Auto-Update: 2025-08-14T14:00:14.021196+00:00

2026-10-29 05:00:49 +00:00 · 2025-08-14 14:03:54 +00:00
1 parent ae0dc68c1b
commit 8bfc27ea2d
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10009",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:27.020",
-  "lastModified": "2025-08-13T21:15:27.020",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks."
+    },
+    {
+      "lang": "es",
+      "value": "S40 CMS v0.4.2 contiene una vulnerabilidad de path traversal en su controlador de p\u00e1gina index.php. El par\u00e1metro p no est\u00e1 correctamente depurado, lo que permite a los atacantes recorrer el sistema de archivos y acceder a archivos arbitrarios fuera de la ra\u00edz web. Esto puede explotarse remotamente sin autenticaci\u00f3n a\u00f1adiendo secuencias de recorrido y un byte nulo para eludir las comprobaciones de extensi\u00f3n de archivo."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10010",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.133",
-  "lastModified": "2025-08-13T21:15:28.133",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the \"Writable\" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement."
+    },
+    {
+      "lang": "es",
+      "value": "QuickShare File Server 1.2.1 contiene una vulnerabilidad de path traversal en su servicio FTP debido a la depuraci\u00f3n incorrecta de las rutas de archivo proporcionadas por el usuario. Los usuarios autenticados pueden explotar esta vulnerabilidad enviando secuencias manipuladas para acceder o escribir archivos fuera del directorio virtual previsto. Cuando la opci\u00f3n \"Escribible\" est\u00e1 habilitada (predeterminada al crear la cuenta), los atacantes pueden subir archivos arbitrarios a ubicaciones privilegiadas como system32, lo que permite la ejecuci\u00f3n remota de c\u00f3digo mediante la inyecci\u00f3n de MOF o la colocaci\u00f3n de ejecutables."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10011",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.293",
-  "lastModified": "2025-08-13T21:15:28.293",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary PHP code, resulting in persistent remote code execution when the modified script is accessed or included by the application."
+    },
+    {
+      "lang": "es",
+      "value": "WeBid 1.0.2 contiene una vulnerabilidad de inyecci\u00f3n remota de c\u00f3digo en el script convert.php, donde la entrada no depurada del par\u00e1metro \"to\" de una solicitud POST se escribe directamente en el archivo \"includes/currencies.php\". Esto permite a atacantes no autenticados inyectar c\u00f3digo PHP arbitrario, lo que resulta en la ejecuci\u00f3n remota persistente de c\u00f3digo cuando la aplicaci\u00f3n accede o incluye el script modificado."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2011-10012",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.463",
-  "lastModified": "2025-08-13T21:15:28.463",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened."
+    },
+    {
+      "lang": "es",
+      "value": "El cliente de control remoto NetOp (ahora parte de Impero Software) v9.5 es vulnerable a un desbordamiento de b\u00fafer basado en la pila al procesar archivos de configuraci\u00f3n .dws. Si un archivo .dws contiene una cadena de m\u00e1s de 520 bytes, la aplicaci\u00f3n no realiza la comprobaci\u00f3n de los l\u00edmites correcta, lo que permite a un atacante ejecutar c\u00f3digo arbitrario al abrir el archivo."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10013",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.607",
-  "lastModified": "2025-08-13T21:15:28.607",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php to inject and execute arbitrary PHP code."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones 2.0 a 2.3 de Traq contienen una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en el script admincp/common.php. La l\u00f3gica de autorizaci\u00f3n defectuosa no detiene la ejecuci\u00f3n tras una comprobaci\u00f3n de acceso fallida, lo que permite a usuarios no autenticados acceder a funciones exclusivas para administradores. Esto puede explotarse mediante plugins.php para inyectar y ejecutar c\u00f3digo PHP arbitrario."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10014",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.757",
-  "lastModified": "2025-08-13T21:15:28.757",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary (samp-server.exe) processes a crafted echo directive containing excessive input. The original 'sa-mp.com' site is defunct, but the community maintains mirrors and forks that may be vulnerable."
+    },
+    {
+      "lang": "es",
+      "value": "GTA San Andreas Multiplayer (SA-MP) server versi\u00f3n 0.3.1.1, es vulnerable a un desbordamiento de b\u00fafer basado en la pila, provocado al analizar un archivo de configuraci\u00f3n server.cfg mal formado. Esta vulnerabilidad permite a atacantes locales ejecutar c\u00f3digo arbitrario cuando el binario del servidor (samp-server.exe) procesa una directiva echo manipulada que contiene una entrada excesiva. El sitio web original \"sa-mp.com\" est\u00e1 inactivo, pero la comunidad mantiene servidores espejo y bifurcaciones que podr\u00edan ser vulnerables."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10015",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:28.910",
-  "lastModified": "2025-08-13T21:15:28.910",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerability occurs when the application copies user-controlled strings into a fixed-size stack buffer (256 bytes) without proper bounds checking. Exploitation allows arbitrary code execution when the crafted file is opened."
+    },
+    {
+      "lang": "es",
+      "value": "Cytel Studio versi\u00f3n 9.0 y anteriores son vulnerables a un desbordamiento de b\u00fafer basado en la pila, provocado al analizar un archivo .CY3 malformado. La vulnerabilidad ocurre cuando la aplicaci\u00f3n copia cadenas controladas por el usuario en un b\u00fafer de pila de tama\u00f1o fijo (256 bytes) sin la comprobaci\u00f3n de los l\u00edmites adecuada. Su explotaci\u00f3n permite la ejecuci\u00f3n de c\u00f3digo arbitrario al abrir el archivo manipulado."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10016",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.067",
-  "lastModified": "2025-08-13T21:15:29.067",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation allows arbitrary code execution under the context of the victim user when the ZIP file is opened."
+    },
+    {
+      "lang": "es",
+      "value": "Real Networks Netzip Classic versi\u00f3n 7.5.1.86 es vulnerable a un desbordamiento de b\u00fafer basado en pila al analizar un archivo ZIP especialmente manipulado. La vulnerabilidad se activa cuando la aplicaci\u00f3n intenta procesar un nombre de archivo dentro del archivo que excede el tama\u00f1o de b\u00fafer esperado. La explotaci\u00f3n permite la ejecuci\u00f3n de c\u00f3digo arbitrario en el contexto del usuario v\u00edctima al abrir el archivo ZIP."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2011-10017",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.233",
-  "lastModified": "2025-08-13T21:15:29.233",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and can result in full compromise of the underlying system."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de Snort Report anteriores a la 1.3.2 contienen una vulnerabilidad de ejecuci\u00f3n remota de comandos en los scripts nmap.php y nbtscan.php. Estos scripts no depuran correctamente la entrada del usuario enviada mediante el par\u00e1metro GET del objetivo, lo que permite a los atacantes inyectar comandos de shell arbitrarios. Su explotaci\u00f3n no requiere autenticaci\u00f3n y puede comprometer por completo el sistema subyacente."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2011-10018",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.387",
-  "lastModified": "2025-08-13T21:15:29.387",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduced during packaging and was not part of the intended application logic. Exploitation requires no authentication and results in full compromise of the web server under the context of the web application."
+    },
+    {
+      "lang": "es",
+      "value": "La versi\u00f3n 1.6.4 de myBB se distribuy\u00f3 con una puerta trasera no autorizada incrustada en el c\u00f3digo fuente. Esta puerta trasera permit\u00eda a atacantes remotos ejecutar c\u00f3digo PHP arbitrario inyectando payloads en una cookie colapsada especialmente manipulada. Esta vulnerabilidad se introdujo durante el empaquetado y no formaba parte de la l\u00f3gica de la aplicaci\u00f3n. Su explotaci\u00f3n no requiere autenticaci\u00f3n y compromete por completo el servidor web en el contexto de la aplicaci\u00f3n web."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2011-10019",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.543",
-  "lastModified": "2025-08-13T21:15:29.543",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby\u2019s send method. This allows attackers to execute arbitrary shell commands on the server without authentication."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de Spreecommerce anteriores a la 0.60.2 contienen una vulnerabilidad de ejecuci\u00f3n remota de comandos en su funci\u00f3n de b\u00fasqueda. La aplicaci\u00f3n no depura correctamente la entrada enviada mediante el par\u00e1metro search[send][], que se invoca din\u00e1micamente mediante el m\u00e9todo send de Ruby. Esto permite a los atacantes ejecutar comandos de shell arbitrarios en el servidor sin autenticaci\u00f3n."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2012-10054",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.687",
-  "lastModified": "2025-08-13T21:15:29.687",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter, attackers can write malicious ASPX scripts directly into the web-accessible /umbraco/ directory and execute them remotely."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de Umbraco CMS anteriores a la 4.7.1 son vulnerables a la ejecuci\u00f3n remota de c\u00f3digo no autenticado a trav\u00e9s del endpoint SOAP codeEditorSave.asmx, lo que expone una operaci\u00f3n SaveDLRScript que permite la carga de archivos arbitrarios sin autenticaci\u00f3n. Al explotar una vulnerabilidad de path traversal en el par\u00e1metro fileName, los atacantes pueden escribir scripts ASPX maliciosos directamente en el directorio web /umbraco/ y ejecutarlos remotamente."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2012-10055",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.840",
-  "lastModified": "2025-08-13T21:15:29.840",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory (specifically WSACleanup from Ws2_32.dll). This allows the attacker to redirect execution flow and bypass DEP protections using a ROP chain, ultimately leading to arbitrary code execution. The vulnerability is exploitable without authentication and affects default configurations."
+    },
+    {
+      "lang": "es",
+      "value": "ComSndFTP FTP Server versi\u00f3n 1.3.7 Beta contiene una vulnerabilidad de cadena de formato en su gesti\u00f3n del comando USER. Al enviar un nombre de usuario especialmente manipulado con especificadores de formato, un atacante remoto puede sobrescribir un puntero de funci\u00f3n codificado en memoria (espec\u00edficamente, WSACleanup de Ws2_32.dll). Esto permite al atacante redirigir el flujo de ejecuci\u00f3n y eludir las protecciones DEP mediante una cadena ROP, lo que finalmente provoca la ejecuci\u00f3n de c\u00f3digo arbitrario. Esta vulnerabilidad se puede explotar sin autenticaci\u00f3n y afecta a las configuraciones predeterminadas."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2012-10056",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:29.997",
-  "lastModified": "2025-08-13T21:15:29.997",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Because this directory is publicly accessible and lacks execution controls, attackers can upload a malicious PHP payload and execute it remotely. The application ships with default credentials, making exploitation trivial. Once authenticated, the attacker can upload a PHP shell and trigger it via a direct GET request."
+    },
+    {
+      "lang": "es",
+      "value": "PHP Volunteer Management System v1.0.2 contiene una vulnerabilidad de carga de archivos arbitraria en su funcionalidad de carga de documentos. Los usuarios autenticados pueden subir archivos al directorio mods/documents/uploads/ sin ninguna restricci\u00f3n de tipo ni extensi\u00f3n. Dado que este directorio es de acceso p\u00fablico y carece de controles de ejecuci\u00f3n, los atacantes pueden cargar un payload PHP malicioso y ejecutarlo en remoto. La aplicaci\u00f3n se entrega con credenciales predeterminadas, lo que facilita su explotaci\u00f3n. Una vez autenticado, el atacante puede cargar un shell PHP y activarlo mediante una solicitud GET directa."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2012-10057",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:30.143",
-  "lastModified": "2025-08-13T21:15:30.143",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Lattice Semiconductor ispVM System v18.0.2 contains a buffer overflow vulnerability in its handling of .xcf project files. When parsing the version attribute of the ispXCF XML tag, the application fails to properly validate input length, allowing a specially crafted file to overwrite memory on the stack. This can result in arbitrary code execution under the context of the user who opens the file. The vulnerability is triggered locally by opening a malicious .xcf file and does not require elevated privileges."
+    },
+    {
+      "lang": "es",
+      "value": "Lattice Semiconductor ispVM System v18.0.2 contiene una vulnerabilidad de desbordamiento de b\u00fafer al gestionar archivos de proyecto .xcf. Al analizar el atributo de versi\u00f3n de la etiqueta XML ispXCF, la aplicaci\u00f3n no valida correctamente la longitud de entrada, lo que permite que un archivo especialmente manipulado sobrescriba la memoria en la pila. Esto puede provocar la ejecuci\u00f3n de c\u00f3digo arbitrario en el contexto del usuario que abre el archivo. La vulnerabilidad se activa localmente al abrir un archivo .xcf malicioso y no requiere privilegios elevados."
    }
  ],
  "metrics": {
@@ -2,8 +2,8 @@
  "id": "CVE-2012-10058",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:30.290",
-  "lastModified": "2025-08-13T21:15:30.290",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
    {
      "lang": "en",
      "value": "RabidHamster R4 v1.25 contains a\u00a0stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process."
+    },
+    {
+      "lang": "es",
+      "value": "RabidHamster R4 v1.25 contiene una vulnerabilidad de desbordamiento de b\u00fafer en la pila debido al uso inseguro de sprintf() al registrar solicitudes HTTP malformadas. Un atacante remoto puede explotar esta vulnerabilidad enviando una URI especialmente manipulada, lo que provoca la ejecuci\u00f3n de c\u00f3digo arbitrario en el contexto del proceso del servidor web."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2012-10059",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:30.453",
-  "lastModified": "2025-08-13T21:15:30.453",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de Dolibarr ERP/CRM anteriores a la 3.1.1 y anteriores a la 3.2.0 contienen una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo tras la autenticaci\u00f3n en su funci\u00f3n de copia de seguridad de la base de datos. El script export.php no depura el par\u00e1metro sql_compat, lo que permite a los usuarios autenticados inyectar comandos arbitrarios del sistema, lo que provoca la ejecuci\u00f3n remota de c\u00f3digo en el servidor."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2012-10060",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:30.600",
-  "lastModified": "2025-08-13T21:15:30.600",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sysax Multi Server versions prior to 5.55 contains a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de Sysax Multi Server anteriores a la 5.55 presentan un desbordamiento de b\u00fafer basado en la pila en su servicio SSH. Cuando un atacante remoto proporciona un nombre de usuario demasiado largo durante la autenticaci\u00f3n, el servidor copia la entrada a un b\u00fafer de pila de tama\u00f1o fijo sin la comprobaci\u00f3n adecuada de los l\u00edmites. Esto permite la ejecuci\u00f3n remota de c\u00f3digo en el contexto del servicio."
    }
  ],
  "metrics": {
@@ -2,7 +2,7 @@
  "id": "CVE-2017-9670",
  "sourceIdentifier": "[email protected]",
  "published": "2017-06-15T13:29:00.250",
-  "lastModified": "2025-04-20T01:37:25.860",
+  "lastModified": "2025-08-14T13:29:49.357",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
@@ -85,8 +85,8 @@
          "cpeMatch": [
            {
              "vulnerable": true,
-              "criteria": "cpe:2.3:a:gnuplot_project:gnuplot:5.2:rc1:*:*:*:*:*:*",
-              "matchCriteriaId": "CAAEAAA5-B4BC-4F2F-9E1E-E445DF12A7B4"
+              "criteria": "cpe:2.3:a:gnuplot:gnuplot:5.2:rc1:*:*:*:*:*:*",
+              "matchCriteriaId": "D76EE490-0FA0-4593-B4ED-07B3F3D54949"
            }
          ]
        }
@@ -2,7 +2,7 @@
  "id": "CVE-2020-25559",
  "sourceIdentifier": "[email protected]",
  "published": "2020-09-16T13:15:11.253",
-  "lastModified": "2024-11-21T05:18:06.440",
+  "lastModified": "2025-08-14T13:29:49.357",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
@@ -85,8 +85,8 @@
          "cpeMatch": [
            {
              "vulnerable": true,
-              "criteria": "cpe:2.3:a:gnuplot_project:gnuplot:5.5.0:*:*:*:*:*:*:*",
-              "matchCriteriaId": "34805A04-03DF-4FAB-B266-97888D7DA28A"
+              "criteria": "cpe:2.3:a:gnuplot:gnuplot:5.5.0:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6A8048F6-74D2-487F-B7E5-8502D9847BA3"
            }
          ]
        }
@@ -2,7 +2,7 @@
  "id": "CVE-2020-25969",
  "sourceIdentifier": "[email protected]",
  "published": "2023-07-05T17:15:09.213",
-  "lastModified": "2024-11-21T05:19:01.583",
+  "lastModified": "2025-08-14T13:29:49.357",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
@@ -56,8 +56,8 @@
          "cpeMatch": [
            {
              "vulnerable": true,
-              "criteria": "cpe:2.3:a:gnuplot_project:gnuplot:5.5.0:*:*:*:*:*:*:*",
-              "matchCriteriaId": "34805A04-03DF-4FAB-B266-97888D7DA28A"
+              "criteria": "cpe:2.3:a:gnuplot:gnuplot:5.5.0:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6A8048F6-74D2-487F-B7E5-8502D9847BA3"
            }
          ]
        }
@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2023-5342",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-08-14T13:15:32.890",
+  "lastModified": "2025-08-14T13:15:32.890",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: The original vulnerability was not valid."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}
@@ -2,13 +2,17 @@
  "id": "CVE-2024-10219",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:26.993",
-  "lastModified": "2025-08-13T18:15:26.993",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 15.6 hasta la 18.0.6, la 18.1 hasta la 18.1.4 y la 18.2 hasta la 18.2.2 que, en determinadas condiciones, podr\u00eda haber permitido a los usuarios autenticados eludir los controles de acceso y descargar artefactos privados accediendo a endpoints de API espec\u00edficos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2024-12303",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:28.573",
-  "lastModified": "2025-08-13T18:15:28.573",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users with specific roles and permissions to delete issues including confidential ones by inviting users with a specific role."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 17.7 hasta la 18.0.6, la 18.1 hasta la 18.1.4 y la 18.2 hasta la 18.2.2 que, en determinadas condiciones, podr\u00eda haber permitido a usuarios autenticados con roles y permisos espec\u00edficos eliminar problemas, incluidos los confidenciales, invitando a usuarios con un rol espec\u00edfico."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2024-5477",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:28.743",
-  "lastModified": "2025-08-13T18:15:28.743",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge.  HP is releasing firmware mitigation for the potential vulnerability."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha identificado una posible vulnerabilidad de seguridad en el BIOS del sistema de algunos productos HP PC. Esta vulnerabilidad podr\u00eda permitir la escalada de privilegios, la ejecuci\u00f3n de c\u00f3digo arbitrario, la denegaci\u00f3n de servicio o la divulgaci\u00f3n de informaci\u00f3n mediante un ataque f\u00edsico que requiere equipo y conocimientos especializados. HP est\u00e1 lanzando una soluci\u00f3n de mitigaci\u00f3n de firmware para esta posible vulnerabilidad."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2024-7402",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T05:15:26.010",
-  "lastModified": "2025-08-14T05:15:26.010",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine."
+    },
+    {
+      "lang": "es",
+      "value": "Netskope ha identificado una posible vulnerabilidad en su agente (Cliente Netskope) que permite a un usuario malicioso manipular la configuraci\u00f3n del Cliente Netskope mediante una actividad de intermediario (MITM) en el canal de comunicaci\u00f3n del Cliente Netskope. Una explotaci\u00f3n exitosa requerir\u00eda privilegios administrativos en el equipo y podr\u00eda resultar en la alteraci\u00f3n temporal de la configuraci\u00f3n del Cliente Netskope o la desactivaci\u00f3n o eliminaci\u00f3n permanente del agente del equipo."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-0309",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T05:15:26.690",
-  "lastModified": "2025-08-14T05:15:26.690",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges."
+    },
+    {
+      "lang": "es",
+      "value": "Una validaci\u00f3n insuficiente en el endpoint de conexi\u00f3n del servidor en Netskope Client permite a los usuarios locales elevar privilegios en el sistema. Esta validaci\u00f3n insuficiente permite a Netskope Client conectarse a cualquier otro servidor con certificados TLS de CA firmados p\u00fablicamente y enviar respuestas manipuladas espec\u00edficamente para elevar privilegios."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-1477",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:28.903",
-  "lastModified": "2025-08-13T18:15:28.903",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoints."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 8.14 hasta la 18.0.6, la 18.1 hasta la 18.1.4 y la 18.2 hasta la 18.2.2 que podr\u00eda haber permitido que un usuario no autenticado creara una condici\u00f3n de denegaci\u00f3n de servicio al enviar payloads especialmente manipulados a endpoints de API de integraci\u00f3n espec\u00edficos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23294",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.070",
-  "lastModified": "2025-08-13T18:15:29.070",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA WebDataset para todas las plataformas contiene una vulnerabilidad que permite a un atacante ejecutar c\u00f3digo arbitrario con permisos elevados. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar una escalada de privilegios, manipulaci\u00f3n de datos, divulgaci\u00f3n de informaci\u00f3n y denegaci\u00f3n de servicio."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23295",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.253",
-  "lastModified": "2025-08-13T18:15:29.253",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Apex for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA Apex para todas las plataformas contiene una vulnerabilidad en un componente de Python que permite a un atacante causar un problema de inyecci\u00f3n de c\u00f3digo al proporcionar un archivo malicioso. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23296",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.410",
-  "lastModified": "2025-08-13T18:15:29.410",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA Isaac-GR00T para todas las plataformas contiene una vulnerabilidad en un componente de Python que podr\u00eda provocar una inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23298",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.577",
-  "lastModified": "2025-08-13T18:15:29.577",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA Merlin Transformers4Rec para todas las plataformas contiene una vulnerabilidad en una dependencia de Python, donde un atacante podr\u00eda causar un problema de inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23303",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.730",
-  "lastModified": "2025-08-13T18:15:29.730",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad que permite a un usuario deserializar datos no confiables mediante la ejecuci\u00f3n remota de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23304",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:29.920",
-  "lastModified": "2025-08-13T18:15:29.920",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "La librer\u00eda NVIDIA NeMo para todas las plataformas contiene una vulnerabilidad en el componente de carga de modelos, donde un atacante podr\u00eda inyectar c\u00f3digo manipulando archivos .nemo con metadatos maliciosos. Explotar esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23305",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:30.103",
-  "lastModified": "2025-08-13T18:15:30.103",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA Megatron-LM para todas las plataformas contiene una vulnerabilidad en el componente de herramientas, donde un atacante podr\u00eda explotar un problema de inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-23306",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:30.387",
-  "lastModified": "2025-08-13T18:15:30.387",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/\narguments.py component where an attacker could cause a code injection issue by providing a malicious input. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering."
+    },
+    {
+      "lang": "es",
+      "value": "NVIDIA Megatron-LM para todas las plataformas contiene una vulnerabilidad en el componente megatron/training/arguments.py que permite a un atacante causar un problema de inyecci\u00f3n de c\u00f3digo al proporcionar una entrada maliciosa. Una explotaci\u00f3n exitosa de esta vulnerabilidad puede provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-24766",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:28.757",
-  "lastModified": "2025-08-14T11:15:28.757",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Royal Themes News Magazine X allows PHP Local File Inclusion. This issue affects News Magazine X: from n/a through 1.2.37."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('PHP Remote File Inclusion') en WP Royal Themes News Magazine X permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a News Magazine X desde n/d hasta la versi\u00f3n 1.2.37."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-24775",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:30.617",
-  "lastModified": "2025-08-14T11:15:30.617",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms allows Upload a Web Shell to a Web Server. This issue affects Forms: from n/a through 2.9.0."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de carga sin restricciones de archivos con tipos peligrosos en Made I.T. Forms permite cargar un shell web a un servidor web. Este problema afecta a Forms desde n/d hasta la versi\u00f3n 2.9.0."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-2498",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:30.657",
-  "lastModified": "2025-08-13T18:15:30.657",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions."
+    },
+    {
+      "lang": "es",
+      "value": "Un control de acceso inadecuado en Gitlab EE que afecta a todas las versiones desde la 12.0 anterior a la 18.0.6, la 18.1 anterior a la 18.1.4 y la 18.2 anterior a la 18.2.2 que, bajo ciertas condiciones, podr\u00eda haber permitido a los usuarios ver problemas asignados de grupos restringidos eludiendo las restricciones de IP."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-25172",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:30.800",
-  "lastModified": "2025-08-14T11:15:30.800",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidMov allows PHP Local File Inclusion. This issue affects VidMov: from n/a through 1.9.4."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control incorrecto del nombre de archivo para la instrucci\u00f3n Include/Require en programas PHP ('Inclusi\u00f3n remota de archivos PHP') en beeteam368 VidMov permite la inclusi\u00f3n local de archivos PHP. Este problema afecta a VidMov desde n/d hasta la versi\u00f3n 1.9.4."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-25174",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.000",
-  "lastModified": "2025-08-14T11:15:31.000",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 BeeTeam368 Extensions allows PHP Local File Inclusion. This issue affects BeeTeam368 Extensions: from n/a through 1.9.4."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control incorrecto del nombre de archivo para la instrucci\u00f3n Include/Require en programas PHP ('Inclusi\u00f3n remota de archivos en PHP') en beeteam368 BeeTeam368 Extensions permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a BeeTeam368 Extensions desde n/d hasta la versi\u00f3n 1.9.4."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-2614",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:30.843",
-  "lastModified": "2025-08-13T18:15:30.843",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 11.6 hasta la 18.0.6, la 18.1 hasta la 18.1.4 y la 18.2 hasta la 18.2.2 que podr\u00eda haber permitido que un usuario autenticado provocara una condici\u00f3n de denegaci\u00f3n de servicio al crear contenido especialmente manipulado que consume recursos excesivos del servidor cuando se procesa."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-27388",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T08:15:25.500",
-  "lastModified": "2025-08-14T08:15:25.500",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens."
+    },
+    {
+      "lang": "es",
+      "value": "La carga de URL externas arbitrarias a trav\u00e9s de componentes WebView introduce c\u00f3digo JS malicioso que puede robar tokens de usuario arbitrarios."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-28962",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.200",
-  "lastModified": "2025-08-14T11:15:31.200",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Google Universal Analytics: from n/a through 1.0.3."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de falta de autorizaci\u00f3n en stefanoai Advanced Google Universal Analytics permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Advanced Google Universal Analytics desde n/d hasta la versi\u00f3n 1.0.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-28975",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.393",
-  "lastModified": "2025-08-14T11:15:31.393",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Alike - WordPress Custom Post Comparison allows Reflected XSS. This issue affects Alike - WordPress Custom Post Comparison: from n/a through 3.0.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en redqteam Alike - WordPress Custom Post Comparison permite XSS reflejado. Este problema afecta a Alike - WordPress Custom Post Comparison desde: n/d hasta la versi\u00f3n 3.0.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-28979",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.593",
-  "lastModified": "2025-08-14T11:15:31.593",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('Inclusi\u00f3n remota de archivos PHP') en ThimPress WP Pipes permite la inclusi\u00f3n local de archivos PHP. Este problema afecta a WP Pipes desde n/d hasta la versi\u00f3n 1.4.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-28987",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.790",
-  "lastModified": "2025-08-14T11:15:31.790",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward allows Server Side Request Forgery. This issue affects PressForward: from n/a through 5.9.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de Server-Side Request Forgery (SSRF) en PressForward PressForward permite Server-Side Request Forgery. Este problema afecta a PressForward desde la versi\u00f3n n/d hasta la 5.9.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-28999",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:31.990",
-  "lastModified": "2025-08-14T11:15:31.990",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt WooCommerce Shop Page Builder allows Reflected XSS. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en ZoomIt WooCommerce Shop Page Builder permite XSS reflejado. Este problema afecta a WooCommerce Shop Page Builder desde n/d hasta la versi\u00f3n 2.27.7."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-29014",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:32.180",
-  "lastModified": "2025-08-14T11:15:32.180",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt FoodMenu allows Reflected XSS. This issue affects FoodMenu: from n/a through 1.20."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en ZoomIt FoodMenu permite XSS reflejado. Este problema afecta a FoodMenu desde n/d hasta la versi\u00f3n 1.20."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-2937",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:31.010",
-  "lastModified": "2025-08-13T18:15:31.010",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature."
+    },
+    {
+      "lang": "es",
+      "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 13.2 hasta la 18.0.6, la 18.1 hasta la 18.1.4 y la 18.2 hasta la 18.2.2 que podr\u00eda haber permitido a los usuarios autenticados crear una condici\u00f3n de denegaci\u00f3n de servicio mediante el env\u00edo de payloads de Markdown especialmente manipulados a la funci\u00f3n Wiki."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-30626",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:32.367",
-  "lastModified": "2025-08-14T11:15:32.367",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through 2.1."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en el complemento LambertGroup Multimedia Playlist Slider para WPBakery Page Builder permite XSS reflejado. Este problema afecta al complemento Multimedia Playlist Slider para WPBakery Page Builder desde n/d hasta la versi\u00f3n 2.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-30635",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:32.570",
-  "lastModified": "2025-08-14T11:15:32.570",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeAtelier IDonatePro allows PHP Local File Inclusion. This issue affects IDonatePro: from n/a through 2.1.9."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('Inclusi\u00f3n remota de archivos PHP') en ThemeAtelier IDonatePro permite la inclusi\u00f3n local de archivos PHP. Este problema afecta a IDonatePro desde n/d hasta la versi\u00f3n 2.1.9."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-30639",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:32.760",
-  "lastModified": "2025-08-14T11:15:32.760",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in ThemeAtelier IDonatePro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects IDonatePro: from n/a through 2.1.9."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de falta de autorizaci\u00f3n en ThemeAtelier IDonatePro permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a IDonatePro desde la versi\u00f3n n/d hasta la 2.1.9."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-30993",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:32.963",
-  "lastModified": "2025-08-14T11:15:32.963",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales: from n/a through 1.1.7."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de falta de autorizaci\u00f3n en el VillaTheme Thank You Page Customizer para WooCommerce \u2013 Increase Your Sales permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a VillaTheme Thank You Page Customizer for WooCommerce \u2013 Increase Your Sales: desde n/d hasta la versi\u00f3n 1.1.7."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-30998",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:33.170",
-  "lastModified": "2025-08-14T11:15:33.170",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rico Macchi WP Links Page allows SQL Injection. This issue affects WP Links Page: from n/a through 4.9.6."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('Inyecci\u00f3n SQL') en Rico Macchi WP Links Page permite la inyecci\u00f3n SQL. Este problema afecta a WP Links Page desde n/d hasta la versi\u00f3n 4.9.6."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-31007",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:33.367",
-  "lastModified": "2025-08-14T11:15:33.367",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alvind Billplz Addon for Contact Form 7 allows Reflected XSS. This issue affects Billplz Addon for Contact Form 7: from n/a through 1.2.0."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en el complemento Alvind Billplz para Contact Form 7 permite XSS reflejado. Este problema afecta al complemento Billplz para Contact Form 7 desde n/d hasta la versi\u00f3n 1.2.0."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-31425",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:33.560",
-  "lastModified": "2025-08-14T11:15:33.560",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in kamleshyadav WP Lead Capturing Pages allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Lead Capturing Pages: from n/a through 2.3."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de falta de autorizaci\u00f3n en kamleshyadav WP Lead Capturing Pages permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Lead Capturing Pages desde la versi\u00f3n n/d hasta la 2.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-32288",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:33.750",
-  "lastModified": "2025-08-14T11:15:33.750",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions allows PHP Local File Inclusion. This issue affects RT-Theme 18 | Extensions: from n/a through 2.4."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para declaraciones Include/Require en programas PHP ('Inclusi\u00f3n remota de archivos PHP') en stmcan RT-Theme 18 | Extensions permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a RT-Theme 18 | Extensions desde n/d hasta la versi\u00f3n 2.4."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-34154",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T21:15:33.300",
-  "lastModified": "2025-08-13T21:15:33.300",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path sanitization, attackers can supply relative paths to access arbitrary files on the host system \u2014 including sensitive OS-level files \u2014 without authentication."
+    },
+    {
+      "lang": "es",
+      "value": "Las versiones de UnForm Server Manager anteriores a la 10.1.12 exponen una vulnerabilidad de lectura de archivos no autenticados a trav\u00e9s de su interfaz de an\u00e1lisis de archivos de registro. La falla reside en el endpoint arc, que acepta un par\u00e1metro fl para especificar el archivo de registro que se abrir\u00e1. Debido a la insuficiente validaci\u00f3n de entrada y a la falta de depuraci\u00f3n de rutas, los atacantes pueden proporcionar rutas relativas para acceder a archivos arbitrarios en el sistema host, incluyendo archivos confidenciales del sistema operativo, sin autenticaci\u00f3n."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-3414",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T06:15:25.520",
-  "lastModified": "2025-08-14T06:15:25.520",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Structured Content (JSON-LD) #wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Structured Content (JSON-LD) #wpsc para Wordpress anterior a la versi\u00f3n 1.7.0 no valida ni escapa algunas de sus opciones de bloque antes de mostrarlas nuevamente en una p\u00e1gina o publicaci\u00f3n donde el bloque est\u00e1 incrustado, lo que podr\u00eda permitir a los usuarios con rol de colaborador y superior realizar ataques de Cross-Site Scripting almacenado."
    }
  ],
  "metrics": {},
@@ -2,13 +2,17 @@
  "id": "CVE-2025-3703",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:34.317",
-  "lastModified": "2025-08-14T11:15:34.317",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox allows PHP Local File Inclusion. This issue affects CSS & JavaScript Toolbox: from n/a through n/a."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('Inclusi\u00f3n remota de archivos PHP') en Wipeoutmedia CSS &amp; JavaScript Toolbox permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a la herramienta CSS &amp; JavaScript Toolbox: de n/d a n/d."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-39483",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:33.933",
-  "lastModified": "2025-08-14T11:15:33.933",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in imithemes Eventer allows Code Injection. This issue affects Eventer: from n/a through 3.9.6."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de control inadecuado de la generaci\u00f3n de c\u00f3digo ('Inyecci\u00f3n de c\u00f3digo') en imithemes Eventer permite la inyecci\u00f3n de c\u00f3digo. Este problema afecta a Eventer desde n/d hasta la versi\u00f3n 3.9.6."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-39510",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:34.117",
-  "lastModified": "2025-08-14T11:15:34.117",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Pinterest Automatic Pin allows SQL Injection. This issue affects Pinterest Automatic Pin: from n/a through n/a."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('Inyecci\u00f3n SQL') en ValvePress Pinterest Automatic Pin permite la inyecci\u00f3n SQL. Este problema afecta a Pinterest Automatic Pin: de n/d a n/d."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-43982",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T20:15:30.023",
-  "lastModified": "2025-08-13T20:15:30.023",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root account that cannot be disabled in the GUI."
+    },
+    {
+      "lang": "es",
+      "value": "Los dispositivos Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 habilitan el servicio SSH por defecto. Hay una cuenta root oculta y predefinida que no se puede deshabilitar en la interfaz gr\u00e1fica."
    }
  ],
  "metrics": {},
@@ -2,13 +2,17 @@
  "id": "CVE-2025-43986",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T20:15:30.163",
-  "lastModified": "2025-08-13T20:15:30.163",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication."
+    },
+    {
+      "lang": "es",
+      "value": "Se detect\u00f3 un problema en los dispositivos KuWFi GC111 GC111-GL-LM321_V3.0_20191211. El servicio TELNET est\u00e1 habilitado por defecto y se expone a trav\u00e9s de la interfaz WAN sin autenticaci\u00f3n."
    }
  ],
  "metrics": {},
@@ -2,13 +2,17 @@
  "id": "CVE-2025-43988",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T20:15:30.300",
-  "lastModified": "2025-08-13T20:15:30.300",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials."
+    },
+    {
+      "lang": "es",
+      "value": "Los dispositivos KuWFi 5G01-X55 FL2020_V0.0.12 exponen un endpoint de API no autenticado (ajax_get.cgi), lo que permite a atacantes remotos recuperar datos de configuraci\u00f3n confidenciales, incluidas las credenciales de administrador."
    }
  ],
  "metrics": {},
@@ -2,13 +2,17 @@
  "id": "CVE-2025-43989",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T19:15:28.633",
-  "lastModified": "2025-08-13T21:15:34.273",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the set_timesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie (bypassing normal session checks), an unauthenticated attacker can use that parameter to execute arbitrary OS commands."
+    },
+    {
+      "lang": "es",
+      "value": "El endpoint POST /goform/formJsonAjaxReq de los dispositivos Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 gestiona incorrectamente la acci\u00f3n set_timesetting con el par\u00e1metro ntpserver0, que se utiliza en un comando del sistema. Al establecer una cookie `username=admin` (omitiendo las comprobaciones de sesi\u00f3n normales), un atacante no autenticado puede usar ese par\u00e1metro para ejecutar comandos arbitrarios del sistema operativo."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-45313",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T19:15:29.220",
-  "lastModified": "2025-08-13T21:15:34.473",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A cross-site scripting (XSS) vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) en el endpoint /tasks de hortusfox-web v4.4 permite a los atacantes ejecutar JavaScript arbitrario en el contexto del navegador de un usuario a trav\u00e9s de un payload manipulado inyectado en el par\u00e1metro de t\u00edtulo."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-45314",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:31.237",
-  "lastModified": "2025-08-13T21:15:34.637",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) en el endpoint /Calendar de hortusfox-web v4.4 permite a los atacantes ejecutar JavaScript arbitrario en el contexto del navegador de un usuario a trav\u00e9s de un payload manipulado inyectado en la funci\u00f3n de agregar."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-45315",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:31.367",
-  "lastModified": "2025-08-13T21:15:34.800",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) en el endpoint /controller/admin.php de hortusfox-web v4.4 permite a los atacantes ejecutar JavaScript arbitrario en el contexto del navegador de un usuario a trav\u00e9s de un payload manipulado inyectado en el par\u00e1metro de correo electr\u00f3nico."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-45316",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:31.493",
-  "lastModified": "2025-08-13T21:15:34.963",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) en el componente TextBlockModule.php de hortusfox-web v4.4 permite a los atacantes ejecutar scripts web o HTML arbitrarios mediante la inyecci\u00f3n de un payload manipulado en el par\u00e1metro de nombre."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-45317",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-13T18:15:31.627",
-  "lastModified": "2025-08-13T21:15:35.153",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:12:09.870",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de deslizamiento de cremallera en el componente /modules/ImportModule.php de hortusfox-web v4.4 permite a los atacantes ejecutar c\u00f3digo arbitrario a trav\u00e9s de un archivo creado."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-47536",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:34.520",
-  "lastModified": "2025-08-14T11:15:34.520",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of Untrusted Data vulnerability in keywordrush Content Egg allows Object Injection. This issue affects Content Egg: from n/a through 7.0.0."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de deserializaci\u00f3n de datos no confiables en keywordrush Content Egg permite la inyecci\u00f3n de objetos. Este problema afecta a Content Egg desde n/d hasta la versi\u00f3n 7.0.0."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-47610",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:34.720",
-  "lastModified": "2025-08-14T11:15:34.720",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wetail WooCommerce Fortnox Integration allows Stored XSS. This issue affects WooCommerce Fortnox Integration: from n/a through 4.5.6."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Wetail WooCommerce Fortnox Integratio permite XSS almacenado. Este problema afecta a WooCommerce Fortnox Integration desde n/d hasta la versi\u00f3n 4.5.6."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-47689",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:34.910",
-  "lastModified": "2025-08-14T11:15:34.910",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in johnh10 Video Blogster Lite allows Reflected XSS. This issue affects Video Blogster Lite: from n/a through 1.2."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en johnh10 Video Blogster Lite permite XSS reflejado. Este problema afecta a Video Blogster Lite desde n/d hasta la versi\u00f3n 1.2."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-48293",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:35.153",
-  "lastModified": "2025-08-14T11:15:35.153",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn  Geo Mashup allows PHP Local File Inclusion. This issue affects  Geo Mashup: from n/a through 1.13.16."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('PHP Remote File Inclusion') en Dylan Kuhn Geo Mashup permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a Geo Mashup desde n/d hasta la versi\u00f3n 1.13.16."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-48332",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:35.437",
-  "lastModified": "2025-08-14T11:15:35.437",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress Gutenberg Blocks allows PHP Local File Inclusion. This issue affects Gutenberg Blocks: from n/a through 3.3.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('Inclusi\u00f3n remota de archivos PHP') en PublishPress Gutenberg Blocks permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a los Gutenberg Blocks desde n/d hasta la versi\u00f3n 3.3.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-48860",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T09:15:25.770",
-  "lastModified": "2025-08-14T09:15:25.770",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the web application of the ctrlX OS setup mechanism facilitated\u00a0an authenticated (low privileged) attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup\u00a0archive, the attacker may have been able to access sensitive data."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad en la aplicaci\u00f3n web del mecanismo ctrlX OS setup permiti\u00f3 que un atacante autenticado (con pocos privilegios) obtuviera acceso remoto a archivos de respaldo creados por un usuario con permisos elevados. Dependiendo del contenido del archivo de respaldo, el atacante podr\u00eda haber accedido a datos confidenciales."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-48861",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T09:15:26.107",
-  "lastModified": "2025-08-14T09:15:26.107",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed\u00a0a remote, unauthenticated attacker to access and extract internal application data,\u00a0including potential debug logs and the version of installed apps."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad en el endpoint de la API de tareas del mecanismo ctrlX OS setup permiti\u00f3 a un atacante remoto no autenticado acceder y extraer datos internos de la aplicaci\u00f3n, incluidos posibles registros de depuraci\u00f3n y la versi\u00f3n de las aplicaciones instaladas."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-48862",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T09:15:26.293",
-  "lastModified": "2025-08-14T09:15:26.293",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key -\u00a0if available in the backup - is encrypted, while the backup file itself remains unencrypted."
+    },
+    {
+      "lang": "es",
+      "value": "La redacci\u00f3n ambigua en la interfaz web del mecanismo de configuraci\u00f3n de CtrlX OS podr\u00eda inducir al usuario a creer que el archivo de copia de seguridad est\u00e1 cifrado al establecer una contrase\u00f1a. Sin embargo, solo se cifra la clave privada (si est\u00e1 disponible en la copia de seguridad), mientras que el archivo de copia de seguridad permanece sin cifrar."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49033",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:35.620",
-  "lastModified": "2025-08-14T11:15:35.620",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid  allows Blind SQL Injection. This issue affects ProfileGrid : from n/a through 5.9.5.3."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('Inyecci\u00f3n SQL') en Metagauss ProfileGrid permite la inyecci\u00f3n SQL ciega. Este problema afecta a ProfileGrid desde n/d hasta la versi\u00f3n 5.9.5.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49036",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:35.843",
-  "lastModified": "2025-08-14T11:15:35.843",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in octagonwebstudio Premium Addons for KingComposer allows PHP Local File Inclusion. This issue affects Premium Addons for KingComposer: from n/a through 1.1.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de control inadecuado del nombre de archivo para la declaraci\u00f3n Include/Require en un programa PHP ('Inclusi\u00f3n remota de archivos PHP') en octagonwebstudio Premium Addons para KingComposer permite la inclusi\u00f3n local de archivos en PHP. Este problema afecta a los Premium Addons para KingComposer desde n/d hasta la versi\u00f3n 1.1.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49037",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:36.130",
-  "lastModified": "2025-08-14T11:15:36.130",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Federico Rota Authentication and xmlrpc log writer allows Reflected XSS. This issue affects Authentication and xmlrpc log writer: from n/a through 1.2.2."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Federico Rota Authentication and xmlrpc log writer permite XSS reflejado. Este problema afecta a Authentication and xmlrpc log writer desde la versi\u00f3n n/d hasta la 1.2.2."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49038",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:36.337",
-  "lastModified": "2025-08-14T11:15:36.337",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Dynamic Links allows Reflected XSS. This issue affects WP Dynamic Links: from n/a through 1.0.1."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Soflyy WP Dynamic Links permite XSS reflejado. Este problema afecta a WP Dynamic Links desde n/d hasta la versi\u00f3n 1.0.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49044",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:36.537",
-  "lastModified": "2025-08-14T11:15:36.537",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-Site Request Forgery (CSRF) vulnerability in tosend.it Simple Poll allows Stored XSS. This issue affects Simple Poll: from n/a through 1.1.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de Cross-Site Request Forgery (CSRF) en tosend.it Simple Poll permite XSS almacenado. Este problema afecta a Simple Poll desde n/d hasta la versi\u00f3n 1.1.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49047",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:36.737",
-  "lastModified": "2025-08-14T11:15:36.737",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keeross DigitalOcean Spaces Sync allows Stored XSS. This issue affects DigitalOcean Spaces Sync: from n/a through 2.2.1."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Keeross DigitalOcean Spaces Sync permite XSS almacenado. Este problema afecta a DigitalOcean Spaces Sync desde la versi\u00f3n n/d hasta la 2.2.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49048",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:36.930",
-  "lastModified": "2025-08-14T11:15:36.930",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in inspectlet Inspectlet &#8211; User Session Recording and Heatmaps allows Stored XSS. This issue affects Inspectlet &#8211; User Session Recording and Heatmaps: from n/a through 2.0."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en inspectlet Inspectlet \u2013 User Session Recording and Heatmaps permite XSS almacenado. Este problema afecta a Inspectlet \u2013 User Session Recording and Heatmaps, desde n/d hasta la versi\u00f3n 2.0."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49051",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:37.120",
-  "lastModified": "2025-08-14T11:15:37.120",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biscia7 Hide Text Shortcode allows Stored XSS. This issue affects Hide Text Shortcode: from n/a through 1.1."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en biscia7 Hide Text Shortcode permite XSS almacenado. Este problema afecta a Hide Text Shortcode desde n/d hasta la versi\u00f3n 1.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49052",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:37.320",
-  "lastModified": "2025-08-14T11:15:37.320",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in Dariolee Netease Music allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Netease Music: from n/a through 3.2.1."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de falta de autorizaci\u00f3n en Dariolee Netease Music permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Netease Music desde la versi\u00f3n n/d hasta la 3.2.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49053",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:37.517",
-  "lastModified": "2025-08-14T11:15:37.517",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kadesthemes WP Airdrop Manager allows Stored XSS. This issue affects WP Airdrop Manager: from n/a through 1.0.5."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en kadesthemes WP Airdrop Manager permite XSS almacenados. Este problema afecta a WP Airdrop Manager desde n/d hasta la versi\u00f3n 1.0.5."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49054",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:37.700",
-  "lastModified": "2025-08-14T11:15:37.700",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mrdenny Time Sheets allows Reflected XSS. This issue affects Time Sheets: from n/a through 2.1.3."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en mrdenny Time Sheets permite XSS reflejado. Este problema afecta a Time Sheets desde n/d hasta la versi\u00f3n 2.1.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49056",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:37.890",
-  "lastModified": "2025-08-14T11:15:37.890",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shen2 \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846 allows Reflected XSS. This issue affects \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846: from n/a through 1.2."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n inadecuada de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('cross-site Scripting') en shen2 ???????? permite XSS reflejado. Este problema afecta a ????????: desde n/a hasta 1.2."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49057",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:38.073",
-  "lastModified": "2025-08-14T11:15:38.073",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ko Min WP Voting allows Reflected XSS. This issue affects WP Voting: from n/a through 1.8."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Ko Min WP Voting permite XSS reflejado. Este problema afecta a WP Voting desde n/d hasta la versi\u00f3n 1.8."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49058",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:38.250",
-  "lastModified": "2025-08-14T11:15:38.250",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sound Strategies SoundSt SEO Search allows Reflected XSS. This issue affects SoundSt SEO Search: from n/a through 1.2.3."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Sound Strategies SoundSt SEO Search permite XSS reflejado. Este problema afecta a SoundSt SEO Search desde n/d hasta la versi\u00f3n 1.2.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49059",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:38.437",
-  "lastModified": "2025-08-14T11:15:38.437",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach\u00ae CleverReach\u00ae WP allows SQL Injection. This issue affects CleverReach\u00ae WP: from n/a through 1.5.20."
+    },
+    {
+      "lang": "es",
+      "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('Inyecci\u00f3n SQL') en CleverReach\u00ae CleverReach\u00ae WP permite la inyecci\u00f3n SQL. Este problema afecta a CleverReach\u00ae WP desde n/d hasta la versi\u00f3n 1.5.20."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49061",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:38.627",
-  "lastModified": "2025-08-14T11:15:38.627",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in perteus Porn Videos Embed allows Stored XSS. This issue affects Porn Videos Embed: from n/a through 0.9.1."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en perteus Porn Videos Embed permite XSS almacenado. Este problema afecta a Porn Videos Embed desde n/d hasta la versi\u00f3n 0.9.1."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49062",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:38.817",
-  "lastModified": "2025-08-14T11:15:38.817",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cornfeed WP-jScrollPane allows Reflected XSS. This issue affects WP-jScrollPane: from n/a through 2.0.3."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en cornfeed WP-jScrollPane permite XSS reflejado. Este problema afecta a WP-jScrollPane desde n/d hasta la versi\u00f3n 2.0.3."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49063",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:39.027",
-  "lastModified": "2025-08-14T11:15:39.027",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in i3geek BaiduXZH Submit(\u767e\u5ea6\u718a\u638c\u53f7) allows Reflected XSS. This issue affects BaiduXZH Submit(\u767e\u5ea6\u718a\u638c\u53f7): from n/a through 1.4.6."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n inadecuada de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('cross-site Scripting') en i3geek BaiduXZH Submit(?????) permite el XSS reflejado. Este problema afecta a BaiduXZH Submit(?????): desde n/a hasta 1.4.6."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49064",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:39.213",
-  "lastModified": "2025-08-14T11:15:39.213",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilop User Language Switch allows Reflected XSS. This issue affects User Language Switch: from n/a through 1.6.10."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en Webilop User Language Switch permite XSS reflejado. Este problema afecta a User Language Switch desde n/d hasta la versi\u00f3n 1.6.10."
    }
  ],
  "metrics": {
@@ -2,13 +2,17 @@
  "id": "CVE-2025-49065",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-14T11:15:39.413",
-  "lastModified": "2025-08-14T11:15:39.413",
-  "vulnStatus": "Received",
+  "lastModified": "2025-08-14T13:11:53.633",
+  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BestiaDurmiente Visit Counter allows Stored XSS. This issue affects Visit Counter: from n/a through 1.0."
+    },
+    {
+      "lang": "es",
+      "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web ('Cross-site Scripting') en BestiaDurmiente Visit Counter permite XSS almacenado. Este problema afecta a Visit Counter desde n/d hasta la versi\u00f3n 1.0."
    }
  ],
  "metrics": {