Auto-Update: 2025-10-13T14:00:14.570163+00:00

This commit is contained in:
cad-safe-bot committed 2025-10-13 14:03:59 +00:00
1 parent ac4629950a
commit 65b3febc40
5 files changed
+174 -45

No files matched your search

+44 -25
View File
@@ -2,13 +2,13 @@
"id": "CVE-2022-41648",
"sourceIdentifier": "[email protected]",
"published": "2022-10-28T18:15:12.723",
"lastModified": "2024-11-21T07:23:33.673",
"lastModified": "2025-10-13T13:15:31.543",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The HEIDENHAIN Controller TNC 640, version 340590 07 SP5, running HEROS 5.08.3 controlling the HARTFORD 5A-65E CNC machine is vulnerable to improper authentication, which may allow an attacker to deny service to the production line, steal sensitive data from the production line, and alter any products created by the production line."
"value": "The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CNC machines. Authentication is not enabled by default for DNC communication. This vulnerability may allow an attacker to deny service on the production line, steal sensitive data from the production line, and alter any products created by the production line. Note: CNC machines running the TNC 640 controller require DNC to be enabled for DNC communication to be present."
},
{
"lang": "es",
@@ -16,27 +16,51 @@
}
],
"metrics": {
"cvssMetricV31": [
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
@@ -62,17 +86,17 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-287"
"value": "CWE-1188"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -117,13 +141,8 @@
],
"references": [
{
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-02",
"source": "[email protected]",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
]
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-298-02",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-02",
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-6919",
"sourceIdentifier": "[email protected]",
"published": "2025-10-13T13:15:32.617",
"lastModified": "2025-10-13T13:15:32.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.This issue affects Aykome License Tracking System: through 06.10.2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://www.usom.gov.tr/bildirim/tr-25-0332",
"source": "[email protected]"
}
]
}
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-9902",
"sourceIdentifier": "[email protected]",
"published": "2025-10-13T13:15:32.820",
"lastModified": "2025-10-13T13:15:32.820",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Authorization Bypass Through User-Controlled Key vulnerability in AKIN Software Computer Import Export Industry and Trade Co. Ltd. QRMenu allows Privilege Abuse.This issue affects QRMenu: from 1.05.12 before Version dated 05.09.2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://www.usom.gov.tr/bildirim/tr-25-0333",
"source": "[email protected]"
}
]
}
+8 -12
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-13T12:00:12.197155+00:00
2025-10-13T14:00:14.570163+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-13T11:15:40.350000+00:00
2025-10-13T13:15:32.820000+00:00
```
### Last Data Feed Release
@@ -33,26 +33,22 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
313793
313795
```
### CVEs added in the last Commit
Recently added CVEs: `5`
Recently added CVEs: `2`
- [CVE-2025-10720](CVE-2025/CVE-2025-107xx/CVE-2025-10720.json) (`2025-10-13T10:15:45.590`)
- [CVE-2025-11183](CVE-2025/CVE-2025-111xx/CVE-2025-11183.json) (`2025-10-13T10:15:45.887`)
- [CVE-2025-11184](CVE-2025/CVE-2025-111xx/CVE-2025-11184.json) (`2025-10-13T10:15:46.123`)
- [CVE-2025-9336](CVE-2025/CVE-2025-93xx/CVE-2025-9336.json) (`2025-10-13T10:15:46.280`)
- [CVE-2025-9337](CVE-2025/CVE-2025-93xx/CVE-2025-9337.json) (`2025-10-13T10:15:46.440`)
- [CVE-2025-6919](CVE-2025/CVE-2025-69xx/CVE-2025-6919.json) (`2025-10-13T13:15:32.617`)
- [CVE-2025-9902](CVE-2025/CVE-2025-99xx/CVE-2025-9902.json) (`2025-10-13T13:15:32.820`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `1`
- [CVE-2024-13944](CVE-2024/CVE-2024-139xx/CVE-2024-13944.json) (`2025-10-13T10:15:44.547`)
- [CVE-2025-11153](CVE-2025/CVE-2025-111xx/CVE-2025-11153.json) (`2025-10-13T11:15:40.350`)
- [CVE-2022-41648](CVE-2022/CVE-2022-416xx/CVE-2022-41648.json) (`2025-10-13T13:15:31.543`)
## Download and Usage
+10 -8
View File
@@ -208280,7 +208280,7 @@ CVE-2022-41643,0,0,b1920c9e66420104c8d4308636fa5b3e5afec6e9d265886d7d255454a77f9
CVE-2022-41644,0,0,8281a3765382191891818e7f6156ae6670f03a4bafa1e291ae6eef4bb0ee9195,2024-11-21T07:23:33.253000
CVE-2022-41645,0,0,359bd794486dba66750ebcfe2730d28211f27eabb8531f9d643b57c966fd177d,2025-04-10T17:15:34.790000
CVE-2022-41646,0,0,3233617fb448a95d84c66e9c1ed7a09b60361fed15ad7791a7cfce4da9557c46,2024-11-21T07:23:33.540000
CVE-2022-41648,0,0,406195cd2cc7a8669dfd124ef0c1b57921de3f9c7ceafc5bd490a327f0beafef,2024-11-21T07:23:33.673000
CVE-2022-41648,0,1,1b2339b38127eba7248af021ce429b56e7dd1a3b28de98c33ae6819d054c8940,2025-10-13T13:15:31.543000
CVE-2022-41649,0,0,29c00f261055b96e8e16311a0ca448f77c7a0936de2c8666309d294f02c6f320,2024-11-21T07:23:33.827000
CVE-2022-4165,0,0,bf8047b7af84e3d7560dcb65c6042348b75167c04f12c549566b979530a442f2,2025-04-12T00:15:17.730000
CVE-2022-41651,0,0,6e85fe55db9fc968af4bb77c1f24a60937e35ff88ca31511b2845eafb7bcc8f2,2024-11-21T07:23:33.980000
@@ -250821,7 +250821,7 @@ CVE-2024-1394,0,0,2633e505b7b582a1f8ddc2a3797800eadbb5d327460526a321209f24d16a8d
CVE-2024-13940,0,0,7c0bd40986ec526be4b777967257f5a8e5316f112c6ca4442082e5ceb1f98c9d,2025-05-16T14:43:56.797000
CVE-2024-13941,0,0,0e25bcf0e89aef7755747b9909dd645785f611fc278474cc9d9d76a6dfcf2986,2025-04-02T14:58:07.527000
CVE-2024-13943,0,0,69202204b3396a5cc34ebb13a4b43f5d0c29eff17508d46ba69dd19867009025,2025-08-12T15:13:38.637000
CVE-2024-13944,0,1,c0bd174c649ac377da6bfb045ab8d11d578247ab01eb7934aa38b7fc0faf7e28,2025-10-13T10:15:44.547000
CVE-2024-13944,0,0,c0bd174c649ac377da6bfb045ab8d11d578247ab01eb7934aa38b7fc0faf7e28,2025-10-13T10:15:44.547000
CVE-2024-13945,0,0,37144e3e06f33fc22df8e40bb31c7a09bb00d46f555ec2f343c64b58fdaab26e,2025-05-23T15:54:42.643000
CVE-2024-13946,0,0,959060c3f68836f5433db29c2f316c3e8c01c8aaaba654db1495040052f6ffd6,2025-05-23T15:54:42.643000
CVE-2024-13947,0,0,0a1160190e1b1b2373977c01ddc1365d0ad354d3dc71274a75213218d05c297c,2025-05-23T15:54:42.643000
@@ -285819,7 +285819,7 @@ CVE-2025-10717,0,0,dc43b0ec52a0700848108bcf1522df3441441a681d6ae167da1726179e0dd
CVE-2025-10718,0,0,8651293f9411937db3ee662f7f5616ea73b8fa2dda6e6deba472d3f7ea5946ef,2025-09-22T21:23:01.543000
CVE-2025-10719,0,0,b78133c801185dbe11442bc65cd701cdd9ed6bf4e062ea9f98fdccdade78dc80,2025-09-19T16:00:27.847000
CVE-2025-1072,0,0,750813ceedfb7d92d875ecb99f21bf44014f112b560d1d1a3f685ed2bfe17c8b,2025-08-06T20:11:21.433000
CVE-2025-10720,1,1,d451ba42a2f688aeddbce1de94e32efdadd795f708a4ecad21736d02667a209b,2025-10-13T10:15:45.590000
CVE-2025-10720,0,0,d451ba42a2f688aeddbce1de94e32efdadd795f708a4ecad21736d02667a209b,2025-10-13T10:15:45.590000
CVE-2025-10721,0,0,5531e9dfa10cca95fb867dea200e8a3532d007d309f460ac287dc60a2859811a,2025-09-22T21:23:01.543000
CVE-2025-10722,0,0,6813f3053a14e77a913db307b2427d77139d69d712a057c66273caafa027b147,2025-09-22T21:23:01.543000
CVE-2025-10725,0,0,d19a2c34d8d869d980936e440ac656a9bcf010b1d24592311499052bec9ed8e3,2025-10-02T19:12:17.160000
@@ -286151,7 +286151,7 @@ CVE-2025-11149,0,0,5c760370a86190974b776e7b5f33f39af63ea91c0cc83e449770099e0387e
CVE-2025-1115,0,0,30d7245a282f9be9cd5e268e84a047b532c6864c57222cb265a909087aa7d476,2025-02-16T09:15:08.897000
CVE-2025-11150,0,0,ef285088004ba4efc8428154044efef10c72c2f630f3b0754c09321325c1b0f5,2025-09-29T19:15:34.727000
CVE-2025-11152,0,0,16b38b3e678b2c893b8db01f535ae5f3a3097162352d24f8716b8866782d23d9,2025-10-03T20:12:36.310000
CVE-2025-11153,0,1,439339fe63a58162f03e50ce1594a02d42da96ecf41074a6b03d3e9413cfaf37,2025-10-13T11:15:40.350000
CVE-2025-11153,0,0,439339fe63a58162f03e50ce1594a02d42da96ecf41074a6b03d3e9413cfaf37,2025-10-13T11:15:40.350000
CVE-2025-11155,0,0,8d5728262dfde324743d79fec74d7ce2fde4cc36b37b41bcc9c5b4716d2efabb,2025-09-29T19:34:10.030000
CVE-2025-1116,0,0,00a59e293e16dcad8521027625075db7b6762697e4bdc6e6648fad6aa5872375,2025-02-08T12:15:39.660000
CVE-2025-11163,0,0,5622799a51472ea6bf724affc0eb170f18efdabb3c9c818702d1c879bc599661,2025-10-02T19:12:42.843000
@@ -286162,8 +286162,8 @@ CVE-2025-11171,0,0,5a8dda304bf781722b72fd35429db9347168d2b7c02e9d161fc0346f508f5
CVE-2025-11178,0,0,e31468554530e42b769c33102b8d1f6d21d83a2dd24e1d987eb6ffa2b89adea6,2025-10-02T19:12:17.160000
CVE-2025-1118,0,0,2986f93de504f613bc6b964125f29a35cb34a2024ace165704bed058d520ce69,2025-09-18T09:15:35.407000
CVE-2025-11182,0,0,8844003dfff04cce9b3e0f4a0f4bc2d7f4c2e2f8faf79a519a0dce80283a3a5b,2025-10-02T19:11:46.753000
CVE-2025-11183,1,1,e97128a89e8d7405c89ae7abd9f35de4b0e6157d55a932910f988ad434eea827,2025-10-13T10:15:45.887000
CVE-2025-11184,1,1,f899c15bd6d8d58b49adb9cf26910d046dbea41f7321b830f351817de094852c,2025-10-13T10:15:46.123000
CVE-2025-11183,0,0,e97128a89e8d7405c89ae7abd9f35de4b0e6157d55a932910f988ad434eea827,2025-10-13T10:15:45.887000
CVE-2025-11184,0,0,f899c15bd6d8d58b49adb9cf26910d046dbea41f7321b830f351817de094852c,2025-10-13T10:15:46.123000
CVE-2025-11188,0,0,f51a0c95ca53c0af68e35370c8af9a30bb7f6073fcd80aac789808a1fd60bac4,2025-10-10T11:15:40.407000
CVE-2025-11189,0,0,8206304a0541f24dc7e97c407766e53bf5c337afa76dd824790e491e825eec54,2025-10-10T11:15:41.497000
CVE-2025-1119,0,0,ed2f2afd1626a47beb4c308f115314a6b5ebef6317483cf0ebb458fbd885cde2,2025-03-13T07:15:36.517000
@@ -311238,6 +311238,7 @@ CVE-2025-6915,0,0,a4c41fe4ef72f1169294ccef645962163e2e6d9c74ea1c7ef890b3e5258530
CVE-2025-6916,0,0,3ddb4b54a83fdfd89a9563fa673fced3928b7b90fa03b6e7407b43c77ee4d641,2025-07-07T14:41:39.973000
CVE-2025-6917,0,0,6cd11cceca206c91d8d3b66086170825c6b2ae3c019cef6e0718141d30597e9d,2025-07-07T14:42:17.613000
CVE-2025-6918,0,0,947efc5999eec4317b5cf7ddcb17cad5c6d178afdd50046fe234d55dfb3f968c,2025-07-29T14:14:29.590000
CVE-2025-6919,1,1,c4b862e23d6daf2f49098b99e61c28e5a411a06c19e93d2a9817589300251bf9,2025-10-13T13:15:32.617000
CVE-2025-6920,0,0,b536afe1c0ee3cb40c0dec7a1839ffda3b1ceaf48343bc6a7aae843f5860045e,2025-08-18T19:07:43.590000
CVE-2025-6921,0,0,b24ab95077bdbec69eb8ded63ef5625b7119f37967577c8a8400527fdf482bb0,2025-10-10T21:31:30.230000
CVE-2025-6925,0,0,554602ef2bf1f6960d92476190d8c7cb7b1355eebea61b986e8cf26cf004cd04,2025-09-16T13:46:47.007000
@@ -313258,8 +313259,8 @@ CVE-2025-9330,0,0,b77cb5c8c9f3aefcabe8f6b0fc6d012311c9fd1925fd8c4d5590cec292b068
CVE-2025-9331,0,0,a91b7532eb831cb92abe903722424152f84c9bcd018f16ab236ab83965f6099e,2025-08-22T18:08:51.663000
CVE-2025-9332,0,0,dc870a5423aa7a494699b41218ecb9996dc194fdaef807d1522968f8d75d37e6,2025-10-06T14:56:47.823000
CVE-2025-9333,0,0,f8e22049f773a7496bcd4bcef86a6211fc0687609cdd720594683d4672621be9,2025-10-06T14:56:47.823000
CVE-2025-9336,1,1,0ea1b9befed586b38e7dc7ca6de9d4f1a218f41694b0acc5084c5198e492e95c,2025-10-13T10:15:46.280000
CVE-2025-9337,1,1,a042ba5f0b2ede625f23a74b58805f36c23496163805d81bc88dfc38a883be8d,2025-10-13T10:15:46.440000
CVE-2025-9336,0,0,0ea1b9befed586b38e7dc7ca6de9d4f1a218f41694b0acc5084c5198e492e95c,2025-10-13T10:15:46.280000
CVE-2025-9337,0,0,a042ba5f0b2ede625f23a74b58805f36c23496163805d81bc88dfc38a883be8d,2025-10-13T10:15:46.440000
CVE-2025-9340,0,0,3b9c764bd869471de1988b5cf614180a0744eb6f136860118f05f1bfb923bfd2,2025-08-22T18:08:51.663000
CVE-2025-9341,0,0,31259ef13f5e5fbdb665c952a9accce89cfc872b9ebd1616f7401348d82e02d0,2025-08-30T06:15:36.327000
CVE-2025-9342,0,0,e9c2f34d61f4bda5677d8b264a7fcc4faf008a753fafdee1fb23fe8c132e804f,2025-09-24T18:11:24.520000
@@ -313721,6 +313722,7 @@ CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64
CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000
CVE-2025-9900,0,0,f92e739ec483faf85db3480405331dd1c92f6701aa10e92d3567404cc3c82f28,2025-10-13T02:15:34.853000
CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000
CVE-2025-9902,1,1,aeab208d469390d8cac9395fb04ea50b81f1d3715af4ffe3c89afe3a0bcf47d5,2025-10-13T13:15:32.820000
CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000
CVE-2025-9904,0,0,d042a33e74e2fcc69ccef8f188967f358bae2f34d568f6cf6e6e2c6c6792a311,2025-09-29T19:34:10.030000
CVE-2025-9905,0,0,964af7b0abbd66a636dad4aece6e6af8fefafb38a2126d44a9d2aa075e2d55a6,2025-09-23T16:53:40.050000
Can't render this file because it is too large.