,0,0,b1434d3d03a73bb90a7779b5743145262365ff4837b41d8ead352729d9c7828a,2024-11-21T05:06:08.960000 CVE-2020-15776,0,0,a5ef541023be1bd44c0db65fa4bf1a88f902729bf3e2e042ed88421f0eaaa434,2024-11-21T05:06:09.103000 CVE-2020-15777,0,0,b1dffdcb2a80a88ca7ada50e2812f4892deea120fca20e8c72e4f74cdd9d89db,2024-11-21T05:06:09.250000 -CVE-2020-15778,0,1,ba71a602c8afbfb13e3fd852f08a071c62c74fb9bb4122342242cc089f05eaa0,2025-07-28T18:12:45.213000 +CVE-2020-15778,0,0,ba71a602c8afbfb13e3fd852f08a071c62c74fb9bb4122342242cc089f05eaa0,2025-07-28T18:12:45.213000 CVE-2020-15779,0,0,f5426e6c90eef418705f2889c8593bb8078c9bcbe85b5983dcdf96da13a92153,2024-11-21T05:06:09.657000 CVE-2020-1578,0,0,9d5e3886a7a62bb5d10ea70f00203a9c5fe72e54e529393de71efd3da6f782cb,2024-11-21T05:10:53.093000 CVE-2020-15780,0,0,1800fe63aa180ae149ae3f4be5b6236074ecff9f6e232cb6805cffd580baade5,2024-11-21T05:06:09.827000 @@ -225850,7 +225850,7 @@ CVE-2023-31096,0,0,1bf099b6a16fbaf17b0e3402adf0046e29901b830721433395339a3616dc7 CVE-2023-31098,0,0,dd7f9665438bcfca1ee33d0fafcd554c696707b58268d7e4cf4ea62d5ebaf66e,2024-11-21T08:01:24.643000 CVE-2023-31099,0,0,aacb55676b0e32eacf0234120e0a6a85ea794c3967ab744e3bdf5c2d78a35c2b,2025-01-29T20:15:33.377000 CVE-2023-3110,0,0,241ded178201c3a904e0d87448016fc0dd88d91e8bc40e92147c095bfa033c0f,2024-11-21T08:16:28.873000 -CVE-2023-31100,0,0,0390539f9d5d5f21d49bce2d5cd170b336d5b28f6ed90488452d90fe28c50a95,2024-11-21T08:01:25.060000 +CVE-2023-31100,0,1,d53407bcc1855d45123571b0796cc2925d1a8f3a6a75fe553334c7d4b1366565,2025-07-28T21:15:25.600000 CVE-2023-31101,0,0,84390422dbf5a5821e8f914f92993664c448911aa69b3d18f44ad9c02ab1018d,2024-11-21T08:01:25.190000 CVE-2023-31102,0,0,0befc70f83111f1d99f825978a0e14dbded8ec6a90b35f966fe71f085d9e1dd9,2024-11-21T08:01:25.310000 CVE-2023-31103,0,0,c126d74ecf5c8750ea2a8ac6630f10fb115366517006f7188ade051da19d7f41,2024-11-21T08:01:25.553000 @@ -229382,7 +229382,7 @@ CVE-2023-35838,0,0,183f211cfdb5c0b95769b09aaa0c425385e59381d55642b1813c42fff31c8 CVE-2023-35839,0,0,656f78752e563a12ede3b5803be9c4748192ecddd9db4c5bb9648851053668b6,2024-11-21T08:08:47.797000 CVE-2023-3584,0,0,db20d2c7ac289598080cfe7af369da1c9e2f79983a8f4444c3d60e81d4ca7c03,2024-11-21T08:17:36.207000 CVE-2023-35840,0,0,e624831a4363066935d7a110a834e68ac38575c0e01300ea5243dce323826892,2024-12-12T01:24:18.620000 -CVE-2023-35841,0,0,96688b448feefdee3f886ad7e073ab5791abffc33200923f5b97353a9d361275,2024-11-21T08:08:48.090000 +CVE-2023-35841,0,1,d78c5c318860883bd55ea907eb6076f622132248f9c2a706be42d04cca284db4,2025-07-28T21:15:25.780000 CVE-2023-35843,0,0,dff5b57208457b1b89745cf920438c5613de01bbe3ee1d2badeb3bf1bcd445f3,2024-12-12T01:24:18.863000 CVE-2023-35844,0,0,cf91b158423bf198c9afa70e675f69635b177baf7d99836b41277e74065985d2,2024-12-12T01:24:19.030000 CVE-2023-35845,0,0,d27306b2c62cdc71dabad38882c35bced6c4ac46b373ac2c221496e40d3d942a,2024-11-21T08:08:48.520000 @@ -240597,7 +240597,7 @@ CVE-2023-50570,0,0,bf8495e8d3daee745e395d57b3b22a0be6d6e9eb198a5f37966635057c357 CVE-2023-50571,0,0,998520a255901da97c0bbe385a06d0883776af653a2618fcb24fdcfa5b933a55,2024-11-21T08:37:05.590000 CVE-2023-50572,0,0,8ecea8fa3c39bfb5971ef3a73cca6e7b011fe46d95e29c7f7523effc7e00a4a8,2024-11-21T08:37:05.737000 CVE-2023-50578,0,0,eea4b88df935876b521403edfd9033d7b81bc3c69766b3e164f321c2d565f81f,2024-11-21T08:37:05.880000 -CVE-2023-5058,0,0,54f3589163df8d384443efce205f25ecd11f58b795e95800814d384f8443118d,2024-11-21T08:40:59.497000 +CVE-2023-5058,0,1,94bc6d6d202493862f0604de05ba5c812a321757078126dabf96eed1f8bb7f45,2025-07-28T21:15:25.927000 CVE-2023-50585,0,0,1f0660ea86048b1bab04513bd230afb0d9a192a72430f720b0fd82c5a9df5905,2025-06-03T15:15:46.043000 CVE-2023-50589,0,0,0725e9a512749d0b0a9374ffd6f808073bf293b6b7c51447451fb507615b9b6f,2024-11-21T08:37:06.267000 CVE-2023-5059,0,0,7db2a7aaf69875fe4765af750cd1378ca8c81eb759716e8bf3cf50fa766ec2d9,2024-11-21T08:40:59.617000 @@ -245260,7 +245260,7 @@ CVE-2024-0758,0,0,fcf538c1b38a9d1e6a46cacf8d50c2e9b73dd7c3a8f61a1a6580631ab9559b CVE-2024-0759,0,0,99b9eb8ee7043f71b6949c108b98a1a65f3d27bc16c58f4c0db3736fc042324b,2025-03-04T14:34:52.510000 CVE-2024-0760,0,0,28b1688290a8429996cb15aa4a590dfc852aa2c256b386e9997c92991939332f,2024-11-21T08:47:18.850000 CVE-2024-0761,0,0,862e4c887a97ccd6e0ed5165f4de47f8991bd45bee511f493ef7ab898282e708,2025-03-24T14:32:35.300000 -CVE-2024-0762,0,0,55ce0ccbbb179304c2f94ca58c87f5c89024696b56a67d10de02a4397359f1e2,2025-03-20T14:15:16.470000 +CVE-2024-0762,0,1,8f6768e5b98ae17896a6a6cb14031f10eec870e9e8c1283495438b308125fdff,2025-07-28T21:15:26.063000 CVE-2024-0763,0,0,6575cb1dfcd212fa073fed0213858d81192b12758468cb886a506de01f8016ac,2025-03-27T11:15:36.570000 CVE-2024-0765,0,0,147924df3c2a99e28ac84acf5407b5a7987726a2c64f3e2adccb459d5985f3d0,2025-01-08T14:32:04.447000 CVE-2024-0766,0,0,8d8b47eb35ac4fbeaf262a06f0eddbbba34c1a2755f916cda469cbece9f642de,2025-01-08T18:43:16.317000 @@ -248109,7 +248109,7 @@ CVE-2024-12529,0,0,c0a2490d2000b1b21f26fd41b92b9a7ec26eb3de5cfae86c46ddfc21d025b CVE-2024-1253,0,0,a598e10fa6d530af6148de164d99995412d597f7142ead42d62b85e905a98949,2024-11-21T08:50:09.843000 CVE-2024-12530,0,0,040502d5df0ddb331bb26278a910dca3b05b4f37f4b7b046974124f40cf1edf9,2025-04-17T20:21:48.243000 CVE-2024-12532,0,0,199fed046db6fc1b5b34521e2b9548b73238ea6ea9f77361d16a8dbec2a817f0,2025-01-07T12:15:24.363000 -CVE-2024-12533,0,0,c0aa50e6ce1896ed4d8c68d3783f3789d19386f388c01c100effa164e02e43c8,2025-05-13T19:35:18.080000 +CVE-2024-12533,0,1,49e0d09aae9c1723848950168eaf4b5020bf84606a992975f73e06b92c96aa7f,2025-07-28T21:15:26.210000 CVE-2024-12534,0,0,d58ff29fdddfdf47646c04bcd555832fc3584326babefc6e4b8e5c67bdb616b6,2025-07-18T19:59:05.500000 CVE-2024-12535,0,0,783cbd5e17eda49b126d7013b7661e75fb62741f3c668d86577a16b9b9c20d52,2025-01-07T06:15:17.220000 CVE-2024-12536,0,0,2252a95c3746313caac470a7ebe7bb537aa1a23b04164f47cadafea280ce8bbc,2024-12-13T17:14:44.007000 @@ -249793,7 +249793,7 @@ CVE-2024-1594,0,0,cac905df7072f36f1f1f9aeaedff3248557641a193449af6970a90dec97d88 CVE-2024-1595,0,0,75ade91841ba8dce5b4281a2743cf54791eaf150c97dda7ff5908e3377aa914e,2025-03-06T19:26:28.630000 CVE-2024-1596,0,0,d3ac46e8542021623a10cb9a7fcd7c0ff096d3382d6c4002ee880e3d788b395f,2024-09-26T16:23:08.650000 CVE-2024-1597,0,0,01a8079ac18bdb625eb7773ebdf03a9502801e21db819c5420d46483d755d9fd,2025-06-12T16:15:21.557000 -CVE-2024-1598,0,0,658346e9ddb00077c89c098f1dc70fe615aaf1be46069a7e9dd54964c2ceba3a,2024-11-21T08:50:54.990000 +CVE-2024-1598,0,1,76610796399bb71f8655f82731f04f38ce2d379e5856eca0be056e6834c4f38e,2025-07-28T21:15:26.340000 CVE-2024-1599,0,0,105f658bdb5d4f55673b9a4a91d4766e7759683398ba430d2b081d80ef821d99,2024-06-07T11:15:53.177000 CVE-2024-1600,0,0,11755e9c4fdf06c2b8dcae9a1c542a333cf5629a5868180aa3a717fce7db9310,2025-07-09T14:14:24.293000 CVE-2024-1601,0,0,5ac9e7fc3e8b4b685c723971a3da0afb349e635fac531357bf385b6c479cc60b,2025-07-07T15:54:16.207000 @@ -257938,9 +257938,9 @@ CVE-2024-29975,0,0,fca3822cfae229b9d64bb2219d6cc41e18bc5c9ddd94e82b69632e934ce56 CVE-2024-29976,0,0,789fd8071a28cdb2be901c9428939891f0d07c8ed3cca40edb2767ffbebe447b,2025-01-22T22:49:10.943000 CVE-2024-29977,0,0,bc0b0c3f00512826d3afc15c878e90557d1e530cdf0900ad20154e5fd854b006,2024-08-23T14:52:19.923000 CVE-2024-29978,0,0,eae448edc2ea3a52a4ea4b11b5efbbaddb66df9b1fe4c50de1f98d83d8337b9f,2024-11-26T08:15:05.353000 -CVE-2024-29979,0,0,2ba88bbf68a5c6eeb590333f3bddf141b97757456435e31074be547e5e781221,2025-01-14T16:15:28.423000 +CVE-2024-29979,0,1,91d780564d1ce5db77173299776b0dcc3d002475b2e3d4ec5e83364b03be8939,2025-07-28T21:15:26.460000 CVE-2024-2998,0,0,4820dabf195e0b621affb228dccca196dfad539c5408102e333cbef94a09ad77,2025-06-12T23:24:56.703000 -CVE-2024-29980,0,0,143f2e3d7074e60173fc131618c6a699cc502fd9f45595d11d23a3cb92549894,2025-01-14T16:15:28.600000 +CVE-2024-29980,0,1,9deaa6f844c79c33111eef27ab3193ad00e6c868e40910243008f764c4fe6efb,2025-07-28T21:15:26.590000 CVE-2024-29981,0,0,d16fc1d1360856640e375dcb1119eb72495ab67c989f65978267cc9feda18cf9,2025-01-06T18:38:04.080000 CVE-2024-29982,0,0,b7498c81fb2ff5d455f3e540c394e67eb9ab63a8f012ca2dcb7099c8b4039f32,2025-01-15T19:07:20.527000 CVE-2024-29983,0,0,00a393995ddbb5e8bf54af75e8b96e02f0b4caa679ece8bb35954e914d3dc725,2025-01-15T19:07:16.507000 @@ -279058,7 +279058,7 @@ CVE-2024-58253,0,0,da49c0596ff21f0dcbb928a2ca6fee65885d12875648098fb736cb7c8162f CVE-2024-58254,0,0,7dea1bbfa39e3b55f0979ac55979939a674f1934d77e1e4a1df4419e1a04c872,2025-07-05T04:15:27.053000 CVE-2024-58258,0,0,f502f2e6a4b137a20e95adef25a8d105beda3687cf5bcfa6f847a568092a92c0,2025-07-15T13:14:24.053000 CVE-2024-5826,0,0,676ce5cec2202232492aeb7a31cb471cd0485dd44f0bad4d2271201c9d98c0de,2024-11-21T09:48:24.490000 -CVE-2024-58261,0,1,bf1aa72aa70c276474922e1b90662b466484c902054da12a7118547be86177c6,2025-07-28T19:15:42.280000 +CVE-2024-58261,0,0,bf1aa72aa70c276474922e1b90662b466484c902054da12a7118547be86177c6,2025-07-28T19:15:42.280000 CVE-2024-58262,0,0,492d15fcb7b2fbdf6fdcfcf63e00285158a41071401253ee17aeef2e2cc19234,2025-07-27T20:15:25.057000 CVE-2024-58263,0,0,3ffd2e4d880af38905a36f4d581cd8a49eb3da21577c8560c4302e217d15b492,2025-07-27T21:15:26.243000 CVE-2024-58264,0,0,98d9709ac87123a1a2ae4dd52224649de0b67213bc551171eecc8df5119dee92,2025-07-27T21:15:26.453000 @@ -291332,6 +291332,7 @@ CVE-2025-2952,0,0,8e511f60053de6e98a0a0d7d1bc3adcad4b08b5c7d212898526204e3a86314 CVE-2025-29526,0,0,b6b505c189cc3a47f41b43797e37a9702c4baac302fa6bf10f57a80372132967,2025-04-29T13:52:47.470000 CVE-2025-29529,0,0,131ba8e09816d09cacfdacbc1b605e02d00f30b0838eb43d19239f9695636cbc,2025-04-29T13:52:28.490000 CVE-2025-2953,0,0,67c63f73a2bad438c65b917bf9a538e529ded5fd2828dfe2a2982ca0c2662c95,2025-04-22T12:15:16.043000 +CVE-2025-29534,1,1,06e408f38c841a06dcc812ce253cb040f15f14a3b246c49af2089624f7e52cc0,2025-07-28T20:17:44.480000 CVE-2025-2954,0,0,0672b048d9a1bc1b6cab4c4533c01031021ece5eaf46619f3aa405740d82e196,2025-04-15T17:57:44.213000 CVE-2025-29547,0,0,aa60854d017a9798e6777b390c1094114e4d0521b16eb135eea88d0b1da0a19c,2025-06-23T18:23:41.120000 CVE-2025-2955,0,0,ae0098f14cc539866dfc24b906cab2145f36ba1504dd8a9ee610f2bdc6a2a1d5,2025-07-02T18:04:07.640000 @@ -294459,7 +294460,7 @@ CVE-2025-34110,0,0,7e7384056ac9fc1af5c7aa12c95e43a1c1548da36baaef6758b73d36cf0ef CVE-2025-34111,0,0,67a49fa283ec7d7095bf508e89aed53697e350b3ff0b6a943992a5156f0e9388,2025-07-15T20:07:28.023000 CVE-2025-34112,0,0,2c8e0a58755f4d0be3154352e0721fa7dcf28f21a01672157bcc740ac0e20f87,2025-07-15T20:07:28.023000 CVE-2025-34113,0,0,b6d6110ebd79a480c7a513c56d99369d7f842de71dfed50e9981bc5260ede8da,2025-07-15T20:07:28.023000 -CVE-2025-34114,0,1,c3c79f24b346d5404cc76fda21570533489d2da05aae7f867063cb707f9f73ec,2025-07-28T19:15:42.540000 +CVE-2025-34114,0,0,c3c79f24b346d5404cc76fda21570533489d2da05aae7f867063cb707f9f73ec,2025-07-28T19:15:42.540000 CVE-2025-34115,0,0,f1ee66e7df5893995e2039571f9361f667fdd1b321e78af7bdb285828ca50ec8,2025-07-15T20:07:28.023000 CVE-2025-34116,0,0,6ddc4828bea5737e8c1bd3ae9e43a44969371092ad32ceeddb6cf8d0e940a0b0,2025-07-15T20:07:28.023000 CVE-2025-34117,0,0,d0989a7e6bf6fc63d6e131d77d94e7f8661ca6cd7afdacd4adbc84b706b8028e,2025-07-17T21:15:50.197000 @@ -296717,7 +296718,7 @@ CVE-2025-4302,0,0,de6f7d8489eb16f5509c0ee3f6af408f3255e438fce9d7fc28f575dc65ce0b CVE-2025-43020,0,0,b53aca7c91b8ead7bcb93663f753d9fbe7366bbf6b01eeed713e0cab4e98242a,2025-07-25T15:29:44.523000 CVE-2025-43021,0,0,61355e1b72d74e997323f75861c38d18723f83f6dae48243791edb6505bbb557,2025-07-25T15:29:44.523000 CVE-2025-43022,0,0,2569de27e4b45c4991203e6908cc88660220d420eacf1073a3a2f996c4e7eecd,2025-07-25T15:29:44.523000 -CVE-2025-43023,1,1,a249b524763075389413965f19b15d85ee8df5c5c5b549c84e29132b04f6f664,2025-07-28T18:15:25.030000 +CVE-2025-43023,0,0,a249b524763075389413965f19b15d85ee8df5c5c5b549c84e29132b04f6f664,2025-07-28T18:15:25.030000 CVE-2025-43025,0,0,3882f94b6f95335ffc0c2dd9b817b88d65f4ec0375b5e45661de460b59f32008,2025-07-03T15:13:53.147000 CVE-2025-43026,0,0,6b388ee0410ccd9f871364237fa3dd74ba38ecd5d6baae293c1bba0c62bbe8ed,2025-06-06T14:07:28.330000 CVE-2025-4303,0,0,ca67198b40d61e86a7061774e966351f8111400fea02ca918ed591bfeb4cb946,2025-05-08T19:03:26.480000 @@ -297440,7 +297441,7 @@ CVE-2025-46109,0,0,a81953cf13c139be94a1c266dfcc581a11077f2b3187b5b6aa057caceb5c0 CVE-2025-4611,0,0,551957ca30c77144066c2501102cbe8b5cc59e5d0e8959ef20d14b731299a950,2025-05-21T20:24:58.133000 CVE-2025-46116,0,0,2e0f2a1dc47ca2510cb581bc7151ba83a181a49e4cfc8d7b5c4a35d25eea5789,2025-07-22T17:15:30.797000 CVE-2025-46117,0,0,32084b8a9b15e645a8554e458a7c2cd710b66fa25fcfeddf49d939db02c14204,2025-07-23T18:15:26.903000 -CVE-2025-46118,0,0,2e20226feba74a942337af1cfe0cbac96384753baa744e7cef57a8b617ad3479,2025-07-22T17:15:31.680000 +CVE-2025-46118,0,1,c7a7357cd1d945fb3d44d9689fd477c6775fba008e23470853047e9f72f3d7da,2025-07-28T20:17:46.840000 CVE-2025-46119,0,0,92fd09d8307f3ea98c8facf509fd01595818b2ffb7523a28135f325c852e556d,2025-07-22T18:15:35.857000 CVE-2025-46120,0,0,9e693ee4f9abdac2a9dcd7512ed32644fc4a99185d3f8fecc129f45ee50e24af,2025-07-23T18:15:27.263000 CVE-2025-46121,0,0,823851538ee00106e03052f5b48f5676b19e5835a775e1d3a94ee3ddee4f38fb,2025-07-25T14:15:34.307000 @@ -300059,7 +300060,7 @@ CVE-2025-50181,0,0,4bdf1b0e87651e9af62532f1dffa4a7c36e3e1617fb3111bf59ec0dfb2494 CVE-2025-50182,0,0,5b8cbddd3daeea44d3d0cc7715969b405b9ad5e28dbeb639bdab3b270dc14262,2025-06-30T19:15:25.017000 CVE-2025-50183,0,0,b9cf276d5b687c68a13333930dd57e3e3f99677f9926825c6d65877307fc5e27,2025-06-23T20:16:59.783000 CVE-2025-50184,0,0,8d89a09484403081dce150b2e7bbaec479d114b24f1a399ae11157d523121142,2025-07-26T04:16:03.980000 -CVE-2025-50185,0,1,8e7cf82866c409fd671502faf47a814c98eca7bb97586a84f568f665bbc86d84,2025-07-28T19:15:42.700000 +CVE-2025-50185,0,0,8e7cf82866c409fd671502faf47a814c98eca7bb97586a84f568f665bbc86d84,2025-07-28T19:15:42.700000 CVE-2025-5019,0,0,9e77689bce77b4f77cc10eef8ecd39dc784fee948cba6d9ab205fa6a8f33f986,2025-06-06T14:07:28.330000 CVE-2025-5020,0,0,a009d51287904279a69fbc7b7d45e7044fc45e21284eb97bd084f038009245ee,2025-06-13T18:55:32.903000 CVE-2025-50200,0,0,b04b8a83061873d5a6a0dfbc2d26e36b23b8e421c71e6c73bb812e0e2b22ba3b,2025-06-23T20:16:59.783000 @@ -300099,16 +300100,18 @@ CVE-2025-50405,0,0,f3f97aad95dac7533727fec56a85db7eeb1fa3f1a6da3eefa7da3e9d6c916 CVE-2025-5042,0,0,1f18fadfd53820c6a04063eb5db149f0af75bb58eea7ca52cfde4d2805cf81ea,2025-07-25T15:29:44.523000 CVE-2025-50477,0,0,6bdf2a8fefaefc287d17ecf5904fe8408c1a6d9e66222ea016df8045ea1b8a76,2025-07-25T15:29:44.523000 CVE-2025-50481,0,0,1f4339c219a96bbeda09be8d3cd3bc2540417428a991c48ae669df6ac9e546e3,2025-07-28T16:59:28.710000 -CVE-2025-50484,1,1,21fc25d61f2943257058a422b913d3ca046664b4550dff682496282067d4dadd,2025-07-28T19:15:42.810000 -CVE-2025-50487,1,1,c2a5a5d10810f47014587a19d91acb2e411c623c9cb85c666db0507d6851c22f,2025-07-28T19:15:42.920000 -CVE-2025-50488,1,1,bb806aea693df20da9ee36c4b3f3f71bc438b6d19149f9b4992dcc435401a7aa,2025-07-28T18:15:25.683000 -CVE-2025-50489,1,1,ad323f16400477b8a69ed62fdb3f273325ed2881e9371cbf381c3a99c511dacf,2025-07-28T18:15:25.903000 +CVE-2025-50484,0,1,0a9cb57bb7bc725baf3eec3771df29a0b9490bff34d3b79a4451dbfda660b0bb,2025-07-28T20:17:47.537000 +CVE-2025-50485,1,1,3e26aefb320912ec63c3d4fee316e2b87e95c2c5066c8fdfc3c16006d87b54b3,2025-07-28T20:17:47.687000 +CVE-2025-50486,1,1,04bd3dd8198d6f60a609102b2bd43196b61b4240034806cd231f099a3497879c,2025-07-28T20:17:47.870000 +CVE-2025-50487,0,1,51dbb40e18e2ea789914a3ca8e2a5d682a8d1a4841afcb56b11b11f2feb568bc,2025-07-28T20:17:48.050000 +CVE-2025-50488,0,0,bb806aea693df20da9ee36c4b3f3f71bc438b6d19149f9b4992dcc435401a7aa,2025-07-28T18:15:25.683000 +CVE-2025-50489,0,0,ad323f16400477b8a69ed62fdb3f273325ed2881e9371cbf381c3a99c511dacf,2025-07-28T18:15:25.903000 CVE-2025-5049,0,0,44cfcf3aff795ef24e83417940f428248f6dbe73d228a2445e4d18a251d64c21,2025-06-23T14:51:34.223000 -CVE-2025-50490,0,1,d64821d1984651fcb690469db669b935497e8557f31c36e6da20981c5a8546e0,2025-07-28T18:15:26.070000 -CVE-2025-50491,1,1,872149dfbd7e5a6f4b2e45b8c84dff53b81a0733e2a1084009e653e4467efdfd,2025-07-28T19:15:43.030000 -CVE-2025-50492,1,1,42ad14d5aec7832aeb8ba6866dde2bb60d18eea11cae4ae399eb28d40ddca9e8,2025-07-28T18:15:26.370000 -CVE-2025-50493,0,1,0a81d3b523b322d5cf3e47b9aba16e2d875e1621f094e5f3c17c051ece2f1fa9,2025-07-28T18:15:26.543000 -CVE-2025-50494,0,1,97795fffb81cb341ac90cdbf4c409b6118cffe7fcc67f8ff94908e5db9582ee2,2025-07-28T18:15:26.697000 +CVE-2025-50490,0,0,d64821d1984651fcb690469db669b935497e8557f31c36e6da20981c5a8546e0,2025-07-28T18:15:26.070000 +CVE-2025-50491,0,0,872149dfbd7e5a6f4b2e45b8c84dff53b81a0733e2a1084009e653e4467efdfd,2025-07-28T19:15:43.030000 +CVE-2025-50492,0,0,42ad14d5aec7832aeb8ba6866dde2bb60d18eea11cae4ae399eb28d40ddca9e8,2025-07-28T18:15:26.370000 +CVE-2025-50493,0,0,0a81d3b523b322d5cf3e47b9aba16e2d875e1621f094e5f3c17c051ece2f1fa9,2025-07-28T18:15:26.543000 +CVE-2025-50494,0,0,97795fffb81cb341ac90cdbf4c409b6118cffe7fcc67f8ff94908e5db9582ee2,2025-07-28T18:15:26.697000 CVE-2025-5050,0,0,18c722bc6b5f548b69eef0fffd3878fac15ddedca7de625378de12e31e056210,2025-06-23T14:51:31.630000 CVE-2025-5051,0,0,5142d535b5dcabf799858265cb0a073c54ecb398a0506990f7cead12fe67b40e,2025-06-23T14:51:29.537000 CVE-2025-5052,0,0,fb14f53f59872f2ab4cd272c068cbf989da6288adaf09d4f876ce8e48ca81915,2025-06-23T14:51:27.970000 @@ -301259,8 +301262,8 @@ CVE-2025-54294,0,0,0f8a1c85bd123e489a7259e6f50ce3ac4a9357d2c3a1f1f3097666a15d7f2 CVE-2025-54295,0,0,a24ee87afb077f56c6b25638f980e706fd9c19a556da390d5b41f1fc0b7b6bb6,2025-07-25T15:29:44.523000 CVE-2025-54296,0,0,d1c846fd055d305b797eb3218e1a648aa1d2a99e57b22cfbc149d618dd68e104,2025-07-25T15:29:44.523000 CVE-2025-54297,0,0,d0f7fc1749ff0219e36b2f1fd229655b1eeb784669f46e9fe23cf2d5607d2b2f,2025-07-25T15:29:44.523000 -CVE-2025-54298,1,1,08dfd4ca4df542665df7926a966b60ee2df5f6300473d7f515bd6a35f71f88af,2025-07-28T18:15:26.913000 -CVE-2025-54299,1,1,c55c171838dd34aa51d0e475ef06d156b1ec0a3b5285cb1a88f93ae960ca10f7,2025-07-28T18:15:27.113000 +CVE-2025-54298,0,0,08dfd4ca4df542665df7926a966b60ee2df5f6300473d7f515bd6a35f71f88af,2025-07-28T18:15:26.913000 +CVE-2025-54299,0,0,c55c171838dd34aa51d0e475ef06d156b1ec0a3b5285cb1a88f93ae960ca10f7,2025-07-28T18:15:27.113000 CVE-2025-5430,0,0,0eb1babcf8d1008ba0c4b518e797e8a418d268a1c98e13323c1d397172d29254,2025-06-16T16:14:05.270000 CVE-2025-54309,0,0,1fa8737def236ebdd156e8fa73b5332611169577abd8373deac131be2d65ff6e,2025-07-23T17:51:56.027000 CVE-2025-5431,0,0,f5ef4b2894d947be9cba680ed0279161886dc4fb2bd6b3b30f2bbfb4395270f6,2025-06-17T18:41:10.970000 @@ -301291,7 +301294,7 @@ CVE-2025-54369,0,0,0f82df67f362ebe4ed17b808668f1b325b9360ab31a3ecc3efe8319d2ffd8 CVE-2025-5437,0,0,811a7dd33c5ee8133b31f658086585361c8a0965b92e0717d81b56b78c843fdd,2025-06-02T17:32:17.397000 CVE-2025-54371,0,0,0033db40dd07df5fa549dd73c1b86180cfb6f7caafd7c95286250cb47de58b9d,2025-07-23T21:15:26.970000 CVE-2025-54377,0,0,3e714e3ac198423ef3d9aeb78790d8d81197f92288b59ed4c575154a7efd14a5,2025-07-25T15:29:44.523000 -CVE-2025-54378,0,1,e067d1bd0c7194910629ac3ac9e816a8c902a6c72ac735f72263c853e93dd92e,2025-07-28T19:15:43.173000 +CVE-2025-54378,0,0,e067d1bd0c7194910629ac3ac9e816a8c902a6c72ac735f72263c853e93dd92e,2025-07-28T19:15:43.173000 CVE-2025-54379,0,0,84d688a5fb717958bdfe8072e5abbc8cf1a9c8580f0292d005f2904a726ef902,2025-07-25T15:29:19.837000 CVE-2025-5438,0,0,9312f400ed497dd6a9c823f72cf10956f6f2a6670a1b3fc79f6968b12c1a2555,2025-07-02T18:08:56.187000 CVE-2025-54380,0,0,aef529f4a265d07c7701278de9da2c01c65492ff990bc94b81ac456fc6832709,2025-07-26T04:16:06.190000 @@ -301303,9 +301306,15 @@ CVE-2025-54412,0,0,54ee521574de7a7fda6aca2026cadc16187a6086f27dbfafc7d29020781c9 CVE-2025-54413,0,0,ea135b4ae8ddd2e2799672d181c2ac66bdc2816892459a7cef6ccef6bc13e54f,2025-07-26T04:16:06.793000 CVE-2025-54414,0,0,956949fb7f007ef12c6cf6defef1980c6d4b3d1fa28cc8b77f12bd351bbaa3bc,2025-07-26T04:16:06.987000 CVE-2025-54415,0,0,b6c5a8093080c19bd6ca3e19a8481b454089c7c68afdbac4bc346143bfc26d5f,2025-07-26T04:16:08.240000 -CVE-2025-54416,0,1,c1e7eddd3e2893f6cb607575d38f99dce78f631e8d68158f328d70547a3aa68b,2025-07-28T19:15:43.387000 +CVE-2025-54416,0,0,c1e7eddd3e2893f6cb607575d38f99dce78f631e8d68158f328d70547a3aa68b,2025-07-28T19:15:43.387000 CVE-2025-54418,0,0,3af796f5c3a3c01dbda7a2fb02abbc21c8166c9dd78755e8ed7b39c14c474d0a,2025-07-28T15:15:26.957000 +CVE-2025-54419,1,1,45c930891df424e3ffec4263fb0ece513cb674f77d73f73a1b6593d900b5d153,2025-07-28T21:15:26.730000 CVE-2025-5442,0,0,1a42ba34396f5d11c0b6cb42c70af8c219ffa19a08b4a6ce41f71d353f3bcbaa,2025-06-25T18:00:33.403000 +CVE-2025-54423,1,1,78ac1fe47e4a2cfd7a389f6cab293bfc1f52433b8ea1ff1a22c05ed49b085601,2025-07-28T20:17:48.573000 +CVE-2025-54426,1,1,b4c4dc1f1a945b418d8e02cab1bdd4fce4903e020471a7b577382d8b2653ff17,2025-07-28T21:15:26.887000 +CVE-2025-54427,1,1,abe5433f2564950c106ced2f13444b6d97c8e5b512bbd268d8ba0030f541bec3,2025-07-28T21:15:27.080000 +CVE-2025-54428,1,1,c76389658b8924f73a6b91abef1401a3143bee1dc20a175d9eff7fabbb35e84d,2025-07-28T21:15:27.327000 +CVE-2025-54429,1,1,700000b71ec37376dbfd2f9ce25a4656062fff489342104e8e9774e4ecb3ef11,2025-07-28T21:15:27.647000 CVE-2025-5443,0,0,c979fc559b9753e7b8f3cea4a3591b3d21b403fd87a023a9ecde01c1efbe3d0f,2025-06-10T15:14:40.057000 CVE-2025-54438,0,0,07b4f25d052514927218baac748dd82959ca6165858c5f838a5cb0f2b3eb7570,2025-07-25T15:29:44.523000 CVE-2025-54439,0,0,6265eefc99bda11cda075e0519d235763b8982c420060fbe9982a764ad61a207,2025-07-25T15:29:44.523000 @@ -302772,11 +302781,11 @@ CVE-2025-7237,0,0,732c6ca4aaf04dcbe061d8d549fda1fc3ee709ead7c4098f957a192b78fee3 CVE-2025-7238,0,0,9216478acf06f7b1a547ac98cfb4f9191bceb3d7bddc66c6057417aa4a9752dc,2025-07-25T14:36:09.647000 CVE-2025-7239,0,0,4d1caa3b4d14297a24821ddf92005d8f9b041d6af74761237cab7816e48f5fee,2025-07-25T14:36:18.463000 CVE-2025-7240,0,0,28f442fd8013a11a93d63eba8aed8070e1061b693141035e010df068d68f9388,2025-07-25T14:36:27.203000 -CVE-2025-7241,0,0,d4b11281db8a8ccd28fe86434a6b4af45d32df099d10f9392de385b526e30acf,2025-07-22T13:05:40.573000 -CVE-2025-7242,0,0,a58cedeb0704a926fad6c8846df9a75f59b55c161f2e6794ed948da38af6b9f9,2025-07-22T13:05:40.573000 -CVE-2025-7243,0,0,0a7f8b406b152a5e8a362b31dc1ab4d0e41c330763651aadb85c87e047fa6ec8,2025-07-22T13:05:40.573000 -CVE-2025-7244,0,0,4f0fbb15260091fae8c949e5ff10064418372e89f8a5529f91f7c08275411b4e,2025-07-22T13:05:40.573000 -CVE-2025-7246,0,0,a80fa678ea15a1c6a6a9d77d2a28feda78a9943081ea7615eb6b3a324af7a186,2025-07-22T13:05:40.573000 +CVE-2025-7241,0,1,32eb274ef8339eacb30304fd43da240b81591e727e14c4ca6eabde486f15412b,2025-07-28T20:35:52.540000 +CVE-2025-7242,0,1,6a1a5216f964d052f67523b2580935e4981fb582a1a789a4295dd97d2b7a80b9,2025-07-28T20:37:19.963000 +CVE-2025-7243,0,1,121dc7d2813f0e769dcf5d2300fee2eee5050ef1110d127f73c8e6b6dd6cf3e9,2025-07-28T20:37:15.390000 +CVE-2025-7244,0,1,62e378a3f3cea546ca5726cd9b69331cb11023b052092917b6e0eefdd75e10a3,2025-07-28T20:37:10.920000 +CVE-2025-7246,0,1,f17e7835b947f1f63a0b0e86a730ce8392fedccf6877b96aaaa6b5d7ea8a037e,2025-07-28T20:37:03.210000 CVE-2025-7247,0,0,cb8c1144dede0fc0a89ebd71786fff7c95d25a2ade3e6ccd306c1f4d33ddf53b,2025-07-25T14:32:57.960000 CVE-2025-7248,0,0,2560b910c32a724de73c136df3093e347609fac5a336a327fc399812a28f39b2,2025-07-25T14:32:49.923000 CVE-2025-7249,0,0,b5c6b9ed4be2c30d13fa23229c0ead1d33026878e3de7960ecd4ff7027aef3e3,2025-07-25T14:32:40.963000 @@ -302872,7 +302881,7 @@ CVE-2025-7359,0,0,7b3e9b988197c6cae21a83a809a7c29b80579b9c5b7209d084e69c75b3d14b CVE-2025-7360,0,0,bb81b482bf68b596179f899f98eae4404c6581f8e207f831aaeb1f3376eba190,2025-07-16T14:29:35.580000 CVE-2025-7362,0,0,6e58dd255a731f5d3188b61747dd9644762b459882d9f690a5bca888bc7c9f64,2025-07-10T14:15:26.927000 CVE-2025-7363,0,0,58da72e36bcee53d2bb44e414f0f5ad2493f5754aeaaf9c61514fb8a3c19ecfd,2025-07-10T14:15:27.100000 -CVE-2025-7365,0,1,b6461f5c563ddb9c298608ae0b06d6276c9e4c8a26d1a88dff10cca3d3bc787e,2025-07-28T18:15:28.060000 +CVE-2025-7365,0,0,b6461f5c563ddb9c298608ae0b06d6276c9e4c8a26d1a88dff10cca3d3bc787e,2025-07-28T18:15:28.060000 CVE-2025-7367,0,0,0bdbbbffa4f7f54848579debf3bbd7f28685862f072c03017f53db514711cbb0,2025-07-15T13:14:24.053000 CVE-2025-7369,0,0,4ef7785ebad7d71c2a6af11e8ec6dbb950b551946b92a936974e98e1d75d2ec3,2025-07-22T13:06:07.260000 CVE-2025-7370,0,0,dd49bbf9097e4a76884ad2f02ae7ac33493c58beec3d46143f8ac22f83ea5047,2025-07-15T21:15:34.773000 @@ -303300,17 +303309,17 @@ CVE-2025-8019,0,0,8993f48d71c429c88410f889c4ce55d6956593f859a715af4a42e55096127c CVE-2025-8020,0,0,6f3772f4d08e42a45caea00a352ad5460824455519b3adf274483c926efb703f,2025-07-25T15:29:44.523000 CVE-2025-8021,0,0,4598c6077bb8b65b0317131d9875a3ba7980d3077b8dd9cfcf93692de3337d79,2025-07-25T15:29:44.523000 CVE-2025-8022,0,0,4520c0499be13f969a8ba7bde5737adb20f18116d959db7be0bd4967b0cd160c,2025-07-25T15:29:44.523000 -CVE-2025-8027,0,1,d1ca843e6c160f416ebd36d90fa6b5081507196c00de04af9d0f3b7e894ba8e3,2025-07-28T18:30:57.710000 -CVE-2025-8028,0,1,90fde009ad83617805cf1f525e89c155415ba7481b39397ee838221cbcfe1898,2025-07-28T18:32:21.437000 -CVE-2025-8029,0,1,5ae7aaeabb0f0e29d66edcc93167af2aa8b2cd83b63da6ec0b465e03008a308d,2025-07-28T18:34:31.310000 -CVE-2025-8030,0,1,f043915c3e38fd380d2a30de4a1b1496b5c5f586fbaa756a809889d7befb34ff,2025-07-28T18:38:03.577000 +CVE-2025-8027,0,0,d1ca843e6c160f416ebd36d90fa6b5081507196c00de04af9d0f3b7e894ba8e3,2025-07-28T18:30:57.710000 +CVE-2025-8028,0,0,90fde009ad83617805cf1f525e89c155415ba7481b39397ee838221cbcfe1898,2025-07-28T18:32:21.437000 +CVE-2025-8029,0,0,5ae7aaeabb0f0e29d66edcc93167af2aa8b2cd83b63da6ec0b465e03008a308d,2025-07-28T18:34:31.310000 +CVE-2025-8030,0,0,f043915c3e38fd380d2a30de4a1b1496b5c5f586fbaa756a809889d7befb34ff,2025-07-28T18:38:03.577000 CVE-2025-8031,0,0,e35e0cdc826dfb7436dde2a3a7c78bd20ee573807657fdfff3c3015a95fc3b25,2025-07-25T15:29:44.523000 -CVE-2025-8032,0,1,ae6feb225912ac6b9d1add398a05220bf821e862e2d22d0d379da75ce578fc4b,2025-07-28T18:40:44.780000 -CVE-2025-8033,0,1,114b225ff8baa5b5ef6095efab1afd00478017eb9892247c7a6993e910a9d267,2025-07-28T18:42:05.727000 -CVE-2025-8034,0,1,4a18219275720b86e153792666cc6a3eab4629edbe18adb7a097c5d1b4f80606,2025-07-28T18:47:38.100000 -CVE-2025-8035,0,1,aa278208abbbaa24c101670a315bf3c17c4806f23b607c73988db76fdf4adfd2,2025-07-28T18:48:49.163000 -CVE-2025-8036,0,1,4dc337625ede28c2b05931e13af8121acecd564706b20aaf6e1f0a22e7d98fdf,2025-07-28T18:49:44.900000 -CVE-2025-8037,0,1,9a320bf6892cbc9856b8e59add2a488148f28190cea4e24f21e12af575941b38,2025-07-28T18:51:21.220000 +CVE-2025-8032,0,0,ae6feb225912ac6b9d1add398a05220bf821e862e2d22d0d379da75ce578fc4b,2025-07-28T18:40:44.780000 +CVE-2025-8033,0,0,114b225ff8baa5b5ef6095efab1afd00478017eb9892247c7a6993e910a9d267,2025-07-28T18:42:05.727000 +CVE-2025-8034,0,0,4a18219275720b86e153792666cc6a3eab4629edbe18adb7a097c5d1b4f80606,2025-07-28T18:47:38.100000 +CVE-2025-8035,0,0,aa278208abbbaa24c101670a315bf3c17c4806f23b607c73988db76fdf4adfd2,2025-07-28T18:48:49.163000 +CVE-2025-8036,0,0,4dc337625ede28c2b05931e13af8121acecd564706b20aaf6e1f0a22e7d98fdf,2025-07-28T18:49:44.900000 +CVE-2025-8037,0,0,9a320bf6892cbc9856b8e59add2a488148f28190cea4e24f21e12af575941b38,2025-07-28T18:51:21.220000 CVE-2025-8038,0,0,b76e3da6219d995ddc7febf697d5e5370c6e8183a830cd91854f31fb04512c26,2025-07-28T13:51:28.720000 CVE-2025-8039,0,0,5f6a21bb188402d4d3b816acb971db08868a76ddc19a1a7c0d8f1d1970e9ce3c,2025-07-28T13:56:57.663000 CVE-2025-8040,0,0,ccac7966304536c8ae6cda6e9e7c68e0fdf26bb85b6fa5365b2448bbc0241ff6,2025-07-28T14:00:29.940000 @@ -303341,10 +303350,10 @@ CVE-2025-8133,0,0,a25ae6c1b0cb5074355ff2a32f3810834450d3647d4ad73b80e459da52c9db CVE-2025-8134,0,0,038953e19711f110fd8afbbdfff83b9250ba4e78e7787a0fbea6652617f2e7e8,2025-07-25T15:29:19.837000 CVE-2025-8135,0,0,65f9bf56b249cb6dfb4b9100a55f80f48536fc74422f4822cfc996cdc242b8fd,2025-07-28T13:14:34.240000 CVE-2025-8136,0,0,d0bdd390da344dbf45d4b7e85a2e3181696123a659affe1bf2e1bc5a703fdfce,2025-07-28T13:11:40.440000 -CVE-2025-8137,0,0,90d72346a7097c09dc54b27e044304253c5dde2af6d3cafae5130b182b5e840a,2025-07-25T15:29:19.837000 -CVE-2025-8138,0,0,720ed7403a324517c87524c461481405b8ac279d898832d5c8874a9d85d690d0,2025-07-25T15:29:19.837000 -CVE-2025-8139,0,0,9d6e357c6dff9e8a09882cd8328487e53a951d74a18dcdf9e2242df0879002e3,2025-07-25T15:29:19.837000 -CVE-2025-8140,0,0,9d11374868409707e73e702942be7488f3bf794f4c3a368e01ea3c443ea3f962,2025-07-25T15:29:19.837000 +CVE-2025-8137,0,1,af97ba1dd1dd5d79cb78c8c9cd9961b1471be4ea6ec22d6d5cf46336413b3230,2025-07-28T21:16:59.540000 +CVE-2025-8138,0,1,69af7848b52bb6f4177ac3fdbe9ebc283034a14544793edaba7f3ca88cf437e1,2025-07-28T21:17:03.637000 +CVE-2025-8139,0,1,93f4e93edb9d11b5f03ed688ac05a0e745e0cb2313a84e0a7dd57cb252c40c60,2025-07-28T21:17:07.803000 +CVE-2025-8140,0,1,72c92216dd60e7154de8ee2bdce8a8b2901af5cfe335efa1a8e56e93ee1df67b,2025-07-28T21:16:48.420000 CVE-2025-8155,0,0,f53ef25f3190ef56f1305b27c8f9df31d67f99ee35082bdd16f2fa204e8012b2,2025-07-25T15:29:19.837000 CVE-2025-8156,0,0,7d1b8a765f54bd1568b791862f935359d8594e1bd6c7cc4600b1ee97208d0b41,2025-07-25T15:29:19.837000 CVE-2025-8157,0,0,309212b08f58637e402b03ab59d645130c08d3620841466c94ea1acf0d0718a0,2025-07-25T15:29:19.837000 @@ -303367,7 +303376,7 @@ CVE-2025-8173,0,0,f2ffb984c9899acf7aa03a30ec3e0bbf7cb66b786dfd9cf45d4e31917ac3d6 CVE-2025-8174,0,0,056bc93a28fa8f1b95100dd7a74311cf6c3d856a033a3b1cc5d9ad9730bf5c91,2025-07-28T16:15:25.367000 CVE-2025-8175,0,0,b8a3b9976ddfdfd854f22bcacd1a4ab9561fe3ad7e4a94628c5b6e76f8234fa0,2025-07-28T16:15:25.513000 CVE-2025-8176,0,0,9476a4844aeece629156918b7db55b16520e9e44113c60cd0f115a2cd3e8eb0a,2025-07-26T04:16:10.527000 -CVE-2025-8177,0,1,66424b6dd639796c73063c82913e76926c1824761395b9d0f37a298fa4b8f1cd,2025-07-28T19:15:43.643000 +CVE-2025-8177,0,0,66424b6dd639796c73063c82913e76926c1824761395b9d0f37a298fa4b8f1cd,2025-07-28T19:15:43.643000 CVE-2025-8178,0,0,4750e7832ab77604c13b86262df5938d6658595db32fab4acb280f3f9eca4c63,2025-07-26T05:15:25.920000 CVE-2025-8179,0,0,52c37c0b9b2eae4f41438d3d92a2bd5d4ddd4f1cfc442c06628c8e12d95295f0,2025-07-28T16:15:25.817000 CVE-2025-8180,0,0,cbfc46f62ea9ab2baa211bc1fbf630422a37ca9b1bbdaf0f10b9172530748999,2025-07-28T16:15:25.960000 @@ -303382,7 +303391,7 @@ CVE-2025-8188,0,0,36d00c07fb757c3f4a386bee9b265512a06e875e4a779a2c0bb2fa66160ebd CVE-2025-8189,0,0,135b0063f95fb0292199a4181dcc5ba64dc27733b0b01367a4d1b3ad8ff7afb6,2025-07-28T16:15:26.677000 CVE-2025-8190,0,0,935c0641811955032fb583017288d9dd0250d13ad26d9f83488ec84749d91ac9,2025-07-28T16:15:26.810000 CVE-2025-8191,0,0,27338ae00beb6a71a0afed12a1f49d4556be91df7df50d7f4c8a377d85d052a9,2025-07-28T16:15:26.940000 -CVE-2025-8194,1,1,7f6541fd269d4cb53bcfdb796d3a105846fbc7c5a32a80807f28f12a2c0bae1b,2025-07-28T19:15:43.793000 +CVE-2025-8194,0,1,82ae0317116d33a3c4b3aebebd906f9a7d85085949d46f9f57556741cb3d00e2,2025-07-28T20:17:49.123000 CVE-2025-8197,0,0,af6e39d7aa8caeaf75d854239a947075a3835aa5993ed74e256eaa0d95a9a5dd,2025-07-25T20:15:25.377000 CVE-2025-8198,0,0,b68bd1e842c3eee309f1b3bedaf684d9fbdf3a41fd7fb1aacdd1cfe8143ac44c,2025-07-26T06:15:23.600000 CVE-2025-8203,0,0,eae80fce82564df7123d87b09d98d1a3400de4f8604357058fc8d82cbff837b5,2025-07-28T16:15:27.133000 @@ -303448,4 +303457,4 @@ CVE-2025-8273,0,0,f44ce8c3004edec0fdf5bc04a543036cb03b92e1d2c3205bd56319cf45d6e1 CVE-2025-8274,0,0,cdc588381012fdbd8ecab8e4322d103333f94742b0c18c7cf141abc555d01c7c,2025-07-28T12:15:32.283000 CVE-2025-8275,0,0,c90b96dee81f34e0bbec2006a16d25723e52dc0d7c84e81749c4ada78398f7f7,2025-07-28T13:15:30.737000 CVE-2025-8279,0,0,b130912ce57942365c2214a4226752d299c88a2f5acfc30964b586981825bbef,2025-07-28T14:15:28.857000 -CVE-2025-8283,1,1,266c1d24835e474874013feb3a995e78d9184135fc38010a81b79c7ddb1d3c15,2025-07-28T19:15:43.957000 +CVE-2025-8283,0,0,266c1d24835e474874013feb3a995e78d9184135fc38010a81b79c7ddb1d3c15,2025-07-28T19:15:43.957000