admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 16:54:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-30T07:00:11.957878+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-30 07:04:03 +00:00
1 parent c12d324782
commit 854a0553d1
5 files changed
+281 -16
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2025/CVE-2025-137xx/CVE-2025-13783.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-13783",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T06:15:45.410",
"lastModified": "2025-11-30T06:15:45.410",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument ids results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://vuldb.com/?ctiid.333787",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333787",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.688838",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.688839",
"source": "[email protected]"
},
{
"url": "https://www.yuque.com/shangu-vvuup/ydpg69/dd5zpygt7w5w4d19?singleDoc",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-664xx/CVE-2025-66432.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-66432",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T05:16:08.353",
"lastModified": "2025-11-30T05:16:08.353",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-420"
}
]
}
],
"references": [
{
"url": "https://docs.oxide.computer/security/advisories/20251117-1",
"source": "[email protected]"
},
{
"url": "https://github.com/oxidecomputer/omicron/compare/01bb875...ec069f0",
"source": "[email protected]"
},
{
"url": "https://oxide.computer/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-664xx/CVE-2025-66433.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-66433",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T05:16:12.110",
"lastModified": "2025-11-30T05:16:12.110",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-863"
}
]
}
],
"references": [
{
"url": "https://htcondor.org/security/vulnerabilities/HTCONDOR-2025-0002.html",
"source": "[email protected]"
}
]
}
README.md
+7 -10
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-30T05:00:11.513124+00:00
2025-11-30T07:00:11.957878+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-30T04:15:58.387000+00:00
2025-11-30T06:15:45.410000+00:00
```
### Last Data Feed Release
@@ -33,19 +33,16 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319619
319622
```
### CVEs added in the last Commit
Recently added CVEs: `6`
Recently added CVEs: `3`
- [CVE-2025-13782](CVE-2025/CVE-2025-137xx/CVE-2025-13782.json) (`2025-11-30T04:15:58.387`)
- [CVE-2025-66420](CVE-2025/CVE-2025-664xx/CVE-2025-66420.json) (`2025-11-30T03:15:46.107`)
- [CVE-2025-66421](CVE-2025/CVE-2025-664xx/CVE-2025-66421.json) (`2025-11-30T03:15:47.757`)
- [CVE-2025-66422](CVE-2025/CVE-2025-664xx/CVE-2025-66422.json) (`2025-11-30T03:15:47.970`)
- [CVE-2025-66423](CVE-2025/CVE-2025-664xx/CVE-2025-66423.json) (`2025-11-30T03:15:48.163`)
- [CVE-2025-66424](CVE-2025/CVE-2025-664xx/CVE-2025-66424.json) (`2025-11-30T03:15:48.360`)
- [CVE-2025-13783](CVE-2025/CVE-2025-137xx/CVE-2025-13783.json) (`2025-11-30T06:15:45.410`)
- [CVE-2025-66432](CVE-2025/CVE-2025-664xx/CVE-2025-66432.json) (`2025-11-30T05:16:08.353`)
- [CVE-2025-66433](CVE-2025/CVE-2025-664xx/CVE-2025-66433.json) (`2025-11-30T05:16:12.110`)
### CVEs modified in the last Commit
_state.csv
+9 -6
View File
@@ -288562,7 +288562,8 @@ CVE-2025-1377,0,0,cdf3c00849797fee9786ea08188d37668b21a456809fa64aaace8c05203cfa
CVE-2025-13770,0,0,e670d689c5a9bfbf46a479876d3763d09ea041a09fe159dcaf5160b32bcc827f,2025-11-28T23:11:55.537000
CVE-2025-13771,0,0,deecdd527c411917ea27603e7dc72e92a1eee8884499bd2bc0647f3d1393e0c0,2025-11-28T23:11:55.537000
CVE-2025-1378,0,0,7b0b1440e8634b58b74747d3b86a48aac3845e3d771526460c32a15ff40576ad,2025-06-23T14:37:28.747000
CVE-2025-13782,1,1,bb015565c618467fa2f2451516196b8820e0e56753e31aada2cb511f15a3daaa,2025-11-30T04:15:58.387000
CVE-2025-13782,0,0,bb015565c618467fa2f2451516196b8820e0e56753e31aada2cb511f15a3daaa,2025-11-30T04:15:58.387000
CVE-2025-13783,1,1,079c0c2cdfcfaf1cd1c5cb656d63c50cba0231b82ff97fee46ca5ea26ab3c949,2025-11-30T06:15:45.410000
CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000
CVE-2025-1380,0,0,6bd04dd2008ea0079e8919e2e53c4972b6e83c3f4c56a4b8715e29739c2e265b,2025-04-02T19:01:09.913000
CVE-2025-1381,0,0,0527ab2734ccec4269c70fb2d0d40ea59b49fa3f3723a4356fee1835e38fef1a,2025-04-11T18:38:03.400000
@@ -316656,12 +316657,14 @@ CVE-2025-6639,0,0,48c7e125e98227249348579c9617d818291519570444fd944ba73c0b82bcfd
CVE-2025-6640,0,0,a4c992d898d320b9fbc41aeee35836398a20e38bcfa076af892973b98a231d0d,2025-07-01T19:31:36.373000
CVE-2025-6641,0,0,31699ed61befc504bc8c13dbb1ea193c366fe903345564eb35e59296c5939e55,2025-07-01T19:31:43.230000
CVE-2025-6642,0,0,37c2cb65a07d888f53f384c18bced3f2e5c4ade2246c2eac8aa013a7a21026bb,2025-07-01T19:31:50.170000
CVE-2025-66420,1,1,e7fa133233503e99d996075da5a0dca9815e61723b4f83f2851eae7e7dde9140,2025-11-30T03:15:46.107000
CVE-2025-66421,1,1,7f443899fb8cbd983c2c4cbaede434941db4f0e48e1cc226e0110c3d1c0bf940,2025-11-30T03:15:47.757000
CVE-2025-66422,1,1,cce48f1622ab8d9ada8d69e8f194ae93ee3e2a78d2bc00d3a811d0741ea53ddf,2025-11-30T03:15:47.970000
CVE-2025-66423,1,1,15ff35227e815c34f7b962310826a814d60eadfc338c9512a8ffe65b7d3c7cc3,2025-11-30T03:15:48.163000
CVE-2025-66424,1,1,acea75ea0d3e22bc66f9014b322b64126399ae727e17877c7cfa907bea17068b,2025-11-30T03:15:48.360000
CVE-2025-66420,0,0,e7fa133233503e99d996075da5a0dca9815e61723b4f83f2851eae7e7dde9140,2025-11-30T03:15:46.107000
CVE-2025-66421,0,0,7f443899fb8cbd983c2c4cbaede434941db4f0e48e1cc226e0110c3d1c0bf940,2025-11-30T03:15:47.757000
CVE-2025-66422,0,0,cce48f1622ab8d9ada8d69e8f194ae93ee3e2a78d2bc00d3a811d0741ea53ddf,2025-11-30T03:15:47.970000
CVE-2025-66423,0,0,15ff35227e815c34f7b962310826a814d60eadfc338c9512a8ffe65b7d3c7cc3,2025-11-30T03:15:48.163000
CVE-2025-66424,0,0,acea75ea0d3e22bc66f9014b322b64126399ae727e17877c7cfa907bea17068b,2025-11-30T03:15:48.360000
CVE-2025-6643,0,0,27e89fc6b64098cb1e8fbcb1805e35e92b4979e917bb20db38f9199222858fe9,2025-07-01T19:31:57.240000
CVE-2025-66432,1,1,a5d1bd686ea2d4124db5f26a28851a3af3c9e329d6b29dcd9a2c85d11ce2b35f,2025-11-30T05:16:08.353000
CVE-2025-66433,1,1,cdee257f8c0f09e7237554ef88305e92d0e5d9c6662abc47d26fd54e6214b5e8,2025-11-30T05:16:12.110000
CVE-2025-6644,0,0,c471a335fd97c82b1f426bbdf3aa1cf255f80cce7ff6d918f43bddb5b99ec065,2025-07-01T19:32:05.463000
CVE-2025-6645,0,0,ca082f442db5c54984c1d57f67da022e24f84a3b108c23d783fcb717c7fa1cf3,2025-07-01T19:32:54.980000
CVE-2025-6646,0,0,043bcd07e29066e91f25f87d0bed630b3a061c426b55f13b94b29bef86f244f3,2025-07-01T19:32:59.540000
Can't render this file because it is too large.