Auto-Update: 2025-06-10T08:00:21.069051+00:00

This commit is contained in:
cad-safe-bot 2025-06-10 08:03:57 +00:00
parent cbf9470789
commit 898c0ec35f
6 changed files with 175 additions and 27 deletions

View File

@ -2,13 +2,13 @@
"id": "CVE-2024-3931",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-04-18T00:15:07.810",
"lastModified": "2024-11-21T09:30:43.577",
"lastModified": "2025-06-10T06:15:21.053",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Totara LMS 18.0.1 Build 20231128.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component Profile Handler. The manipulation of the argument ID Number leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261368. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
"value": "A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 13.46, 14.38, 15.33, 16.27, 17.21 and 18.8 is able to address this issue. It is recommended to upgrade the affected component."
},
{
"lang": "es",
@ -16,6 +16,50 @@
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
@ -67,16 +111,24 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://totara.community/mod/forum/discuss.php?d=27644",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.261368",
"source": "cna@vuldb.com"

View File

@ -0,0 +1,56 @@
{
"id": "CVE-2025-1041",
"sourceIdentifier": "securityalerts@avaya.com",
"published": "2025-06-10T06:15:22.000",
"lastModified": "2025-06-10T06:15:22.000",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An improper input validation discovered in \n\nAvaya Call Management System\ncould allow an unauthorized \n\nremote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "securityalerts@avaya.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "securityalerts@avaya.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"references": [
{
"url": "https://support.avaya.com/css/public/documents/101093084",
"source": "securityalerts@avaya.com"
}
]
}

View File

@ -0,0 +1,21 @@
{
"id": "CVE-2025-4840",
"sourceIdentifier": "contact@wpscan.com",
"published": "2025-06-10T06:15:22.287",
"lastModified": "2025-06-10T06:15:22.287",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection"
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/85dc579d-edc4-421e-9bb1-09629dec527b/",
"source": "contact@wpscan.com"
}
]
}

View File

@ -0,0 +1,21 @@
{
"id": "CVE-2025-4954",
"sourceIdentifier": "contact@wpscan.com",
"published": "2025-06-10T06:15:22.403",
"lastModified": "2025-06-10T06:15:22.403",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server"
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/673f35ff-e1d5-4099-86e7-8b6e3e410ef8/",
"source": "contact@wpscan.com"
}
]
}

View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-06-10T06:00:19.655133+00:00
2025-06-10T08:00:21.069051+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-06-10T05:15:23.023000+00:00
2025-06-10T06:15:22.403000+00:00
```
### Last Data Feed Release
@ -33,28 +33,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
297224
297227
```
### CVEs added in the last Commit
Recently added CVEs: `9`
Recently added CVEs: `3`
- [CVE-2025-3076](CVE-2025/CVE-2025-30xx/CVE-2025-3076.json) (`2025-06-10T05:15:22.503`)
- [CVE-2025-4387](CVE-2025/CVE-2025-43xx/CVE-2025-4387.json) (`2025-06-10T04:15:34.623`)
- [CVE-2025-4601](CVE-2025/CVE-2025-46xx/CVE-2025-4601.json) (`2025-06-10T04:15:49.113`)
- [CVE-2025-5912](CVE-2025/CVE-2025-59xx/CVE-2025-5912.json) (`2025-06-10T04:15:49.300`)
- [CVE-2025-5913](CVE-2025/CVE-2025-59xx/CVE-2025-5913.json) (`2025-06-10T04:15:54.063`)
- [CVE-2025-5925](CVE-2025/CVE-2025-59xx/CVE-2025-5925.json) (`2025-06-10T04:15:54.330`)
- [CVE-2025-5934](CVE-2025/CVE-2025-59xx/CVE-2025-5934.json) (`2025-06-10T04:15:55.327`)
- [CVE-2025-5935](CVE-2025/CVE-2025-59xx/CVE-2025-5935.json) (`2025-06-10T05:15:22.780`)
- [CVE-2025-5952](CVE-2025/CVE-2025-59xx/CVE-2025-5952.json) (`2025-06-10T05:15:23.023`)
- [CVE-2025-1041](CVE-2025/CVE-2025-10xx/CVE-2025-1041.json) (`2025-06-10T06:15:22.000`)
- [CVE-2025-4840](CVE-2025/CVE-2025-48xx/CVE-2025-4840.json) (`2025-06-10T06:15:22.287`)
- [CVE-2025-4954](CVE-2025/CVE-2025-49xx/CVE-2025-4954.json) (`2025-06-10T06:15:22.403`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `1`
- [CVE-2024-3931](CVE-2024/CVE-2024-39xx/CVE-2024-3931.json) (`2025-06-10T06:15:21.053`)
## Download and Usage

View File

@ -264870,7 +264870,7 @@ CVE-2024-39306,0,0,8e446f8cd38382555b776a84edd1102287cdb22d9e95652344c53f12d26a9
CVE-2024-39307,0,0,54fef08c46653f6e61b6f0cd14a692daff3eb07244b26dc42dd314c57d353922,2024-11-21T09:27:25.713000
CVE-2024-39308,0,0,5e2a254789b6adf99c0777cff7acf6dd961d09c4b36426a3aeec492e329363b3,2024-11-21T09:27:25.837000
CVE-2024-39309,0,0,05dddb230d488a4715733b5828a558e0d37a47d27fd705c4212d0a536cb382bd,2024-11-21T09:27:25.990000
CVE-2024-3931,0,0,da17b20e582e862546056d14aa128822fb3b0fc4d7319c4f35adbc82010d816c,2024-11-21T09:30:43.577000
CVE-2024-3931,0,1,1a38c5b918e27e20b2d0a3fb12abd6fe9ae68c20f1e615049592c663fbe0e401,2025-06-10T06:15:21.053000
CVE-2024-39310,0,0,09dc0d6f8f165690ce5741ca2ed6e9da3275d325f18578ccaad0e38dbe7b8f91,2024-11-21T09:27:26.120000
CVE-2024-39311,0,0,ebf789116a74eb2a4f5371006bc49718c2bb9a41ce67f4e999602b1ddee53657,2025-04-14T14:24:49.550000
CVE-2024-39312,0,0,244e5eeda7d77b8f762732664cb450aa8179af57ae55ef58be1fa7ad940fc27b,2025-04-11T14:09:48.327000
@ -283173,6 +283173,7 @@ CVE-2025-1033,0,0,09ab69364f9948c52326a045ff7f84ad36a01237aa0e03ff881a0fb4dbc415
CVE-2025-1035,0,0,72fea0a2d80ae07fdc30e5739a98c27b4b9464bbe1b4b8593a6bca9675ecb8a3,2025-02-18T12:15:16.087000
CVE-2025-1039,0,0,823bce39f61202d0e0460d0eb2eb27e197a6e485562d2d0216237f17cb8ad76b,2025-02-20T14:15:33.627000
CVE-2025-1040,0,0,f25cfb3c1b13ff20b39411a263a6cb29b50914a2189270974ec535f559ed5ac0,2025-04-01T20:19:55.317000
CVE-2025-1041,1,1,2b71b0032465c6004924ce968bc794f681b93e29636cd42d36b59c1144ff24a4,2025-06-10T06:15:22
CVE-2025-1042,0,0,e4600eb751c0559414826534607894ec791f03e01157094495f2034b236d6aad,2025-02-12T15:15:16.230000
CVE-2025-1043,0,0,85285f0459384c003ce1a5c887368f71f800dede66c51b6ace529750f1366c58,2025-02-20T12:15:11.030000
CVE-2025-1044,0,0,9f8be6c10874ff2755d0454f22f2307f6446f5aad49de046e6d1d7bccf9d96f4,2025-02-18T21:34:01.863000
@ -291069,7 +291070,7 @@ CVE-2025-3074,0,0,d69ef3f25f99151a78aec61757586e7933094482b036c8ca2d58b4730d2480
CVE-2025-30740,0,0,c1996fd4f11ae45fb45e60e2a09090c033caf9e010b7aa14d0c4e920a51d9467,2025-04-21T19:17:51.487000
CVE-2025-30741,0,0,a7ba724d5523a4cf0c1b38678a2ee1b0c99bfb24f80e0249782577c8771159ad,2025-03-27T16:45:46.410000
CVE-2025-30742,0,0,86ca35df94be3200dc999955b93d6c2b0d3e9fbdd347944fb57613c93c49228a,2025-03-27T16:45:46.410000
CVE-2025-3076,1,1,bfb5abef197d816a3b8cabd83cc3730e72813343813915a2881ece0c911c5a11,2025-06-10T05:15:22.503000
CVE-2025-3076,0,0,bfb5abef197d816a3b8cabd83cc3730e72813343813915a2881ece0c911c5a11,2025-06-10T05:15:22.503000
CVE-2025-30763,0,0,8cae761cd1fe343dec958c3bde26a021d7b611e1f3fb5c049ea6e8543db73e0c,2025-03-27T16:45:27.850000
CVE-2025-30764,0,0,c2a0dd624071e543aa5659c2a18c25c37cb6242533fd227b0bac92cd7149744c,2025-03-27T16:45:27.850000
CVE-2025-30765,0,0,0badfbc63d413d99adc463414606a43aab2344afb0d9457b7cf4d0a25dbd17b0,2025-03-27T16:45:27.850000
@ -294660,7 +294661,7 @@ CVE-2025-43861,0,0,cc812f35df5ffcb8f443a4d7ada84bcfa5f243dfadf66db64d9528b5b0331
CVE-2025-43862,0,0,2069c29142377e87b6ac6717f988918c57aef9b91da36da9422600c6b1db6517,2025-04-29T13:52:28.490000
CVE-2025-43864,0,0,4a74404ae1412d4adedf36bca3c18b62d4e73dc491c1dfc2b32ce26efe001d3b,2025-04-29T13:52:28.490000
CVE-2025-43865,0,0,c649a0f837f30d7ca72312925d2a9794983503f9ad275427cd38dd25847f7ed8,2025-04-29T13:52:28.490000
CVE-2025-4387,1,1,3e4181de57780cae8aab035c2029357efc95d3201bc4c74915804d700ffd492c,2025-06-10T04:15:34.623000
CVE-2025-4387,0,0,3e4181de57780cae8aab035c2029357efc95d3201bc4c74915804d700ffd492c,2025-06-10T04:15:34.623000
CVE-2025-43878,0,0,35cf7c07b8b80c3378b7e206d0f6773b587f978a8b7a7526ac0a236c37d60b0d,2025-05-08T14:39:09.683000
CVE-2025-4388,0,0,97a1b6eacb96a5a89fd1b724cb794d70ee55608bc796c2eb710dc788294d8025,2025-05-07T14:13:20.483000
CVE-2025-4389,0,0,45c746d75c230b521e0d7fa0f7ed2e2bcf19d590062d4846efcc391c1f917c66,2025-05-19T13:35:20.460000
@ -295049,7 +295050,7 @@ CVE-2025-4597,0,0,dcada8bd747b5d8fe51a3029b8ca767324f59d50104363211751e377151167
CVE-2025-4598,0,0,0afb48f5d4beb8ba717edab0a2c1dbaaa02bcad15f4563ef46c0692744ec8051,2025-06-05T07:15:23.047000
CVE-2025-45997,0,0,6427fb401720f5a1ec9f9ddb9a7287b863d0733096e213df5c6d6f0eb039c3d2,2025-06-09T18:53:36.927000
CVE-2025-4600,0,0,026383a000ee9b132f9dd97af63a0401be9be3b21241dcdc822424d27f013326,2025-05-16T14:42:18.700000
CVE-2025-4601,1,1,2309b0bed0606989b7e2431ae1a82f72fd7585cae299bb458362cd32abf54463,2025-06-10T04:15:49.113000
CVE-2025-4601,0,0,2309b0bed0606989b7e2431ae1a82f72fd7585cae299bb458362cd32abf54463,2025-06-10T04:15:49.113000
CVE-2025-46011,0,0,c1776a78cb3800147b82714f56c78717ef81a5a9688b212486314b16953839ea,2025-06-09T21:15:46.517000
CVE-2025-4602,0,0,409776dd4d3f5aa956641458acdab541ced8aee4cc4b0cac3a447338c59994d1,2025-05-28T14:58:52.920000
CVE-2025-4603,0,0,353abd9188b7471dff5b9b62f88597abbd29f78728037be18e8dafefcd5f4d4e,2025-05-28T14:58:52.920000
@ -296169,6 +296170,7 @@ CVE-2025-48389,0,0,e0a06862dbd5de9d0e30b39ba95e12152ebb3f987c91aebc43d8b22f341a7
CVE-2025-4839,0,0,026d74f00e92e1df1d876b9f6b1cecb41d0bc701e988325a0cacac560f915dca,2025-06-04T20:11:58.047000
CVE-2025-48390,0,0,e08fc2fcf4792cfdc29a5c8dbd607faa716468223eb98fd8cb285bd470941f51,2025-05-30T16:31:03.107000
CVE-2025-48391,0,0,6ff3d1038c2add63bd7e7b8b38f9227bd17f067c0122feb999c7084ff1a9050a,2025-05-21T20:24:58.133000
CVE-2025-4840,1,1,98bc2633995e7d67a8737f47869388351c7cb5ae3ea83713c8db09c6416e7f03,2025-06-10T06:15:22.287000
CVE-2025-4841,0,0,9ef74f3a79e56684383036ff7085bf06d0eca4b2dbe84beb51e4af0435bfe603,2025-06-03T15:57:42.837000
CVE-2025-48413,0,0,b3b11f8a7ba8622574fd750e056164f0578951072345d9f4cba4efbb84a42403,2025-05-21T20:24:58.133000
CVE-2025-48414,0,0,e314f6955b624ffe6cbb1b252b69ac45f584829d39abb7e04746fd27a97f3f9b,2025-05-21T20:24:58.133000
@ -296558,6 +296560,7 @@ CVE-2025-4947,0,0,5a2596b46f41daf47fb71d339aa3ece981233d1a2e1afb5f6d90d81a432acb
CVE-2025-4948,0,0,a5ca61c68a7139420f4ae3cf8d0c9e197c8ea856029d5208bdc5d22ad0659a67,2025-06-09T10:15:25.730000
CVE-2025-4949,0,0,c11b53f05ae94538ba622256f90c8d8b1286550f417cb15b7dccd733b074e027,2025-05-23T07:15:21.160000
CVE-2025-4951,0,0,8d2965f90ffa46a261e1b06cd533aeb358abbd5115dc1f57a5b34acf12ab582b,2025-05-21T20:25:16.407000
CVE-2025-4954,1,1,4f8b18e50e35fbfc0cb799c772c703df1c5ec3452b90f5bc7c961ccbbcb5c026,2025-06-10T06:15:22.403000
CVE-2025-49599,0,0,cd0748db942732a0e968c564ce05d560bd51611e52e8cb06dc26ca9e65d8d9b0,2025-06-09T16:15:46.830000
CVE-2025-49619,0,0,bf456b7c74aaa6eab01b4c779d57de166fafc9ff7198338c147fed153e2c86a7,2025-06-09T16:15:46.937000
CVE-2025-4963,0,0,bcea30a5657c56e720740d0c1da3f6ecccc2ea27495c62c19f4e987237e46939,2025-05-28T15:01:30.720000
@ -297212,14 +297215,14 @@ CVE-2025-5908,0,0,37a781f179b1660861001bee4d6c7fb2b67dae046e6af7975b6ededfbac21b
CVE-2025-5909,0,0,ab669f12f4fae3bd2f0735d7b1e7ccb7a4a13f9471f08d5428635b990107078e,2025-06-10T02:15:21.007000
CVE-2025-5910,0,0,715eda73591903f377a983344c94f5b98f27bef425aa0c6a6a65f0932e6208e0,2025-06-10T03:15:38.583000
CVE-2025-5911,0,0,d7e3dcb7d9bb0675f96fabf6f38549f2456bb2d26953b2e2b03a3110da86f3a8,2025-06-10T03:15:39.060000
CVE-2025-5912,1,1,b4a379b730919f23bbfd564747bb9b00dbf90200eb93653aaa62f644e11ed9f6,2025-06-10T04:15:49.300000
CVE-2025-5913,1,1,c61460384b72cb88f96178b08fff9f8b0ce36776535ad07f09e982e6f3eaba0a,2025-06-10T04:15:54.063000
CVE-2025-5912,0,0,b4a379b730919f23bbfd564747bb9b00dbf90200eb93653aaa62f644e11ed9f6,2025-06-10T04:15:49.300000
CVE-2025-5913,0,0,c61460384b72cb88f96178b08fff9f8b0ce36776535ad07f09e982e6f3eaba0a,2025-06-10T04:15:54.063000
CVE-2025-5914,0,0,ca2950efdb51e21bbb1b52a25d765df8575e0ffa29446d96c03c3ef2bb78c27f,2025-06-09T20:15:26.123000
CVE-2025-5915,0,0,0e67ccac333c7a11c03869b01cbfabaf1cb283cb5a64338a4f2ca5aab164415e,2025-06-09T20:15:26.317000
CVE-2025-5916,0,0,de33dac47619c4e1d912727e7eb0e9fccd9c7c67167013ac3aa335bd776c0a9e,2025-06-09T20:15:27.170000
CVE-2025-5917,0,0,479e3dcc90af3e8467020be4388f622f5adbb9e240dc38ecb4cf9119d478c05a,2025-06-09T20:15:27.330000
CVE-2025-5918,0,0,5fae4533f01b7c4f6585a87e7b2331625bf70aa585af023c3c09519081c4b2f9,2025-06-09T20:15:27.493000
CVE-2025-5925,1,1,573daaf55ea018a58bf2bd7e92cad13cf577779f7064f5ad7d1f8de96931b737,2025-06-10T04:15:54.330000
CVE-2025-5934,1,1,1ba42daaa63d058bbd118ea21d90f49dd5a949e0cf3049fe0f8f381cc6ec4483,2025-06-10T04:15:55.327000
CVE-2025-5935,1,1,bca6b82aff793b09175597d3d76faef10a884937cddad66c78fab2ba223eb2cd,2025-06-10T05:15:22.780000
CVE-2025-5952,1,1,f3a4e649f505b0fd93baf65191971ffe21485a7c802124ab53f303aeb8bcf467,2025-06-10T05:15:23.023000
CVE-2025-5925,0,0,573daaf55ea018a58bf2bd7e92cad13cf577779f7064f5ad7d1f8de96931b737,2025-06-10T04:15:54.330000
CVE-2025-5934,0,0,1ba42daaa63d058bbd118ea21d90f49dd5a949e0cf3049fe0f8f381cc6ec4483,2025-06-10T04:15:55.327000
CVE-2025-5935,0,0,bca6b82aff793b09175597d3d76faef10a884937cddad66c78fab2ba223eb2cd,2025-06-10T05:15:22.780000
CVE-2025-5952,0,0,f3a4e649f505b0fd93baf65191971ffe21485a7c802124ab53f303aeb8bcf467,2025-06-10T05:15:23.023000

Can't render this file because it is too large.