admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:20:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-29T05:00:11.626974+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-29 05:04:04 +00:00
1 parent 6106e503a7
commit 6256a4a30d
23 files changed
+1281 -54
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2024/CVE-2024-236xx/CVE-2024-23687.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-23687",
"sourceIdentifier": "[email protected]",
"published": "2024-01-19T22:15:08.517",
"lastModified": "2025-05-22T19:15:40.330",
"lastModified": "2025-11-29T03:15:56.533",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.\n\n"
"value": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines."
},
{
"lang": "es",
CVE-2024/CVE-2024-236xx/CVE-2024-23688.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-23688",
"sourceIdentifier": "[email protected]",
"published": "2024-01-19T22:15:08.563",
"lastModified": "2025-06-20T19:15:34.427",
"lastModified": "2025-11-29T03:15:57.600",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.\n\n"
"value": "Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed."
},
{
"lang": "es",
CVE-2024/CVE-2024-236xx/CVE-2024-23689.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-23689",
"sourceIdentifier": "[email protected]",
"published": "2024-01-19T21:15:10.520",
"lastModified": "2025-05-30T15:15:36.853",
"lastModified": "2025-11-29T03:15:57.783",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey' is specified and an exception, such as a ClickHouseException or SQLException, is thrown during database operations; the certificate password is then included in the logged exception message.\n\n"
"value": "Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey' is specified and an exception, such as a ClickHouseException or SQLException, is thrown during database operations; the certificate password is then included in the logged exception message."
},
{
"lang": "es",
CVE-2025/CVE-2025-538xx/CVE-2025-53896.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53896",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:58.473",
"lastModified": "2025-11-29T03:15:58.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-613"
}
]
}
],
"references": [
{
"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53897.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53897",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:58.653",
"lastModified": "2025-11-29T03:15:58.653",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cxwc-7899-3h4m",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53899.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53899",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:58.817",
"lastModified": "2025-11-29T03:15:58.817",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-941"
}
]
}
],
"references": [
{
"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-539xx/CVE-2025-53900.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53900",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:58.983",
"lastModified": "2025-11-29T03:15:58.983",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-267"
}
]
}
],
"references": [
{
"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-gjq3-8v6p-2h6h",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-539xx/CVE-2025-53939.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-53939",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:59.153",
"lastModified": "2025-11-29T03:15:59.153",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"references": [
{
"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58436.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-58436",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:59.323",
"lastModified": "2025-11-29T03:15:59.323",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue has been patched in version 2.4.15."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.4,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://github.com/OpenPrinting/cups/commit/40008d76a001babbb9beb9d9d74b01a86fb6ddb4",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenPrinting/cups/releases/tag/v2.4.15",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr",
"source": "[email protected]"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/11/27/4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}
CVE-2025/CVE-2025-619xx/CVE-2025-61915.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-61915",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:59.520",
"lastModified": "2025-11-29T03:15:59.520",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.5,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-124"
},
{
"lang": "en",
"value": "CWE-129"
}
]
}
],
"references": [
{
"url": "https://github.com/OpenPrinting/cups/commit/db8d560262c22a21ee1e55dfd62fa98d9359bcb0",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenPrinting/cups/releases/tag/v2.4.15",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc",
"source": "[email protected]"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/11/27/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}
CVE-2025/CVE-2025-655xx/CVE-2025-65540.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-65540",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:56.417",
"lastModified": "2025-11-29T04:15:56.417",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-supplied data. User input fields such as username and description are directly rendered into HTML without proper sanitization or encoding, allowing attackers to inject and execute malicious scripts."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Exrick/xmall/issues/101",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-658xx/CVE-2025-65892.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65892",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:57.367",
"lastModified": "2025-11-29T04:15:57.367",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim's browser via a crafted URL to the passQueryParameters function with the xml parameter enabled."
}
],
"metrics": {},
"references": [
{
"url": "https://krpano.com/docu/releasenotes/?version=1.23.3",
"source": "[email protected]"
},
{
"url": "https://krpano.com/forum/wbb/index.php?thread/20554-krpano-1-23-3d-gaussian-splatting-support/&postID=96997#post96997",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66216.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66216",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:59.710",
"lastModified": "2025-11-29T03:15:59.710",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been patched in version 0.64."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-131"
}
]
}
],
"references": [
{
"url": "https://github.com/jvde-github/AIS-catcher/commit/3de0ef785fc3c96265a71b37df7b0a82cb279312",
"source": "[email protected]"
},
{
"url": "https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-v53x-f5hh-g2g6",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66217.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-66217",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:15:59.880",
"lastModified": "2025-11-29T03:15:59.880",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Length field. This leads to an immediate Denial of Service (DoS) and, when used as a library, severe Memory Corruption that can be leveraged for Remote Code Execution (RCE). This issue has been patched in version 0.64."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-122"
},
{
"lang": "en",
"value": "CWE-191"
}
]
}
],
"references": [
{
"url": "https://github.com/jvde-github/AIS-catcher/commit/e0f7242eee659909adc11a4c561c3f7011bdefe7",
"source": "[email protected]"
},
{
"url": "https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-93mj-c8q3-69rg",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66221.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-66221",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:16:00.050",
"lastModified": "2025-11-29T03:16:00.050",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.4, Werkzeug's safe_join function allows path segments with Windows device names. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. send_from_directory uses safe_join to safely serve files at user-specified paths under a directory. If the application is running on Windows, and the requested path ends with a special device name, the file will be opened successfully, but reading will hang indefinitely. This issue has been patched in version 3.1.4."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-67"
}
]
}
],
"references": [
{
"url": "https://github.com/pallets/werkzeug/commit/4b833376a45c323a189cd11d2362bcffdb1c0c13",
"source": "[email protected]"
},
{
"url": "https://github.com/pallets/werkzeug/releases/tag/3.1.4",
"source": "[email protected]"
},
{
"url": "https://github.com/pallets/werkzeug/security/advisories/GHSA-hgf8-39gv-g3f2",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66223.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66223",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T03:16:00.227",
"lastModified": "2025-11-29T03:16:00.227",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenObserve is a cloud-native observability platform. Prior to version 0.16.0, organization invitation tokens do not expire once issued, remain valid even after the invited user is removed from the organization, and allow multiple invitations to the same email with different roles where all issued links remain valid simultaneously. This results in broken access control where a removed or demoted user can regain access or escalate privileges. This issue has been patched in version 0.16.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-284"
},
{
"lang": "en",
"value": "CWE-613"
}
]
}
],
"references": [
{
"url": "https://github.com/openobserve/openobserve/security/advisories/GHSA-c856-2xpx-gw75",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66224.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-66224",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:57.497",
"lastModified": "2025-11-29T04:15:57.497",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system\u2019s sendmail command. Because these values are not sanitized or constrained before being incorporated into the command execution path, certain sendmail behaviors can be unintentionally invoked during email processing. This makes it possible for the application to write files on the server as part of the mail-handling routine, and in deployments where those files end up in web-accessible locations, the behavior can be leveraged to achieve execution of attacker-controlled content. The issue stems entirely from constructing OS-level command strings using unsanitized input within the mail-sending logic. This issue has been patched in version 5.8."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-2w7w-h5wv-xr55",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66225.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66225",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:57.740",
"lastModified": "2025-11-29T04:15:57.740",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the password reset workflow does not enforce that the username submitted in the final reset request matches the account for which the reset process was originally initiated. After obtaining a valid reset link for any account they can receive email for, an attacker can alter the username parameter in the final reset request to target a different user. Because the system accepts the supplied username without verification, the attacker can set a new password for any chosen account, including privileged accounts, resulting in full account takeover. This issue has been patched in version 5.8."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-345"
}
]
}
],
"references": [
{
"url": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-5ghw-9775-v263",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66289.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-66289",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:57.893",
"lastModified": "2025-11-29T04:15:57.893",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application does not invalidate existing sessions when a user is disabled or when a password change occurs, allowing active session cookies to remain valid indefinitely. As a result, a disabled user, or an attacker using a compromised account, can continue to access protected pages and perform operations as long as a prior session remains active. Because the server performs no session revocation or session-store cleanup during these critical state changes, disabling an account or updating credentials has no effect on already-established sessions. This makes administrative disable actions ineffective and allows unauthorized users to retain full access even after an account is closed or a password is reset, exposing the system to prolonged unauthorized use and significantly increasing the impact of account takeover scenarios. This issue has been patched in version 5.8."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-613"
}
]
}
],
"references": [
{
"url": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-99qp-xh4q-pr9x",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66290.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66290",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:58.040",
"lastModified": "2025-11-29T04:15:58.040",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application\u2019s recruitment attachment retrieval endpoint does not enforce the required authorization checks before serving candidate files. Even users restricted to ESS-level access, who have no permission to view the Recruitment module, can directly access candidate attachment URLs. When an authenticated request is made to the attachment endpoint, the system validates the session but does not confirm that the requesting user has the necessary recruitment permissions. As a result, any authenticated user can download CVs and other uploaded documents for arbitrary candidates by issuing direct requests to the attachment endpoint, leading to unauthorized exposure of sensitive applicant data. This issue has been patched in version 5.8."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-qf8r-c54j-jw88",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66291.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-66291",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T04:15:58.200",
"lastModified": "2025-11-29T04:15:58.200",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the interview attachment retrieval endpoint in the Recruitment module serves files based solely on an authenticated session and user-supplied identifiers, without verifying whether the requester has permission to access the associated interview record. Because the server does not perform any recruitment-level authorization checks, an ESS-level user with no access to recruitment workflows can directly request interview attachment URLs and receive the corresponding files. This exposes confidential interview documents\u2014including candidate CVs, evaluations, and supporting files\u2014to unauthorized users. The issue arises from relying on predictable object identifiers and session presence rather than validating the user\u2019s association with the relevant recruitment process. This issue has been patched in version 5.8."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/orangehrm/orangehrm/commit/647133d0fdda989a4836845a6531277078a84607",
"source": "[email protected]"
},
{
"url": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-v32g-r8xx-4g6g",
"source": "[email protected]"
}
]
}
README.md
+26 -25
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-29T03:00:10.842677+00:00
2025-11-29T05:00:11.626974+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-29T02:15:52.577000+00:00
2025-11-29T04:15:58.200000+00:00
```
### Last Data Feed Release
@@ -33,39 +33,40 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319593
319611
```
### CVEs added in the last Commit
Recently added CVEs: `8`
Recently added CVEs: `18`
- [CVE-2025-64715](CVE-2025/CVE-2025-647xx/CVE-2025-64715.json) (`2025-11-29T01:16:01.427`)
- [CVE-2025-65112](CVE-2025/CVE-2025-651xx/CVE-2025-65112.json) (`2025-11-29T01:16:02.467`)
- [CVE-2025-65113](CVE-2025/CVE-2025-651xx/CVE-2025-65113.json) (`2025-11-29T01:16:02.640`)
- [CVE-2025-66027](CVE-2025/CVE-2025-660xx/CVE-2025-66027.json) (`2025-11-29T01:16:02.807`)
- [CVE-2025-66034](CVE-2025/CVE-2025-660xx/CVE-2025-66034.json) (`2025-11-29T01:16:02.967`)
- [CVE-2025-66036](CVE-2025/CVE-2025-660xx/CVE-2025-66036.json) (`2025-11-29T02:15:52.257`)
- [CVE-2025-66201](CVE-2025/CVE-2025-662xx/CVE-2025-66201.json) (`2025-11-29T02:15:52.420`)
- [CVE-2025-66219](CVE-2025/CVE-2025-662xx/CVE-2025-66219.json) (`2025-11-29T02:15:52.577`)
- [CVE-2025-53896](CVE-2025/CVE-2025-538xx/CVE-2025-53896.json) (`2025-11-29T03:15:58.473`)
- [CVE-2025-53897](CVE-2025/CVE-2025-538xx/CVE-2025-53897.json) (`2025-11-29T03:15:58.653`)
- [CVE-2025-53899](CVE-2025/CVE-2025-538xx/CVE-2025-53899.json) (`2025-11-29T03:15:58.817`)
- [CVE-2025-53900](CVE-2025/CVE-2025-539xx/CVE-2025-53900.json) (`2025-11-29T03:15:58.983`)
- [CVE-2025-53939](CVE-2025/CVE-2025-539xx/CVE-2025-53939.json) (`2025-11-29T03:15:59.153`)
- [CVE-2025-58436](CVE-2025/CVE-2025-584xx/CVE-2025-58436.json) (`2025-11-29T03:15:59.323`)
- [CVE-2025-61915](CVE-2025/CVE-2025-619xx/CVE-2025-61915.json) (`2025-11-29T03:15:59.520`)
- [CVE-2025-65540](CVE-2025/CVE-2025-655xx/CVE-2025-65540.json) (`2025-11-29T04:15:56.417`)
- [CVE-2025-65892](CVE-2025/CVE-2025-658xx/CVE-2025-65892.json) (`2025-11-29T04:15:57.367`)
- [CVE-2025-66216](CVE-2025/CVE-2025-662xx/CVE-2025-66216.json) (`2025-11-29T03:15:59.710`)
- [CVE-2025-66217](CVE-2025/CVE-2025-662xx/CVE-2025-66217.json) (`2025-11-29T03:15:59.880`)
- [CVE-2025-66221](CVE-2025/CVE-2025-662xx/CVE-2025-66221.json) (`2025-11-29T03:16:00.050`)
- [CVE-2025-66223](CVE-2025/CVE-2025-662xx/CVE-2025-66223.json) (`2025-11-29T03:16:00.227`)
- [CVE-2025-66224](CVE-2025/CVE-2025-662xx/CVE-2025-66224.json) (`2025-11-29T04:15:57.497`)
- [CVE-2025-66225](CVE-2025/CVE-2025-662xx/CVE-2025-66225.json) (`2025-11-29T04:15:57.740`)
- [CVE-2025-66289](CVE-2025/CVE-2025-662xx/CVE-2025-66289.json) (`2025-11-29T04:15:57.893`)
- [CVE-2025-66290](CVE-2025/CVE-2025-662xx/CVE-2025-66290.json) (`2025-11-29T04:15:58.040`)
- [CVE-2025-66291](CVE-2025/CVE-2025-662xx/CVE-2025-66291.json) (`2025-11-29T04:15:58.200`)
### CVEs modified in the last Commit
Recently modified CVEs: `12`
Recently modified CVEs: `3`
- [CVE-2021-26829](CVE-2021/CVE-2021-268xx/CVE-2021-26829.json) (`2025-11-29T02:00:03.557`)
- [CVE-2024-22048](CVE-2024/CVE-2024-220xx/CVE-2024-22048.json) (`2025-11-29T02:15:49.750`)
- [CVE-2024-22050](CVE-2024/CVE-2024-220xx/CVE-2024-22050.json) (`2025-11-29T02:15:50.880`)
- [CVE-2024-22051](CVE-2024/CVE-2024-220xx/CVE-2024-22051.json) (`2025-11-29T02:15:51.067`)
- [CVE-2024-23679](CVE-2024/CVE-2024-236xx/CVE-2024-23679.json) (`2025-11-29T02:15:51.267`)
- [CVE-2024-23680](CVE-2024/CVE-2024-236xx/CVE-2024-23680.json) (`2025-11-29T02:15:51.467`)
- [CVE-2024-23684](CVE-2024/CVE-2024-236xx/CVE-2024-23684.json) (`2025-11-29T02:15:51.653`)
- [CVE-2024-23685](CVE-2024/CVE-2024-236xx/CVE-2024-23685.json) (`2025-11-29T02:15:51.837`)
- [CVE-2024-23686](CVE-2024/CVE-2024-236xx/CVE-2024-23686.json) (`2025-11-29T02:15:52.020`)
- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-11-29T02:00:03.557`)
- [CVE-2025-6021](CVE-2025/CVE-2025-60xx/CVE-2025-6021.json) (`2025-11-29T01:16:03.137`)
- [CVE-2025-6032](CVE-2025/CVE-2025-60xx/CVE-2025-6032.json) (`2025-11-29T01:16:03.480`)
- [CVE-2024-23687](CVE-2024/CVE-2024-236xx/CVE-2024-23687.json) (`2025-11-29T03:15:56.533`)
- [CVE-2024-23688](CVE-2024/CVE-2024-236xx/CVE-2024-23688.json) (`2025-11-29T03:15:57.600`)
- [CVE-2024-23689](CVE-2024/CVE-2024-236xx/CVE-2024-23689.json) (`2025-11-29T03:15:57.783`)
## Download and Usage
_state.csv
+41 -23
View File
@@ -172789,7 +172789,7 @@ CVE-2021-26825,0,0,e5822b60b049f116aaafab64fd936260eff4c520efaaf10f8bf6584f24f65
CVE-2021-26826,0,0,eb89fb360924216769927b9e6b08d2a3d4b91529ab4a32d3f8fe0c862383fde3,2024-11-21T05:56:52.017000
CVE-2021-26827,0,0,e0342ff16f890359b63a5d6cf3ab69b434d0c1495405c63f45f60ecccc01ce2c,2024-11-21T05:56:52.157000
CVE-2021-26828,0,0,e4a80786ff42d2bc00690a80b0e56509f8b4591ce3d6a4293bf6c74a6acccc50,2024-11-21T05:56:52.287000
CVE-2021-26829,0,1,f541189723095f58a13eeca9507c5f4595f2dfdce82d5205684349aba072da57,2025-11-29T02:00:03.557000
CVE-2021-26829,0,0,f541189723095f58a13eeca9507c5f4595f2dfdce82d5205684349aba072da57,2025-11-29T02:00:03.557000
CVE-2021-26830,0,0,96159579fc07b134d3d013b635119bfddc14ca4d2dee6c836bb49d43d8fa2681,2024-11-21T05:56:52.563000
CVE-2021-26832,0,0,2161ab30b77784e25551f3199c93ea168946f8a1b44a4b2f18899567b606853c,2024-11-21T05:56:52.690000
CVE-2021-26833,0,0,5c8fc90725500d53822091b565c2406e20a85aff7f25c9ae2845f734da1eef15,2024-11-21T05:56:52.827000
@@ -253519,10 +253519,10 @@ CVE-2024-22043,0,0,ab28b95c2293e8d043005b472ee1c195b171baa49ef18712f7c1bbd1f4e21
CVE-2024-22044,0,0,3785c041801c9e494f1163bcded486ac4d8ba2b4daeeba43f718d07aa287ce8a,2024-11-21T08:55:27.110000
CVE-2024-22045,0,0,0fc85a36de1553626b26231251df9561b8f82694677467031c0736aaeb797b1f,2024-11-21T08:55:27.243000
CVE-2024-22047,0,0,cf687d977c563ef0afdf154dd83b196f71deb7cab0a7fe45ca33e4410804230d,2025-11-28T23:15:48.330000
CVE-2024-22048,0,1,f889a81593fb82823c0dae9c21adae43f21e6daee4a0f15d0702368478f9b5d0,2025-11-29T02:15:49.750000
CVE-2024-22048,0,0,f889a81593fb82823c0dae9c21adae43f21e6daee4a0f15d0702368478f9b5d0,2025-11-29T02:15:49.750000
CVE-2024-22049,0,0,a1b964cc03288247a11bfeed2ea96977953a2e2787b63c60f3d57d8bec564860,2025-06-03T15:15:56.780000
CVE-2024-22050,0,1,7b07717490ce6cf6e6cca44b759ff6245e8db63c94b41c139fc3baf51a2658d1,2025-11-29T02:15:50.880000
CVE-2024-22051,0,1,fe0396ab5442efbc2c2ce4f7ad4ca99f2074b8079b91a016c973e09efbdd03e2,2025-11-29T02:15:51.067000
CVE-2024-22050,0,0,7b07717490ce6cf6e6cca44b759ff6245e8db63c94b41c139fc3baf51a2658d1,2025-11-29T02:15:50.880000
CVE-2024-22051,0,0,fe0396ab5442efbc2c2ce4f7ad4ca99f2074b8079b91a016c973e09efbdd03e2,2025-11-29T02:15:51.067000
CVE-2024-22052,0,0,fb73937d7972ce431af34c9c065dbcdabf7e31300916b9f35e3aabe9a5b95c49,2024-11-21T08:55:28.100000
CVE-2024-22053,0,0,6223f7c4e20f4a3638f13269fe1da50479ec1f14fc3364892d43d4a908a5a57a,2024-11-21T08:55:28.270000
CVE-2024-22054,0,0,1f9589abcdda5305056d2853de64c41b95564aaa3a394ea1566bc77c27d24a07,2025-03-27T21:15:44.933000
@@ -254741,18 +254741,18 @@ CVE-2024-23675,0,0,ee183945d299c223ce67600395b38b4d638c71a5957495838e452392b4067
CVE-2024-23676,0,0,0b771048d2206921c48b7808afccbf9f52c1c1e22c65d8c233838b476ddc2c46,2024-11-21T08:58:09.070000
CVE-2024-23677,0,0,5ac014ac408e2eafcb86e85a2963e38acf2db309bb83491f3841c9e81c8627f3,2024-11-21T08:58:09.197000
CVE-2024-23678,0,0,9ed6addd5097d82bdc0e15e677ebd2a3d3c3679da55dbbbc54643381ee844a6e,2024-11-21T08:58:09.327000
CVE-2024-23679,0,1,e8fd39b635f7b3e440c7d33b652aa52ce92ad734baf6451c2d54ed7b89a4cff1,2025-11-29T02:15:51.267000
CVE-2024-23679,0,0,e8fd39b635f7b3e440c7d33b652aa52ce92ad734baf6451c2d54ed7b89a4cff1,2025-11-29T02:15:51.267000
CVE-2024-2368,0,0,834bd5d4185e3ba59ce11d3a1f849826153e76af6b355d0b398d71ff57413272,2024-11-21T09:09:36.457000
CVE-2024-23680,0,1,7fc5870c0582a1f026c0d39caeacd4223a671441ed15c55e3e21f8c0b34273d5,2025-11-29T02:15:51.467000
CVE-2024-23680,0,0,7fc5870c0582a1f026c0d39caeacd4223a671441ed15c55e3e21f8c0b34273d5,2025-11-29T02:15:51.467000
CVE-2024-23681,0,0,9177cc1330a57dce016aec7a2b36ee507f51a20fcb5efe1191f19478e504c3de,2025-11-28T17:16:06.673000
CVE-2024-23682,0,0,e195e5427bc17e1854e12e3db1003634afe522c0aa63aa85b08ffbc6665f8aaa,2025-11-28T17:16:07.773000
CVE-2024-23683,0,0,520491047c4e8200c20f982c7095bcaa422143c9b5b8a5dbd1b9f6b75d78f9a4,2025-11-28T17:16:07.980000
CVE-2024-23684,0,1,e800341e3f1d97202f8e7d8d7475be6aeaf1183e038542978729f0264267f72a,2025-11-29T02:15:51.653000
CVE-2024-23685,0,1,681deab3ee0ebfe227e37b5a4f2282b1a62357474e2fe41d3da3d1973a103122,2025-11-29T02:15:51.837000
CVE-2024-23686,0,1,02fa1b5c84625cfa1c3216da884275fa56df2e20a81a730410d1be16fc464102,2025-11-29T02:15:52.020000
CVE-2024-23687,0,0,c9b20f1f460b4646812b2de79b6a7f155f494e9c7341321ab8ceed7c0195c95d,2025-05-22T19:15:40.330000
CVE-2024-23688,0,0,c8dc2061e0eaa52f986d1aad13010bc75635a1f97ae5a52ba07eb7fca67d213c,2025-06-20T19:15:34.427000
CVE-2024-23689,0,0,9f4b8ee5ef4f90ecfc201e7d2b464f6dfc2a4feb6214f8fcb78fb2d73da1b3a1,2025-05-30T15:15:36.853000
CVE-2024-23684,0,0,e800341e3f1d97202f8e7d8d7475be6aeaf1183e038542978729f0264267f72a,2025-11-29T02:15:51.653000
CVE-2024-23685,0,0,681deab3ee0ebfe227e37b5a4f2282b1a62357474e2fe41d3da3d1973a103122,2025-11-29T02:15:51.837000
CVE-2024-23686,0,0,02fa1b5c84625cfa1c3216da884275fa56df2e20a81a730410d1be16fc464102,2025-11-29T02:15:52.020000
CVE-2024-23687,0,1,d4d1334abf735efed4ae2972e9173338d6a362aa74873d59ddc83aa70aeca3bf,2025-11-29T03:15:56.533000
CVE-2024-23688,0,1,4ba5e238c28bc4def48afa71f0a969d304f3d1252b9f4abbbc93c8971ef665df,2025-11-29T03:15:57.600000
CVE-2024-23689,0,1,d25761e5111be4a5ee7c50b15757b02d7db6ec5d9498331232b78b7b6230a305,2025-11-29T03:15:57.783000
CVE-2024-2369,0,0,17e59ec3a94ce7e0236b8eb7b16e8034fa88c031cc4bfa96d30d1c330e39d1f6,2025-05-13T01:07:16.623000
CVE-2024-23690,0,0,8f4c98a32177b1e9149baad1159f4eeeb3ae610ce5d1b59af748eac2f4c3c354,2025-02-04T15:15:17.973000
CVE-2024-23692,0,0,4fafe1341332e07f726484fd4d200e82fa77f92e92171295559ca1b1b3db2cb0,2025-10-31T21:57:05.487000
@@ -310287,7 +310287,11 @@ CVE-2025-53891,0,0,ace05d89a7f11f0ffbc45c1214a7664e88d89dcb02d6fbe7788fa979f6a54
CVE-2025-53892,0,0,978a79619ee09f05b73e89f9fc8e451fba02d24c0846842f24e11fb4dfa129a8,2025-07-22T15:15:37.397000
CVE-2025-53893,0,0,40a5584be6022f0b850806732352317d88ea39c4617f5076209747b4cfbd2c41,2025-08-05T18:27:22.587000
CVE-2025-53895,0,0,4ef1a4651c763ea810cc73c6549cfdd537ae4ea6b043ee26aba5171ba8ad1d0e,2025-08-26T17:52:08.147000
CVE-2025-53896,1,1,2cbf679fc8c844c46a56d5589629981f03340ff41b79e85bc8ce9ffaaa318d83,2025-11-29T03:15:58.473000
CVE-2025-53897,1,1,9cfda9a6f1cc6c17a26433e726dced0c8ec40fdf9d5af6996e7c879d8d600f50,2025-11-29T03:15:58.653000
CVE-2025-53899,1,1,f0b236d7ac7ac71882f8e2546acc8d3b9e12f05bb229d68555b400c56b897173,2025-11-29T03:15:58.817000
CVE-2025-5390,0,0,d860e28139a5271b36771ded05aaff2e0826681a75e96db8449dea502c7ae7cc,2025-09-11T20:43:35.063000
CVE-2025-53900,1,1,c46dfea505f95185ef4b07782c237f4f82a264c28403ad28eb272eece291fdc4,2025-11-29T03:15:58.983000
CVE-2025-53901,0,0,4ebeae31f981cf014187840906c96f62ce56cf62486514f3448f208fcc84aabb,2025-09-04T17:12:30.060000
CVE-2025-53902,0,0,8d1622db8a24a730d3e1974c14275cfdbba2658220795b7821ccb0461e2e37ed,2025-08-22T15:30:09.243000
CVE-2025-53903,0,0,681553b6d533de7222c7e18024eb787a8db1cc5763d8bd4995c131347c4c3d0f,2025-07-15T20:07:28.023000
@@ -310318,6 +310322,7 @@ CVE-2025-53935,0,0,9701b7f91b7202f787ff5ca1c31bbe3271077ccea1cd59a0c975200d18473
CVE-2025-53936,0,0,ca75ce564f57310e8bd1c377961bb26d115e63c1c446afaf71c2dbac47b20332,2025-07-25T16:37:19.880000
CVE-2025-53937,0,0,02e06aea6ab3c5341fa075dc65cde146c187757a317142a39231059caf49fd4b,2025-07-25T16:37:26.063000
CVE-2025-53938,0,0,aa24f446897ced3690143fc88ffaf6c161eb8842ce58a5ebef3e390bc254f7c9,2025-07-25T16:37:34.563000
CVE-2025-53939,1,1,3cee4eae43d500e7f3d90b22b593ce884b7e9720f8daf372451bc2f0d9fa8706,2025-11-29T03:15:59.153000
CVE-2025-5394,0,0,7680e9ade7a459fc7de5e22b25fe12b5a7e3b0bb4702381768c45cb8275932e6,2025-07-15T13:14:24.053000
CVE-2025-53940,0,0,533304ec9ab108bbd2f2869f8e197c68bc5f0dcb77e351bc9516460b1512ed81,2025-07-25T15:29:19.837000
CVE-2025-53941,0,0,e2d5745013e63f73a8429afbb8c0279e93a4a7d5004b9268686f9997d2a5ac60,2025-07-17T21:15:50.197000
@@ -310578,7 +310583,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a
CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000
CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000
CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000
CVE-2025-54236,0,1,ace352390113afa51028224619a5ac1c7ed5ce4e8f37ea81a63d172c3dfb170b,2025-11-29T02:00:03.557000
CVE-2025-54236,0,0,ace352390113afa51028224619a5ac1c7ed5ce4e8f37ea81a63d172c3dfb170b,2025-11-29T02:00:03.557000
CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000
CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000
@@ -312884,6 +312889,7 @@ CVE-2025-58431,0,0,f92603a2921bb8a3e57c166f79b605363de50b6104a60ad5e380e834c445a
CVE-2025-58432,0,0,1bd81f3ee4a41c43a18e2a806c1025ede8c4a91989e144db3d608724f1a38e8a,2025-09-22T14:24:42.423000
CVE-2025-58434,0,0,703d035fe60bc40a1c61de13fa02d28014c1b34377f4121bf1ec7f31910d40b6,2025-09-20T02:54:59.667000
CVE-2025-58435,0,0,911f44ff1ed9c17e40de6e7214bf8b6827472e9bf4db8828d64d71fc21d8bdd0,2025-09-11T17:14:25.240000
CVE-2025-58436,1,1,aa7b9e761f8a0c5303a7fe7505e05f07e48ec5815abc3759a3e2cbef2942e70f,2025-11-29T03:15:59.323000
CVE-2025-58437,0,0,45b7ef380940089f990c4122a5d0198ea8f2b952d68c564e2a98c75084db07ef,2025-10-17T13:54:43.823000
CVE-2025-58438,0,0,4f70e2857129179345e235a9b918a01ff13e124f81996d12187c07edc207d5cc,2025-11-03T19:16:14.203000
CVE-2025-58439,0,0,433ec343fd0faa4e081e93d05a8149349b1b62ceb362370bae97d015f8229d14,2025-10-27T18:03:37.790000
@@ -314140,7 +314146,7 @@ CVE-2025-60206,0,0,2b5ad1f6754f3ff4efa83c530e2ff5a6b8d596f2367dd3470c2d83d3d7b76
CVE-2025-60207,0,0,ffea6e353c0ef6bc909f3e7ea8b89ef7c99e21739a59e683c8ffa55761435b29,2025-11-17T16:15:49.210000
CVE-2025-60208,0,0,f853519cfc88cf0c658111e98e7734a3bae13ae6ef22b6e64dc13a9b69e3689d,2025-11-13T11:16:47.810000
CVE-2025-60209,0,0,57bf5ec91fd277607887cd899589f7695f128f46511f951cad2a051d540b3553,2025-11-13T11:16:48.003000
CVE-2025-6021,0,1,dbd44597e3c1e57882508ab9a895929eb83906253f93e63531dac75fd599225e,2025-11-29T01:16:03.137000
CVE-2025-6021,0,0,dbd44597e3c1e57882508ab9a895929eb83906253f93e63531dac75fd599225e,2025-11-29T01:16:03.137000
CVE-2025-60210,0,0,d49088a103db41ae4f47d2ae4282b318703f31a1876f5ea020f9abd203e8234a,2025-11-13T11:16:48.193000
CVE-2025-60211,0,0,e8adca50e6404a1698408d8befaabcd2f4d5f360bf209a4e10e97714c8fde31f,2025-11-13T11:16:48.387000
CVE-2025-60212,0,0,c9e6c9255cc2c66a17a0bb97dde9d3e79a9f039595c8ba5961e29ebc2e0b0c32,2025-11-13T11:16:48.550000
@@ -314206,7 +314212,7 @@ CVE-2025-60314,0,0,cbbe7a0b6af3a39815f39b8177f0d5c80de73dd7a93dcdcc83bf1d981cd07
CVE-2025-60316,0,0,bf192f8c396b826d01bf644b8c41a5846ce686796861a4ea4656b6d7419f3515,2025-10-16T15:25:18.447000
CVE-2025-60318,0,0,5849593dcdafdebfdf216d2bf0cc9670b37f8102447ff07d6887a979b66d3bc1,2025-10-09T16:06:43.363000
CVE-2025-60319,0,0,65af61ef6b0c707fdf80ae8c27fd804a17f2c78dd1322235f46b8ca47247c1df,2025-11-04T15:41:56.843000
CVE-2025-6032,0,1,da6ef5febe043c62d6b6bd4ddc962ce90376ca214efb0a4629a3df533c702f16,2025-11-29T01:16:03.480000
CVE-2025-6032,0,0,da6ef5febe043c62d6b6bd4ddc962ce90376ca214efb0a4629a3df533c702f16,2025-11-29T01:16:03.480000
CVE-2025-60320,0,0,e1bb9b1b179edbcb83e266b461f5132f9d3cfb81fd4c952ae1b3196f1ff2fd89,2025-10-30T15:15:40.963000
CVE-2025-6033,0,0,8060cd78393aaff0735d9131f4595376ff505d6aaf8ae08a3d0fe13d443d1674,2025-10-07T13:24:30.283000
CVE-2025-60331,0,0,9d19160a0991f068bfe04788110f85e202d60420c61b4b55ca259e4a8f378ba2,2025-10-24T13:19:38.457000
@@ -314854,6 +314860,7 @@ CVE-2025-61910,0,0,de00125037bd3c1b39bdf76866df2a9b25632876480706779b11a0fa55247
CVE-2025-61911,0,0,542f23d37281b42c4ca93e1745f3f6f69b24fa476397d461fcfa2ee8b743f558,2025-10-14T19:36:59.730000
CVE-2025-61912,0,0,0d71af054b23f763c0c68761c333482e41bce37409371e1a95cc400465b7365e,2025-10-14T19:36:59.730000
CVE-2025-61913,0,0,c04bb6d59cbb15f9ac31c62748e34c552ca9dcd84d24b0494f6e3396a290c62e,2025-10-20T15:23:05.060000
CVE-2025-61915,1,1,480099814807846941c1cf81e4966ab1d4a0fed782a7c0b6f57b29942357569f,2025-11-29T03:15:59.520000
CVE-2025-61919,0,0,ea9bb1733605a94702d4474b211b25a8ce0c4777d4050372f39a1a21b72b842e,2025-11-03T19:28:04.420000
CVE-2025-6192,0,0,483547ea6319c95642872363e4e6436ee4f0ce08e6f3ace0cccb8a4053638f02,2025-07-03T16:12:12.790000
CVE-2025-61920,0,0,e29ef857ea6521aaf7acb240def81946d66229f28aa9ac63a9ea6529068251a2,2025-11-03T18:17:01.530000
@@ -316232,7 +316239,7 @@ CVE-2025-64710,0,0,80fa2b972eb01356dcc7264130fc1ff50ca012b72e3e475646519c4a0f9fd
CVE-2025-64711,0,0,ac1fb33141751e56270089675af03aba3ab224f7122c6429bb53b59d752b2b89,2025-11-25T17:37:36.783000
CVE-2025-64713,0,0,36361fd47a50ab892712bdfeb762cba8afba73a83319581bcac704f44cdbdc6c,2025-11-25T23:15:47.763000
CVE-2025-64714,0,0,484c8a723153aba71aca635665ddc8d6a6f07d727847283d66402a9cfafdf4ba,2025-11-14T16:42:03.187000
CVE-2025-64715,1,1,f7aaee08604cdd86f3cab1384bf22ea44f46c1821bf7c8bdaf421cfb2bdcffb5,2025-11-29T01:16:01.427000
CVE-2025-64715,0,0,f7aaee08604cdd86f3cab1384bf22ea44f46c1821bf7c8bdaf421cfb2bdcffb5,2025-11-29T01:16:01.427000
CVE-2025-64716,0,0,4509f4ced899bf34ff7ac04e0fa3722d5a6c0ad799dc5b5eb5492bb963cac4ed,2025-11-14T16:42:03.187000
CVE-2025-64717,0,0,a11599d428d8d0635eb409c08a9269f060966eace02a7617a87b6f71b5621d0b,2025-11-14T16:42:03.187000
CVE-2025-64718,0,0,9b50db59e9330d3ef17690150529a4d6de5d0e4aab0179b05f8eece933b726bb,2025-11-14T16:42:03.187000
@@ -316357,8 +316364,8 @@ CVE-2025-65108,0,0,8654395a049218b7bb70e1d0a3d7d6a2bfb0b8acfe9b255f9b034f0dbc08e
CVE-2025-65109,0,0,3e2b7c0e2bcc97290a2ee779e8f2869ba045adc7612d41c8f9fb4f6dc8f7daf0,2025-11-25T22:16:42.557000
CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000
CVE-2025-65111,0,0,23a14c16207f851a4f2756b810c5b708df7743d12ffc02562da5fa7d2fc146d6,2025-11-25T22:16:42.557000
CVE-2025-65112,1,1,a0f8e5728c161c41e644d80d998603427d3334df48148668a580fe9e04337ae3,2025-11-29T01:16:02.467000
CVE-2025-65113,1,1,949c3b9425f67020d9160fadf2171645f2d3a0ab6019a349264ffd9266fcf2ab,2025-11-29T01:16:02.640000
CVE-2025-65112,0,0,a0f8e5728c161c41e644d80d998603427d3334df48148668a580fe9e04337ae3,2025-11-29T01:16:02.467000
CVE-2025-65113,0,0,949c3b9425f67020d9160fadf2171645f2d3a0ab6019a349264ffd9266fcf2ab,2025-11-29T01:16:02.640000
CVE-2025-6512,0,0,fafc14028fc8e6d0cf5d1c26ecddf3f178d4b119f094c564dc999ae28df07a2c,2025-06-23T20:16:21.633000
CVE-2025-6513,0,0,31aa7f858e5f0036c4b8df8555240c1143a48501c8ecdc51eff54ca1e5b97fde,2025-06-23T20:16:21.633000
CVE-2025-6514,0,0,2e857a137de569aae69fc5e8b5ee04b5a374d907c22caf5d111c51eef7f69cd9,2025-07-10T13:17:30.017000
@@ -316425,6 +316432,7 @@ CVE-2025-6551,0,0,2a94174e2614ca3546b6a5e525dcaf472420d11762377d8f50c13a66a36f83
CVE-2025-6552,0,0,8717beff1ed0b4c67a4a3bc77f60be53e5be3c4b231cbc45b02cbdea4703f774,2025-06-26T18:58:14.280000
CVE-2025-6553,0,0,2f657b7cf03c956e81099e116609231d2b204d14068050f3d7e21b7f1555e8f6,2025-10-14T19:36:59.730000
CVE-2025-6554,0,0,5d72c12e992174f6f54b2ed11e97142dc2ff5e9e77af0268f61959dbaab5db33,2025-10-24T14:11:20.707000
CVE-2025-65540,1,1,6771f5549d733a75427eaf4011503a9ee39146e640d427314dbf4904f2556c3a,2025-11-29T04:15:56.417000
CVE-2025-6555,0,0,f4d795313bf162cf12535912f4855954a037cdfadea7619dfbb980dbbe1e4399,2025-07-02T17:15:52.943000
CVE-2025-6556,0,0,5dd6ab44298575dd6ea72ab64bd2e135767219dedcc87018eaedd80507778a62,2025-07-02T17:15:28.177000
CVE-2025-6557,0,0,4afd9c1a186801f4d3b6f8323ffa7ec1c131527e70bc315fd60d0b5173d2b50f,2025-07-15T18:26:56.320000
@@ -316462,6 +316470,7 @@ CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95
CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000
CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000
CVE-2025-6588,0,0,7fc631224ca630583edbb28a4a53a4fc8fe52d2b2d0fedc02ad161b03f35330d,2025-07-25T15:29:19.837000
CVE-2025-65892,1,1,d507272b0b7607262bb8bfad43526992d2bc300e8521664fa271c49639b4506d,2025-11-29T04:15:57.367000
CVE-2025-65933,0,0,d73828afa9cb161ee55f6914831a9427c1257623a6ff9274fd83a16c85ccf0a2,2025-11-19T04:16:05.500000
CVE-2025-65934,0,0,8cc7793a8653ec0bfabc5ff532a1a9ad9b840cc2967d84ec4a20d931cc974ed4,2025-11-19T04:16:05.603000
CVE-2025-65935,0,0,266b5fd693e5425242ca3e27d7264e202a4be3093023298409c3808994695acf,2025-11-19T04:16:05.680000
@@ -316497,14 +316506,14 @@ CVE-2025-66021,0,0,87af2e0edfb9bf8e360103408c804c50da2bf7d24e4189017b67022c16845
CVE-2025-66022,0,0,bdc4d813c62b30739cdbea399643049a659a2552da7f9bf2bd0393eccc9f78d7,2025-11-26T16:15:50.743000
CVE-2025-66025,0,0,57786183da1d5355b005e74fd475597a5de10322d32a8ff167d5dbfa98946af6,2025-11-26T03:15:58.277000
CVE-2025-66026,0,0,88a0c9d698dd590c235db81139ae9df29c6b0873d2a81938f765d19481db6c11,2025-11-26T16:15:50.917000
CVE-2025-66027,1,1,7c33c9a6533f4ac11fa0621f7e9b62ff94d959b990ccc13bccb0c280872c61e9,2025-11-29T01:16:02.807000
CVE-2025-66027,0,0,7c33c9a6533f4ac11fa0621f7e9b62ff94d959b990ccc13bccb0c280872c61e9,2025-11-29T01:16:02.807000
CVE-2025-66028,0,0,723ba36d08450ca80c1a2ead825e186ae3b9df5860f36e88c78b3f44ec6efb93,2025-11-26T19:15:52.110000
CVE-2025-6603,0,0,94e8918af653fece9803c6dda129968de5b58a553aefbcdcb849847b69658ab4,2025-06-26T18:57:43.670000
CVE-2025-66030,0,0,5258ac36da758ea6d2e79156850fc1ea0a7cdffc379144e45838245febaacc30,2025-11-26T23:15:49.237000
CVE-2025-66031,0,0,974c175d2f791a9c424506df6e9139553152bc3d3ae9b5c5b2353c646ea8f2bd,2025-11-26T23:15:49.397000
CVE-2025-66034,1,1,ab02b695c61f81bc919077f5127908fded2de1351a422986c850fc52fb9c0354,2025-11-29T01:16:02.967000
CVE-2025-66034,0,0,ab02b695c61f81bc919077f5127908fded2de1351a422986c850fc52fb9c0354,2025-11-29T01:16:02.967000
CVE-2025-66035,0,0,2c14c0c373fab5112d978d0a6d7d8ca1ca3c242f8ecd5bdeefa828b706990a79,2025-11-26T23:15:49.550000
CVE-2025-66036,1,1,43d387d6bafc9c959fce6e8aefc0680251f34d2f29ee462c576b06467d8adc58,2025-11-29T02:15:52.257000
CVE-2025-66036,0,0,43d387d6bafc9c959fce6e8aefc0680251f34d2f29ee462c576b06467d8adc58,2025-11-29T02:15:52.257000
CVE-2025-6604,0,0,96d4dfdd3e003ea63aa1e4bba18d79cbe7cea5abcd4dc3ee0391b4f83c2246d2,2025-07-02T16:36:48.957000
CVE-2025-66040,0,0,add5e5748d82dc398d8f0344331b7f64ed8b1477d14a3d34678fe0494441d290,2025-11-27T00:15:55.343000
CVE-2025-6605,0,0,3b1e9a90fef26eeec1cb23b63bf01d509568da803a212f4c59d24734ac4ce5b3,2025-07-02T16:34:13.343000
@@ -316580,9 +316589,15 @@ CVE-2025-66186,0,0,dd844bb607099e4a31a60fe63ad43c19ca947649f55fc30d14f51c0068783
CVE-2025-66187,0,0,952662b39938f1c4fd582d536c74a2e1beb8f6c48bce3128e45c0d7a53bcb11b,2025-11-25T04:15:46.443000
CVE-2025-6619,0,0,7d502e0f9c280ac237d264ea47e9d56f2c9f885e9391d98b4346ea7561f6a820,2025-06-27T18:19:19.447000
CVE-2025-6620,0,0,a58ab2b80e3779d32d4e3358d3d356ad6dfc021a674a6471533aa7b324e1ebbe,2025-06-27T18:11:26.180000
CVE-2025-66201,1,1,f959a3370b64d7b726b3b458ad263e39f1709f388e5f2668af935bb0ba87210b,2025-11-29T02:15:52.420000
CVE-2025-66201,0,0,f959a3370b64d7b726b3b458ad263e39f1709f388e5f2668af935bb0ba87210b,2025-11-29T02:15:52.420000
CVE-2025-6621,0,0,31225189b3a0ed561d6ef4522df51388559053b3febb508a0b1393ddfa4112ad,2025-06-27T18:10:30.697000
CVE-2025-66219,1,1,cd525097e96bf1343a3124d3c9653e3003c0f920e188b31b41d336dcb8567292,2025-11-29T02:15:52.577000
CVE-2025-66216,1,1,e323161993bf92239e4b37a6056ad511021c54d3c100f88ed08f8fe3d6617aef,2025-11-29T03:15:59.710000
CVE-2025-66217,1,1,f2b11042f05348120902147512a12512c2ae0d2238134b4ffef0593362feefc2,2025-11-29T03:15:59.880000
CVE-2025-66219,0,0,cd525097e96bf1343a3124d3c9653e3003c0f920e188b31b41d336dcb8567292,2025-11-29T02:15:52.577000
CVE-2025-66221,1,1,f89ae892743e84b3b01be863fda6a8bea3a663d0ab4d2fde416828306b08325a,2025-11-29T03:16:00.050000
CVE-2025-66223,1,1,288b699ac899a4655240663ba571fea3d49704c3000bac27b25b54756993db0d,2025-11-29T03:16:00.227000
CVE-2025-66224,1,1,e688e8a22be15393a5fb27f442a2a99e0f4fcf5568145cd4182c8386372a5d07,2025-11-29T04:15:57.497000
CVE-2025-66225,1,1,3970c4069741832d949a47b4a3b65df7beb3a38b5c0862fd52040d4afa9ca406,2025-11-29T04:15:57.740000
CVE-2025-66228,0,0,d462912f73288d9a0a58f097d9d1ec70d872e28ee79ce2a7150581821085e57f,2025-11-26T04:15:56.820000
CVE-2025-66229,0,0,97849dc13c326fa2704e6f67d229b17b83eb5c02806cf2165143c985009442e8,2025-11-26T04:15:57.327000
CVE-2025-66230,0,0,516410c117777a688d695caee3e6f04cf6507f83af09938f2a6b1f26c5a8de3d,2025-11-26T04:15:57.393000
@@ -316613,6 +316628,9 @@ CVE-2025-66265,0,0,c6dfd481bc5b465bbf345c81e5a7f38a25bd36205de4ed1c229d8bd0a6080
CVE-2025-66266,0,0,ccde6938a698a6cc2df7674aca7f237587f3146143d6c7f29ad38656c032f054,2025-11-26T02:15:49.977000
CVE-2025-66269,0,0,70fc9ff307174492934645d4421d9a955f42b887396c7bd79b44b0f3fbde23f5,2025-11-26T02:15:50.130000
CVE-2025-6627,0,0,ac42708d70135c1e2f3d3c95b24cee76ad7c50967f5771ee2df2dd6c238666eb,2025-07-16T19:35:19.783000
CVE-2025-66289,1,1,8995a36e60b241ce905e2a8449450b89a2b355fb5631abad863083f299089354,2025-11-29T04:15:57.893000
CVE-2025-66290,1,1,a794baa6782b2dfc29b02c6688d40319cdf2535772b803d828f65e94a29d9732,2025-11-29T04:15:58.040000
CVE-2025-66291,1,1,19bfbb2ed527f40e485db60775d9c8d6f29144b5bf02c43a689c444a0b5899e3,2025-11-29T04:15:58.200000
CVE-2025-6631,0,0,86d2ee25bdf69ddf1aaf6049188589a2db446e1def446432dc1bb9a87223c0b5,2025-08-19T14:15:41.790000
CVE-2025-66314,0,0,554f8fefd4e966032649156ff6ba5622c1935d8fcfe4b8534ae890f529409f66,2025-11-27T03:15:58.967000
CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959eeb7,2025-11-13T19:41:50.260000
Can't render this file because it is too large.