From 660e562d1f5ac28b3c5785ecfa52615c667bda02 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 10 Nov 2025 05:04:02 +0000 Subject: [PATCH] Auto-Update: 2025-11-10T05:00:11.397332+00:00 --- CVE-2025/CVE-2025-128xx/CVE-2025-12864.json | 104 ++++++++++++++ CVE-2025/CVE-2025-128xx/CVE-2025-12865.json | 104 ++++++++++++++ CVE-2025/CVE-2025-128xx/CVE-2025-12866.json | 104 ++++++++++++++ CVE-2025/CVE-2025-128xx/CVE-2025-12867.json | 104 ++++++++++++++ CVE-2025/CVE-2025-128xx/CVE-2025-12868.json | 104 ++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12926.json | 145 +++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12927.json | 141 ++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12928.json | 149 ++++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12929.json | 145 +++++++++++++++++++ CVE-2025/CVE-2025-129xx/CVE-2025-12930.json | 145 +++++++++++++++++++ CVE-2025/CVE-2025-99xx/CVE-2025-9900.json | 6 +- README.md | 27 ++-- _state.csv | 24 +++- 13 files changed, 1283 insertions(+), 19 deletions(-) create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12864.json create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12865.json create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12866.json create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12867.json create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12868.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12926.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12927.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12928.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12929.json create mode 100644 CVE-2025/CVE-2025-129xx/CVE-2025-12930.json diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json new file mode 100644 index 00000000000..654b344c022 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12864.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12864", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-10T03:15:42.017", + "lastModified": "2025-11-10T03:15:42.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10489-a5a6d-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10488-2df22-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json new file mode 100644 index 00000000000..a0d03726243 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12865.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12865", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-10T03:15:42.280", + "lastModified": "2025-11-10T03:15:42.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10489-a5a6d-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10488-2df22-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12866.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12866.json new file mode 100644 index 00000000000..de34cbfdd5f --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12866.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12866", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-10T03:15:42.467", + "lastModified": "2025-11-10T03:15:42.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-640" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10491-004b0-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10490-2534b-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12867.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12867.json new file mode 100644 index 00000000000..b0a60fd540a --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12867.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12867", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-10T04:15:41.360", + "lastModified": "2025-11-10T04:15:41.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10491-004b0-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10490-2534b-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12868.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12868.json new file mode 100644 index 00000000000..5dfffcbef4d --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12868.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12868", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-10T04:15:41.563", + "lastModified": "2025-11-10T04:15:41.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-603" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10492-84a10-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10493-bf807-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json new file mode 100644 index 00000000000..31810bf2d0e --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12926.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12926", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T03:15:42.653", + "lastModified": "2025-11-10T03:15:42.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/R178/cve/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331646", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331646", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.681506", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12927.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12927.json new file mode 100644 index 00000000000..db3c9eeefbe --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12927.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-12927", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T03:15:42.853", + "lastModified": "2025-11-10T03:15:42.853", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipulation of the argument flags[] leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ZZCTD/zz_test/issues/4", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331647", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331647", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.681507", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12928.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12928.json new file mode 100644 index 00000000000..b3dc54a7871 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12928.json @@ -0,0 +1,149 @@ +{ + "id": "CVE-2025-12928", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T04:15:41.750", + "lastModified": "2025-11-10T04:15:41.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://code-projects.org/", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Online%20Job%20Search%20Engine.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Online%20Job%20Search%20Engine.md#proof-of-concept-poc", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331648", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331648", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.681740", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json new file mode 100644 index 00000000000..29c9354680e --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12929.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12929", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T04:15:41.943", + "lastModified": "2025-11-10T04:15:41.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331649", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331649", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.681746", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json new file mode 100644 index 00000000000..fc4bf527cb9 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-12930", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-10T04:15:42.127", + "lastModified": "2025-11-10T04:15:42.127", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/puppytgyh/-CVE/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.331650", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.331650", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.682185", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json b/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json index 1f9e7383880..0fd560a5c40 100644 --- a/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json +++ b/CVE-2025/CVE-2025-99xx/CVE-2025-9900.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9900", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-23T17:15:38.357", - "lastModified": "2025-11-07T22:15:39.977", + "lastModified": "2025-11-10T03:15:43.220", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -88,6 +88,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19906", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:19947", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-9900", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index 6fb3333f99c..5c188aa6d57 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T03:00:11.086155+00:00 +2025-11-10T05:00:11.397332+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T02:15:35.123000+00:00 +2025-11-10T04:15:42.127000+00:00 ``` ### Last Data Feed Release @@ -33,25 +33,30 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317415 +317425 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `10` -- [CVE-2025-12922](CVE-2025/CVE-2025-129xx/CVE-2025-12922.json) (`2025-11-10T01:15:36.847`) -- [CVE-2025-12923](CVE-2025/CVE-2025-129xx/CVE-2025-12923.json) (`2025-11-10T01:15:37.860`) -- [CVE-2025-12924](CVE-2025/CVE-2025-129xx/CVE-2025-12924.json) (`2025-11-10T02:15:34.097`) -- [CVE-2025-12925](CVE-2025/CVE-2025-129xx/CVE-2025-12925.json) (`2025-11-10T02:15:34.917`) +- [CVE-2025-12864](CVE-2025/CVE-2025-128xx/CVE-2025-12864.json) (`2025-11-10T03:15:42.017`) +- [CVE-2025-12865](CVE-2025/CVE-2025-128xx/CVE-2025-12865.json) (`2025-11-10T03:15:42.280`) +- [CVE-2025-12866](CVE-2025/CVE-2025-128xx/CVE-2025-12866.json) (`2025-11-10T03:15:42.467`) +- [CVE-2025-12867](CVE-2025/CVE-2025-128xx/CVE-2025-12867.json) (`2025-11-10T04:15:41.360`) +- [CVE-2025-12868](CVE-2025/CVE-2025-128xx/CVE-2025-12868.json) (`2025-11-10T04:15:41.563`) +- [CVE-2025-12926](CVE-2025/CVE-2025-129xx/CVE-2025-12926.json) (`2025-11-10T03:15:42.653`) +- [CVE-2025-12927](CVE-2025/CVE-2025-129xx/CVE-2025-12927.json) (`2025-11-10T03:15:42.853`) +- [CVE-2025-12928](CVE-2025/CVE-2025-129xx/CVE-2025-12928.json) (`2025-11-10T04:15:41.750`) +- [CVE-2025-12929](CVE-2025/CVE-2025-129xx/CVE-2025-12929.json) (`2025-11-10T04:15:41.943`) +- [CVE-2025-12930](CVE-2025/CVE-2025-129xx/CVE-2025-12930.json) (`2025-11-10T04:15:42.127`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `1` -- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-11-10T02:00:02.070`) -- [CVE-2025-7195](CVE-2025/CVE-2025-71xx/CVE-2025-7195.json) (`2025-11-10T02:15:35.123`) +- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-10T03:15:43.220`) ## Download and Usage diff --git a/_state.csv b/_state.csv index dfc65fd0dcb..1b2629fde47 100644 --- a/_state.csv +++ b/_state.csv @@ -287602,6 +287602,11 @@ CVE-2025-12860,0,0,fd2617f48bea5582401b351b26efcc8e816882d48909c8aa58c17563000dd CVE-2025-12861,0,0,2a9d0d57e86d355ebe99e085a06e2ab0e9e5064b4d6a012cb4e34658dcae1858,2025-11-07T20:15:36.993000 CVE-2025-12862,0,0,6eae0f9cdb798ccf69001415f465480aec4ddc7a5e97de2685135c1e888e7739,2025-11-07T20:15:37.123000 CVE-2025-12863,0,0,8ebb46adf4566efdd111bbd59d7001ef2e736b9ab7c7da6b755706558e1abf99,2025-11-07T21:15:40.393000 +CVE-2025-12864,1,1,fdc6e2c63826b5fbb797441df0c5892a364957e9382806c33e2ced500724b435,2025-11-10T03:15:42.017000 +CVE-2025-12865,1,1,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6bed8,2025-11-10T03:15:42.280000 +CVE-2025-12866,1,1,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 +CVE-2025-12867,1,1,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 +CVE-2025-12868,1,1,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36 CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000 @@ -287629,11 +287634,16 @@ CVE-2025-12919,0,0,4243b506b58fd86594579f1c8cf8b8d2fee7487f310d2c5fbe64ad9ee7bb7 CVE-2025-1292,0,0,6568f137729359b8111485fc6ec65880f741714f273858898fae8156f3b6d61a,2025-10-06T16:55:26.270000 CVE-2025-12920,0,0,789abf6143d64b2ae61ed1f85a1f5ea5540bcb1cb127db2df0b9af4380e2d070,2025-11-09T23:15:46.520000 CVE-2025-12921,0,0,e58182d086419b889ce7111b14255a789d04187b6b422d39c67d4175115de70a,2025-11-10T00:15:44.943000 -CVE-2025-12922,1,1,dc961a5dd67922ac04ee9b5ec32e8eb531694bb84e301155e6cac3e18c498003,2025-11-10T01:15:36.847000 -CVE-2025-12923,1,1,7fefe359ccbe535d561149c79aa3926478ffb654927fba197f58b0cc91c509a3,2025-11-10T01:15:37.860000 -CVE-2025-12924,1,1,928b36e3da95ec1da7b33148e08f7baaccd196e8265f9a136de3d19aa3d6cc35,2025-11-10T02:15:34.097000 -CVE-2025-12925,1,1,47b8d74ccec35da5c4283a67168825af4778be99f427a7ead878949cefcb93ce,2025-11-10T02:15:34.917000 +CVE-2025-12922,0,0,dc961a5dd67922ac04ee9b5ec32e8eb531694bb84e301155e6cac3e18c498003,2025-11-10T01:15:36.847000 +CVE-2025-12923,0,0,7fefe359ccbe535d561149c79aa3926478ffb654927fba197f58b0cc91c509a3,2025-11-10T01:15:37.860000 +CVE-2025-12924,0,0,928b36e3da95ec1da7b33148e08f7baaccd196e8265f9a136de3d19aa3d6cc35,2025-11-10T02:15:34.097000 +CVE-2025-12925,0,0,47b8d74ccec35da5c4283a67168825af4778be99f427a7ead878949cefcb93ce,2025-11-10T02:15:34.917000 +CVE-2025-12926,1,1,5113564419bf3353ac0abd662fb387a35630b7e6d74a2cddfa7ef2443b5838fd,2025-11-10T03:15:42.653000 +CVE-2025-12927,1,1,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c589932271684b,2025-11-10T03:15:42.853000 +CVE-2025-12928,1,1,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 +CVE-2025-12929,1,1,a89300cd5635dcd02c8ed2aa6f0375a026d8ddd5764b5b1c36477b82425f15a7,2025-11-10T04:15:41.943000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 +CVE-2025-12930,1,1,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 @@ -309292,7 +309302,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000 CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000 CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000 -CVE-2025-54236,0,1,51e1bc7e0eb5bed87d85cb7bd3347f3cff203b59841249483040866ffc471a3e,2025-11-10T02:00:02.070000 +CVE-2025-54236,0,0,51e1bc7e0eb5bed87d85cb7bd3347f3cff203b59841249483040866ffc471a3e,2025-11-10T02:00:02.070000 CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000 CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000 CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000 @@ -314995,7 +315005,7 @@ CVE-2025-7191,0,0,e66a57537dc3bec64d2030738c1f287928d56f721c5c48933e32003ffaf932 CVE-2025-7192,0,0,89215e4d2d74f34e05fb14810bd206f01ccda23b16bbbf6a7d18705f98cb9bd8,2025-07-14T15:15:31.173000 CVE-2025-7193,0,0,0612dd7cbb9c4d3646c4956be623fd5db97964d82f158b31b993394eaba60885,2025-07-11T18:44:46.890000 CVE-2025-7194,0,0,bcdf6fccc12a491ad3fb89764dced636724a42f0d5b9ec94488439b9222d5c25,2025-07-14T15:14:48.423000 -CVE-2025-7195,0,1,5f3beb104280202ec8993f5218e86c824f399b6bc07574ceade1c60b53e71f13,2025-11-10T02:15:35.123000 +CVE-2025-7195,0,0,5f3beb104280202ec8993f5218e86c824f399b6bc07574ceade1c60b53e71f13,2025-11-10T02:15:35.123000 CVE-2025-7196,0,0,d07670cde94dbda892b97da526baa1c3f325e72b32e5cc5db0b6aa15ab60eca2,2025-07-11T17:13:32.047000 CVE-2025-7197,0,0,8f996f64f2ea4a36423f4bf75b38cf63125cf6f525fb3fef27949f7c024fbde6,2025-07-11T17:13:18.953000 CVE-2025-7198,0,0,95222239471552175ba03672adb5b10ce7ff890253a416e5632723e685aec6b4,2025-07-11T17:13:03.863000 @@ -317334,7 +317344,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,0,1cf4c57e17b11750e02b3190c30270fcceb89785032c8278755c370292854dac,2025-11-07T22:15:39.977000 +CVE-2025-9900,0,1,569988cbec1c4157e9c58576256ff3ee53537340724f6766249a4e67b71b355f,2025-11-10T03:15:43.220000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000