admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 16:54:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-07T13:00:11.383009+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-07 13:04:02 +00:00
1 parent 7a8d491e82
commit 5fa5651537
4 files changed
+297 -9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2025/CVE-2025-141xx/CVE-2025-14188.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-14188",
"sourceIdentifier": "[email protected]",
"published": "2025-12-07T11:15:47.557",
"lastModified": "2025-12-07T11:15:47.557",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:C/I:C/A:C",
"baseScore": 8.3,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 6.4,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://vuldb.com/?ctiid.334608",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334608",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.698833",
"source": "[email protected]"
},
{
"url": "https://www.notion.so/25e2b76e8e0c80578014fff04a950576",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-141xx/CVE-2025-14189.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-14189",
"sourceIdentifier": "[email protected]",
"published": "2025-12-07T12:15:47.610",
"lastModified": "2025-12-07T12:15:47.610",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxf_dump_table_demo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/hacker-routing/cve/issues/2",
"source": "[email protected]"
},
{
"url": "https://github.com/hacker-routing/cve/issues/2#issue-3646348225",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.334609",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334609",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.699133",
"source": "[email protected]"
}
]
}
README.md
+7 -7
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-07T11:00:11.119624+00:00
2025-12-07T13:00:11.383009+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-07T09:15:48.307000+00:00
2025-12-07T12:15:47.610000+00:00
```
### Last Data Feed Release
@@ -33,21 +33,21 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
320449
320451
```
### CVEs added in the last Commit
Recently added CVEs: `1`
Recently added CVEs: `2`
- [CVE-2025-14187](CVE-2025/CVE-2025-141xx/CVE-2025-14187.json) (`2025-12-07T09:15:48.307`)
- [CVE-2025-14188](CVE-2025/CVE-2025-141xx/CVE-2025-14188.json) (`2025-12-07T11:15:47.557`)
- [CVE-2025-14189](CVE-2025/CVE-2025-141xx/CVE-2025-14189.json) (`2025-12-07T12:15:47.610`)
### CVEs modified in the last Commit
Recently modified CVEs: `1`
Recently modified CVEs: `0`
- [CVE-2025-13792](CVE-2025/CVE-2025-137xx/CVE-2025-13792.json) (`2025-12-07T09:15:47.970`)
## Download and Usage
_state.csv
+4 -2
View File
@@ -288791,7 +288791,7 @@ CVE-2025-13789,0,0,49c6c916c82d946a25126551a49a52b3ab4d4a76e4eb73ee9f67c2f85f9b3
CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000
CVE-2025-13790,0,0,071f04570b6fb8e22b5f0a24a333dc977ae6cce8de305c548a5bb8d923869d4b,2025-12-04T20:27:39.500000
CVE-2025-13791,0,0,621d61c173db2155ef69af1ff8fa0c7a9245501a531e3cc81b24782b768cb0d0,2025-12-04T20:26:55.733000
CVE-2025-13792,0,1,b127f4a866e4213d161c823ee8ce8cf5ff98b40b62a25ceaf4a350e919949a38,2025-12-07T09:15:47.970000
CVE-2025-13792,0,0,b127f4a866e4213d161c823ee8ce8cf5ff98b40b62a25ceaf4a350e919949a38,2025-12-07T09:15:47.970000
CVE-2025-13793,0,0,cee72f8cf2011358fcb17c0da768201ddc2b1d608827f8b279ec4e127b5e3ff0,2025-12-01T15:39:33.110000
CVE-2025-13795,0,0,997af5e0bec0000a9aa80bb7fa15a961c6515812519d9cb784cb425b0c07ab10,2025-12-01T15:39:33.110000
CVE-2025-13796,0,0,851a06944e44367a53781cedd5bb574eea06934997eb7084a4bc11f8c553d3e1,2025-12-01T15:39:33.110000
@@ -288930,7 +288930,9 @@ CVE-2025-14183,0,0,f7ed52500fd1cb28453ccd5b11cc04746edba5cf93d5501c4ba37cfada9eb
CVE-2025-14184,0,0,524957360f5777def92d28ea083b12beb7067fb92f332f11004d1d4e8a62f01e,2025-12-07T05:15:49.747000
CVE-2025-14185,0,0,2b6126c1b8a1b3eb4133e641bfa50d0d6e3d015e34b4773b0252a80169dd42d9,2025-12-07T05:15:59.987000
CVE-2025-14186,0,0,4c0097c191ccd1b1273fe1bed468586fd41229056c4fa3d04f84ad6ab0f7fe01,2025-12-07T08:15:46.813000
CVE-2025-14187,1,1,0e183b1cc5f6ee6f9864024749e79e1f569bbb96b15e546d53421e833009cc65,2025-12-07T09:15:48.307000
CVE-2025-14187,0,0,0e183b1cc5f6ee6f9864024749e79e1f569bbb96b15e546d53421e833009cc65,2025-12-07T09:15:48.307000
CVE-2025-14188,1,1,fba3545729836bf3c85f290a3ff1f354ae32c7360dd3095f4f19dbecb7010189,2025-12-07T11:15:47.557000
CVE-2025-14189,1,1,0b97e0d134e15c4825755137e713c94df493d5a73a73d0aa1cfacdecead5f150,2025-12-07T12:15:47.610000
CVE-2025-1419,0,0,e9b4383dce54deb76ffaf62b71b6b865744947936f83af1607900da4a145d1c2,2025-05-21T20:24:58.133000
CVE-2025-1420,0,0,a6998f135128559a737cd848d0b746894ad1be48194a738c284f0e29cf433dc9,2025-05-21T20:24:58.133000
CVE-2025-1421,0,0,0a3d6c3aba2bddc77519fcb05e69f19c0ac462cf78e75eacd7e9a86f57340345,2025-05-21T20:24:58.133000
Can't render this file because it is too large.