diff --git a/CVE-2014/CVE-2014-1251xx/CVE-2014-125128.json b/CVE-2014/CVE-2014-1251xx/CVE-2014-125128.json new file mode 100644 index 00000000000..3226457320b --- /dev/null +++ b/CVE-2014/CVE-2014-1251xx/CVE-2014-125128.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2014-125128", + "sourceIdentifier": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "published": "2025-09-08T11:15:30.063", + "lastModified": "2025-09-08T11:15:30.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function 'naughtyHref' doesn't properly validate the hyperreference (`href`) attribute in anchor tags (``), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2014/CVE-2014-125128", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/commit/423b90e06e1e85245eccedaabeb3a82840c6cd86", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/commit/889d4ec968e175f1905b2eb9d33f1fa89217cb02", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/issues/1", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + } + ] +} \ No newline at end of file diff --git a/CVE-2019/CVE-2019-252xx/CVE-2019-25225.json b/CVE-2019/CVE-2019-252xx/CVE-2019-25225.json new file mode 100644 index 00000000000..9dabdf40a05 --- /dev/null +++ b/CVE-2019/CVE-2019-252xx/CVE-2019-25225.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2019-25225", + "sourceIdentifier": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "published": "2025-09-08T10:15:33.440", + "lastModified": "2025-09-08T10:15:33.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "`sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-site Scripting (XSS). The `sanitizeHtml()` function in `index.js` does not sanitize content when using the custom `transformTags` option, which is intended to convert attribute values into text. As a result, malicious input can be transformed into executable code." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2019/CVE-2019-25225", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/commit/712cb6895825c8bb6ede71a16b42bade42abcaf3", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/issues/293", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, + { + "url": "https://github.com/apostrophecms/sanitize-html/pull/156", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-251xx/CVE-2024-25100.json b/CVE-2024/CVE-2024-251xx/CVE-2024-25100.json index a2b9dd65331..15665b09809 100644 --- a/CVE-2024/CVE-2024-251xx/CVE-2024-25100.json +++ b/CVE-2024/CVE-2024-251xx/CVE-2024-25100.json @@ -2,13 +2,13 @@ "id": "CVE-2024-25100", "sourceIdentifier": "audit@patchstack.com", "published": "2024-02-12T07:15:11.577", - "lastModified": "2024-11-21T09:00:15.510", + "lastModified": "2025-09-08T10:15:34.583", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2.\n\n" + "value": "Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "audit@patchstack.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -91,11 +91,8 @@ ], "references": [ { - "url": "https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-php-object-injection-vulnerability?_s_id=cve", - "source": "audit@patchstack.com", - "tags": [ - "Third Party Advisory" - ] + "url": "https://patchstack.com/database/wordpress/plugin/coupon-referral-program/vulnerability/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" }, { "url": "https://patchstack.com/database/vulnerability/coupon-referral-program/wordpress-coupon-referral-program-plugin-1-7-2-unauthenticated-php-object-injection-vulnerability?_s_id=cve", diff --git a/CVE-2024/CVE-2024-30xx/CVE-2024-3036.json b/CVE-2024/CVE-2024-30xx/CVE-2024-3036.json index 8ba2aec788d..32319655b29 100644 --- a/CVE-2024/CVE-2024-30xx/CVE-2024-3036.json +++ b/CVE-2024/CVE-2024-30xx/CVE-2024-3036.json @@ -2,7 +2,7 @@ "id": "CVE-2024-3036", "sourceIdentifier": "cybersecurity@ch.abb.com", "published": "2024-06-21T11:15:12.553", - "lastModified": "2024-11-21T09:28:44.080", + "lastModified": "2025-09-08T10:15:34.867", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -86,11 +86,11 @@ "weaknesses": [ { "source": "cybersecurity@ch.abb.com", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", - "value": "CWE-20" + "value": "CWE-1284" } ] } diff --git a/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json b/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json index 29056227b6e..32329702efd 100644 --- a/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json +++ b/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json @@ -2,8 +2,8 @@ "id": "CVE-2024-5899", "sourceIdentifier": "cve-coordination@google.com", "published": "2024-06-18T09:15:09.767", - "lastModified": "2025-07-23T15:00:34.233", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-08T10:15:35.087", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -90,7 +90,7 @@ "description": [ { "lang": "en", - "value": "CWE-20" + "value": "CWE-862" } ] }, diff --git a/CVE-2024/CVE-2024-62xx/CVE-2024-6284.json b/CVE-2024/CVE-2024-62xx/CVE-2024-6284.json index 12d50b82af3..e58f3ba6591 100644 --- a/CVE-2024/CVE-2024-62xx/CVE-2024-6284.json +++ b/CVE-2024/CVE-2024-62xx/CVE-2024-6284.json @@ -2,8 +2,8 @@ "id": "CVE-2024-6284", "sourceIdentifier": "cve-coordination@google.com", "published": "2024-07-03T23:15:02.333", - "lastModified": "2025-07-22T18:45:00.113", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-08T10:15:35.287", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -90,7 +90,11 @@ "description": [ { "lang": "en", - "value": "CWE-20" + "value": "CWE-1286" + }, + { + "lang": "en", + "value": "CWE-1389" } ] }, diff --git a/CVE-2024/CVE-2024-72xx/CVE-2024-7254.json b/CVE-2024/CVE-2024-72xx/CVE-2024-7254.json index 89110ea2cb0..7748fa37f24 100644 --- a/CVE-2024/CVE-2024-72xx/CVE-2024-7254.json +++ b/CVE-2024/CVE-2024-72xx/CVE-2024-7254.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7254", "sourceIdentifier": "cve-coordination@google.com", "published": "2024-09-19T01:15:10.963", - "lastModified": "2025-08-13T10:37:06.480", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-08T10:15:35.483", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -90,7 +90,11 @@ "description": [ { "lang": "en", - "value": "CWE-20" + "value": "CWE-400" + }, + { + "lang": "en", + "value": "CWE-674" } ] }, diff --git a/CVE-2025/CVE-2025-100xx/CVE-2025-10090.json b/CVE-2025/CVE-2025-100xx/CVE-2025-10090.json new file mode 100644 index 00000000000..0fefef6234e --- /dev/null +++ b/CVE-2025/CVE-2025-100xx/CVE-2025-10090.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10090", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-08T10:15:35.710", + "lastModified": "2025-09-08T10:15:35.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.departments/GetTreeDate.aspx. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Cstarplus/CVE/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.323045", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.323045", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.644635", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-100xx/CVE-2025-10091.json b/CVE-2025/CVE-2025-100xx/CVE-2025-10091.json new file mode 100644 index 00000000000..27c93c269f5 --- /dev/null +++ b/CVE-2025/CVE-2025-100xx/CVE-2025-10091.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10091", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-08T11:15:30.870", + "lastModified": "2025-09-08T11:15:30.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx/?Type=add of the component XML Handler. The manipulation leads to xml external entity reference. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-610" + }, + { + "lang": "en", + "value": "CWE-611" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Cstarplus/CVE/issues/2", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.323046", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.323046", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.644864", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-27xx/CVE-2025-2713.json b/CVE-2025/CVE-2025-27xx/CVE-2025-2713.json index 88896a86cc2..e6a6c45ef2f 100644 --- a/CVE-2025/CVE-2025-27xx/CVE-2025-2713.json +++ b/CVE-2025/CVE-2025-27xx/CVE-2025-2713.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2713", "sourceIdentifier": "cve-coordination@google.com", "published": "2025-03-28T16:15:30.043", - "lastModified": "2025-08-01T16:58:24.500", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-08T10:15:35.990", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -90,7 +90,7 @@ "description": [ { "lang": "en", - "value": "CWE-269" + "value": "CWE-266" } ] }, diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4600.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4600.json index cbd383087bb..fa92d859dbe 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4600.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4600.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4600", "sourceIdentifier": "cve-coordination@google.com", "published": "2025-05-16T14:15:32.580", - "lastModified": "2025-07-29T13:03:31.870", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-08T10:15:36.167", + "vulnStatus": "Modified", "cveTags": [ { "sourceIdentifier": "cve-coordination@google.com", @@ -97,7 +97,7 @@ "description": [ { "lang": "en", - "value": "CWE-20" + "value": "CWE-444" } ] } diff --git a/CVE-2025/CVE-2025-59xx/CVE-2025-5993.json b/CVE-2025/CVE-2025-59xx/CVE-2025-5993.json new file mode 100644 index 00000000000..c6aaa30885c --- /dev/null +++ b/CVE-2025/CVE-2025-59xx/CVE-2025-5993.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-5993", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-09-08T11:15:31.100", + "lastModified": "2025-09-08T11:15:31.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.2, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/07/CVE-2025-5993", + "source": "cvd@cert.pl" + }, + { + "url": "https://itcube.pl/modul-crm", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index aa942aee35e..23feb556bf3 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-09-08T10:00:12.621601+00:00 +2025-09-08T12:00:13.124778+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-09-08T09:15:30.367000+00:00 +2025-09-08T11:15:31.100000+00:00 ``` ### Last Data Feed Release @@ -33,20 +33,31 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -308644 +308649 ``` ### CVEs added in the last Commit -Recently added CVEs: `1` +Recently added CVEs: `5` -- [CVE-2025-58782](CVE-2025/CVE-2025-587xx/CVE-2025-58782.json) (`2025-09-08T09:15:30.367`) +- [CVE-2014-125128](CVE-2014/CVE-2014-1251xx/CVE-2014-125128.json) (`2025-09-08T11:15:30.063`) +- [CVE-2019-25225](CVE-2019/CVE-2019-252xx/CVE-2019-25225.json) (`2025-09-08T10:15:33.440`) +- [CVE-2025-10090](CVE-2025/CVE-2025-100xx/CVE-2025-10090.json) (`2025-09-08T10:15:35.710`) +- [CVE-2025-10091](CVE-2025/CVE-2025-100xx/CVE-2025-10091.json) (`2025-09-08T11:15:30.870`) +- [CVE-2025-5993](CVE-2025/CVE-2025-59xx/CVE-2025-5993.json) (`2025-09-08T11:15:31.100`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `7` +- [CVE-2024-25100](CVE-2024/CVE-2024-251xx/CVE-2024-25100.json) (`2025-09-08T10:15:34.583`) +- [CVE-2024-3036](CVE-2024/CVE-2024-30xx/CVE-2024-3036.json) (`2025-09-08T10:15:34.867`) +- [CVE-2024-5899](CVE-2024/CVE-2024-58xx/CVE-2024-5899.json) (`2025-09-08T10:15:35.087`) +- [CVE-2024-6284](CVE-2024/CVE-2024-62xx/CVE-2024-6284.json) (`2025-09-08T10:15:35.287`) +- [CVE-2024-7254](CVE-2024/CVE-2024-72xx/CVE-2024-7254.json) (`2025-09-08T10:15:35.483`) +- [CVE-2025-2713](CVE-2025/CVE-2025-27xx/CVE-2025-2713.json) (`2025-09-08T10:15:35.990`) +- [CVE-2025-4600](CVE-2025/CVE-2025-46xx/CVE-2025-4600.json) (`2025-09-08T10:15:36.167`) ## Download and Usage diff --git a/_state.csv b/_state.csv index be2a2cdae09..9680b0711bf 100644 --- a/_state.csv +++ b/_state.csv @@ -65892,6 +65892,7 @@ CVE-2014-125124,0,0,821ff23747de019ef2631291df71163138224eb16a19534e6e2e3cc7b39f CVE-2014-125125,0,0,ccc4ec45ee6a9a08cca09b92e2c7ef49cdd38e027371c6a94d0de0c520a44ef7,2025-07-31T18:42:37.870000 CVE-2014-125126,0,0,9db74edcbbda70d7c8b05d0bdfaa367e86ec40e6a6e0a3693b786beb1c7a83c6,2025-07-31T18:42:37.870000 CVE-2014-125127,0,0,d4f0bc6df38324a3fd108e29e04c2ab27ea20866d501a43c095ece4b46834b53,2025-09-04T15:36:56.447000 +CVE-2014-125128,1,1,562b31a129e8a43276ef0f3c6c8b23227de102fb7950ce9ca5c541e40680973e,2025-09-08T11:15:30.063000 CVE-2014-1252,0,0,ce5369e7754788de5d8e414256c30e656fe6df86f6e88e40688ea0f0a954ee3f,2025-04-11T00:51:21.963000 CVE-2014-1253,0,0,0a8daafa3665ada3a1eeedf848d75975fd0a85ba706ef12932f472d4ce311bd4,2025-04-11T00:51:21.963000 CVE-2014-1254,0,0,6c047a75a2856adad81ac61ebdadd767ae6f27fcba843449f801a2e371f18aa3,2025-04-12T10:46:40.837000 @@ -138806,6 +138807,7 @@ CVE-2019-25221,0,0,1df42d22725f30b375d9fa95a2ea36f97268cbdd206d333006cebd98ba4f4 CVE-2019-25222,0,0,ed1e562c84ec1daa8d4ee7571151feddc95c5694030c3cb7d9c4515cf0b0a6cf,2025-03-21T11:08:00.220000 CVE-2019-25223,0,0,c7bdb12c3015eff26f39473815cdc11079b84aed29996848586c3f4429bec921,2025-04-08T18:13:53.347000 CVE-2019-25224,0,0,3310b20823140b7030909880128fdd9892f803f4bae0dd608dfaae1118515490,2025-08-11T18:57:45.277000 +CVE-2019-25225,1,1,40ce1ddec1a5bf38dad99473c0c7074e10c6cfc0566005a57645a9a29a7c183f,2025-09-08T10:15:33.440000 CVE-2019-2523,0,0,8dbf09cc09a9d36d5d379aecf44a233c56df498cda1cca6ed13442ba59e0191b,2024-11-21T04:41:02.417000 CVE-2019-2524,0,0,e78029c84d578c9195f9dc77e1bc1d99a41eb834e1b9ea40680656159ff29559,2024-11-21T04:41:02.543000 CVE-2019-2525,0,0,45bc199935b7701dbac60abc55ae16ce2ad0edb17c245390c2e47faaca8aac93,2024-11-21T04:41:02.660000 @@ -254508,7 +254510,7 @@ CVE-2024-25096,0,0,5cc94b70794cc94fedcfe23267be48d5fc506685dffb5fe76c5254bfca244 CVE-2024-25097,0,0,695123874bf56c0f4ed9579aa8fa0e63d5496b73a3b3b1d6abb85d46c01089ae,2025-01-23T18:58:15.510000 CVE-2024-25098,0,0,9c3d7958bf4648e1cbc94c4e95222463b77e17b5ab8f910a3675cf6f76d3330b,2025-01-16T19:05:08.543000 CVE-2024-25099,0,0,c3506a8106a40e3b9430db1fca8e40cb6f5d1a26ac7f37009098f1b72ae5756e,2025-01-23T18:58:35.463000 -CVE-2024-25100,0,0,8dc073ebeeb5612406a0fe85c3411871bfb7fe05e8295087ca6b4b8d7e3e94d6,2024-11-21T09:00:15.510000 +CVE-2024-25100,0,1,a854d6a0d4b8010c13c9ce57c509327e7a58e684f28ee764e4e716464b3a26ae,2025-09-08T10:15:34.583000 CVE-2024-25101,0,0,da6a87bd30f28b7a34b84e3b57d291cbf4fbb09648499892bfc3922667765042,2025-01-23T19:18:08.850000 CVE-2024-25102,0,0,98243b3d3dd1db310b96a1b32ef1013b75708eb3fa2c31104e2846a72b154bf4,2024-11-21T09:00:15.760000 CVE-2024-25103,0,0,04ad0c657e86fc33c9625cc46f0dafc37956feb152f4424ae24f7592d34147a3,2024-11-21T09:00:15.880000 @@ -258607,7 +258609,7 @@ CVE-2024-30356,0,0,495a59f94bfab9132df1bab3f224495d9e1ae6cf61954e1367ce23aa76e48 CVE-2024-30357,0,0,3595cd57a7f19fddff68efb39402085f154009eafc812c1e36b8e485678d319f,2025-08-08T18:23:20.233000 CVE-2024-30358,0,0,5556ca3ca0bfdfdbd19985c93c2e330294a69d92c8586f2d973db3b7f9d62987,2025-08-08T18:23:14.557000 CVE-2024-30359,0,0,035a110efa8c6f92c062de9e5116b3eb97d48ee0072fea7bc784de62312b574b,2025-08-08T18:23:09.240000 -CVE-2024-3036,0,0,26f8fcd9d16ccf1ca456e2125ba6068fda496f8b7c91b54b2e12b09fb9dc06a3,2024-11-21T09:28:44.080000 +CVE-2024-3036,0,1,6ea1f3daace0e56932731699e1494fd128d0dadce1a19aeeeadebd8737ac9a98,2025-09-08T10:15:34.867000 CVE-2024-30360,0,0,5cf798bccc1e6db8af340b06c8fb2dd700dec4192aa0b681b2f927941d8de916,2025-08-08T18:24:19.210000 CVE-2024-30361,0,0,1bcd6463a64861c451c86d8cf2687ba88db276573c123e6784c99a981cdbb908,2025-08-08T19:09:08.603000 CVE-2024-30362,0,0,c8bcfbf55e6b68ba7e42a53dcf2f4937faa5362878d3843bb8794d5316839660,2025-08-08T19:07:54.930000 @@ -279531,7 +279533,7 @@ CVE-2024-5895,0,0,752d3cf662f17a4f3c7f7e879cdc7b8537ae16b2349d3852aa7b8b0a2a439f CVE-2024-5896,0,0,b4627d6aad35b598f68210f30f33fb9dbf452b802e1039b023010866f8b83347,2024-11-21T09:48:32.373000 CVE-2024-5897,0,0,6eb88a75ad407b2504ccd055c67eeea3d592b86e8ee0ce595d22cedc4b1bbbdd,2024-11-21T09:48:32.523000 CVE-2024-5898,0,0,3ab93646c8afc955ec0bbf4ec69565e3e8fbf6db202064381ce706ae13547a72,2024-11-21T09:48:32.670000 -CVE-2024-5899,0,0,f2263fb86f7cbfc7caa8cf2b688d8ab299276fc2d5df5712ff0f16c2ef83bf64,2025-07-23T15:00:34.233000 +CVE-2024-5899,0,1,0fc1cbbb6606e02e37a1c8f20ff37c8ccae2556f13b5fe05f55cb07fbcf335c0,2025-09-08T10:15:35.087000 CVE-2024-5900,0,0,99ade6c9a9a1f5e54dd7771ee7da0a5a1818fe002b234a6c65f415cb19725c09,2025-07-05T23:15:23.947000 CVE-2024-5901,0,0,6418f11733e5a2fb65eb65998d9588d12fa78aa1c2d06d614004b6462ce72ad5,2025-03-13T14:09:27.020000 CVE-2024-5902,0,0,417a6817ec3d881a45d0749becc571c7644c221795de9a888a2dbeffa8796521,2025-07-10T18:14:44.577000 @@ -279902,7 +279904,7 @@ CVE-2024-6280,0,0,68df01f8c6f27fa2081f3266d92dcc2693314c1d3a4d550cd766c2375bd9f3 CVE-2024-6281,0,0,0087089c9b8b0c4381a0aec3a9abcd3eb9c8c2695032e92a34fe389bca6fcb5a,2024-11-21T09:49:20.777000 CVE-2024-6282,0,0,7aa204917f62d48abe37112fb881c370cec46759b86f40c37d5658b7eb14ad73,2024-09-26T16:19:08.340000 CVE-2024-6283,0,0,c2adcce4df645af20b23836a1682a325747ac84a7e08e3b149d86c705afbc45d,2024-11-21T09:49:20.980000 -CVE-2024-6284,0,0,ad830ce9366f0cb79634c31fddc9537921393ae98a9d228763f8eb2937394566,2025-07-22T18:45:00.113000 +CVE-2024-6284,0,1,ffa69d927b9245515a42819949afd2b7e7840270effd6dec7a3bf974ec3d8089,2025-09-08T10:15:35.287000 CVE-2024-6285,0,0,1fcb29e9b241d3d9823a549dedf67c28f15777f793819e6797d2c31a7c00b940,2024-11-21T09:49:21.247000 CVE-2024-6286,0,0,479b0510bcb1855483d3f0f0a8207a46ac1221fd35c5a48b74742d358514cb28,2025-07-25T16:26:47.787000 CVE-2024-6287,0,0,40f3c985baea6ec05334f3fce731768f0d81911c304f1a2e44209c982888aaa6,2024-11-21T09:49:21.517000 @@ -280826,7 +280828,7 @@ CVE-2024-7250,0,0,77e3676540095583ee54282377d752e59ba470ce7bc9b0c39a793c956014b2 CVE-2024-7251,0,0,4f5492038d53a952aae52e1170da3aea84a43d615d1a1fa4149c5ff70cda5bab,2024-11-21T09:51:08.880000 CVE-2024-7252,0,0,24d74b26883cf8151f149bfa7deed5d8a63133a6167165e30cc462ead5fd458a,2024-11-21T09:51:09.003000 CVE-2024-7253,0,0,584a033ffb592d83b01df6ad961d3e9d5269faa0ce5491eba30847d8b97978a8,2025-05-21T10:39:46.163000 -CVE-2024-7254,0,0,5b16f74bcd52fd16e08a4e14a120ab7bbe45d2002f78abe63067e64a26e65c2e,2025-08-13T10:37:06.480000 +CVE-2024-7254,0,1,cd9cb220d70ea4a9df46cd166359018f910c494237526fcb12e6112644d5a24e,2025-09-08T10:15:35.483000 CVE-2024-7255,0,0,ba60a86cf283a25cbf44d00829e275d7a0bb026ed551fecdfd5dd1e8d3ece898,2024-10-29T20:35:42.023000 CVE-2024-7256,0,0,6943aac07a7fc5ab85c828a3f2feda9d7e5f422c60266753c20567487922742d,2025-01-02T17:41:48.610000 CVE-2024-7257,0,0,e824d36e9091bce947d766daa6e3bb42f606d3c1749eb85a01f040d08b0b6e1f,2024-08-05T12:41:45.957000 @@ -284291,6 +284293,8 @@ CVE-2025-10086,0,0,b5e182c161655d6778fff8acdc5a01a4465a7ba65e6aac1d829bb08ccb4d9 CVE-2025-10087,0,0,495d97f608ce6eaf31c994a64da3399448b6d9b09da4ed159870f0c4d0987f23,2025-09-08T07:15:34.850000 CVE-2025-10088,0,0,cdadc440be2a02a682ebc6304e47d9cdc88fdf5d4eb866a286f2e79410dcd3b6,2025-09-08T07:15:35.407000 CVE-2025-1009,0,0,2eaef1afd010c535fd50fceaedaa339dbea694d459d94247ca2cdf1816ccd1a0,2025-02-06T19:28:52.820000 +CVE-2025-10090,1,1,fbee63ee4df3123e33ab19bb016e287466e1f16a946b7b991643ca13d87d1ca4,2025-09-08T10:15:35.710000 +CVE-2025-10091,1,1,490d88ad36ce1a0380c28f9643c5f70acf8430bb2504afde0632ecc1e68e8697,2025-09-08T11:15:30.870000 CVE-2025-1010,0,0,62a03586b01b5384628b2b24394869ef4f272c9b8354e05188dae652a849042c,2025-02-06T19:30:13.637000 CVE-2025-1011,0,0,c7aab2f6a9c0415627154b90d3f96ebb209e4ddce064fa55ea39e2629e66c93d,2025-02-06T19:31:38.610000 CVE-2025-1012,0,0,4df28ce86cbd4e49559b6caf4f9713bdb42cefc5aa3a7f0ac2efbb26c1309b49,2025-02-06T19:33:46.407000 @@ -291009,7 +291013,7 @@ CVE-2025-2712,0,0,f40fb5320a48b0b52d8a58dd62676768c99c6434d73b292ad23e19fad34166 CVE-2025-27127,0,0,1ae807e30083cc76c66966b4b524bf0fdeffa6d4e110763c42c167eb95b6bda6,2025-08-12T12:15:34.593000 CVE-2025-27128,0,0,1e165fbf413d46d8aede9b8fe8bca22efe4c0ec370313e6932fd83e31426b47f,2025-08-12T16:38:39.677000 CVE-2025-27129,0,0,4585ece8e7a75505728bc87a8d113abb5ca4b017501529f7ea85ac5ce515ef28,2025-08-21T18:24:05.310000 -CVE-2025-2713,0,0,39e95314723edf631d7397d431b8dc7141df21abf30ea16a14a8bfee868f99ad,2025-08-01T16:58:24.500000 +CVE-2025-2713,0,1,ee972eb871b27f962513a7df5e19f074b7de0b7d0341ada8c5c53d2a581eb140,2025-09-08T10:15:35.990000 CVE-2025-27130,0,0,c40a18d9abfe5d71738f05d240ff807c1b6a6cc630d5ec60a83b043385497b44,2025-07-08T17:09:54.687000 CVE-2025-27131,0,0,071d8576367ac4bcd57ae780dc39fb5ba7d654b804cb1f5932df1fbd3dc6ce84,2025-06-09T19:06:16.757000 CVE-2025-27132,0,0,b1a8a12d0148537a02c0d96ce9420181e0484ee5a2e7e39fdd1e47ef3d526ac3,2025-05-09T19:14:30.360000 @@ -299256,7 +299260,7 @@ CVE-2025-45987,0,0,9037107bbfe2cfc872a0197e7165571401c0111eb7129f5107486ed18b5b6 CVE-2025-45988,0,0,62e01a11f459ed9fdc2564e27cb8dc64fb2990b6407bae8c4f3ecaa540904920,2025-07-10T12:16:15.107000 CVE-2025-4599,0,0,e048e9371977aadd41bc491c46a308b4e055baed3ab487fb36b582b1ffadcba5,2025-08-05T14:34:17.327000 CVE-2025-45997,0,0,6427fb401720f5a1ec9f9ddb9a7287b863d0733096e213df5c6d6f0eb039c3d2,2025-06-09T18:53:36.927000 -CVE-2025-4600,0,0,a4a37874fc172e906f8d2cc1badce16d77cec415a565a3d7a87125c6ccf441f6,2025-07-29T13:03:31.870000 +CVE-2025-4600,0,1,dcbe7af4dd948416138dbf6a33a5c6bbc4f466a66e05de517e615e80d8edbcad,2025-09-08T10:15:36.167000 CVE-2025-46000,0,0,196768df4bd9112f1f7a66de3ee836228077a0f98c68e0211bf9d0dec688cd61,2025-07-22T13:06:27.983000 CVE-2025-46001,0,0,db64e33c5322cb2bbe19f3f81e19628825a4563b86d2d522605dc1bb9be2b91c,2025-07-23T16:15:26.200000 CVE-2025-46002,0,0,5b5c11a52f578e2e525c1427e2042ef229455a82a76f12828a5ce7d5b8986600,2025-07-22T13:06:27.983000 @@ -305467,7 +305471,7 @@ CVE-2025-5876,0,0,32a8af4e9cd8f7d2c246abe46c081e26ff3051e42e928a128210a8c01026ea CVE-2025-5877,0,0,d0fc9d475beccd3a1a467515982c1f66a610522bd0dbdcaf601a57c1a88517bd,2025-07-02T19:17:43.003000 CVE-2025-5878,0,0,7460e28b521adf15f1e0947b351c873b699a9b031f986dc0aaec957b1b03014c,2025-06-30T18:38:23.493000 CVE-2025-58780,0,0,b8b26f89d8f5b1b297e69c2315c83e17c02f903a2ee6b21a0403ffe6a0c3b05e,2025-09-05T17:47:10.303000 -CVE-2025-58782,1,1,d70a6ae7dc119346c904ce8d2db7fceec6ca173c52d2a717b92e2b69b85f90ee,2025-09-08T09:15:30.367000 +CVE-2025-58782,0,0,d70a6ae7dc119346c904ce8d2db7fceec6ca173c52d2a717b92e2b69b85f90ee,2025-09-08T09:15:30.367000 CVE-2025-58783,0,0,24b8d4ee21a2b509516cade072389eb116099f316af7b2cae5e082ce47e4e4fa,2025-09-05T17:47:10.303000 CVE-2025-58784,0,0,9b988ce8ae2ae63ee076a987078e51fc302a6788e78d8998d158f9c47d5d3548,2025-09-05T17:47:10.303000 CVE-2025-58785,0,0,468c549db7e964e68283dfe3e0d7d973a2121b69c6c559730a6824c072144eca,2025-09-05T17:47:10.303000 @@ -305679,6 +305683,7 @@ CVE-2025-5988,0,0,39c21394eb273a7619d14d5b969c1d3d56e7ad46a2cea11efb993e18367f88 CVE-2025-5990,0,0,1458c1ec41c083cd54b8d25466f7817ddd305c7529a2e44cd3853a1144996fa5,2025-08-11T18:46:35.490000 CVE-2025-5991,0,0,2d56ef31c39d49ebda5cce54941d2d07bc366906f8f2e10ec12b1264a4709a15,2025-06-12T16:06:20.180000 CVE-2025-5992,0,0,a5196280abf109f7f78bb3e56978225cb89cb8f17fa338d1f9d99be7b7e97bad,2025-07-15T13:14:49.980000 +CVE-2025-5993,1,1,4c9ccb59046ea30509e4f36c817cc5568dfcff5f3a69da92951b9ee22f23095b,2025-09-08T11:15:31.100000 CVE-2025-5994,0,0,a4f5e64804f10a921e7e8d759a2aff97026d6f6450665bbb84fe345d2840e713,2025-07-17T21:15:50.197000 CVE-2025-5995,0,0,e0a95e1875ad143ee49273c882884536a042b40281445da0f88771ec39f3e3b5,2025-06-30T18:39:09.973000 CVE-2025-5996,0,0,823babed6ca77ed0d913df42dac3c313e60e52e7d4e5caac1ff3a19a2039c14f,2025-08-08T18:20:50.830000