mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 01:30:49 +00:00
Auto-Update: 2025-11-10T11:00:11.427901+00:00
This commit is contained in:
1 parent
ba1a932429
commit
6ee4ce1c42
8 files changed
+497
-6
No files matched your search
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-12155",
|
||||
"sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"published": "2025-11-10T09:15:41.620",
|
||||
"lastModified": "2025-11-10T09:15:41.620",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows an attacker with Developer permission to execute arbitrary shell commands when a user is deleted on the host system.\n\nLooker-hosted and Self-hosted were found to be vulnerable.\nThis issue has already been mitigated for Looker-hosted\u00a0instances. No user action is required for these.\n\nSelf-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted.\nThe versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ :\n * 24.12.100+\n * 24.18.192+\n * 25.0.69+\n * 25.6.57+\n * 25.8.39+\n * 25.10.22+"
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "PRESENT",
|
||||
"Automatable": "YES",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "RED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-77"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cloud.google.com/support/bulletins#gcp-2025-052",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-12397",
|
||||
"sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"published": "2025-11-10T09:15:41.913",
|
||||
"lastModified": "2025-11-10T09:15:41.913",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A SQL injection vulnerability was found in Looker Studio.\n\nA Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source.\n\nThis vulnerability was patched on 21 July 2025, and no customer action is needed."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
|
||||
"baseScore": 7.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "CLEAR"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cloud.google.com/support/bulletins#gcp-2025-053",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
},
|
||||
{
|
||||
"url": "https://www.tenable.com/security/research/tra-2025-28",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-12405",
|
||||
"sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"published": "2025-11-10T10:15:34.920",
|
||||
"lastModified": "2025-11-10T10:15:34.920",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An improper privilege management vulnerability was found in Looker Studio.\u00a0It impacted all JDBC-based connectors.\n\nA Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attached to the report.\n\nThis vulnerability was patched on 21 July 2025, and no customer action is needed."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
|
||||
"baseScore": 7.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "CLEAR"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-269"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cloud.google.com/support/bulletins#gcp-2025-053",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
},
|
||||
{
|
||||
"url": "https://www.tenable.com/security/research/tra-2025-29",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-12409",
|
||||
"sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"published": "2025-11-10T09:15:42.107",
|
||||
"lastModified": "2025-11-10T09:15:42.107",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data sources.\n \nBy creating a malicious report with native functions enabled, and having the victim access the report, an attacker could execute injected SQL queries with the victim's permissions in BigQuery.\n\nThis vulnerability was patched on 07 July 2025, and no customer action is needed."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "CLEAR"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cloud.google.com/support/bulletins#gcp-2025-053",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
},
|
||||
{
|
||||
"url": "https://www.tenable.com/security/research/tra-2025-27",
|
||||
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-41001",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T10:15:35.550",
|
||||
"lastModified": "2025-11-10T10:15:35.550",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'LOGOUT_REDIRECT' parameter in '/soplanning/www/process/options.php'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-soplanning",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-41107",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T09:15:42.270",
|
||||
"lastModified": "2025-11-10T09:15:42.270",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname', 'guardian_name' and others. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her session cookie details."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-smart-school",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-11-10T09:00:11.967197+00:00
|
||||
2025-11-10T11:00:11.427901+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-11-10T08:15:33.957000+00:00
|
||||
2025-11-10T10:15:35.550000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,14 +33,19 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
317432
|
||||
317438
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `1`
|
||||
Recently added CVEs: `6`
|
||||
|
||||
- [CVE-2025-41731](CVE-2025/CVE-2025-417xx/CVE-2025-41731.json) (`2025-11-10T08:15:33.957`)
|
||||
- [CVE-2025-12155](CVE-2025/CVE-2025-121xx/CVE-2025-12155.json) (`2025-11-10T09:15:41.620`)
|
||||
- [CVE-2025-12397](CVE-2025/CVE-2025-123xx/CVE-2025-12397.json) (`2025-11-10T09:15:41.913`)
|
||||
- [CVE-2025-12405](CVE-2025/CVE-2025-124xx/CVE-2025-12405.json) (`2025-11-10T10:15:34.920`)
|
||||
- [CVE-2025-12409](CVE-2025/CVE-2025-124xx/CVE-2025-12409.json) (`2025-11-10T09:15:42.107`)
|
||||
- [CVE-2025-41001](CVE-2025/CVE-2025-410xx/CVE-2025-41001.json) (`2025-11-10T10:15:35.550`)
|
||||
- [CVE-2025-41107](CVE-2025/CVE-2025-411xx/CVE-2025-41107.json) (`2025-11-10T09:15:42.270`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
+7
-1
@@ -287243,6 +287243,7 @@ CVE-2025-12142,0,0,5113c9770bd129f3f313d8af57f92292eeec384f8666192aef43b4c53dfdf
|
||||
CVE-2025-12147,0,0,4b650092d3b6e630c6eef4a3fd04a61cce7d21291bb149508189d09ae5b41543,2025-10-30T15:03:13.440000
|
||||
CVE-2025-12148,0,0,15664fc1e11bd7cc7e754e848b7c78051d528efd7fb6991d874f53d675e75574,2025-10-30T15:03:13.440000
|
||||
CVE-2025-1215,0,0,07ddd3fd3d55438353bcb7e0c3e4cf4b1378d56cbbd763bb2a52a0d379b4ca82,2025-08-13T17:28:19.607000
|
||||
CVE-2025-12155,1,1,d4dfee5695cc786b1499860cee31288bfea4979a2e220e0957e220a66d71d713,2025-11-10T09:15:41.620000
|
||||
CVE-2025-12156,0,0,40b41a0ae890e9fc364a3b35bfe9e9c4a89220d3ec9e6427c8422a610b3b411e,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12157,0,0,4b1b2da9e6ac2bb4185d3dc9fc7b98d0fcad36cc1bad652e73238da2e0884532,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12158,0,0,75e82560d3c0001c25ef033d591fddc1ff117faf5deb99040776aad99480a45b,2025-11-04T15:40:45.533000
|
||||
@@ -287440,12 +287441,15 @@ CVE-2025-1239,0,0,6187788ffe5fd6000cc24d081f477dcae5b0ef59871d160b3ff23ee25b8185
|
||||
CVE-2025-12390,0,0,3bed7623ac2553abb9268e9c49f60b2a1ccfc8afe8740958e59c71fff6f8e27d,2025-10-30T15:05:32.197000
|
||||
CVE-2025-12393,0,0,e601da3241e71041455d2665f19b2aede9f83897777cf24b4ea85c2fc95531b3,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12396,0,0,d322b24a728715edb2b5004f826d58ce7d7abc354420805a16698f066a41392e,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12397,1,1,429971aded5e0fa041aa722662d695de203e5e453ded069346e4428892566706,2025-11-10T09:15:41.913000
|
||||
CVE-2025-12399,0,0,1dfe559e87a807045b04da1b990a869ab5720fc199b1fb4983a3788a3f8360e3,2025-11-08T10:15:41.383000
|
||||
CVE-2025-1240,0,0,9207c023a2eb5247a0aa25e5fc1282e1ffb9334849a8245d9bb07761a338e654,2025-08-18T18:14:05.933000
|
||||
CVE-2025-12400,0,0,86e589bb93cf63edc77e2a4147fd6f6046ec72eb7ea8204168367c156973fb5d,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12401,0,0,54465a2b3dfba7e5d5df7ded1c1969a6e09bf32d7186d8614bbc61a6f7f5f758,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12402,0,0,54d4affa12e21652c366b881039b4a514f873f2745db7eadb54e4039354b4d85,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12403,0,0,a17750f092d4ff3e37d544e2bf49f6b5069c6cfeba59ca3e3c44c76934339aa1,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12405,1,1,72dd2d558edcbbe641cef0b1e75e86e0eb80fd6b082ae795746605a82a1cafbb,2025-11-10T10:15:34.920000
|
||||
CVE-2025-12409,1,1,bf1e75470b0d8ab379a21a544e342e55f20d663040c6b2ec1b238fa43c77cd80,2025-11-10T09:15:42.107000
|
||||
CVE-2025-12410,0,0,52e161cb17b04455731910876e0b817b3d52fdc717a10666c8847e05bdcabab3,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12412,0,0,7ca7ab82f5456740837dbfa39a61e5a75051cf165d485d144537ce310e1a9bc6,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12413,0,0,5d7fe3a7e47a475a9c0ef94ac93fed937f84f5c66411a28364a8806394690eb4,2025-11-04T15:40:45.533000
|
||||
@@ -302152,6 +302156,7 @@ CVE-2025-40991,0,0,2b8f577899c9babf9388113b1712000db1dea8942bb2730142d93ca4b1d08
|
||||
CVE-2025-40992,0,0,04af027a2ce64849f254bfca6129247e21068d0c9c234df3850bd3df12ead582,2025-10-02T19:11:46.753000
|
||||
CVE-2025-4100,0,0,f77bad4e79dd995e69fb9df2c2feed5b3f15d25f3ec0714aaa9ab5523a58223e,2025-05-02T13:53:40.163000
|
||||
CVE-2025-41000,0,0,9e192a2cdab387d989a2ab959094b17d0397755d90aaffc51f0bffb2a1bb23f1,2025-09-04T15:36:56.447000
|
||||
CVE-2025-41001,1,1,910696ca7ad30a633f79e1abff8671135814b1d70ec3535df9a6f66eb8a7a851,2025-11-10T10:15:35.550000
|
||||
CVE-2025-41009,0,0,1e437cdf30a805a93aade3e25c046077b8b21d65d782a6d4ca53a02b0663db46,2025-10-27T13:19:49.063000
|
||||
CVE-2025-4101,0,0,481e3ee81d9ced511d86706ddbf21e16ba7244b1e206df435d80c8013121d01e,2025-05-28T13:28:20.060000
|
||||
CVE-2025-41010,0,0,617233dcf968c2ef59a005a34cc8e415cf24df10b488720ee50760a522f5edd3,2025-10-02T19:11:46.753000
|
||||
@@ -302220,6 +302225,7 @@ CVE-2025-41098,0,0,63ac03e59a04f085841d2367423411e18763979ea88a7a8890daf826b7936
|
||||
CVE-2025-41099,0,0,1451204dc2b6947c054aefa02c1189af006d835a011f3f40d5c42fc322743e05,2025-10-08T18:19:30.180000
|
||||
CVE-2025-4110,0,0,fd5a30cb18c679e287075f1b25f0289870ef8e9bc37a37e044518a1363d067bf,2025-05-13T20:26:02.303000
|
||||
CVE-2025-41100,0,0,ff8637fcca0418613844862418daca43790832f69699cc94ee82bd9abc57fbf6,2025-07-22T13:06:07.260000
|
||||
CVE-2025-41107,1,1,4b957ac35b0e505baa9b57f230534bf9b267e5d9e0b0152d053bf0157e2d99f5,2025-11-10T09:15:42.270000
|
||||
CVE-2025-41108,0,0,52accd4a39ec2333c88ddb5add245f04fd308af1e48439ef7f0e9e3e22c490e6,2025-10-31T19:45:12.163000
|
||||
CVE-2025-41109,0,0,3af0b58a01f80322e8c136f6abeb21cc55fb6007bbad8622a5356225e268d0a7,2025-10-31T19:39:30.097000
|
||||
CVE-2025-4111,0,0,466484c80cbba1cd409c75fa245e9cf25953e28a3ccc29f0f80efd1aa64962ac,2025-05-13T20:25:46.647000
|
||||
@@ -302458,7 +302464,7 @@ CVE-2025-41722,0,0,b4ad39f04f516e3fd57ba54e99705cc46b48cf60ef8ae70df3d69e7bb30a3
|
||||
CVE-2025-41723,0,0,a3a0d43ba8348d1125a76e79a3042fb74d16e755778571c8d7a32dc795072335,2025-10-22T21:12:48.953000
|
||||
CVE-2025-41724,0,0,83ba82d0d235057a772584194ee2dd5010cd250a1d983268be740fac0759a2c8,2025-10-22T21:12:48.953000
|
||||
CVE-2025-4173,0,0,cf78fe2a681982bae44e315af8065e2735edf119a3eea2f809af34baeaa9b4fa,2025-05-13T20:27:33.350000
|
||||
CVE-2025-41731,1,1,35b24eedada3af2c41a14f2da7e3c7d9a177f580d992fcdc585d63bae3701158,2025-11-10T08:15:33.957000
|
||||
CVE-2025-41731,0,0,35b24eedada3af2c41a14f2da7e3c7d9a177f580d992fcdc585d63bae3701158,2025-11-10T08:15:33.957000
|
||||
CVE-2025-4174,0,0,374a4c7153fd6e36d67a39d51e1e6a753f33240eda49b0fa60c0eb795e601fa7,2025-05-09T13:42:33.097000
|
||||
CVE-2025-4175,0,0,0e49e508397d52b97eca58de7f67fa4365215dc6eedf4faf92e674efc7be9789,2025-05-10T06:15:49.270000
|
||||
CVE-2025-4176,0,0,02ad6ed70196134b94db0e4139435e59de2aaaa51a657ae3a4c51dcac9e3ae92,2025-05-09T13:42:13.533000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user