admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 01:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-06-09T22:00:19.689310+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-06-09 22:03:56 +00:00
1 parent 8dac63d24c
commit 7225724519
73 files changed
+3109 -438
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2018/CVE-2018-86xx/CVE-2018-8639.json
+9 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2018-8639",
"sourceIdentifier": "[email protected]",
"published": "2018-12-12T00:29:01.840",
"lastModified": "2025-06-06T18:15:33.090",
"vulnStatus": "Modified",
"lastModified": "2025-06-09T20:58:58.857",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -177,6 +177,11 @@
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*",
"matchCriteriaId": "B7674920-AE12-4A25-BE57-34AEDDA74D76"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
"matchCriteriaId": "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
@@ -192,16 +197,6 @@
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*",
"matchCriteriaId": "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
@@ -217,6 +212,7 @@
"url": "http://www.securityfocus.com/bid/106093",
"source": "[email protected]",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
]
@@ -233,6 +229,7 @@
"url": "http://www.securityfocus.com/bid/106093",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
]
CVE-2023/CVE-2023-29xx/CVE-2023-2921.json
+29 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-2921",
"sourceIdentifier": "[email protected]",
"published": "2025-06-06T06:15:30.597",
"lastModified": "2025-06-06T14:07:28.330",
"lastModified": "2025-06-09T20:15:22.043",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,11 +15,38 @@
"value": "El complemento Short URL de WordPress hasta la versi\u00f3n 1.6.8 no depura ni escapa adecuadamente un par\u00e1metro antes de usarlo en una declaraci\u00f3n SQL, lo que genera una inyecci\u00f3n SQL explotable por usuarios con privilegios relativamente bajos en el sitio, como los suscriptores."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"references": [
{
"url": "https://wpscan.com/vulnerability/0f85db4f-8493-4941-8f3c-e5258c581bdc/",
"source": "[email protected]"
},
{
"url": "https://wpscan.com/vulnerability/0f85db4f-8493-4941-8f3c-e5258c581bdc/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2023/CVE-2023-419xx/CVE-2023-41954.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-41954",
"sourceIdentifier": "[email protected]",
"published": "2024-05-17T07:15:59.533",
"lastModified": "2024-11-21T08:21:59.187",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:57:24.757",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:properfraction:profilepress:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.13.2",
"matchCriteriaId": "EA7A6C96-3C3A-47BD-A4CA-78D686509C1B"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-profilepress-plugin-4-13-1-unauthenticated-limited-privilege-escalation-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-profilepress-plugin-4-13-1-unauthenticated-limited-privilege-escalation-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-428xx/CVE-2023-42876.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-42876",
"sourceIdentifier": "[email protected]",
"published": "2024-01-10T22:15:50.370",
"lastModified": "2024-11-21T08:23:24.640",
"lastModified": "2025-06-09T21:15:44.683",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
CVE-2023/CVE-2023-477xx/CVE-2023-47770.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47770",
"sourceIdentifier": "[email protected]",
"published": "2024-06-19T12:15:11.630",
"lastModified": "2024-11-21T08:30:46.837",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:13:43.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:muffingroup:betheme:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "27.1.2",
"matchCriteriaId": "B835A272-4BD1-434C-8A38-3D5FFDD1FA07"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-27-1-1-contributor-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-27-1-1-contributor-broken-access-control-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-478xx/CVE-2023-47832.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47832",
"sourceIdentifier": "[email protected]",
"published": "2024-12-09T13:15:31.827",
"lastModified": "2024-12-09T13:15:31.827",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:39:14.633",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:searchiq:searchiq:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.5",
"matchCriteriaId": "805787D0-BF98-4F5A-8112-8345C08B58D6"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/searchiq/vulnerability/wordpress-searchiq-plugin-4-4-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-478xx/CVE-2023-47841.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47841",
"sourceIdentifier": "[email protected]",
"published": "2024-12-09T13:15:32.240",
"lastModified": "2024-12-09T13:15:32.240",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:39:59.850",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:analytify:analytify_-_google_analytics_dashboard:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "5.2.0",
"matchCriteriaId": "0E72A9D0-627C-4CE7-B5A3-F9B37DD07D97"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/wp-analytify/vulnerability/wordpress-analytify-plugin-5-1-1-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-487xx/CVE-2023-48740.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-48740",
"sourceIdentifier": "[email protected]",
"published": "2024-12-09T13:15:33.670",
"lastModified": "2024-12-09T13:15:33.670",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:46:12.823",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:easysocialfeed:easy_social_feed:*:*:*:*:free:wordpress:*:*",
"versionEndExcluding": "6.5.2",
"matchCriteriaId": "153C84D4-ADCF-4134-AEB4-6964F17C9F27"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/easy-facebook-likebox/vulnerability/wordpress-easy-social-feed-plugin-6-5-1-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-59xx/CVE-2023-5956.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-5956",
"sourceIdentifier": "[email protected]",
"published": "2024-01-29T15:15:09.203",
"lastModified": "2024-11-21T08:42:51.590",
"lastModified": "2025-06-09T21:15:45.473",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
CVE-2023/CVE-2023-61xx/CVE-2023-6163.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-6163",
"sourceIdentifier": "[email protected]",
"published": "2024-01-15T16:15:12.467",
"lastModified": "2024-11-21T08:43:16.960",
"lastModified": "2025-06-09T21:15:45.757",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
CVE-2024/CVE-2024-105xx/CVE-2024-10510.json
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-10510",
"sourceIdentifier": "[email protected]",
"published": "2024-11-28T06:15:08.120",
"lastModified": "2024-11-29T16:15:08.733",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:17:38.183",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:netfunkdesign:adbuddy\\+_\\(adblocker_detection\\):*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.1.3",
"matchCriteriaId": "7383D019-9CC5-4BB0-8394-0662C1E55C35"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/ca499752-b516-42e7-8c2f-18e4428a92c7/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-121xx/CVE-2024-12163.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12163",
"sourceIdentifier": "[email protected]",
"published": "2025-01-30T06:15:29.113",
"lastModified": "2025-01-30T16:15:29.770",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:19:40.777",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:goodlayers:goodlayers_core:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "2.1.3",
"matchCriteriaId": "AF7B3369-96CE-4BE3-ADC1-0C4E861C5922"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-124xx/CVE-2024-12400.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12400",
"sourceIdentifier": "[email protected]",
"published": "2025-01-30T06:15:29.223",
"lastModified": "2025-01-30T16:15:29.907",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:20:17.280",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:goodlayers:tour_master:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "5.3.5",
"matchCriteriaId": "8F63BFAF-A14C-4DF1-9244-B8AED40F3532"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-128xx/CVE-2024-12874.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12874",
"sourceIdentifier": "[email protected]",
"published": "2025-05-15T20:15:37.927",
"lastModified": "2025-05-20T20:15:33.430",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:01:29.967",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:top_comments_project:top_comments:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.0",
"matchCriteriaId": "20E43C30-C1C4-4CE5-86CD-0D31390105D4"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/7cc14a87-4605-49f6-9d51-0b9eb57e6c9d/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/7cc14a87-4605-49f6-9d51-0b9eb57e6c9d/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-130xx/CVE-2024-13053.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13053",
"sourceIdentifier": "[email protected]",
"published": "2025-05-15T20:15:38.013",
"lastModified": "2025-05-20T20:15:33.583",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:06:12.450",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:10web:form_maker:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.15.33",
"matchCriteriaId": "0DC5FEE9-9A2B-4BF2-8A2C-773415374D0C"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/1c667a70-8b38-4854-8969-2971f9c2fe79/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/1c667a70-8b38-4854-8969-2971f9c2fe79/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-228xx/CVE-2024-22818.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-22818",
"sourceIdentifier": "[email protected]",
"published": "2024-01-18T17:15:14.577",
"lastModified": "2024-11-21T08:56:40.953",
"lastModified": "2025-06-09T21:15:46.283",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -49,6 +69,16 @@
"value": "CWE-352"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"configurations": [
CVE-2024/CVE-2024-248xx/CVE-2024-24869.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-24869",
"sourceIdentifier": "[email protected]",
"published": "2024-05-17T09:15:23.480",
"lastModified": "2024-11-21T08:59:53.090",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:58:11.937",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:boldgrid:total_upkeep:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.15.9",
"matchCriteriaId": "954C0EFE-17B7-4DB4-888F-B8183321DB92"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/boldgrid-backup/wordpress-total-upkeep-plugin-1-15-8-arbitrary-file-download-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/boldgrid-backup/wordpress-total-upkeep-plugin-1-15-8-arbitrary-file-download-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-248xx/CVE-2024-24882.json
+58 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-24882",
"sourceIdentifier": "[email protected]",
"published": "2024-05-17T09:15:24.940",
"lastModified": "2024-11-21T08:59:54.853",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:06:55.863",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -49,16 +69,50 @@
"value": "CWE-269"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:themegrill:masteriyo:*:*:*:*:free:wordpress:*:*",
"versionEndExcluding": "1.7.3",
"matchCriteriaId": "B33DECEA-AB1D-44FC-BAA4-EDEA53C7B709"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/learning-management-system/wordpress-lms-by-masteriyo-plugin-1-7-2-privilege-escalation-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/learning-management-system/wordpress-lms-by-masteriyo-plugin-1-7-2-privilege-escalation-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-298xx/CVE-2024-29803.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-29803",
"sourceIdentifier": "[email protected]",
"published": "2024-03-27T13:15:52.397",
"lastModified": "2024-11-21T09:08:22.073",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:05:06.993",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mehanoid:flatpm:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.1.05",
"matchCriteriaId": "31664A41-BBB5-4C77-970B-9FEC38A40BC4"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/flatpm-wp/wordpress-flatpm-plugin-3-1-05-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/flatpm-wp/wordpress-flatpm-plugin-3-1-05-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-298xx/CVE-2024-29818.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-29818",
"sourceIdentifier": "[email protected]",
"published": "2024-03-27T12:15:10.410",
"lastModified": "2024-11-21T09:08:23.977",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:07:57.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:infotheme:wp_poll_maker:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.4",
"matchCriteriaId": "4CDD1BD5-9FD2-49F9-998E-A25CEA5DFE4C"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-1-authenticated-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-1-authenticated-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-301xx/CVE-2024-30180.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30180",
"sourceIdentifier": "[email protected]",
"published": "2024-03-27T12:15:11.357",
"lastModified": "2024-11-21T09:11:22.647",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:08:32.023",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:easysocialfeed:easy_social_feed:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "6.5.4",
"matchCriteriaId": "BC9A6FE0-704D-4F12-B7C0-37258FCF0F37"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-plugin-6-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-plugin-6-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-305xx/CVE-2024-30526.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-30526",
"sourceIdentifier": "[email protected]",
"published": "2024-03-31T19:15:46.497",
"lastModified": "2024-11-21T09:12:06.303",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:06:15.550",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:easysocialfeed:easy_social_feed:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "6.5.7",
"matchCriteriaId": "6BC07C13-2A39-4F29-BCC2-C461C4F2BA64"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-social-photos-gallery-post-feed-like-box-plugin-6-5-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-social-photos-gallery-post-feed-like-box-plugin-6-5-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-325xx/CVE-2024-32514.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32514",
"sourceIdentifier": "[email protected]",
"published": "2024-04-17T08:15:07.200",
"lastModified": "2024-11-21T09:15:04.567",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:06:37.693",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:infotheme:wp_poll_maker:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.5",
"matchCriteriaId": "AE8FB860-9EDF-4509-B4FC-00C6311C68DD"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-327xx/CVE-2024-32776.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32776",
"sourceIdentifier": "[email protected]",
"published": "2024-05-14T15:37:06.697",
"lastModified": "2024-11-21T09:15:41.907",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:52:21.977",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apppresser:apppresser:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.3.1",
"matchCriteriaId": "4DD1E947-09EF-47F3-ACD1-42F9CB726CA5"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/apppresser/wordpress-apppresser-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/apppresser/wordpress-apppresser-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-328xx/CVE-2024-32823.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32823",
"sourceIdentifier": "[email protected]",
"published": "2024-04-24T11:15:48.320",
"lastModified": "2024-11-21T09:15:47.990",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:07:22.240",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:blazzdev:rate_my_post:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.4.5",
"matchCriteriaId": "C68E10B8-C977-494C-92BF-E9CD1E5B34B8"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-plugin-3-4-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/rate-my-post/wordpress-rate-my-post-plugin-3-4-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-329xx/CVE-2024-32948.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32948",
"sourceIdentifier": "[email protected]",
"published": "2024-04-24T07:15:48.320",
"lastModified": "2024-11-21T09:16:05.803",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:06:58.697",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:reputeinfosystems:armember:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.0.29",
"matchCriteriaId": "E02217D7-8A22-434F-9FE3-2AA9AEC75017"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-343xx/CVE-2024-34372.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-34372",
"sourceIdentifier": "[email protected]",
"published": "2024-05-06T19:15:08.143",
"lastModified": "2024-11-21T09:18:31.923",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:51:50.023",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:addonmaster:post_grid_master:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.4.8",
"matchCriteriaId": "A20D3CAE-B444-4978-A251-488404AF515C"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/ajax-filter-posts/wordpress-post-grid-master-plugin-3-4-7-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/ajax-filter-posts/wordpress-post-grid-master-plugin-3-4-7-broken-access-control-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-343xx/CVE-2024-34390.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-34390",
"sourceIdentifier": "[email protected]",
"published": "2024-05-06T19:15:10.657",
"lastModified": "2024-11-21T09:18:34.203",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:52:04.260",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:addonmaster:post_grid_master:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "3.4.9",
"matchCriteriaId": "81B556AA-D0D7-4537-9C71-540A45771168"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/ajax-filter-posts/wordpress-post-grid-master-plugin-3-4-8-auth-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/ajax-filter-posts/wordpress-post-grid-master-plugin-3-4-8-auth-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-357xx/CVE-2024-35765.json
+58 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-35765",
"sourceIdentifier": "[email protected]",
"published": "2024-06-19T11:15:51.117",
"lastModified": "2024-11-21T09:20:50.600",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:17:44.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -49,16 +69,50 @@
"value": "CWE-79"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wpsoul:greenshift:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "8.9.4",
"matchCriteriaId": "33C320A6-5950-4EE1-9096-09C02EFEF1C8"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-8-8-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-8-8-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-374xx/CVE-2024-37499.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-37499",
"sourceIdentifier": "[email protected]",
"published": "2024-07-09T12:15:14.650",
"lastModified": "2024-11-21T09:23:56.940",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:32:40.060",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:vcita:online_booking_\\&_scheduling_calendar:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.4.3",
"matchCriteriaId": "3F92F8DE-B8C4-4ACA-AC83-048EFD245485"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/meeting-scheduler-by-vcita/wordpress-online-booking-scheduling-calendar-for-wordpress-plugin-4-4-2-local-file-inclusion-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://patchstack.com/database/vulnerability/meeting-scheduler-by-vcita/wordpress-online-booking-scheduling-calendar-for-wordpress-plugin-4-4-2-local-file-inclusion-vulnerability?_s_id=cve",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-431xx/CVE-2024-43125.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-43125",
"sourceIdentifier": "[email protected]",
"published": "2024-08-12T23:15:16.637",
"lastModified": "2024-08-13T12:58:25.437",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:35:11.863",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dotcamp:wp_table_builder:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "7B752A5E-F90C-4760-8263-7955B4C15C91"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/wp-table-builder/wordpress-wp-table-builder-plugin-1-4-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-464xx/CVE-2024-46452.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-46452",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:28.370",
"lastModified": "2025-06-09T17:15:28.370",
"lastModified": "2025-06-09T20:15:22.803",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-74"
}
]
}
],
"references": [
{
"url": "https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2024-46452",
@@ -24,6 +59,10 @@
{
"url": "https://www.vigybag.com",
"source": "[email protected]"
},
{
"url": "https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2024-46452",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2024/CVE-2024-473xx/CVE-2024-47304.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-47304",
"sourceIdentifier": "[email protected]",
"published": "2024-10-17T18:15:07.400",
"lastModified": "2024-10-18T12:52:33.507",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:37:13.657",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wpmanageninja:fluent_support:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.8.1",
"matchCriteriaId": "1CC5733A-0031-42D9-B820-CC71EFC22D27"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/fluent-support/wordpress-fluent-support-plugin-1-8-0-sql-injection-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-50xx/CVE-2024-5081.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-5081",
"sourceIdentifier": "[email protected]",
"published": "2024-08-05T06:16:41.383",
"lastModified": "2024-08-05T15:35:16.180",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:29:41.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tipsandtricks-hq:wp_emember:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "10.7.0",
"matchCriteriaId": "864035B1-B3B5-4D26-B6B4-18455383A0DF"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/4f02bdb5-5cf6-4519-9586-fd4fb3d45dea/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-524xx/CVE-2024-52493.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-52493",
"sourceIdentifier": "[email protected]",
"published": "2024-12-02T14:15:10.760",
"lastModified": "2024-12-02T14:15:10.760",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:38:55.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:meteor_slides_project:meteor_slides:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.5.7",
"matchCriteriaId": "969B7744-E3BE-429D-ADB9-156833CC40A8"
}
]
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/meteor-slides/vulnerability/wordpress-meteor-slides-plugin-1-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-577xx/CVE-2024-57727.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-57727",
"sourceIdentifier": "[email protected]",
"published": "2025-01-15T23:15:09.650",
"lastModified": "2025-06-06T18:15:34.957",
"vulnStatus": "Modified",
"lastModified": "2025-06-09T20:58:24.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-64xx/CVE-2024-6496.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-6496",
"sourceIdentifier": "[email protected]",
"published": "2024-08-01T06:15:02.660",
"lastModified": "2024-08-07T14:35:07.403",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:29:21.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dmytropopov:light_poll:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.0.0",
"matchCriteriaId": "FCA49F0D-793D-4450-9EE5-887F30E39517"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/d598eabd-a87a-4e3e-be46-a5c5cc3f130e/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-67xx/CVE-2024-6798.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-6798",
"sourceIdentifier": "[email protected]",
"published": "2025-05-15T20:15:56.450",
"lastModified": "2025-05-17T04:16:05.870",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T20:12:11.297",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dyadyalesha:dl_verification:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.2",
"matchCriteriaId": "FDF6A5C5-91C3-4FA6-B2AB-4C390356A782"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/c719922e-b2b3-452f-856a-5cc983a4ac18/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-90xx/CVE-2024-9021.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-9021",
"sourceIdentifier": "[email protected]",
"published": "2024-10-08T06:15:02.693",
"lastModified": "2024-10-10T12:57:21.987",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-06-09T21:30:03.113",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:relevanssi:relevanssi:*:*:*:*:free:wordpress:*:*",
"versionEndExcluding": "4.23.1",
"matchCriteriaId": "2E792142-6C31-4388-8CB9-30B0293FA9DC"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/5f25646d-b80b-40b1-bcaf-3b860ddc4059/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-14xx/CVE-2025-1485.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1485",
"sourceIdentifier": "[email protected]",
"published": "2025-06-02T06:15:20.267",
"lastModified": "2025-06-02T17:32:17.397",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-06-09T20:51:37.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:devowl:wordpress_real_cookie_banner:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "5.1.6",
"matchCriteriaId": "A6BA1646-F646-4680-9083-F1214296ACE0"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/0158eb67-cd36-4406-bf70-6f2be849ec52/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-27xx/CVE-2025-2780.json
+7 -11
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-2780",
"sourceIdentifier": "[email protected]",
"published": "2025-04-04T07:15:40.807",
"lastModified": "2025-04-07T14:18:15.560",
"lastModified": "2025-06-09T20:15:23.177",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -22,19 +22,19 @@
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -52,10 +52,6 @@
}
],
"references": [
{
"url": "http://localhost:1337/wp-content/plugins/woffice-core/extensions/woffice-event/class-fw-extension-woffice-event.php#L1235",
"source": "[email protected]"
},
{
"url": "https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422",
"source": "[email protected]"
CVE-2025/CVE-2025-27xx/CVE-2025-2797.json
+3 -7
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-2797",
"sourceIdentifier": "[email protected]",
"published": "2025-04-04T07:15:42.380",
"lastModified": "2025-04-07T14:18:15.560",
"lastModified": "2025-06-09T20:15:23.357",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -52,10 +52,6 @@
}
],
"references": [
{
"url": "http://localhost/wp-content/plugins/woffice-core/extensions/woffice-user-registration/includes/helpers.php#L52",
"source": "[email protected]"
},
{
"url": "https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422",
"source": "[email protected]"
CVE-2025/CVE-2025-27xx/CVE-2025-2798.json
+3 -7
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-2798",
"sourceIdentifier": "[email protected]",
"published": "2025-04-04T14:15:22.293",
"lastModified": "2025-04-07T14:18:15.560",
"lastModified": "2025-06-09T20:15:23.490",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -52,10 +52,6 @@
}
],
"references": [
{
"url": "http://localhost/wp-content/themes/woffice/inc/classes/Woffice_Register.php#L405",
"source": "[email protected]"
},
{
"url": "https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422",
"source": "[email protected]"
CVE-2025/CVE-2025-296xx/CVE-2025-29627.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-29627",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:28.617",
"lastModified": "2025-06-09T17:15:28.617",
"lastModified": "2025-06-09T20:15:23.010",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication Module"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"references": [
{
"url": "https://github.com/SahilDabhilkar/CVE-Reference/blob/main/CVE-2025-29627.md",
CVE-2025/CVE-2025-312xx/CVE-2025-31200.json
+4 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-31200",
"sourceIdentifier": "[email protected]",
"published": "2025-04-16T19:15:54.540",
"lastModified": "2025-06-06T16:15:27.827",
"vulnStatus": "Modified",
"lastModified": "2025-06-09T20:59:39.463",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -174,7 +174,8 @@
"url": "https://blog.noahhw.dev/posts/cve-2025-31200/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Broken Link"
]
},
{
CVE-2025/CVE-2025-312xx/CVE-2025-31201.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-31201",
"sourceIdentifier": "[email protected]",
"published": "2025-04-16T19:15:54.673",
"lastModified": "2025-06-06T16:15:28.020",
"vulnStatus": "Modified",
"lastModified": "2025-06-09T20:59:26.217",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-39xx/CVE-2025-3951.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-3951",
"sourceIdentifier": "[email protected]",
"published": "2025-06-02T06:15:20.620",
"lastModified": "2025-06-02T17:32:17.397",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-06-09T20:54:55.080",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:updraftplus:wp-optimize:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "4.2.0",
"matchCriteriaId": "45E389B8-30C4-44E1-A722-D6C929D714D5"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/220c195f-3df3-4883-8e0b-a0cf019e6323/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/220c195f-3df3-4883-8e0b-a0cf019e6323/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-40xx/CVE-2025-4094.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4094",
"sourceIdentifier": "[email protected]",
"published": "2025-05-21T06:16:28.507",
"lastModified": "2025-05-21T23:15:54.973",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-06-09T20:13:20.070",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:unitedover:digits:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "8.4.6.1",
"matchCriteriaId": "1C54A939-D6C9-494E-8124-5FAF8C867F24"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-41xx/CVE-2025-4133.json
+37 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4133",
"sourceIdentifier": "[email protected]",
"published": "2025-05-22T06:15:57.837",
"lastModified": "2025-05-23T15:55:02.040",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-06-09T20:13:53.007",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,44 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adenion:blog2social:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "8.4.0",
"matchCriteriaId": "46E15EBD-B0A0-4F51-BDB4-509D9B79AAC4"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/ebd7e5f5-af8d-42ca-b6ff-af92e03d4a3e/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-44xx/CVE-2025-4429.json
+42 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4429",
"sourceIdentifier": "[email protected]",
"published": "2025-05-30T06:15:28.680",
"lastModified": "2025-05-30T16:31:03.107",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-06-09T20:30:46.543",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,14 +39,52 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:gearside:gearside_developer_dashboard:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.0.72",
"matchCriteriaId": "0A8D048F-12B0-468E-97BA-43E62C25B492"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/a487f5c9-7db6-4427-8d95-17acbfd49fd2/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/a487f5c9-7db6-4427-8d95-17acbfd49fd2/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-450xx/CVE-2025-45001.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-45001",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:29.157",
"lastModified": "2025-06-09T17:15:29.157",
"lastModified": "2025-06-09T20:15:23.610",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5",
@@ -20,6 +55,10 @@
{
"url": "https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001",
"source": "[email protected]"
},
{
"url": "https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-450xx/CVE-2025-45002.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-45002",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:29.450",
"lastModified": "2025-06-09T17:15:29.450",
"lastModified": "2025-06-09T20:15:23.780",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,50 @@
"value": "Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45002",
"source": "[email protected]"
},
{
"url": "https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45002",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-450xx/CVE-2025-45055.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-45055",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T16:15:40.693",
"lastModified": "2025-06-09T16:15:40.693",
"lastModified": "2025-06-09T20:15:23.950",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attackers to escalate privileges by creating a new administrator account. The vulnerability arises from insufficient sanitization of SVG files and weak CSRF protections."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/Silverpeas/Silverpeas-Core/pull/1394",
@@ -20,6 +55,10 @@
{
"url": "https://medium.com/@mingihongkim/privilege-escalation-via-svg-injection-in-silverpeas-6-4-2-b5ab1d5b6955",
"source": "[email protected]"
},
{
"url": "https://medium.com/@mingihongkim/privilege-escalation-via-svg-injection-in-silverpeas-6-4-2-b5ab1d5b6955",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-460xx/CVE-2025-46011.json
+18 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-46011",
"sourceIdentifier": "[email protected]",
"published": "2025-06-04T20:15:23.313",
"lastModified": "2025-06-05T20:12:23.777",
"lastModified": "2025-06-09T21:15:46.517",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Listmonk v2.4.0 through v4.1.0 is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges."
"value": "Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges."
},
{
"lang": "es",
@@ -55,6 +55,22 @@
{
"url": "https://github.com/kevinroleke/security/tree/main/CVE-2025-46011",
"source": "[email protected]"
},
{
"url": "https://github.com/knadh/listmonk/commit/4b805f885b9f5a20126ec06f8b59dc448c4af33b",
"source": "[email protected]"
},
{
"url": "https://github.com/knadh/listmonk/issues/2412",
"source": "[email protected]"
},
{
"url": "https://github.com/knadh/listmonk/releases/tag/v4.1.0",
"source": "[email protected]"
},
{
"url": "https://github.com/knadh/listmonk/releases/tag/v5.0.0",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-460xx/CVE-2025-46041.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46041",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:29.690",
"lastModified": "2025-06-09T17:15:29.690",
"lastModified": "2025-06-09T20:15:24.113",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "http://anchor.com",
@@ -20,6 +55,10 @@
{
"url": "https://github.com/binneko/CVE-2025-46041",
"source": "[email protected]"
},
{
"url": "https://github.com/binneko/CVE-2025-46041",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-490xx/CVE-2025-49004.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-49004",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:46.733",
"lastModified": "2025-06-09T21:15:46.733",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious website to hijack the authentication flow of Caido and achieve code execution. A malicious website loaded in the browser can hijack the locally running Caido instance and achieve remote command execution during the initial setup. Even if the Caido instance is already configured, an attacker can initiate the authentication flow by performing DNS rebinding. In this case, the victim needs to authorize the request on dashboard.caido.io. Users should upgrade to version 0.48.0 to receive a patch."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-290"
}
]
}
],
"references": [
{
"url": "https://github.com/caido/caido/security/advisories/GHSA-jmxf-xw2r-vjrg",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-491xx/CVE-2025-49137.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-49137",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:46.890",
"lastModified": "2025-06-09T21:15:46.890",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of arbitrary JavaScript code. The 'saveNode' and 'saveManifest' endpoints take user input and store it in the JSON schema for the site. This content is then rendered in the generated HAX site. Although the application does not allow users to supply a `script` tag, it does allow the use of other HTML tags to run JavaScript. Version 11.0.0 fixes the issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-80"
},
{
"lang": "en",
"value": "CWE-87"
}
]
}
],
"references": [
{
"url": "https://github.com/haxtheweb/haxcms-php/commit/0dd3e98fe2fadd0793b667d4af2aac230980e0f8",
"source": "[email protected]"
},
{
"url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-2vc4-3hx7-v7v7",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-491xx/CVE-2025-49138.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-49138",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:47.047",
"lastModified": "2025-06-09T21:15:47.047",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint allows a low-privileged user to read arbitrary files on the server by manipulating the location field written into site.json. This enables attackers to exfiltrate sensitive system files such as /etc/passwd, application secrets, or configuration files accessible to the web server (www-data). The vulnerability stems from the way the HAXCMS backend handles the location field in the site's outline. When a user sends a POST request to /system/api/saveOutline, the backend stores the provided location value directly into the site.json file associated with the site, without validating or sanitizing the input. Later the location parameter is interpreted by the CMS to resolve and load the content for a given node. If the location field contains a relative path like `../../../etc/passwd`, the application will attempt to read and render that file. Version 11.0.0 fixes the issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
},
{
"lang": "en",
"value": "CWE-73"
}
]
}
],
"references": [
{
"url": "https://github.com/haxtheweb/haxcms-php/blob/b158d8ba1f9602af92ab084fd03b418f953079fd/system/backend/php/lib/HAXCMSSite.php#L1248",
"source": "[email protected]"
},
{
"url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-hxrr-x32w-cg8g",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-491xx/CVE-2025-49139.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-49139",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:47.203",
"lastModified": "2025-06-09T21:15:47.203",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe. The application allows users to supply a target URL in the website block. When the HAX site is visited, the client's browser will query the supplied URL. An authenticated attacker can create a HAX site with a website block pointing at an attacker-controlled server running Responder or a similar tool. The attacker can then conduct a phishing attack by convincing another user to visit their malicious HAX site to harvest credentials. Version 11.0.0 contains a patch for the issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
]
}
],
"references": [
{
"url": "https://github.com/haxtheweb/haxcms-nodejs/commit/5368eb9b278ca47cd9a83b8d3e6216375615b8f5",
"source": "[email protected]"
},
{
"url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-v3ph-2q5q-cg88",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-491xx/CVE-2025-49141.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-49141",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:47.360",
"lastModified": "2025-06-09T21:15:47.360",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"references": [
{
"url": "https://github.com/haxtheweb/haxcms-nodejs/commit/5131fea6b6be611db76a618f89bd2e164752e9b3",
"source": "[email protected]"
},
{
"url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5887.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-5887",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T17:15:30.523",
"lastModified": "2025-06-09T17:15:30.523",
"lastModified": "2025-06-09T20:15:25.013",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -136,6 +136,10 @@
{
"url": "https://vuldb.com/?submit.580744",
"source": "[email protected]"
},
{
"url": "https://github.com/Aiyakami/CVE-1/issues/4",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5891.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-5891",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T19:15:25.870",
"lastModified": "2025-06-09T19:15:25.870",
"lastModified": "2025-06-09T20:15:25.213",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.585750",
"source": "[email protected]"
},
{
"url": "https://github.com/Unitech/pm2/pull/5971",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5892.json
+149
View File
@@ -0,0 +1,149 @@
{
"id": "CVE-2025-5892",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:25.377",
"lastModified": "2025-06-09T20:15:25.377",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the function parseMessage of the file /apps/meteor/app/irc/server/servers/RFC2813/parseMessage.js. The manipulation of the argument line leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/mmmsssttt404/0fcda3b3e85edafc4eaa6816aa252deb",
"source": "[email protected]"
},
{
"url": "https://github.com/RocketChat/Rocket.Chat/pull/35711",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.311663",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.311663",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.585751",
"source": "[email protected]"
},
{
"url": "https://github.com/RocketChat/Rocket.Chat/pull/35711",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5895.json
+149
View File
@@ -0,0 +1,149 @@
{
"id": "CVE-2025-5895",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:25.890",
"lastModified": "2025-06-09T20:15:25.890",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named 4454ebbdc7719016bf80ca0f34859ce5cee9f6b0. It is recommended to apply a patch to fix this issue."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"references": [
{
"url": "https://github.com/metabase/metabase/commit/4454ebbdc7719016bf80ca0f34859ce5cee9f6b0",
"source": "[email protected]"
},
{
"url": "https://github.com/metabase/metabase/pull/57011",
"source": "[email protected]"
},
{
"url": "https://github.com/metabase/metabase/pull/57011#pullrequestreview-2792664135",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.311667",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.311667",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.585795",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5896.json
+149
View File
@@ -0,0 +1,149 @@
{
"id": "CVE-2025-5896",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:47.517",
"lastModified": "2025-06-09T21:15:47.517",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown code of the file taro/packages/css-to-react-native/src/index.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to version 4.1.2 is able to address this issue. The name of the patch is c2e321a8b6fc873427c466c69f41ed0b5e8814bf. It is recommended to upgrade the affected component."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"references": [
{
"url": "https://github.com/NervJS/taro/commit/c2e321a8b6fc873427c466c69f41ed0b5e8814bf",
"source": "[email protected]"
},
{
"url": "https://github.com/NervJS/taro/pull/17619",
"source": "[email protected]"
},
{
"url": "https://github.com/NervJS/taro/releases/tag/v4.1.2",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.311668",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.311668",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.585796",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-58xx/CVE-2025-5897.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-5897",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T21:15:47.707",
"lastModified": "2025-06-09T21:15:47.707",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"references": [
{
"url": "https://github.com/vuejs/vue-cli/pull/7478",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.311669",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.311669",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.585798",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-59xx/CVE-2025-5914.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-5914",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:26.123",
"lastModified": "2025-06-09T20:15:26.123",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
"baseScore": 3.9,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.3,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-415"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5914",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2598",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-59xx/CVE-2025-5915.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-5915",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:26.317",
"lastModified": "2025-06-09T20:15:26.317",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
"baseScore": 3.9,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.3,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5915",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370865",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2599",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-59xx/CVE-2025-5916.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-5916",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:27.170",
"lastModified": "2025-06-09T20:15:27.170",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
"baseScore": 3.9,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.3,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5916",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370872",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2568",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-59xx/CVE-2025-5917.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-5917",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:27.330",
"lastModified": "2025-06-09T20:15:27.330",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"baseScore": 2.8,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.3,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5917",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370874",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2588",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-59xx/CVE-2025-5918.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-5918",
"sourceIdentifier": "[email protected]",
"published": "2025-06-09T20:15:27.493",
"lastModified": "2025-06-09T20:15:27.493",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
"baseScore": 3.9,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.3,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-5918",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370877",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2584",
"source": "[email protected]"
},
{
"url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
"source": "[email protected]"
}
]
}
README.md
+44 -38
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-06-09T20:00:19.599263+00:00
2025-06-09T22:00:19.689310+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-06-09T19:57:23.357000+00:00
2025-06-09T21:30:03.113000+00:00
```
### Last Data Feed Release
@@ -33,52 +33,58 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
297162
297176
```
### CVEs added in the last Commit
Recently added CVEs: `8`
Recently added CVEs: `14`
- [CVE-2024-47081](CVE-2024/CVE-2024-470xx/CVE-2024-47081.json) (`2025-06-09T18:15:24.983`)
- [CVE-2025-49651](CVE-2025/CVE-2025-496xx/CVE-2025-49651.json) (`2025-06-09T18:15:26.740`)
- [CVE-2025-49652](CVE-2025/CVE-2025-496xx/CVE-2025-49652.json) (`2025-06-09T18:15:26.897`)
- [CVE-2025-49653](CVE-2025/CVE-2025-496xx/CVE-2025-49653.json) (`2025-06-09T18:15:27.033`)
- [CVE-2025-5888](CVE-2025/CVE-2025-58xx/CVE-2025-5888.json) (`2025-06-09T18:15:27.873`)
- [CVE-2025-5889](CVE-2025/CVE-2025-58xx/CVE-2025-5889.json) (`2025-06-09T19:15:25.460`)
- [CVE-2025-5890](CVE-2025/CVE-2025-58xx/CVE-2025-5890.json) (`2025-06-09T19:15:25.677`)
- [CVE-2025-5891](CVE-2025/CVE-2025-58xx/CVE-2025-5891.json) (`2025-06-09T19:15:25.870`)
- [CVE-2025-49004](CVE-2025/CVE-2025-490xx/CVE-2025-49004.json) (`2025-06-09T21:15:46.733`)
- [CVE-2025-49137](CVE-2025/CVE-2025-491xx/CVE-2025-49137.json) (`2025-06-09T21:15:46.890`)
- [CVE-2025-49138](CVE-2025/CVE-2025-491xx/CVE-2025-49138.json) (`2025-06-09T21:15:47.047`)
- [CVE-2025-49139](CVE-2025/CVE-2025-491xx/CVE-2025-49139.json) (`2025-06-09T21:15:47.203`)
- [CVE-2025-49141](CVE-2025/CVE-2025-491xx/CVE-2025-49141.json) (`2025-06-09T21:15:47.360`)
- [CVE-2025-5892](CVE-2025/CVE-2025-58xx/CVE-2025-5892.json) (`2025-06-09T20:15:25.377`)
- [CVE-2025-5895](CVE-2025/CVE-2025-58xx/CVE-2025-5895.json) (`2025-06-09T20:15:25.890`)
- [CVE-2025-5896](CVE-2025/CVE-2025-58xx/CVE-2025-5896.json) (`2025-06-09T21:15:47.517`)
- [CVE-2025-5897](CVE-2025/CVE-2025-58xx/CVE-2025-5897.json) (`2025-06-09T21:15:47.707`)
- [CVE-2025-5914](CVE-2025/CVE-2025-59xx/CVE-2025-5914.json) (`2025-06-09T20:15:26.123`)
- [CVE-2025-5915](CVE-2025/CVE-2025-59xx/CVE-2025-5915.json) (`2025-06-09T20:15:26.317`)
- [CVE-2025-5916](CVE-2025/CVE-2025-59xx/CVE-2025-5916.json) (`2025-06-09T20:15:27.170`)
- [CVE-2025-5917](CVE-2025/CVE-2025-59xx/CVE-2025-5917.json) (`2025-06-09T20:15:27.330`)
- [CVE-2025-5918](CVE-2025/CVE-2025-59xx/CVE-2025-5918.json) (`2025-06-09T20:15:27.493`)
### CVEs modified in the last Commit
Recently modified CVEs: `136`
Recently modified CVEs: `57`
- [CVE-2025-5787](CVE-2025/CVE-2025-57xx/CVE-2025-5787.json) (`2025-06-09T19:08:58.440`)
- [CVE-2025-5788](CVE-2025/CVE-2025-57xx/CVE-2025-5788.json) (`2025-06-09T19:08:51.570`)
- [CVE-2025-5789](CVE-2025/CVE-2025-57xx/CVE-2025-5789.json) (`2025-06-09T19:08:42.200`)
- [CVE-2025-5790](CVE-2025/CVE-2025-57xx/CVE-2025-5790.json) (`2025-06-09T19:08:31.530`)
- [CVE-2025-5794](CVE-2025/CVE-2025-57xx/CVE-2025-5794.json) (`2025-06-09T19:08:21.053`)
- [CVE-2025-5795](CVE-2025/CVE-2025-57xx/CVE-2025-5795.json) (`2025-06-09T19:08:11.737`)
- [CVE-2025-5798](CVE-2025/CVE-2025-57xx/CVE-2025-5798.json) (`2025-06-09T19:08:05.903`)
- [CVE-2025-5799](CVE-2025/CVE-2025-57xx/CVE-2025-5799.json) (`2025-06-09T19:07:59.197`)
- [CVE-2025-5836](CVE-2025/CVE-2025-58xx/CVE-2025-5836.json) (`2025-06-09T19:07:49.417`)
- [CVE-2025-5837](CVE-2025/CVE-2025-58xx/CVE-2025-5837.json) (`2025-06-09T19:07:41.590`)
- [CVE-2025-5839](CVE-2025/CVE-2025-58xx/CVE-2025-5839.json) (`2025-06-09T19:07:34.470`)
- [CVE-2025-5847](CVE-2025/CVE-2025-58xx/CVE-2025-5847.json) (`2025-06-09T19:04:55.580`)
- [CVE-2025-5848](CVE-2025/CVE-2025-58xx/CVE-2025-5848.json) (`2025-06-09T19:04:50.113`)
- [CVE-2025-5849](CVE-2025/CVE-2025-58xx/CVE-2025-5849.json) (`2025-06-09T19:04:44.777`)
- [CVE-2025-5850](CVE-2025/CVE-2025-58xx/CVE-2025-5850.json) (`2025-06-09T19:04:38.610`)
- [CVE-2025-5851](CVE-2025/CVE-2025-58xx/CVE-2025-5851.json) (`2025-06-09T19:04:27.920`)
- [CVE-2025-5852](CVE-2025/CVE-2025-58xx/CVE-2025-5852.json) (`2025-06-09T19:04:20.593`)
- [CVE-2025-5853](CVE-2025/CVE-2025-58xx/CVE-2025-5853.json) (`2025-06-09T19:04:03.967`)
- [CVE-2025-5854](CVE-2025/CVE-2025-58xx/CVE-2025-5854.json) (`2025-06-09T19:03:46.770`)
- [CVE-2025-5855](CVE-2025/CVE-2025-58xx/CVE-2025-5855.json) (`2025-06-09T19:03:39.630`)
- [CVE-2025-5859](CVE-2025/CVE-2025-58xx/CVE-2025-5859.json) (`2025-06-09T19:03:29.737`)
- [CVE-2025-5860](CVE-2025/CVE-2025-58xx/CVE-2025-5860.json) (`2025-06-09T19:03:16.047`)
- [CVE-2025-5861](CVE-2025/CVE-2025-58xx/CVE-2025-5861.json) (`2025-06-09T19:03:01.067`)
- [CVE-2025-5862](CVE-2025/CVE-2025-58xx/CVE-2025-5862.json) (`2025-06-09T19:02:54.097`)
- [CVE-2025-5863](CVE-2025/CVE-2025-58xx/CVE-2025-5863.json) (`2025-06-09T19:02:45.383`)
- [CVE-2024-47304](CVE-2024/CVE-2024-473xx/CVE-2024-47304.json) (`2025-06-09T20:37:13.657`)
- [CVE-2024-5081](CVE-2024/CVE-2024-50xx/CVE-2024-5081.json) (`2025-06-09T21:29:41.120`)
- [CVE-2024-52493](CVE-2024/CVE-2024-524xx/CVE-2024-52493.json) (`2025-06-09T20:38:55.530`)
- [CVE-2024-57727](CVE-2024/CVE-2024-577xx/CVE-2024-57727.json) (`2025-06-09T20:58:24.013`)
- [CVE-2024-6496](CVE-2024/CVE-2024-64xx/CVE-2024-6496.json) (`2025-06-09T21:29:21.873`)
- [CVE-2024-6798](CVE-2024/CVE-2024-67xx/CVE-2024-6798.json) (`2025-06-09T20:12:11.297`)
- [CVE-2024-9021](CVE-2024/CVE-2024-90xx/CVE-2024-9021.json) (`2025-06-09T21:30:03.113`)
- [CVE-2025-1485](CVE-2025/CVE-2025-14xx/CVE-2025-1485.json) (`2025-06-09T20:51:37.133`)
- [CVE-2025-2780](CVE-2025/CVE-2025-27xx/CVE-2025-2780.json) (`2025-06-09T20:15:23.177`)
- [CVE-2025-2797](CVE-2025/CVE-2025-27xx/CVE-2025-2797.json) (`2025-06-09T20:15:23.357`)
- [CVE-2025-2798](CVE-2025/CVE-2025-27xx/CVE-2025-2798.json) (`2025-06-09T20:15:23.490`)
- [CVE-2025-29627](CVE-2025/CVE-2025-296xx/CVE-2025-29627.json) (`2025-06-09T20:15:23.010`)
- [CVE-2025-31200](CVE-2025/CVE-2025-312xx/CVE-2025-31200.json) (`2025-06-09T20:59:39.463`)
- [CVE-2025-31201](CVE-2025/CVE-2025-312xx/CVE-2025-31201.json) (`2025-06-09T20:59:26.217`)
- [CVE-2025-3951](CVE-2025/CVE-2025-39xx/CVE-2025-3951.json) (`2025-06-09T20:54:55.080`)
- [CVE-2025-4094](CVE-2025/CVE-2025-40xx/CVE-2025-4094.json) (`2025-06-09T20:13:20.070`)
- [CVE-2025-4133](CVE-2025/CVE-2025-41xx/CVE-2025-4133.json) (`2025-06-09T20:13:53.007`)
- [CVE-2025-4429](CVE-2025/CVE-2025-44xx/CVE-2025-4429.json) (`2025-06-09T20:30:46.543`)
- [CVE-2025-45001](CVE-2025/CVE-2025-450xx/CVE-2025-45001.json) (`2025-06-09T20:15:23.610`)
- [CVE-2025-45002](CVE-2025/CVE-2025-450xx/CVE-2025-45002.json) (`2025-06-09T20:15:23.780`)
- [CVE-2025-45055](CVE-2025/CVE-2025-450xx/CVE-2025-45055.json) (`2025-06-09T20:15:23.950`)
- [CVE-2025-46011](CVE-2025/CVE-2025-460xx/CVE-2025-46011.json) (`2025-06-09T21:15:46.517`)
- [CVE-2025-46041](CVE-2025/CVE-2025-460xx/CVE-2025-46041.json) (`2025-06-09T20:15:24.113`)
- [CVE-2025-5887](CVE-2025/CVE-2025-58xx/CVE-2025-5887.json) (`2025-06-09T20:15:25.013`)
- [CVE-2025-5891](CVE-2025/CVE-2025-58xx/CVE-2025-5891.json) (`2025-06-09T20:15:25.213`)
## Download and Usage
_state.csv
+214 -200
View File
File diff suppressed because it is too large. Load diff