Auto-Update: 2025-08-31T06:00:12.290001+00:00

This commit is contained in:
cad-safe-bot committed 2025-08-31 06:03:53 +00:00
1 parent 2421236c64
commit 8e378faa4b
20 files changed
+1538 -678

No files matched your search

+2 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-6270",
"sourceIdentifier": "[email protected]",
"published": "2024-01-04T17:15:08.803",
"lastModified": "2025-05-22T19:30:29.493",
"vulnStatus": "Analyzed",
"lastModified": "2025-08-30T09:15:31.117",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -145,13 +145,6 @@
"Third Party Advisory"
]
},
{
"url": "https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/block/aoe?h=v6.9&id=f98364e926626c678fb4b9004b75cacf92ff0662",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://access.redhat.com/security/cve/CVE-2023-6270",
"source": "af854a3a-2127-422b-91ae-364da2661108",
@@ -0,0 +1,56 @@
{
"id": "CVE-2024-32589",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T04:15:34.867",
"lastModified": "2025-08-31T04:15:34.867",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-and-inventory-manager-plugin-1-5-3-broken-access-control-to-xss-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,56 @@
{
"id": "CVE-2024-32832",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T04:15:48.243",
"lastModified": "2025-08-31T04:15:48.243",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in Hamid Alinia Login with phone number.This issue affects Login with phone number: from n/a through 1.6.93."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-6-93-broken-access-control-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-31100",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T04:15:52.400",
"lastModified": "2025-08-31T04:15:52.400",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 (02-07-2025)."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-plugin-1-93-1-02-07-2025-arbitrary-file-upload-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-47696",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T04:15:54.143",
"lastModified": "2025-08-31T04:15:54.143",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Solwin Blog Designer PRO.This issue affects Blog Designer PRO: from n/a through 3.4.7."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://patchstack.com/database/wordpress/plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-unauthenticated-non-arbitrary-local-file-inclusion-vulnerability?_s_id=cve",
"source": "[email protected]"
}
]
}
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-49405",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T13:16:00.063",
"lastModified": "2025-08-29T16:24:29.730",
"lastModified": "2025-08-30T02:15:32.643",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez allows PHP Local File Inclusion. This issue affects Houzez: from n/a through 4.1.1."
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4."
}
],
"metrics": {
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-5083",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T05:15:32.410",
"lastModified": "2025-08-31T05:15:32.410",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/WPGov/amministrazione-trasparente/blob/31e69c2ef42f36bca0b66d0550794d18292f5a23/settings.php#L49-L50",
"source": "[email protected]"
},
{
"url": "https://github.com/WPGov/amministrazione-trasparente/blob/31e69c2ef42f36bca0b66d0550794d18292f5a23/settings.php#L59-L60",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3352443/",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/amministrazione-trasparente/#developers",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8741bbdf-ddd9-41f7-8d22-b9350f2cf659?source=cve",
"source": "[email protected]"
}
]
}
+2 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-5141",
"sourceIdentifier": "df4dee71-de3a-4139-9588-11b62fe6c0ff",
"published": "2025-06-17T20:15:32.583",
"lastModified": "2025-06-17T20:50:23.507",
"lastModified": "2025-08-29T21:15:36.683",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -53,7 +53,7 @@
],
"references": [
{
"url": "https://www.cve.org/cverecord?id=CVE-2025-5141",
"url": "https://www.fortra.com/security/advisories/product-security/fi-2025-008",
"source": "df4dee71-de3a-4139-9588-11b62fe6c0ff"
}
]
+25 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-55177",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T16:15:36.723",
"lastModified": "2025-08-29T17:15:34.963",
"lastModified": "2025-08-30T17:15:32.950",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -13,6 +13,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -36,6 +56,10 @@
]
},
"references": [
{
"url": "https://www.facebook.com/security/advisories/cve-2025-55177",
"source": "[email protected]"
},
{
"url": "https://www.whatsapp.com/security/advisories/2025/",
"source": "[email protected]"
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-57819",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T17:15:36.790",
"lastModified": "2025-08-29T16:24:29.730",
"lastModified": "2025-08-30T01:00:02.000",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -57,6 +57,10 @@
}
]
},
"cisaExploitAdd": "2025-08-29",
"cisaActionDue": "2025-09-19",
"cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "Sangoma FreePBX Authentication Bypass Vulnerability",
"weaknesses": [
{
"source": "[email protected]",
+9 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-6021",
"sourceIdentifier": "[email protected]",
"published": "2025-06-12T13:15:25.590",
"lastModified": "2025-08-14T09:15:27.030",
"lastModified": "2025-08-31T04:15:55.170",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -116,6 +116,14 @@
"url": "https://access.redhat.com/errata/RHSA-2025:13336",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14059",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14396",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-6021",
"source": "[email protected]"
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-7345",
"sourceIdentifier": "[email protected]",
"published": "2025-07-08T14:15:32.397",
"lastModified": "2025-08-26T09:15:31.253",
"lastModified": "2025-08-30T23:15:33.877",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -76,6 +76,26 @@
"url": "https://access.redhat.com/errata/RHSA-2025:14576",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14585",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14618",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14646",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14647",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14683",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-7345",
"source": "[email protected]"
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-9341",
"sourceIdentifier": "91579145-5d7b-4cc5-b925-a0262ff19630",
"published": "2025-08-22T09:15:34.410",
"lastModified": "2025-08-22T18:08:51.663",
"lastModified": "2025-08-30T06:15:36.327",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java.\n\nThis issue affects Bouncy Castle for Java FIPS: from BC-FJA 2.1.0 through 2.1.0."
"value": "Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java.\n\nThis issue affects Bouncy Castle for Java FIPS: from BC-FJA 2.1.0 through 2.1.0; Bouncy Castle for Java LTS: from BC-LTS 2.73.0 through 2.73.7."
},
{
"lang": "es",
+8 -4
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-9652",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T15:15:37.793",
"lastModified": "2025-08-29T16:24:29.730",
"lastModified": "2025-08-29T21:15:36.940",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -122,7 +122,11 @@
],
"references": [
{
"url": "https://github.com/KarinaGante/KGSec/blob/main/CVEs/i-educar/13.md",
"url": "https://karinagante.github.io/cve-2025-9652/",
"source": "[email protected]"
},
{
"url": "https://karinagante.github.io/cve-2025-9652/#proof-of-concept-poc",
"source": "[email protected]"
},
{
+8 -4
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-9653",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T15:15:38.143",
"lastModified": "2025-08-29T16:24:29.730",
"lastModified": "2025-08-29T21:15:37.100",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -122,7 +122,11 @@
],
"references": [
{
"url": "https://github.com/KarinaGante/KGSec/blob/main/CVEs/i-educar/14.md",
"url": "https://karinagante.github.io/cve-2025-9653/",
"source": "[email protected]"
},
{
"url": "https://karinagante.github.io/cve-2025-9653/#proof-of-concept-poc",
"source": "[email protected]"
},
{
+149
View File
@@ -0,0 +1,149 @@
{
"id": "CVE-2025-9715",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T01:15:39.973",
"lastModified": "2025-08-31T01:15:39.973",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_cms_assemble_control/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. The vendor replied in the GitHub issue (translated from simplified Chinese): \"This issue will be fixed in the new version.\""
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/o2oa/o2oa/issues/181",
"source": "[email protected]"
},
{
"url": "https://github.com/o2oa/o2oa/issues/181#issue-3332967944",
"source": "[email protected]"
},
{
"url": "https://github.com/o2oa/o2oa/issues/181#issuecomment-3212879547",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.322003",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.322003",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.637243",
"source": "[email protected]"
}
]
}
+149
View File
@@ -0,0 +1,149 @@
{
"id": "CVE-2025-9716",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T05:15:33.617",
"lastModified": "2025-08-31T05:15:33.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_processplatform_assemble_designer/jaxrs/form of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scripting. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor replied in the GitHub issue (translated from simplified Chinese): \"This issue will be fixed in the new version.\""
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/o2oa/o2oa/issues/182",
"source": "[email protected]"
},
{
"url": "https://github.com/o2oa/o2oa/issues/182#issue-3332970310",
"source": "[email protected]"
},
{
"url": "https://github.com/o2oa/o2oa/issues/182#issuecomment-3212879158",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.322004",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.322004",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.637244",
"source": "[email protected]"
}
]
}
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-9717",
"sourceIdentifier": "[email protected]",
"published": "2025-08-31T05:15:33.907",
"lastModified": "2025-08-31T05:15:33.907",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_organization_assemble_control/jaxrs/unit/ of the component Personal Profile Page. Such manipulation of the argument name/shortName/distinguishedName/pinyin/pinyinInitial/levelName leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/o2oa/o2oa/issues/183",
"source": "[email protected]"
},
{
"url": "https://github.com/o2oa/o2oa/issues/183#issue-3332973239",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.322005",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.322005",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.637245",
"source": "[email protected]"
}
]
}
+23 -30
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-08-31T02:00:10.643066+00:00
2025-08-31T06:00:12.290001+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-08-29T21:15:35.853000+00:00
2025-08-31T05:15:33.907000+00:00
```
### Last Data Feed Release
@@ -33,44 +33,37 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
307439
307510
```
### CVEs added in the last Commit
Recently added CVEs: `0`
Recently added CVEs: `8`
- [CVE-2024-32589](CVE-2024/CVE-2024-325xx/CVE-2024-32589.json) (`2025-08-31T04:15:34.867`)
- [CVE-2024-32832](CVE-2024/CVE-2024-328xx/CVE-2024-32832.json) (`2025-08-31T04:15:48.243`)
- [CVE-2025-31100](CVE-2025/CVE-2025-311xx/CVE-2025-31100.json) (`2025-08-31T04:15:52.400`)
- [CVE-2025-47696](CVE-2025/CVE-2025-476xx/CVE-2025-47696.json) (`2025-08-31T04:15:54.143`)
- [CVE-2025-5083](CVE-2025/CVE-2025-50xx/CVE-2025-5083.json) (`2025-08-31T05:15:32.410`)
- [CVE-2025-9715](CVE-2025/CVE-2025-97xx/CVE-2025-9715.json) (`2025-08-31T01:15:39.973`)
- [CVE-2025-9716](CVE-2025/CVE-2025-97xx/CVE-2025-9716.json) (`2025-08-31T05:15:33.617`)
- [CVE-2025-9717](CVE-2025/CVE-2025-97xx/CVE-2025-9717.json) (`2025-08-31T05:15:33.907`)
### CVEs modified in the last Commit
Recently modified CVEs: `619`
Recently modified CVEs: `10`
- [CVE-2025-9411](CVE-2025/CVE-2025-94xx/CVE-2025-9411.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9412](CVE-2025/CVE-2025-94xx/CVE-2025-9412.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9413](CVE-2025/CVE-2025-94xx/CVE-2025-9413.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9414](CVE-2025/CVE-2025-94xx/CVE-2025-9414.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9415](CVE-2025/CVE-2025-94xx/CVE-2025-9415.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9416](CVE-2025/CVE-2025-94xx/CVE-2025-9416.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9417](CVE-2025/CVE-2025-94xx/CVE-2025-9417.json) (`2025-08-25T20:24:45.327`)
- [CVE-2025-9418](CVE-2025/CVE-2025-94xx/CVE-2025-9418.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9419](CVE-2025/CVE-2025-94xx/CVE-2025-9419.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9423](CVE-2025/CVE-2025-94xx/CVE-2025-9423.json) (`2025-08-26T15:15:51.030`)
- [CVE-2025-9426](CVE-2025/CVE-2025-94xx/CVE-2025-9426.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9433](CVE-2025/CVE-2025-94xx/CVE-2025-9433.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9434](CVE-2025/CVE-2025-94xx/CVE-2025-9434.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9438](CVE-2025/CVE-2025-94xx/CVE-2025-9438.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9439](CVE-2025/CVE-2025-94xx/CVE-2025-9439.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9440](CVE-2025/CVE-2025-94xx/CVE-2025-9440.json) (`2025-08-26T14:15:45.257`)
- [CVE-2025-9443](CVE-2025/CVE-2025-94xx/CVE-2025-9443.json) (`2025-08-26T14:15:45.440`)
- [CVE-2025-9444](CVE-2025/CVE-2025-94xx/CVE-2025-9444.json) (`2025-08-26T14:15:45.690`)
- [CVE-2025-9461](CVE-2025/CVE-2025-94xx/CVE-2025-9461.json) (`2025-08-26T14:15:45.917`)
- [CVE-2025-9472](CVE-2025/CVE-2025-94xx/CVE-2025-9472.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9473](CVE-2025/CVE-2025-94xx/CVE-2025-9473.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9475](CVE-2025/CVE-2025-94xx/CVE-2025-9475.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9476](CVE-2025/CVE-2025-94xx/CVE-2025-9476.json) (`2025-08-26T13:41:58.950`)
- [CVE-2025-9652](CVE-2025/CVE-2025-96xx/CVE-2025-9652.json) (`2025-08-29T16:24:29.730`)
- [CVE-2025-9653](CVE-2025/CVE-2025-96xx/CVE-2025-9653.json) (`2025-08-29T16:24:29.730`)
- [CVE-2023-6270](CVE-2023/CVE-2023-62xx/CVE-2023-6270.json) (`2025-08-30T09:15:31.117`)
- [CVE-2025-49405](CVE-2025/CVE-2025-494xx/CVE-2025-49405.json) (`2025-08-30T02:15:32.643`)
- [CVE-2025-5141](CVE-2025/CVE-2025-51xx/CVE-2025-5141.json) (`2025-08-29T21:15:36.683`)
- [CVE-2025-55177](CVE-2025/CVE-2025-551xx/CVE-2025-55177.json) (`2025-08-30T17:15:32.950`)
- [CVE-2025-57819](CVE-2025/CVE-2025-578xx/CVE-2025-57819.json) (`2025-08-30T01:00:02.000`)
- [CVE-2025-6021](CVE-2025/CVE-2025-60xx/CVE-2025-6021.json) (`2025-08-31T04:15:55.170`)
- [CVE-2025-7345](CVE-2025/CVE-2025-73xx/CVE-2025-7345.json) (`2025-08-30T23:15:33.877`)
- [CVE-2025-9341](CVE-2025/CVE-2025-93xx/CVE-2025-9341.json) (`2025-08-30T06:15:36.327`)
- [CVE-2025-9652](CVE-2025/CVE-2025-96xx/CVE-2025-9652.json) (`2025-08-29T21:15:36.940`)
- [CVE-2025-9653](CVE-2025/CVE-2025-96xx/CVE-2025-9653.json) (`2025-08-29T21:15:37.100`)
## Download and Usage
+691 -620
View File
File diff suppressed because it is too large. Load diff