diff --git a/CVE-2025/CVE-2025-121xx/CVE-2025-12155.json b/CVE-2025/CVE-2025-121xx/CVE-2025-12155.json new file mode 100644 index 00000000000..7b8e5cb7cab --- /dev/null +++ b/CVE-2025/CVE-2025-121xx/CVE-2025-12155.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-12155", + "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "published": "2025-11-10T09:15:41.620", + "lastModified": "2025-11-10T09:15:41.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows an attacker with Developer permission to execute arbitrary shell commands when a user is deleted on the host system.\n\nLooker-hosted and Self-hosted were found to be vulnerable.\nThis issue has already been mitigated for Looker-hosted\u00a0instances. No user action is required for these.\n\nSelf-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted.\nThe versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ :\n * 24.12.100+\n * 24.18.192+\n * 25.0.69+\n * 25.6.57+\n * 25.8.39+\n * 25.10.22+" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "PRESENT", + "Automatable": "YES", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "RED" + } + } + ] + }, + "weaknesses": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://cloud.google.com/support/bulletins#gcp-2025-052", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-123xx/CVE-2025-12397.json b/CVE-2025/CVE-2025-123xx/CVE-2025-12397.json new file mode 100644 index 00000000000..5896e327e06 --- /dev/null +++ b/CVE-2025/CVE-2025-123xx/CVE-2025-12397.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-12397", + "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "published": "2025-11-10T09:15:41.913", + "lastModified": "2025-11-10T09:15:41.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A SQL injection vulnerability was found in Looker Studio.\n\nA Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source.\n\nThis vulnerability was patched on 21 July 2025, and no customer action is needed." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "CLEAR" + } + } + ] + }, + "weaknesses": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://cloud.google.com/support/bulletins#gcp-2025-053", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + }, + { + "url": "https://www.tenable.com/security/research/tra-2025-28", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12405.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12405.json new file mode 100644 index 00000000000..662c2fd2a3d --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12405.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-12405", + "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "published": "2025-11-10T10:15:34.920", + "lastModified": "2025-11-10T10:15:34.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An improper privilege management vulnerability was found in Looker Studio.\u00a0It impacted all JDBC-based connectors.\n\nA Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attached to the report.\n\nThis vulnerability was patched on 21 July 2025, and no customer action is needed." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "CLEAR" + } + } + ] + }, + "weaknesses": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://cloud.google.com/support/bulletins#gcp-2025-053", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + }, + { + "url": "https://www.tenable.com/security/research/tra-2025-29", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12409.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12409.json new file mode 100644 index 00000000000..5fe7946e252 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12409.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-12409", + "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "published": "2025-11-10T09:15:42.107", + "lastModified": "2025-11-10T09:15:42.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data sources.\n \nBy creating a malicious report with native functions enabled, and having the victim access the report, an attacker could execute injected SQL queries with the victim's permissions in BigQuery.\n\nThis vulnerability was patched on 07 July 2025, and no customer action is needed." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "CLEAR" + } + } + ] + }, + "weaknesses": [ + { + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://cloud.google.com/support/bulletins#gcp-2025-053", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + }, + { + "url": "https://www.tenable.com/security/research/tra-2025-27", + "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-410xx/CVE-2025-41001.json b/CVE-2025/CVE-2025-410xx/CVE-2025-41001.json new file mode 100644 index 00000000000..9bfc6b098ac --- /dev/null +++ b/CVE-2025/CVE-2025-410xx/CVE-2025-41001.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41001", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-10T10:15:35.550", + "lastModified": "2025-11-10T10:15:35.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'LOGOUT_REDIRECT' parameter in '/soplanning/www/process/options.php'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-soplanning", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41107.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41107.json new file mode 100644 index 00000000000..327a41ae8d8 --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41107.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41107", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-10T09:15:42.270", + "lastModified": "2025-11-10T09:15:42.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname', 'guardian_name' and others. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her session cookie details." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-smart-school", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index d49f55e9b4c..2488fdf7175 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T09:00:11.967197+00:00 +2025-11-10T11:00:11.427901+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T08:15:33.957000+00:00 +2025-11-10T10:15:35.550000+00:00 ``` ### Last Data Feed Release @@ -33,14 +33,19 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317432 +317438 ``` ### CVEs added in the last Commit -Recently added CVEs: `1` +Recently added CVEs: `6` -- [CVE-2025-41731](CVE-2025/CVE-2025-417xx/CVE-2025-41731.json) (`2025-11-10T08:15:33.957`) +- [CVE-2025-12155](CVE-2025/CVE-2025-121xx/CVE-2025-12155.json) (`2025-11-10T09:15:41.620`) +- [CVE-2025-12397](CVE-2025/CVE-2025-123xx/CVE-2025-12397.json) (`2025-11-10T09:15:41.913`) +- [CVE-2025-12405](CVE-2025/CVE-2025-124xx/CVE-2025-12405.json) (`2025-11-10T10:15:34.920`) +- [CVE-2025-12409](CVE-2025/CVE-2025-124xx/CVE-2025-12409.json) (`2025-11-10T09:15:42.107`) +- [CVE-2025-41001](CVE-2025/CVE-2025-410xx/CVE-2025-41001.json) (`2025-11-10T10:15:35.550`) +- [CVE-2025-41107](CVE-2025/CVE-2025-411xx/CVE-2025-41107.json) (`2025-11-10T09:15:42.270`) ### CVEs modified in the last Commit diff --git a/_state.csv b/_state.csv index 5168bca7db5..82605e21ff0 100644 --- a/_state.csv +++ b/_state.csv @@ -287243,6 +287243,7 @@ CVE-2025-12142,0,0,5113c9770bd129f3f313d8af57f92292eeec384f8666192aef43b4c53dfdf CVE-2025-12147,0,0,4b650092d3b6e630c6eef4a3fd04a61cce7d21291bb149508189d09ae5b41543,2025-10-30T15:03:13.440000 CVE-2025-12148,0,0,15664fc1e11bd7cc7e754e848b7c78051d528efd7fb6991d874f53d675e75574,2025-10-30T15:03:13.440000 CVE-2025-1215,0,0,07ddd3fd3d55438353bcb7e0c3e4cf4b1378d56cbbd763bb2a52a0d379b4ca82,2025-08-13T17:28:19.607000 +CVE-2025-12155,1,1,d4dfee5695cc786b1499860cee31288bfea4979a2e220e0957e220a66d71d713,2025-11-10T09:15:41.620000 CVE-2025-12156,0,0,40b41a0ae890e9fc364a3b35bfe9e9c4a89220d3ec9e6427c8422a610b3b411e,2025-11-04T15:40:45.533000 CVE-2025-12157,0,0,4b1b2da9e6ac2bb4185d3dc9fc7b98d0fcad36cc1bad652e73238da2e0884532,2025-11-04T15:40:45.533000 CVE-2025-12158,0,0,75e82560d3c0001c25ef033d591fddc1ff117faf5deb99040776aad99480a45b,2025-11-04T15:40:45.533000 @@ -287440,12 +287441,15 @@ CVE-2025-1239,0,0,6187788ffe5fd6000cc24d081f477dcae5b0ef59871d160b3ff23ee25b8185 CVE-2025-12390,0,0,3bed7623ac2553abb9268e9c49f60b2a1ccfc8afe8740958e59c71fff6f8e27d,2025-10-30T15:05:32.197000 CVE-2025-12393,0,0,e601da3241e71041455d2665f19b2aede9f83897777cf24b4ea85c2fc95531b3,2025-11-04T15:40:45.533000 CVE-2025-12396,0,0,d322b24a728715edb2b5004f826d58ce7d7abc354420805a16698f066a41392e,2025-11-04T15:40:45.533000 +CVE-2025-12397,1,1,429971aded5e0fa041aa722662d695de203e5e453ded069346e4428892566706,2025-11-10T09:15:41.913000 CVE-2025-12399,0,0,1dfe559e87a807045b04da1b990a869ab5720fc199b1fb4983a3788a3f8360e3,2025-11-08T10:15:41.383000 CVE-2025-1240,0,0,9207c023a2eb5247a0aa25e5fc1282e1ffb9334849a8245d9bb07761a338e654,2025-08-18T18:14:05.933000 CVE-2025-12400,0,0,86e589bb93cf63edc77e2a4147fd6f6046ec72eb7ea8204168367c156973fb5d,2025-11-04T15:40:45.533000 CVE-2025-12401,0,0,54465a2b3dfba7e5d5df7ded1c1969a6e09bf32d7186d8614bbc61a6f7f5f758,2025-11-04T15:40:45.533000 CVE-2025-12402,0,0,54d4affa12e21652c366b881039b4a514f873f2745db7eadb54e4039354b4d85,2025-11-04T15:40:45.533000 CVE-2025-12403,0,0,a17750f092d4ff3e37d544e2bf49f6b5069c6cfeba59ca3e3c44c76934339aa1,2025-11-04T15:40:45.533000 +CVE-2025-12405,1,1,72dd2d558edcbbe641cef0b1e75e86e0eb80fd6b082ae795746605a82a1cafbb,2025-11-10T10:15:34.920000 +CVE-2025-12409,1,1,bf1e75470b0d8ab379a21a544e342e55f20d663040c6b2ec1b238fa43c77cd80,2025-11-10T09:15:42.107000 CVE-2025-12410,0,0,52e161cb17b04455731910876e0b817b3d52fdc717a10666c8847e05bdcabab3,2025-11-04T15:40:45.533000 CVE-2025-12412,0,0,7ca7ab82f5456740837dbfa39a61e5a75051cf165d485d144537ce310e1a9bc6,2025-11-04T15:40:45.533000 CVE-2025-12413,0,0,5d7fe3a7e47a475a9c0ef94ac93fed937f84f5c66411a28364a8806394690eb4,2025-11-04T15:40:45.533000 @@ -302152,6 +302156,7 @@ CVE-2025-40991,0,0,2b8f577899c9babf9388113b1712000db1dea8942bb2730142d93ca4b1d08 CVE-2025-40992,0,0,04af027a2ce64849f254bfca6129247e21068d0c9c234df3850bd3df12ead582,2025-10-02T19:11:46.753000 CVE-2025-4100,0,0,f77bad4e79dd995e69fb9df2c2feed5b3f15d25f3ec0714aaa9ab5523a58223e,2025-05-02T13:53:40.163000 CVE-2025-41000,0,0,9e192a2cdab387d989a2ab959094b17d0397755d90aaffc51f0bffb2a1bb23f1,2025-09-04T15:36:56.447000 +CVE-2025-41001,1,1,910696ca7ad30a633f79e1abff8671135814b1d70ec3535df9a6f66eb8a7a851,2025-11-10T10:15:35.550000 CVE-2025-41009,0,0,1e437cdf30a805a93aade3e25c046077b8b21d65d782a6d4ca53a02b0663db46,2025-10-27T13:19:49.063000 CVE-2025-4101,0,0,481e3ee81d9ced511d86706ddbf21e16ba7244b1e206df435d80c8013121d01e,2025-05-28T13:28:20.060000 CVE-2025-41010,0,0,617233dcf968c2ef59a005a34cc8e415cf24df10b488720ee50760a522f5edd3,2025-10-02T19:11:46.753000 @@ -302220,6 +302225,7 @@ CVE-2025-41098,0,0,63ac03e59a04f085841d2367423411e18763979ea88a7a8890daf826b7936 CVE-2025-41099,0,0,1451204dc2b6947c054aefa02c1189af006d835a011f3f40d5c42fc322743e05,2025-10-08T18:19:30.180000 CVE-2025-4110,0,0,fd5a30cb18c679e287075f1b25f0289870ef8e9bc37a37e044518a1363d067bf,2025-05-13T20:26:02.303000 CVE-2025-41100,0,0,ff8637fcca0418613844862418daca43790832f69699cc94ee82bd9abc57fbf6,2025-07-22T13:06:07.260000 +CVE-2025-41107,1,1,4b957ac35b0e505baa9b57f230534bf9b267e5d9e0b0152d053bf0157e2d99f5,2025-11-10T09:15:42.270000 CVE-2025-41108,0,0,52accd4a39ec2333c88ddb5add245f04fd308af1e48439ef7f0e9e3e22c490e6,2025-10-31T19:45:12.163000 CVE-2025-41109,0,0,3af0b58a01f80322e8c136f6abeb21cc55fb6007bbad8622a5356225e268d0a7,2025-10-31T19:39:30.097000 CVE-2025-4111,0,0,466484c80cbba1cd409c75fa245e9cf25953e28a3ccc29f0f80efd1aa64962ac,2025-05-13T20:25:46.647000 @@ -302458,7 +302464,7 @@ CVE-2025-41722,0,0,b4ad39f04f516e3fd57ba54e99705cc46b48cf60ef8ae70df3d69e7bb30a3 CVE-2025-41723,0,0,a3a0d43ba8348d1125a76e79a3042fb74d16e755778571c8d7a32dc795072335,2025-10-22T21:12:48.953000 CVE-2025-41724,0,0,83ba82d0d235057a772584194ee2dd5010cd250a1d983268be740fac0759a2c8,2025-10-22T21:12:48.953000 CVE-2025-4173,0,0,cf78fe2a681982bae44e315af8065e2735edf119a3eea2f809af34baeaa9b4fa,2025-05-13T20:27:33.350000 -CVE-2025-41731,1,1,35b24eedada3af2c41a14f2da7e3c7d9a177f580d992fcdc585d63bae3701158,2025-11-10T08:15:33.957000 +CVE-2025-41731,0,0,35b24eedada3af2c41a14f2da7e3c7d9a177f580d992fcdc585d63bae3701158,2025-11-10T08:15:33.957000 CVE-2025-4174,0,0,374a4c7153fd6e36d67a39d51e1e6a753f33240eda49b0fa60c0eb795e601fa7,2025-05-09T13:42:33.097000 CVE-2025-4175,0,0,0e49e508397d52b97eca58de7f67fa4365215dc6eedf4faf92e674efc7be9789,2025-05-10T06:15:49.270000 CVE-2025-4176,0,0,02ad6ed70196134b94db0e4139435e59de2aaaa51a657ae3a4c51dcac9e3ae92,2025-05-09T13:42:13.533000