diff --git a/CVE-2023/CVE-2023-49xx/CVE-2023-4957.json b/CVE-2023/CVE-2023-49xx/CVE-2023-4957.json index 14b74cfec03..c80bf880ac4 100644 --- a/CVE-2023/CVE-2023-49xx/CVE-2023-4957.json +++ b/CVE-2023/CVE-2023-49xx/CVE-2023-4957.json @@ -2,13 +2,13 @@ "id": "CVE-2023-4957", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2023-10-11T14:15:10.047", - "lastModified": "2024-11-21T08:36:20.357", + "lastModified": "2025-08-28T08:15:29.560", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": " A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the setvarsResults.cgi file. For this vulnerability to be exploitable, the printers protected mode must be disabled." + "value": "A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the setvarsResults.cgi file. For this vulnerability to be exploitable, the printers protected mode must be disabled." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "cve-coordination@incibe.es", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2024/CVE-2024-132xx/CVE-2024-13273.json b/CVE-2024/CVE-2024-132xx/CVE-2024-13273.json index 25b767c0365..ecc1040af3d 100644 --- a/CVE-2024/CVE-2024-132xx/CVE-2024-13273.json +++ b/CVE-2024/CVE-2024-132xx/CVE-2024-13273.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13273", "sourceIdentifier": "mlhess@drupal.org", "published": "2025-01-09T20:15:36.137", - "lastModified": "2025-01-09T21:15:25.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:03:20.610", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,88 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:*:*:*:*:*:drupal:*:*", + "versionEndExcluding": "12.3.8", + "matchCriteriaId": "8D08CE2A-5BC9-4556-8127-6D55D17B3E48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:*:*:*:*:*:drupal:*:*", + "versionStartIncluding": "12.4.0", + "versionEndExcluding": "12.4.5", + "matchCriteriaId": "F707194F-96F5-4A8F-9E83-792ED3CC8267" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha1:*:*:*:drupal:*:*", + "matchCriteriaId": "83C94567-8F3B-4E0F-A6B9-B91B7867830A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha10:*:*:*:drupal:*:*", + "matchCriteriaId": "91C5BD21-7D0F-472F-9C9B-92F8A5843B90" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha2:*:*:*:drupal:*:*", + "matchCriteriaId": "99C5EDBB-2605-4267-A4E9-5EF6D840E220" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha3:*:*:*:drupal:*:*", + "matchCriteriaId": "90988BED-3337-4FA4-B7BE-9BC3CEEA7B15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha4:*:*:*:drupal:*:*", + "matchCriteriaId": "B3D9E2E6-DA96-4B21-9185-FD811F3EF851" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha5:*:*:*:drupal:*:*", + "matchCriteriaId": "555AD849-3751-4A70-972E-D712638BE25F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha6:*:*:*:drupal:*:*", + "matchCriteriaId": "A70A48EA-2582-4923-AD38-00ACD697AEAE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha7:*:*:*:drupal:*:*", + "matchCriteriaId": "35C48202-C7CC-4B2D-9C0C-927BE0CE701A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha8:*:*:*:drupal:*:*", + "matchCriteriaId": "4EDCE73A-CF87-4BA6-91BD-1BC2294C0CAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getopensocial:open_social:13.0.0:alpha9:*:*:*:drupal:*:*", + "matchCriteriaId": "0E4DF269-107D-4126-AC03-4A4F74794914" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.drupal.org/sa-contrib-2024-037", - "source": "mlhess@drupal.org" + "source": "mlhess@drupal.org", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13304.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13304.json index c1d3a92c9f7..5391c5553f6 100644 --- a/CVE-2024/CVE-2024-133xx/CVE-2024-13304.json +++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13304.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13304", "sourceIdentifier": "mlhess@drupal.org", "published": "2025-01-09T21:15:28.387", - "lastModified": "2025-01-10T18:15:21.263", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:34:37.383", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:matthiasmullie:minify_js:*:*:*:*:*:drupal:*:*", + "versionEndExcluding": "3.0.3", + "matchCriteriaId": "E062C729-C8EA-4C98-AA4A-3424E9552F6D" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.drupal.org/sa-contrib-2024-070", - "source": "mlhess@drupal.org" + "source": "mlhess@drupal.org", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13305.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13305.json index 4983ef523c0..c40bef383b4 100644 --- a/CVE-2024/CVE-2024-133xx/CVE-2024-13305.json +++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13305.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13305", "sourceIdentifier": "mlhess@drupal.org", "published": "2025-01-09T21:15:28.500", - "lastModified": "2025-01-10T17:15:16.820", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:32:30.983", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:imagexmedia:entity_form_steps:*:*:*:*:*:drupal:*:*", + "versionEndExcluding": "1.1.4", + "matchCriteriaId": "6567492A-89FA-454C-B1DB-C9D8F9E1F8B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.drupal.org/sa-contrib-2024-071", - "source": "mlhess@drupal.org" + "source": "mlhess@drupal.org", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13308.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13308.json index aac31181781..788787de1a4 100644 --- a/CVE-2024/CVE-2024-133xx/CVE-2024-13308.json +++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13308.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13308", "sourceIdentifier": "mlhess@drupal.org", "published": "2025-01-09T21:15:28.623", - "lastModified": "2025-01-30T22:15:08.723", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:28:52.290", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:other.media:browser_back_button:*:*:*:*:*:drupal:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.0.2", + "matchCriteriaId": "02DFB1DF-46E1-4739-A5D4-05E68B4B726C" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.drupal.org/sa-contrib-2024-072", - "source": "mlhess@drupal.org" + "source": "mlhess@drupal.org", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13309.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13309.json index c065cc9f8b6..c58491dfbda 100644 --- a/CVE-2024/CVE-2024-133xx/CVE-2024-13309.json +++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13309.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13309", "sourceIdentifier": "mlhess@drupal.org", "published": "2025-01-09T21:15:28.740", - "lastModified": "2025-01-30T22:15:08.880", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:26:42.113", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:login_disable_project:login_disable:*:*:*:*:*:drupal:*:*", + "versionStartIncluding": "2.0.0", + "versionEndExcluding": "2.1.1", + "matchCriteriaId": "B0D50664-6710-46F7-8187-8460EE00C9B7" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.drupal.org/sa-contrib-2024-073", - "source": "mlhess@drupal.org" + "source": "mlhess@drupal.org", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-300xx/CVE-2024-30040.json b/CVE-2024/CVE-2024-300xx/CVE-2024-30040.json index 242cba59a40..21d3fdb37dc 100644 --- a/CVE-2024/CVE-2024-300xx/CVE-2024-30040.json +++ b/CVE-2024/CVE-2024-300xx/CVE-2024-30040.json @@ -2,8 +2,8 @@ "id": "CVE-2024-30040", "sourceIdentifier": "secure@microsoft.com", "published": "2024-05-14T17:17:12.410", - "lastModified": "2025-08-27T21:15:47.620", - "vulnStatus": "Modified", + "lastModified": "2025-08-28T12:55:50.997", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { diff --git a/CVE-2024/CVE-2024-582xx/CVE-2024-58240.json b/CVE-2024/CVE-2024-582xx/CVE-2024-58240.json new file mode 100644 index 00000000000..789fde5b2d2 --- /dev/null +++ b/CVE-2024/CVE-2024-582xx/CVE-2024-58240.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2024-58240", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-08-28T10:15:31.780", + "lastModified": "2025-08-28T10:15:31.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: separate no-async decryption request handling from async\n\nIf we're not doing async, the handling is much simpler. There's no\nreference counting, we just need to wait for the completion to wake us\nup and return its result.\n\nWe should preferably also use a separate crypto_wait. I'm not seeing a\nUAF as I did in the past, I think aec7961916f3 (\"tls: fix race between\nasync notify and socket close\") took care of it.\n\nThis will make the next fix easier." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/41532b785e9d79636b3815a64ddf6a096647d011", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/999115298017a675d8ddf61414fc7a85c89f1186", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dec5b6e7b211e405d3bcb504562ab21aa7e5a64d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-04xx/CVE-2025-0461.json b/CVE-2025/CVE-2025-04xx/CVE-2025-0461.json index e08211ea59b..cf1b9fd1415 100644 --- a/CVE-2025/CVE-2025-04xx/CVE-2025-0461.json +++ b/CVE-2025/CVE-2025-04xx/CVE-2025-0461.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0461", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-14T16:15:34.997", - "lastModified": "2025-01-14T16:15:34.997", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:20:21.007", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -120,22 +140,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:8.6.0.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07F20E45-E81C-4FD7-A265-BD606E36DBB5" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/BxYQ/ld/blob/main/downloadSocialPromotionQrcode_fileread.doc", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://vuldb.com/?ctiid.291478", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.291478", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.474252", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-04xx/CVE-2025-0462.json b/CVE-2025/CVE-2025-04xx/CVE-2025-0462.json index 3cbffd8e150..9a541e39ce0 100644 --- a/CVE-2025/CVE-2025-04xx/CVE-2025-0462.json +++ b/CVE-2025/CVE-2025-04xx/CVE-2025-0462.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0462", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-14T17:15:21.040", - "lastModified": "2025-01-14T17:15:21.040", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:15:44.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,66 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:8.6.0.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07F20E45-E81C-4FD7-A265-BD606E36DBB5" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/BxYQ/ld/blob/main/ListView_SQL.doc", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://vuldb.com/?ctiid.291479", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.291479", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.474254", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-04xx/CVE-2025-0463.json b/CVE-2025/CVE-2025-04xx/CVE-2025-0463.json index d3660f974e3..58b828aeda1 100644 --- a/CVE-2025/CVE-2025-04xx/CVE-2025-0463.json +++ b/CVE-2025/CVE-2025-04xx/CVE-2025-0463.json @@ -2,8 +2,8 @@ "id": "CVE-2025-0463", "sourceIdentifier": "cna@vuldb.com", "published": "2025-01-14T17:15:21.210", - "lastModified": "2025-01-14T17:15:21.210", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T10:57:21.367", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,66 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:8.6.0.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07F20E45-E81C-4FD7-A265-BD606E36DBB5" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/BxYQ/ld/blob/main/File_Upload_vul.doc", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://vuldb.com/?ctiid.291480", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.291480", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.474255", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39496.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39496.json new file mode 100644 index 00000000000..33ff438dcb9 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39496.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39496", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T12:15:37.480", + "lastModified": "2025-08-28T12:15:37.480", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWoo Product Filter Pro: from n/a before 2.9.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/woofilter-pro/vulnerability/wordpress-woobewoo-product-filter-pro-plugin-2-7-6-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-409xx/CVE-2025-40920.json b/CVE-2025/CVE-2025-409xx/CVE-2025-40920.json index e8e0502921d..8c1b2a76d41 100644 --- a/CVE-2025/CVE-2025-409xx/CVE-2025-40920.json +++ b/CVE-2025/CVE-2025-409xx/CVE-2025-40920.json @@ -2,13 +2,13 @@ "id": "CVE-2025-40920", "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "published": "2025-08-11T21:15:28.087", - "lastModified": "2025-08-12T14:25:33.177", + "lastModified": "2025-08-28T12:15:38.967", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for generating UUIDs.\n * Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562.\n * The nonces should be generated from a strong cryptographic source, as per RFC 7616." + "value": "Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library.\n * Data::UUID does not use a strong cryptographic source for generating UUIDs.\n * Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562.\n * The nonces should be generated from a strong cryptographic source, as per RFC 7616." }, { "lang": "es", @@ -64,10 +64,6 @@ "url": "https://datatracker.ietf.org/doc/html/rfc9562#name-security-considerations", "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e" }, - { - "url": "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit/ad2c03aad95406db4ce35dfb670664ebde004c18.patch", - "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e" - }, { "url": "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/pull/1", "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e" @@ -75,6 +71,10 @@ { "url": "https://metacpan.org/release/ETHER/Catalyst-Authentication-Credential-HTTP-1.018/source/lib/Catalyst/Authentication/Credential/HTTP.pm#L391", "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e" + }, + { + "url": "https://security.metacpan.org/patches/C/Catalyst-Authentication-Credential-HTTP/1.018/CVE-2025-40920-r1.patch", + "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46409.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46409.json new file mode 100644 index 00000000000..343fe625d40 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46409.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-46409", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:31.733", + "lastModified": "2025-08-28T09:15:31.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-326" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48100.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48100.json new file mode 100644 index 00000000000..84e90bedf6e --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48100.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48100", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:36.830", + "lastModified": "2025-08-28T13:15:36.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator allows Remote Code Inclusion. This issue affects bidorbuy Store Integrator: from n/a through 2.12.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.3, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/bidorbuystoreintegrator/vulnerability/wordpress-bidorbuy-store-integrator-plugin-2-10-0-remote-code-execution-rce-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48109.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48109.json new file mode 100644 index 00000000000..bceb9d8a609 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48109.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48109", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:37.073", + "lastModified": "2025-08-28T13:15:37.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup allows Stored XSS. This issue affects XM-Backup: from n/a through 0.9.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/xm-backup/vulnerability/wordpress-xm-backup-plugin-0-9-1-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48110.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48110.json new file mode 100644 index 00000000000..0864ca070d7 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48110.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48110", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:37.280", + "lastModified": "2025-08-28T13:15:37.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View allows Stored XSS. This issue affects Link View: from n/a through 0.8.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/link-view/vulnerability/wordpress-link-view-plugin-0-8-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48304.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48304.json new file mode 100644 index 00000000000..9d24b619ba3 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48304.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48304", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:37.500", + "lastModified": "2025-08-28T13:15:37.500", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin allows Stored XSS. This issue affects Google XML News Sitemap plugin: from n/a through 0.02." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gn-xml-sitemap/vulnerability/wordpress-google-xml-news-sitemap-plugin-plugin-0-02-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48305.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48305.json new file mode 100644 index 00000000000..6b25c681c76 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48305.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48305", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:37.723", + "lastModified": "2025-08-28T13:15:37.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikingjs Goal Tracker for Patreon allows Stored XSS. This issue affects Goal Tracker for Patreon: from n/a through 0.4.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/goal-tracker-for-patreon/vulnerability/wordpress-goal-tracker-for-patreon-plugin-0-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48306.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48306.json new file mode 100644 index 00000000000..41f3446ec51 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48306.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48306", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:37.943", + "lastModified": "2025-08-28T13:15:37.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in developers savyour Savyour Affiliate Partner allows Stored XSS. This issue affects Savyour Affiliate Partner: from n/a through 2.1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/savyour-affiliate-partner/vulnerability/wordpress-savyour-affiliate-partner-plugin-2-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48307.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48307.json new file mode 100644 index 00000000000..673195cc9b2 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48307.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48307", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:38.157", + "lastModified": "2025-08-28T13:15:38.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao SEO For Images allows Stored XSS. This issue affects SEO For Images: from n/a through 1.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/seo-for-images/vulnerability/wordpress-seo-for-images-plugin-1-0-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48308.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48308.json new file mode 100644 index 00000000000..3381a89b2f8 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48308.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48308", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:38.373", + "lastModified": "2025-08-28T13:15:38.373", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module allows Stored XSS. This issue affects Newsletter subscription optin module: from n/a through 1.2.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/newsletter-subscription-widget-for-sendblaster/vulnerability/wordpress-newsletter-subscription-optin-module-plugin-1-2-9-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48309.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48309.json new file mode 100644 index 00000000000..3b2127df58b --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48309.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48309", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:38.583", + "lastModified": "2025-08-28T13:15:38.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress allows Stored XSS. This issue affects BetPress: from n/a through 1.0.1 Lite." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/betpress/vulnerability/wordpress-betpress-plugin-1-0-1-lite-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48310.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48310.json new file mode 100644 index 00000000000..6c70f6650bd --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48310.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48310", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:39.653", + "lastModified": "2025-08-28T13:15:39.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in wptableeditor Table Editor allows Cross Site Request Forgery. This issue affects Table Editor: from n/a through 1.6.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-table-editor/vulnerability/wordpress-table-editor-plugin-1-6-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48311.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48311.json new file mode 100644 index 00000000000..7d1b09408fa --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48311.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48311", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:40.380", + "lastModified": "2025-08-28T13:15:40.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin allows Stored XSS. This issue affects Invisible Optin: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/invisible-optin/vulnerability/wordpress-invisible-optin-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48312.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48312.json new file mode 100644 index 00000000000..0d8074975f6 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48312.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48312", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:40.900", + "lastModified": "2025-08-28T13:15:40.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in \u6587\u6d3e\u7ffb\u8bd1\uff08WP Chinese Translation\uff09 WPAvatar allows Stored XSS. This issue affects WPAvatar: from n/a through 1.9.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wpavatar/vulnerability/wordpress-wpavatar-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48313.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48313.json new file mode 100644 index 00000000000..df0ec3675cb --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48313.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48313", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:41.197", + "lastModified": "2025-08-28T13:15:41.197", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kevin heath Tripadvisor Shortcode allows Stored XSS. This issue affects Tripadvisor Shortcode: from n/a through 2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tripadvisor-shortcode/vulnerability/wordpress-tripadvisor-shortcode-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48314.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48314.json new file mode 100644 index 00000000000..d42b58d6bd5 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48314.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48314", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:41.413", + "lastModified": "2025-08-28T13:15:41.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salubrio Add Code To Head allows Stored XSS. This issue affects Add Code To Head: from n/a through 1.17." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/add-code-to-head/vulnerability/wordpress-add-code-to-head-plugin-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48315.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48315.json new file mode 100644 index 00000000000..1515cd7fc98 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48315.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48315", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:42.720", + "lastModified": "2025-08-28T13:15:42.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stanton119 WordPress HTML allows Stored XSS. This issue affects WordPress HTML: from n/a through 0.51." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/custom-html-bodyhead/vulnerability/wordpress-wordpress-html-plugin-0-51-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48316.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48316.json new file mode 100644 index 00000000000..d37a6d60df5 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48316.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48316", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:43.987", + "lastModified": "2025-08-28T13:15:43.987", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ItayXD Responsive Mobile-Friendly Tooltip allows Stored XSS. This issue affects Responsive Mobile-Friendly Tooltip: from n/a through 1.6.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/responsive-mobile-friendly-tooltip/vulnerability/wordpress-responsive-mobile-friendly-tooltip-plugin-1-6-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48318.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48318.json new file mode 100644 index 00000000000..b452ff5bcbc --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48318.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48318", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:45.243", + "lastModified": "2025-08-28T13:15:45.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in shen2 \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846 allows Cross Site Request Forgery. This issue affects \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846: from n/a through 1.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/duoshuo/vulnerability/wordpress-plugin-1-2-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48319.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48319.json new file mode 100644 index 00000000000..39ff0b50bdc --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48319.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48319", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:46.517", + "lastModified": "2025-08-28T13:15:46.517", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gslauraspeck Mesa Mesa Reservation Widget allows Stored XSS. This issue affects Mesa Mesa Reservation Widget: from n/a through 1.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mesa-mesa-reservation-widget/vulnerability/wordpress-mesa-mesa-reservation-widget-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48320.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48320.json new file mode 100644 index 00000000000..04fd18892cc --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48320.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48320", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:47.800", + "lastModified": "2025-08-28T13:15:47.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in cuckoohello \u767e\u5ea6\u5206\u4eab\u6309\u94ae allows Stored XSS. This issue affects \u767e\u5ea6\u5206\u4eab\u6309\u94ae: from n/a through 1.0.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/baidushare-wp/vulnerability/wordpress-plugin-1-0-6-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48321.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48321.json new file mode 100644 index 00000000000..fc9b762f7cb --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48321.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48321", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:49.027", + "lastModified": "2025-08-28T13:15:49.027", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget allows Stored XSS. This issue affects Ultimate twitter profile widget: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ultimate-twitter-profile-widget/vulnerability/wordpress-ultimate-twitter-profile-widget-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48322.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48322.json new file mode 100644 index 00000000000..2c2946fffc1 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48322.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48322", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:50.280", + "lastModified": "2025-08-28T13:15:50.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Finn Dohrn Statify Widget allows Stored XSS. This issue affects Statify Widget: from n/a through 1.4.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/statify-widget/vulnerability/wordpress-statify-widget-plugin-1-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48323.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48323.json new file mode 100644 index 00000000000..cd739df99b1 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48323.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48323", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:51.543", + "lastModified": "2025-08-28T13:15:51.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Abunaser Khan Advance Food Menu allows Stored XSS. This issue affects Advance Food Menu: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/advance-food-menu/vulnerability/wordpress-advance-food-menu-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48324.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48324.json new file mode 100644 index 00000000000..881244ad736 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48324.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48324", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:52.833", + "lastModified": "2025-08-28T13:15:52.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in khashabawy tli.tl auto Twitter poster allows Stored XSS. This issue affects tli.tl auto Twitter poster: from n/a through 3.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tlitl-auto-twitter-poster/vulnerability/wordpress-tli-tl-auto-twitter-poster-plugin-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48325.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48325.json new file mode 100644 index 00000000000..28bb1f8d9c0 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48325.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48325", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:53.157", + "lastModified": "2025-08-28T13:15:53.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme allows Stored XSS. This issue affects WP Admin Theme: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-admin-theme/vulnerability/wordpress-wp-admin-theme-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48327.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48327.json new file mode 100644 index 00000000000..4f7e3b1db01 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48327.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48327", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:53.367", + "lastModified": "2025-08-28T13:15:53.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in inkthemes WP Mailgun SMTP allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP Mailgun SMTP: from n/a through 1.0.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-mailgun-smtp/vulnerability/wordpress-wp-mailgun-smtp-plugin-1-0-7-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48343.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48343.json new file mode 100644 index 00000000000..0ea8a4f465b --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48343.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48343", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:53.590", + "lastModified": "2025-08-28T13:15:53.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication allows Stored XSS. This issue affects WPMU Ldap Authentication: from n/a through 5.0.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wpmuldap/vulnerability/wordpress-wpmu-ldap-authentication-plugin-5-0-1-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48347.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48347.json new file mode 100644 index 00000000000..f7e230a48a7 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48347.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48347", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:53.783", + "lastModified": "2025-08-28T13:15:53.783", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Mimoun-Prat bxSlider integration for WordPress allows Stored XSS. This issue affects bxSlider integration for WordPress: from n/a through 1.7.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/bxslider-integration/vulnerability/wordpress-bxslider-integration-for-wordpress-plugin-1-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48348.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48348.json new file mode 100644 index 00000000000..371f449b2b0 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48348.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48348", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:53.993", + "lastModified": "2025-08-28T13:15:53.993", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Site Offline: from n/a through 1.5.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/site-offline/vulnerability/wordpress-site-offline-plugin-1-5-7-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48349.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48349.json new file mode 100644 index 00000000000..2734a81e5f6 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48349.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48349", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:54.317", + "lastModified": "2025-08-28T13:15:54.317", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video Gallery \u2013 Vimeo and YouTube Gallery allows Stored XSS. This issue affects Video Gallery \u2013 Vimeo and YouTube Gallery: from n/a through 1.1.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/smart-grid-gallery/vulnerability/wordpress-video-gallery-vimeo-and-youtube-gallery-plugin-1-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48350.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48350.json new file mode 100644 index 00000000000..8b3c3b69f56 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48350.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48350", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:54.540", + "lastModified": "2025-08-28T13:15:54.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Neuralabz LTD AutoWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AutoWP: from n/a through 2.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/autowp-ai-content-writer-rewriter/vulnerability/wordpress-autowp-plugin-2-2-2-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48351.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48351.json new file mode 100644 index 00000000000..a082206feb5 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48351.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48351", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:54.733", + "lastModified": "2025-08-28T13:15:54.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen allows Stored XSS. This issue affects Kento Splash Screen: from n/a through 1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/kento-splash-screen/vulnerability/wordpress-kento-splash-screen-plugin-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48352.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48352.json new file mode 100644 index 00000000000..668fcdd0e67 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48352.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48352", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:54.943", + "lastModified": "2025-08-28T13:15:54.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sitesearch-yandex Yandex Site search pinger allows Stored XSS. This issue affects Yandex Site search pinger: from n/a through 1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/yandex-pinger/vulnerability/wordpress-yandex-site-search-pinger-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48353.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48353.json new file mode 100644 index 00000000000..5c4450d7465 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48353.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48353", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:55.157", + "lastModified": "2025-08-28T13:15:55.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) allows Stored XSS. This issue affects Clickbank WordPress Plugin (Niche Storefront): from n/a through 1.3.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/clickbank-niche-storefronts/vulnerability/wordpress-clickbank-wordpress-plugin-niche-storefront-plugin-1-3-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48354.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48354.json new file mode 100644 index 00000000000..7a00f8b3ffe --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48354.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48354", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:55.377", + "lastModified": "2025-08-28T13:15:55.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor allows Stored XSS. This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.6.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/better-post-filter-widgets-for-elementor/vulnerability/wordpress-better-post-filter-widgets-for-elementor-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48356.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48356.json new file mode 100644 index 00000000000..3d6fbfb7184 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48356.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48356", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:55.593", + "lastModified": "2025-08-28T13:15:55.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Isra Kanpress allows Stored XSS. This issue affects Kanpress: from n/a through 1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/kanpress/vulnerability/wordpress-kanpress-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48357.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48357.json new file mode 100644 index 00000000000..a8eaaf32f33 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48357.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48357", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:55.813", + "lastModified": "2025-08-28T13:15:55.813", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit allows Cross Site Request Forgery. This issue affects Century ToolKit: from n/a through 1.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/century-toolkit/vulnerability/wordpress-century-toolkit-plugin-1-2-1-cross-site-request-forgery-csrf-to-arbitrary-plugin-activation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48358.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48358.json new file mode 100644 index 00000000000..97c4d4c3d33 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48358.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48358", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:56.030", + "lastModified": "2025-08-28T13:15:56.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in everythingwp Risk Free Cash On Delivery (COD) – WooCommerce allows Stored XSS. This issue affects Risk Free Cash On Delivery (COD) – WooCommerce: from n/a through 1.0.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/risk-free-cash-on-delivery-cod-woocommerce/vulnerability/wordpress-risk-free-cash-on-delivery-cod-woocommerce-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48359.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48359.json new file mode 100644 index 00000000000..197142c6246 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48359.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48359", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:56.223", + "lastModified": "2025-08-28T13:15:56.223", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget allows Stored XSS. This issue affects ATT YouTube Widget: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/att-youtube/vulnerability/wordpress-att-youtube-widget-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48360.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48360.json new file mode 100644 index 00000000000..83e63c39daa --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48360.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48360", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:56.430", + "lastModified": "2025-08-28T13:15:56.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching allows Stored XSS. This issue affects Varnish/Nginx Proxy Caching: from n/a through 1.8.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/vcaching/vulnerability/wordpress-varnish-nginx-proxy-caching-plugin-1-8-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48361.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48361.json new file mode 100644 index 00000000000..d49badc2006 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48361.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48361", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:56.650", + "lastModified": "2025-08-28T13:15:56.650", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting allows Retrieve Embedded Sensitive Data. This issue affects Hesabfa Accounting: from n/a through 2.2.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/hesabfa-accounting/vulnerability/wordpress-hesabfa-accounting-plugin-2-2-4-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48362.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48362.json new file mode 100644 index 00000000000..44d7bd24516 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48362.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48362", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:56.877", + "lastModified": "2025-08-28T13:15:56.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting allows Cross Site Request Forgery. This issue affects Hesabfa Accounting: from n/a through 2.2.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/hesabfa-accounting/vulnerability/wordpress-hesabfa-accounting-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48363.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48363.json new file mode 100644 index 00000000000..ea418661efc --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48363.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48363", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:58.020", + "lastModified": "2025-08-28T13:15:58.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Metin Sara\u00e7 Popup for CF7 with Sweet Alert allows Cross Site Request Forgery. This issue affects Popup for CF7 with Sweet Alert: from n/a through 1.6.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cf7-sweet-alert-popup/vulnerability/wordpress-popup-for-cf7-with-sweet-alert-plugin-1-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48364.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48364.json new file mode 100644 index 00000000000..f7fec7629bd --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48364.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48364", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:58.593", + "lastModified": "2025-08-28T13:15:58.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in vEnCa-X rajce allows Server Side Request Forgery. This issue affects rajce: from n/a through 0.4.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/rajce/vulnerability/wordpress-rajce-plugin-0-4-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48365.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48365.json new file mode 100644 index 00000000000..50b14014c16 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48365.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48365", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:58.803", + "lastModified": "2025-08-28T13:15:58.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imaprogrammer Custom Comment allows Stored XSS. This issue affects Custom Comment: from n/a through 2.1.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/customcomment/vulnerability/wordpress-custom-comment-plugin-2-1-6-cross-site-scripting-xss-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48963.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48963.json new file mode 100644 index 00000000000..2234f30bbef --- /dev/null +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48963.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48963", + "sourceIdentifier": "security@acronis.com", + "published": "2025-08-28T10:15:32.437", + "lastModified": "2025-08-28T10:15:32.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40296." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@acronis.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.3, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@acronis.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-610" + } + ] + } + ], + "references": [ + { + "url": "https://security-advisory.acronis.com/advisories/SEC-8568", + "source": "security@acronis.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49383.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49383.json new file mode 100644 index 00000000000..3cf25388c65 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49383.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49383", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:59.013", + "lastModified": "2025-08-28T13:15:59.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Neresa allows PHP Local File Inclusion. This issue affects Neresa: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/neresa-wp/vulnerability/wordpress-neresa-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49387.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49387.json new file mode 100644 index 00000000000..e02ae72b0f5 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49387.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49387", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:59.230", + "lastModified": "2025-08-28T13:15:59.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms allows Upload a Web Shell to a Web Server. This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through 1.5.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/drag-and-drop-file-upload-for-elementor-forms/vulnerability/wordpress-drag-and-drop-file-upload-for-elementor-forms-plugin-1-5-3-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49388.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49388.json new file mode 100644 index 00000000000..2ec37eb1978 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49388.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49388", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:59.430", + "lastModified": "2025-08-28T13:15:59.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin allows Privilege Escalation. This issue affects Miraculous Core Plugin: from n/a through 2.0.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/miraculouscore/vulnerability/wordpress-miraculous-core-plugin-plugin-2-0-7-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49402.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49402.json new file mode 100644 index 00000000000..2a34ab64952 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49402.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49402", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:59.623", + "lastModified": "2025-08-28T13:15:59.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in favethemes Houzez CRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Houzez CRM: from n/a through 1.4.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/houzez-crm/vulnerability/wordpress-houzez-crm-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49404.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49404.json new file mode 100644 index 00000000000..c9fecd072fd --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49404.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49404", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:15:59.837", + "lastModified": "2025-08-28T13:15:59.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo-Core allows SQL Injection. This issue affects Listeo-Core: from n/a through 1.9.32." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/listeo-core/vulnerability/wordpress-listeo-core-plugin-1-9-32-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49405.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49405.json new file mode 100644 index 00000000000..334870655fa --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49405.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49405", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:00.063", + "lastModified": "2025-08-28T13:16:00.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez allows PHP Local File Inclusion. This issue affects Houzez: from n/a through 4.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-theme-4-1-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49407.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49407.json new file mode 100644 index 00000000000..3a748316c2a --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49407.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49407", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:00.273", + "lastModified": "2025-08-28T13:16:00.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez allows Reflected XSS. This issue affects Houzez: from n/a through 4.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-theme-4-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-524xx/CVE-2025-52460.json b/CVE-2025/CVE-2025-524xx/CVE-2025-52460.json new file mode 100644 index 00000000000..b24bbf6910d --- /dev/null +++ b/CVE-2025/CVE-2025-524xx/CVE-2025-52460.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-52460", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:32.843", + "lastModified": "2025-08-28T09:15:32.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-552" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52761.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52761.json new file mode 100644 index 00000000000..3663b9ecca0 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52761.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-52761", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:00.483", + "lastModified": "2025-08-28T13:16:00.483", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager allows Object Injection. This issue affects WP Funnel Manager: from n/a through 1.4.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-funnel-manager/vulnerability/wordpress-wp-funnel-manager-plugin-1-4-0-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53215.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53215.json new file mode 100644 index 00000000000..4608d566aa1 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53215.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53215", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:00.703", + "lastModified": "2025-08-28T13:16:00.703", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8bitkid Yahoo! WebPlayer allows Reflected XSS. This issue affects Yahoo! WebPlayer: from n/a through 2.0.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/yahoo-media-player/vulnerability/wordpress-yahoo-webplayer-plugin-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53216.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53216.json new file mode 100644 index 00000000000..fb7b3684c0f --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53216.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53216", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:00.913", + "lastModified": "2025-08-28T13:16:00.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeUniver Glamer allows PHP Local File Inclusion. This issue affects Glamer: from n/a through 1.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/glamer/vulnerability/wordpress-glamer-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53220.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53220.json new file mode 100644 index 00000000000..7407afdd70b --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53220.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53220", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:01.133", + "lastModified": "2025-08-28T13:16:01.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XmasB XmasB Quotes allows Reflected XSS. This issue affects XmasB Quotes: from n/a through 1.6.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/xmasb-quotes/vulnerability/wordpress-xmasb-quotes-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53223.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53223.json new file mode 100644 index 00000000000..f8df5ee8eed --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53223.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53223", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:01.343", + "lastModified": "2025-08-28T13:16:01.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undoIT Theme Switcher Reloaded allows Reflected XSS. This issue affects Theme Switcher Reloaded: from n/a through 1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/theme-switcher-reloaded/vulnerability/wordpress-theme-switcher-reloaded-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53224.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53224.json new file mode 100644 index 00000000000..bbc0f90586f --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53224.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53224", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:01.540", + "lastModified": "2025-08-28T13:16:01.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Koen Schuit NextGEN Gallery Search allows Reflected XSS. This issue affects NextGEN Gallery Search: from n/a through 2.12." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/nextgen-gallery-search-galleries/vulnerability/wordpress-nextgen-gallery-search-plugin-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53225.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53225.json new file mode 100644 index 00000000000..9a5f67049ad --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53225.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53225", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:01.757", + "lastModified": "2025-08-28T13:16:01.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eboekhouden e-Boekhouden.nl allows Reflected XSS. This issue affects e-Boekhouden.nl: from n/a through 1.9.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/e-boekhoudennl-connector/vulnerability/wordpress-e-boekhouden-nl-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53227.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53227.json new file mode 100644 index 00000000000..3628c3bf9dc --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53227.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53227", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:01.997", + "lastModified": "2025-08-28T13:16:01.997", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine Saga allows PHP Local File Inclusion. This issue affects Magazine Saga: from n/a through 1.2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/magazine-saga/vulnerability/wordpress-magazine-saga-theme-1-2-7-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53230.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53230.json new file mode 100644 index 00000000000..9fc54d7e5aa --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53230.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53230", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:02.203", + "lastModified": "2025-08-28T13:16:02.203", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in honzat Page Manager for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Page Manager for Elementor: from n/a through 2.0.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/page-manager-for-elementor/vulnerability/wordpress-page-manager-for-elementor-plugin-2-0-5-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53243.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53243.json new file mode 100644 index 00000000000..2dbb08b81de --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53243.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53243", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:02.410", + "lastModified": "2025-08-28T13:16:02.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory \u2013 Staff Listing & Team Directory Plugin for WordPress allows Object Injection. This issue affects Employee Directory \u2013 Staff Listing & Team Directory Plugin for WordPress: from n/a through 4.5.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/employee-directory/vulnerability/wordpress-employee-directory-staff-listing-team-directory-plugin-for-wordpress-plugin-4-5-2-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53244.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53244.json new file mode 100644 index 00000000000..ef509d9405d --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53244.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53244", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:02.690", + "lastModified": "2025-08-28T13:16:02.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine Elite allows PHP Local File Inclusion. This issue affects Magazine Elite: from n/a through 1.2.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/magazine-elite/vulnerability/wordpress-magazine-elite-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53247.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53247.json new file mode 100644 index 00000000000..10ad2a41b62 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53247.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53247", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:02.897", + "lastModified": "2025-08-28T13:16:02.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPInterface BlogMarks allows PHP Local File Inclusion. This issue affects BlogMarks: from n/a through 1.0.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/blogmarks/vulnerability/wordpress-blogmarks-theme-1-0-8-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53248.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53248.json new file mode 100644 index 00000000000..a2ba3b218fd --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53248.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53248", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:03.093", + "lastModified": "2025-08-28T13:16:03.093", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine allows PHP Local File Inclusion. This issue affects Magazine: from n/a through 1.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/eximious-magazine/vulnerability/wordpress-magazine-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53250.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53250.json new file mode 100644 index 00000000000..27102cecff5 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53250.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53250", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:03.310", + "lastModified": "2025-08-28T13:16:03.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in Chartbeat Chartbeat allows Server Side Request Forgery. This issue affects Chartbeat: from n/a through 2.0.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/chartbeat/vulnerability/wordpress-chartbeat-plugin-2-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53289.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53289.json new file mode 100644 index 00000000000..a765b2a15ed --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53289.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53289", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:03.510", + "lastModified": "2025-08-28T13:16:03.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd Widget Areas allows Reflected XSS. This issue affects Theme Blvd Widget Areas: from n/a through 1.3.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/theme-blvd-widget-areas/vulnerability/wordpress-theme-blvd-widget-areas-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53326.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53326.json new file mode 100644 index 00000000000..321f2d85224 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53326.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53326", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:03.720", + "lastModified": "2025-08-28T13:16:03.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodeYatri Gutenify allows PHP Local File Inclusion. This issue affects Gutenify: from n/a through 1.5.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gutenify/vulnerability/wordpress-gutenify-plugin-1-5-6-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53328.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53328.json new file mode 100644 index 00000000000..503fb4e2807 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53328.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53328", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:03.907", + "lastModified": "2025-08-28T13:16:03.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Assaf Parag Poll, Survey & Quiz Maker Plugin by Opinion Stage allows PHP Local File Inclusion. This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a through 19.11.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/social-polls-by-opinionstage/vulnerability/wordpress-poll-survey-quiz-maker-plugin-by-opinion-stage-plugin-19-11-0-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53334.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53334.json new file mode 100644 index 00000000000..a2ebb61d260 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53334.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53334", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:04.120", + "lastModified": "2025-08-28T13:16:04.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah allows PHP Local File Inclusion. This issue affects Jannah: from n/a through 7.4.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/jannah/vulnerability/wordpress-jannah-theme-7-4-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53337.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53337.json new file mode 100644 index 00000000000..bf62db4df63 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53337.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53337", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:04.340", + "lastModified": "2025-08-28T13:16:04.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Ashan Perera LifePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LifePress: from n/a through 2.1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lifepress/vulnerability/wordpress-lifepress-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53396.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53396.json new file mode 100644 index 00000000000..a58132453fa --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53396.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-53396", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:33.627", + "lastModified": "2025-08-28T09:15:33.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53572.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53572.json new file mode 100644 index 00000000000..8af38f8e736 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53572.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53572", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:04.550", + "lastModified": "2025-08-28T13:16:04.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact allows Object Injection. This issue affects WP Easy Contact: from n/a through 4.0.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-easy-contact/vulnerability/wordpress-wp-easy-contact-plugin-4-0-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53576.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53576.json new file mode 100644 index 00000000000..b7b2b621a1a --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53576.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53576", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:04.770", + "lastModified": "2025-08-28T13:16:04.770", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ovatheme Events allows PHP Local File Inclusion. This issue affects Ovatheme Events: from n/a through 1.2.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ova-events/vulnerability/wordpress-ovatheme-events-plugin-1-2-8-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53578.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53578.json new file mode 100644 index 00000000000..dd8b37dae52 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53578.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53578", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:04.990", + "lastModified": "2025-08-28T13:16:04.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kipso allows PHP Local File Inclusion. This issue affects Kipso: from n/a through 1.3.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/kipso/vulnerability/wordpress-kipso-theme-1-3-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53579.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53579.json new file mode 100644 index 00000000000..8b60de7011d --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53579.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53579", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:05.203", + "lastModified": "2025-08-28T13:16:05.203", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captcha.eu Captcha.eu allows Reflected XSS. This issue affects Captcha.eu: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/captcha-eu/vulnerability/wordpress-captcha-eu-plugin-1-0-61-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53583.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53583.json new file mode 100644 index 00000000000..9f5d2f16c6c --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53583.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53583", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:05.413", + "lastModified": "2025-08-28T13:16:05.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight allows Object Injection. This issue affects Employee Spotlight: from n/a through 5.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/employee-spotlight/vulnerability/wordpress-employee-spotlight-plugin-5-1-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53584.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53584.json new file mode 100644 index 00000000000..469881e32db --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53584.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53584", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:05.600", + "lastModified": "2025-08-28T13:16:05.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System allows Object Injection. This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through 6.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-ticket/vulnerability/wordpress-wp-ticket-customer-service-software-support-ticket-system-plugin-6-0-2-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53588.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53588.json new file mode 100644 index 00000000000..b4bba9947cd --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53588.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53588", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:05.817", + "lastModified": "2025-08-28T13:16:05.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of \"UKR Solution\") UPC/EAN/GTIN Code Generator allows Path Traversal. This issue affects UPC/EAN/GTIN Code Generator: from n/a through 2.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/upc-ean-barcode-generator/vulnerability/wordpress-upc-ean-gtin-code-generator-plugin-2-0-2-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53970.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53970.json new file mode 100644 index 00000000000..c7c0505c92a --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53970.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-53970", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:34.390", + "lastModified": "2025-08-28T09:15:34.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54029.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54029.json new file mode 100644 index 00000000000..6a120c08213 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54029.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54029", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:06.043", + "lastModified": "2025-08-28T13:16:06.043", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export allows Path Traversal. This issue affects WooCommerce csv import export: from n/a through 2.0.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/extendons-eo-wooimport-export/vulnerability/wordpress-woocommerce-csv-import-export-plugin-2-0-6-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54540.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54540.json new file mode 100644 index 00000000000..e3f751cc2d5 --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54540.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54540", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:30.070", + "lastModified": "2025-08-28T11:15:30.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS is vulnerable to Reflected XSS via\u00a0sSort\u00a0parameter in admin's panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54541.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54541.json new file mode 100644 index 00000000000..04d306a64ed --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54541.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54541", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:32.297", + "lastModified": "2025-08-28T11:15:32.297", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54542.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54542.json new file mode 100644 index 00000000000..0df41ecc472 --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54542.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54542", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:32.510", + "lastModified": "2025-08-28T11:15:32.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS sends password and login via GET Request. This allows a\u00a0local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-598" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54543.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54543.json new file mode 100644 index 00000000000..05ef9655f68 --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54543.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54543", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:32.700", + "lastModified": "2025-08-28T11:15:32.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS is vulnerable to Stored XSS via\u00a0sDescriptionMeta\u00a0parameter in page editor SEO functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. By default admin user is not able to add JavaScript into the website.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54544.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54544.json new file mode 100644 index 00000000000..b8d2d7fe2c5 --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54544.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54544", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:32.900", + "lastModified": "2025-08-28T11:15:32.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS is vulnerable to Stored XSS via\u00a0aDirFilesDescriptions\u00a0parameter in files editor functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. By default admin user is not able to add JavaScript into the website.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54710.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54710.json new file mode 100644 index 00000000000..752a528e4cf --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54710.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54710", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:06.953", + "lastModified": "2025-08-28T13:16:06.953", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in bPlugins Tiktok Feed allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Tiktok Feed: from n/a through 1.0.21." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/b-tiktok-feed/vulnerability/wordpress-tiktok-feed-plugin-1-0-21-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54714.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54714.json new file mode 100644 index 00000000000..27451dcae5f --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54714.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54714", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:07.623", + "lastModified": "2025-08-28T13:16:07.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Dylan James Zephyr Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zephyr Project Manager: from n/a through 3.3.201." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/zephyr-project-manager/vulnerability/wordpress-zephyr-project-manager-plugin-3-3-201-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54716.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54716.json new file mode 100644 index 00000000000..232eeed30c8 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54716.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54716", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:07.840", + "lastModified": "2025-08-28T13:16:07.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ireca allows PHP Local File Inclusion. This issue affects Ireca: from n/a through 1.8.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/ireca/vulnerability/wordpress-ireca-theme-1-8-5-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54720.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54720.json new file mode 100644 index 00000000000..bd61b932c70 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54720.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54720", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:08.050", + "lastModified": "2025-08-28T13:16:08.050", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SteelThemes Nest Addons allows SQL Injection. This issue affects Nest Addons: from n/a through 1.6.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/nest-addons/vulnerability/wordpress-nest-addons-plugin-1-6-3-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54724.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54724.json new file mode 100644 index 00000000000..4933681a0f0 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54724.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54724", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:08.260", + "lastModified": "2025-08-28T13:16:08.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo allows Reflected XSS. This issue affects Golo: from n/a through 1.7.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/golo/vulnerability/wordpress-golo-theme-1-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54725.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54725.json new file mode 100644 index 00000000000..9761d73a920 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54725.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54725", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:08.470", + "lastModified": "2025-08-28T13:16:08.470", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo allows Authentication Abuse. This issue affects Golo: from n/a through 1.7.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/golo/vulnerability/wordpress-golo-theme-1-7-0-broken-authentication-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54731.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54731.json new file mode 100644 index 00000000000..e63bd49b941 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54731.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54731", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:08.683", + "lastModified": "2025-08-28T13:16:08.683", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in emarket-design YouTube Showcase allows Object Injection. This issue affects YouTube Showcase: from n/a through 3.5.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/youtube-showcase/vulnerability/wordpress-youtube-showcase-plugin-3-5-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54733.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54733.json new file mode 100644 index 00000000000..d3e5b08bf9f --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54733.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54733", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:08.903", + "lastModified": "2025-08-28T13:16:08.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Miles All Bootstrap Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects All Bootstrap Blocks: from n/a through 1.3.28." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/all-bootstrap-blocks/vulnerability/wordpress-all-bootstrap-blocks-plugin-1-3-28-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54734.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54734.json new file mode 100644 index 00000000000..8f76637605a --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54734.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54734", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:09.107", + "lastModified": "2025-08-28T13:16:09.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in bPlugins B Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B Slider: from n/a through 1.1.30." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/b-slider/vulnerability/wordpress-b-slider-plugin-1-1-30-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54738.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54738.json new file mode 100644 index 00000000000..c4e5341387d --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54738.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54738", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:09.317", + "lastModified": "2025-08-28T13:16:09.317", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster allows Authentication Abuse. This issue affects Jobmonster: from n/a through 4.7.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/noo-jobmonster/vulnerability/wordpress-jobmonster-theme-4-7-9-broken-authentication-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54742.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54742.json new file mode 100644 index 00000000000..9d58d7bf702 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54742.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54742", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-28T13:16:09.530", + "lastModified": "2025-08-28T13:16:09.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object Injection. This issue affects WpEvently: from n/a through 4.4.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-4-4-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54762.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54762.json new file mode 100644 index 00000000000..9a3ebbe3642 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54762.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-54762", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:35.020", + "lastModified": "2025-08-28T09:15:35.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54819.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54819.json new file mode 100644 index 00000000000..badd312688c --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54819.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-54819", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:35.767", + "lastModified": "2025-08-28T09:15:35.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-551xx/CVE-2025-55175.json b/CVE-2025/CVE-2025-551xx/CVE-2025-55175.json new file mode 100644 index 00000000000..fdc41979653 --- /dev/null +++ b/CVE-2025/CVE-2025-551xx/CVE-2025-55175.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-55175", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-08-28T11:15:33.117", + "lastModified": "2025-08-28T11:15:33.117", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "QuickCMS is vulnerable to Reflected XSS via sLangEdit\u00a0parameter in admin's panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2025/08/CVE-2025-54540", + "source": "cvd@cert.pl" + }, + { + "url": "https://opensolution.org", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json index 60a6089f460..fed8055339d 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55619.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55619", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:32.727", - "lastModified": "2025-08-26T14:15:43.700", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-08-28T13:34:45.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,30 +51,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://cwe.mitre.org/data/definitions/321.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://cwe.mitre.org/data/definitions/329.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://developer.android.com/reference/kotlin/androidx/security/crypto/EncryptedSharedPreferences", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25173", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Not Applicable" + ] }, { "url": "https://www.notion.so/Reolink-Android-App-Uses-Hardcoded-AES-Key-and-IV-for-Sensitive-Data-Decryption-21a43700364280dc95bedcf6ac1a5db0", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://relieved-knuckle-264.notion.site/Reolink-Android-App-Uses-Hardcoded-AES-Key-and-IV-for-Sensitive-Data-Decryption-21a43700364280dc95bedcf6ac1a5db0", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json index 2f49f3cd262..229509bd85f 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55620.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55620", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:32.877", - "lastModified": "2025-08-22T18:15:36.243", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:31:24.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a crafted payload." + }, + { + "lang": "es", + "value": "Una vulnerabilidad de cross-site scripting (XSS) en la funci\u00f3n valuateJavascript() de Reolink v4.54.0.4.20250526 permite a los atacantes ejecutar scripts web o HTML arbitrarios a trav\u00e9s de un payload manipuladao." } ], "metrics": { @@ -47,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://relieved-knuckle-264.notion.site/Reolink-javascript-injection-qr-code-21a43700364280eaa76fd56a01b25410", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json index b719f4e4e09..97aa54ff849 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55621.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55621", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:33.023", - "lastModified": "2025-08-22T18:15:36.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:25:00.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL." + }, + { + "lang": "es", + "value": "Una vulnerabilidad de referencia directa a objetos inseguros (IDOR) en Reolink v4.54.0.4.20250526 permite a atacantes no autorizados acceder y descargar las fotos de perfil de otros usuarios a trav\u00e9s de una URL manipulada por ellos." } ], "metrics": { @@ -47,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://relieved-knuckle-264.notion.site/Reolink-Download-a-profile-due-to-IDOR-21a43700364280ef9fc1ffb9c484a03e?source=copy_link", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json index 8983f86746c..ad99ae7f7d8 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55622.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55622", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:33.187", - "lastModified": "2025-08-22T18:15:36.670", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:28:54.303", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings." + }, + { + "lang": "es", + "value": "Se descubri\u00f3 que Reolink v4.54.0.4.20250526 conten\u00eda una vulnerabilidad de secuestro de tareas debido a configuraciones de taskAffinity inadecuadas." } ], "metrics": { @@ -47,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://relieved-knuckle-264.notion.site/Reolink-Task-Hijacking-21a437003642808ba21fd79530a21e96", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json index 99bb6d6985a..ef724d71935 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55623.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55623", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:33.327", - "lastModified": "2025-08-22T18:15:36.883", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:24:29.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debug Bridge)." + }, + { + "lang": "es", + "value": "Un problema en el componente de pantalla de bloqueo de Reolink v4.54.0.4.20250526 permite a los atacantes eludir la autenticaci\u00f3n mediante el uso de un ADB (Android Debug Bridge)." } ], "metrics": { @@ -47,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://relieved-knuckle-264.notion.site/Reolink-App-lock-screen-Bypass-21a437003642804f869fde8535d18a3f?source=copy_link", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json index d1ff23e4e0f..351380457bf 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55624.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55624", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:34.107", - "lastModified": "2025-08-22T20:15:31.993", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:21:16.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components." + }, + { + "lang": "es", + "value": "Una vulnerabilidad de redirecci\u00f3n de intenciones en Reolink v4.54.0.4.20250526 permite a atacantes no autorizados acceder a funciones internas o acceder a componentes no p\u00fablicos." } ], "metrics": { @@ -47,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://relieved-knuckle-264.notion.site/Reolink-Intent-Redirection-21a43700364280cabb8bcce817ab1879?pvs=143", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json b/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json index 8b51c525fc8..ddc51182cc1 100644 --- a/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json +++ b/CVE-2025/CVE-2025-556xx/CVE-2025-55625.json @@ -2,13 +2,17 @@ "id": "CVE-2025-55625", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-22T17:15:34.250", - "lastModified": "2025-08-22T20:15:32.220", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:46:50.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL." + }, + { + "lang": "es", + "value": "Una vulnerabilidad de redirecci\u00f3n abierta en Reolink v4.54.0.4.20250526 permite a los atacantes redirigir a los usuarios a un sitio malicioso a trav\u00e9s de una URL manipulada." } ], "metrics": { @@ -47,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:*", + "matchCriteriaId": "70143B66-5C3A-4F6C-9CCE-C6048C950695" + } + ] + } + ] + } + ], "references": [ { "url": "https://cwe.mitre.org/data/definitions/601.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://relieved-knuckle-264.notion.site/Reolink-Deeplink-Redirect-21b437003642804a865af2fb02942f66", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-580xx/CVE-2025-58072.json b/CVE-2025/CVE-2025-580xx/CVE-2025-58072.json new file mode 100644 index 00000000000..dff04ed5bf5 --- /dev/null +++ b/CVE-2025/CVE-2025-580xx/CVE-2025-58072.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-58072", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:36.493", + "lastModified": "2025-08-28T09:15:36.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-580xx/CVE-2025-58081.json b/CVE-2025/CVE-2025-580xx/CVE-2025-58081.json new file mode 100644 index 00000000000..4604458994f --- /dev/null +++ b/CVE-2025/CVE-2025-580xx/CVE-2025-58081.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-58081", + "sourceIdentifier": "vultures@jpcert.or.jp", + "published": "2025-08-28T09:15:37.183", + "lastModified": "2025-08-28T09:15:37.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary files with root privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV30": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "vultures@jpcert.or.jp", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-259" + } + ] + } + ], + "references": [ + { + "url": "https://jvn.jp/en/jp/JVN99577552/", + "source": "vultures@jpcert.or.jp" + }, + { + "url": "https://www.dos-osaka.co.jp/news/2025/08/250827.html", + "source": "vultures@jpcert.or.jp" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-581xx/CVE-2025-58123.json b/CVE-2025/CVE-2025-581xx/CVE-2025-58123.json new file mode 100644 index 00000000000..589c3d94536 --- /dev/null +++ b/CVE-2025/CVE-2025-581xx/CVE-2025-58123.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58123", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-08-28T13:16:09.743", + "lastModified": "2025-08-28T13:16:09.743", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.checkmk.com/p/bgp-mon", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-581xx/CVE-2025-58124.json b/CVE-2025/CVE-2025-581xx/CVE-2025-58124.json new file mode 100644 index 00000000000..0e8e1ad42c9 --- /dev/null +++ b/CVE-2025/CVE-2025-581xx/CVE-2025-58124.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58124", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-08-28T13:16:09.977", + "lastModified": "2025-08-28T13:16:09.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.checkmk.com/p/check-mk-api", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-581xx/CVE-2025-58125.json b/CVE-2025/CVE-2025-581xx/CVE-2025-58125.json new file mode 100644 index 00000000000..7dd2cc87d9a --- /dev/null +++ b/CVE-2025/CVE-2025-581xx/CVE-2025-58125.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58125", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-08-28T13:16:10.133", + "lastModified": "2025-08-28T13:16:10.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.checkmk.com/p/freebox-v6", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-581xx/CVE-2025-58126.json b/CVE-2025/CVE-2025-581xx/CVE-2025-58126.json new file mode 100644 index 00000000000..a9357f578b4 --- /dev/null +++ b/CVE-2025/CVE-2025-581xx/CVE-2025-58126.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58126", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-08-28T13:16:10.330", + "lastModified": "2025-08-28T13:16:10.330", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.checkmk.com/p/vsan", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-581xx/CVE-2025-58127.json b/CVE-2025/CVE-2025-581xx/CVE-2025-58127.json new file mode 100644 index 00000000000..26759ae39f3 --- /dev/null +++ b/CVE-2025/CVE-2025-581xx/CVE-2025-58127.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-58127", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-08-28T13:16:10.520", + "lastModified": "2025-08-28T13:16:10.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://exchange.checkmk.com/p/powerscale", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json b/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json new file mode 100644 index 00000000000..81d1a0ef69d --- /dev/null +++ b/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58322", + "sourceIdentifier": "cve@navercorp.com", + "published": "2025-08-28T08:15:30.720", + "lastModified": "2025-08-28T08:15:30.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\\SYSTEM by executing arbitrary commands due to improper privilege checks." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "cve@navercorp.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://cve.naver.com/detail/cve-2025-58322.html", + "source": "cve@navercorp.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json index e940ce7f679..ab858f17874 100644 --- a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json +++ b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5914", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-09T20:15:26.123", - "lastModified": "2025-08-28T07:15:35.430", + "lastModified": "2025-08-28T09:15:38.000", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -166,6 +166,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:14644", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:14808", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:14810", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:14828", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8123.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8123.json index 77b2fcb64ed..b9a226f6e75 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8123.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8123.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8123", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-24T21:15:52.773", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T10:54:44.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLRFL", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317508", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317508", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619691", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLRFL", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8124.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8124.json index 076303ff645..35a00163985 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8124.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8124.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8124", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T00:15:25.123", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T10:52:10.783", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLRF0", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317509", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317509", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619692", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLRF0", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8126.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8126.json index 155c1023976..bd3b2a94528 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8126.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8126.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8126", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T03:15:33.473", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T10:50:00.247", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQUE", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317511", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317511", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619694", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQUE", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8127.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8127.json index 64a043545e2..75b69d07c64 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8127.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8127.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8127", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T04:16:15.423", - "lastModified": "2025-07-25T15:29:19.837", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:25:53.520", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,69 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQT8", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317512", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317512", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619695", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8161.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8161.json index 73037865cb6..9eedf1ff4d1 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8161.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8161.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8161", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T17:15:33.243", - "lastModified": "2025-07-29T14:14:55.157", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:25:16.450", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,69 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQQG", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317575", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317575", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619696", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8162.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8162.json index 401671fc814..d17af055569 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8162.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8162.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8162", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T17:15:33.490", - "lastModified": "2025-07-29T14:14:55.157", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:24:30.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,69 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQKV", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317576", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317576", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619697", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-81xx/CVE-2025-8163.json b/CVE-2025/CVE-2025-81xx/CVE-2025-8163.json index 9bce84a9989..4e0d86e19e8 100644 --- a/CVE-2025/CVE-2025-81xx/CVE-2025-8163.json +++ b/CVE-2025/CVE-2025-81xx/CVE-2025-8163.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8163", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-25T18:15:28.013", - "lastModified": "2025-07-29T14:14:55.157", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:23:53.083", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3", + "matchCriteriaId": "725933BF-EE60-4573-B897-D4DEC62417DB" + } + ] + } + ] } ], "references": [ { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQFL", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.317577", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317577", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.619729", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://gitee.com/deerwms/deer-wms-2/issues/ICLQFL", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-82xx/CVE-2025-8219.json b/CVE-2025/CVE-2025-82xx/CVE-2025-8219.json index 959b7ad4c20..c3bd28b1548 100644 --- a/CVE-2025/CVE-2025-82xx/CVE-2025-8219.json +++ b/CVE-2025/CVE-2025-82xx/CVE-2025-8219.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8219", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-27T03:15:27.320", - "lastModified": "2025-07-29T14:14:29.590", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:22:12.927", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,67 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:*:*:*:*:*:*:*:*", + "versionEndExcluding": "8.6.5.2", + "matchCriteriaId": "E4ED6E55-3872-413B-818C-2FE96EADFBDC" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.317807", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317807", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.616140", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.notion.so/SQL-Injection-Vulnerability-in-Lingdang-CRM-231ac9e8711e8017ab4ee3bb5f4aab0b?source=copy_link", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-83xx/CVE-2025-8345.json b/CVE-2025/CVE-2025-83xx/CVE-2025-8345.json index 5d588c8549b..14ec12bdfcc 100644 --- a/CVE-2025/CVE-2025-83xx/CVE-2025-8345.json +++ b/CVE-2025/CVE-2025-83xx/CVE-2025-8345.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8345", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-31T03:15:34.540", - "lastModified": "2025-07-31T18:42:37.870", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:19:48.873", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,74 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:*:*:*:*:*:*:*:*", + "versionEndExcluding": "8.6.5.2", + "matchCriteriaId": "E4ED6E55-3872-413B-818C-2FE96EADFBDC" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/jackyliu666/blob01/blob/main/README.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://vuldb.com/?ctiid.318295", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.318295", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.617844", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/jackyliu666/blob01/blob/main/README.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-85xx/CVE-2025-8525.json b/CVE-2025/CVE-2025-85xx/CVE-2025-8525.json index d3d396e2f1c..ac78cb8ff8b 100644 --- a/CVE-2025/CVE-2025-85xx/CVE-2025-8525.json +++ b/CVE-2025/CVE-2025-85xx/CVE-2025-8525.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8525", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-04T21:15:30.887", - "lastModified": "2025-08-05T16:15:30.937", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:17:49.460", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -122,36 +122,92 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:exrick:xboot:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3.4", + "matchCriteriaId": "7A28C8B3-FDE2-4C53-8C62-15C78ABBC031" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Exrick/xboot/issues/72", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/72#issue-3252465914", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.318651", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.318651", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.622172", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/Exrick/xboot/issues/72", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/72#issue-3252465914", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-85xx/CVE-2025-8526.json b/CVE-2025/CVE-2025-85xx/CVE-2025-8526.json index a543787cc7c..82cf7605d5a 100644 --- a/CVE-2025/CVE-2025-85xx/CVE-2025-8526.json +++ b/CVE-2025/CVE-2025-85xx/CVE-2025-8526.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8526", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-04T21:15:31.130", - "lastModified": "2025-08-05T16:15:31.063", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:15:36.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,36 +142,92 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:exrick:xboot:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3.4", + "matchCriteriaId": "7A28C8B3-FDE2-4C53-8C62-15C78ABBC031" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Exrick/xboot/issues/71", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/71#issue-3252446955", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.318652", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.318652", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.622173", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/Exrick/xboot/issues/71", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/71#issue-3252446955", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-85xx/CVE-2025-8527.json b/CVE-2025/CVE-2025-85xx/CVE-2025-8527.json index e3f02bb3ee4..7c2e4a33c0f 100644 --- a/CVE-2025/CVE-2025-85xx/CVE-2025-8527.json +++ b/CVE-2025/CVE-2025-85xx/CVE-2025-8527.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8527", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-04T22:15:29.110", - "lastModified": "2025-08-05T14:34:17.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T12:10:19.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,26 +140,64 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:exrick:xboot:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3.4", + "matchCriteriaId": "7A28C8B3-FDE2-4C53-8C62-15C78ABBC031" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Exrick/xboot/issues/70", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/70#issue-3252425972", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.318653", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.318653", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.622174", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-85xx/CVE-2025-8528.json b/CVE-2025/CVE-2025-85xx/CVE-2025-8528.json index d77124e8b3f..a33950de867 100644 --- a/CVE-2025/CVE-2025-85xx/CVE-2025-8528.json +++ b/CVE-2025/CVE-2025-85xx/CVE-2025-8528.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8528", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-04T22:15:29.323", - "lastModified": "2025-08-05T14:34:17.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T11:52:22.193", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -124,26 +144,64 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:exrick:xboot:*:*:*:*:*:*:*:*", + "versionEndIncluding": "3.3.4", + "matchCriteriaId": "7A28C8B3-FDE2-4C53-8C62-15C78ABBC031" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Exrick/xboot/issues/69", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/Exrick/xboot/issues/69#issue-3252177305", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.318654", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.318654", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.622175", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-89xx/CVE-2025-8908.json b/CVE-2025/CVE-2025-89xx/CVE-2025-8908.json index c30ab1ec095..22995d5596b 100644 --- a/CVE-2025/CVE-2025-89xx/CVE-2025-8908.json +++ b/CVE-2025/CVE-2025-89xx/CVE-2025-8908.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8908", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-13T13:15:35.170", - "lastModified": "2025-08-13T20:15:34.390", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:55:09.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,32 +142,81 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:*:*:*:*:*:*:*:*", + "versionEndIncluding": "8.6.5.4", + "matchCriteriaId": "5573AB3F-9F6D-46C6-8299-97AC078102BB" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/jackyliu666/blob2/blob/main/README.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/jackyliu666/event/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.319862", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.319862", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.626276", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/jackyliu666/event/", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-91xx/CVE-2025-9140.json b/CVE-2025/CVE-2025-91xx/CVE-2025-9140.json index d695420be26..537505ff25d 100644 --- a/CVE-2025/CVE-2025-91xx/CVE-2025-9140.json +++ b/CVE-2025/CVE-2025-91xx/CVE-2025-9140.json @@ -2,8 +2,8 @@ "id": "CVE-2025-9140", "sourceIdentifier": "cna@vuldb.com", "published": "2025-08-19T14:15:44.460", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-08-28T13:38:37.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,24 +142,67 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:51mis:lingdang_crm:*:*:*:*:*:*:*:*", + "versionEndExcluding": "8.6.5.4", + "matchCriteriaId": "84FC777B-77BB-4E01-AD0C-912541B36134" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.320520", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.320520", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.628087", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.notion.so/SQL2-2459bb66b0a5802ba8e9ca5bc775fc7d?source=copy_link", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-93xx/CVE-2025-9376.json b/CVE-2025/CVE-2025-93xx/CVE-2025-9376.json new file mode 100644 index 00000000000..db7ec494300 --- /dev/null +++ b/CVE-2025/CVE-2025-93xx/CVE-2025-9376.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-9376", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-08-28T12:15:39.280", + "lastModified": "2025-08-28T12:15:39.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability check on the 'stopbadbots_check_wordpress_logged_in_cookie' function in all versions up to, and including, 11.58. This makes it possible for unauthenticated attackers to bypass blocklists, rate limits, and other plugin functionality." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/stopbadbots/trunk/stopbadbots.php#L1958", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3350927/", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3351023/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d6b0d86-3cb4-4723-b677-141c604f00cc?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 8d958e63e4a..ad87a4560bb 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-08-28T08:00:11.853809+00:00 +2025-08-28T14:00:11.048254+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-08-28T07:15:36.187000+00:00 +2025-08-28T13:55:09.653000+00:00 ``` ### Last Data Feed Release @@ -33,25 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -307159 +307272 ``` ### CVEs added in the last Commit -Recently added CVEs: `5` +Recently added CVEs: `113` -- [CVE-2024-13807](CVE-2024/CVE-2024-138xx/CVE-2024-13807.json) (`2025-08-28T06:15:29.420`) -- [CVE-2025-6255](CVE-2025/CVE-2025-62xx/CVE-2025-6255.json) (`2025-08-28T07:15:35.947`) -- [CVE-2025-7955](CVE-2025/CVE-2025-79xx/CVE-2025-7955.json) (`2025-08-28T06:15:31.253`) -- [CVE-2025-7956](CVE-2025/CVE-2025-79xx/CVE-2025-7956.json) (`2025-08-28T06:15:31.493`) -- [CVE-2025-8073](CVE-2025/CVE-2025-80xx/CVE-2025-8073.json) (`2025-08-28T07:15:36.187`) +- [CVE-2025-54543](CVE-2025/CVE-2025-545xx/CVE-2025-54543.json) (`2025-08-28T11:15:32.700`) +- [CVE-2025-54544](CVE-2025/CVE-2025-545xx/CVE-2025-54544.json) (`2025-08-28T11:15:32.900`) +- [CVE-2025-54710](CVE-2025/CVE-2025-547xx/CVE-2025-54710.json) (`2025-08-28T13:16:06.953`) +- [CVE-2025-54714](CVE-2025/CVE-2025-547xx/CVE-2025-54714.json) (`2025-08-28T13:16:07.623`) +- [CVE-2025-54716](CVE-2025/CVE-2025-547xx/CVE-2025-54716.json) (`2025-08-28T13:16:07.840`) +- [CVE-2025-54720](CVE-2025/CVE-2025-547xx/CVE-2025-54720.json) (`2025-08-28T13:16:08.050`) +- [CVE-2025-54724](CVE-2025/CVE-2025-547xx/CVE-2025-54724.json) (`2025-08-28T13:16:08.260`) +- [CVE-2025-54725](CVE-2025/CVE-2025-547xx/CVE-2025-54725.json) (`2025-08-28T13:16:08.470`) +- [CVE-2025-54731](CVE-2025/CVE-2025-547xx/CVE-2025-54731.json) (`2025-08-28T13:16:08.683`) +- [CVE-2025-54733](CVE-2025/CVE-2025-547xx/CVE-2025-54733.json) (`2025-08-28T13:16:08.903`) +- [CVE-2025-54734](CVE-2025/CVE-2025-547xx/CVE-2025-54734.json) (`2025-08-28T13:16:09.107`) +- [CVE-2025-54738](CVE-2025/CVE-2025-547xx/CVE-2025-54738.json) (`2025-08-28T13:16:09.317`) +- [CVE-2025-54742](CVE-2025/CVE-2025-547xx/CVE-2025-54742.json) (`2025-08-28T13:16:09.530`) +- [CVE-2025-54762](CVE-2025/CVE-2025-547xx/CVE-2025-54762.json) (`2025-08-28T09:15:35.020`) +- [CVE-2025-54819](CVE-2025/CVE-2025-548xx/CVE-2025-54819.json) (`2025-08-28T09:15:35.767`) +- [CVE-2025-55175](CVE-2025/CVE-2025-551xx/CVE-2025-55175.json) (`2025-08-28T11:15:33.117`) +- [CVE-2025-58072](CVE-2025/CVE-2025-580xx/CVE-2025-58072.json) (`2025-08-28T09:15:36.493`) +- [CVE-2025-58081](CVE-2025/CVE-2025-580xx/CVE-2025-58081.json) (`2025-08-28T09:15:37.183`) +- [CVE-2025-58123](CVE-2025/CVE-2025-581xx/CVE-2025-58123.json) (`2025-08-28T13:16:09.743`) +- [CVE-2025-58124](CVE-2025/CVE-2025-581xx/CVE-2025-58124.json) (`2025-08-28T13:16:09.977`) +- [CVE-2025-58125](CVE-2025/CVE-2025-581xx/CVE-2025-58125.json) (`2025-08-28T13:16:10.133`) +- [CVE-2025-58126](CVE-2025/CVE-2025-581xx/CVE-2025-58126.json) (`2025-08-28T13:16:10.330`) +- [CVE-2025-58127](CVE-2025/CVE-2025-581xx/CVE-2025-58127.json) (`2025-08-28T13:16:10.520`) +- [CVE-2025-58322](CVE-2025/CVE-2025-583xx/CVE-2025-58322.json) (`2025-08-28T08:15:30.720`) +- [CVE-2025-9376](CVE-2025/CVE-2025-93xx/CVE-2025-9376.json) (`2025-08-28T12:15:39.280`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `34` -- [CVE-2025-5914](CVE-2025/CVE-2025-59xx/CVE-2025-5914.json) (`2025-08-28T07:15:35.430`) +- [CVE-2025-0463](CVE-2025/CVE-2025-04xx/CVE-2025-0463.json) (`2025-08-28T10:57:21.367`) +- [CVE-2025-40920](CVE-2025/CVE-2025-409xx/CVE-2025-40920.json) (`2025-08-28T12:15:38.967`) +- [CVE-2025-55619](CVE-2025/CVE-2025-556xx/CVE-2025-55619.json) (`2025-08-28T13:34:45.180`) +- [CVE-2025-55620](CVE-2025/CVE-2025-556xx/CVE-2025-55620.json) (`2025-08-28T13:31:24.653`) +- [CVE-2025-55621](CVE-2025/CVE-2025-556xx/CVE-2025-55621.json) (`2025-08-28T13:25:00.330`) +- [CVE-2025-55622](CVE-2025/CVE-2025-556xx/CVE-2025-55622.json) (`2025-08-28T13:28:54.303`) +- [CVE-2025-55623](CVE-2025/CVE-2025-556xx/CVE-2025-55623.json) (`2025-08-28T13:24:29.790`) +- [CVE-2025-55624](CVE-2025/CVE-2025-556xx/CVE-2025-55624.json) (`2025-08-28T13:21:16.277`) +- [CVE-2025-55625](CVE-2025/CVE-2025-556xx/CVE-2025-55625.json) (`2025-08-28T13:46:50.657`) +- [CVE-2025-5914](CVE-2025/CVE-2025-59xx/CVE-2025-5914.json) (`2025-08-28T09:15:38.000`) +- [CVE-2025-8123](CVE-2025/CVE-2025-81xx/CVE-2025-8123.json) (`2025-08-28T10:54:44.980`) +- [CVE-2025-8124](CVE-2025/CVE-2025-81xx/CVE-2025-8124.json) (`2025-08-28T10:52:10.783`) +- [CVE-2025-8126](CVE-2025/CVE-2025-81xx/CVE-2025-8126.json) (`2025-08-28T10:50:00.247`) +- [CVE-2025-8127](CVE-2025/CVE-2025-81xx/CVE-2025-8127.json) (`2025-08-28T12:25:53.520`) +- [CVE-2025-8161](CVE-2025/CVE-2025-81xx/CVE-2025-8161.json) (`2025-08-28T12:25:16.450`) +- [CVE-2025-8162](CVE-2025/CVE-2025-81xx/CVE-2025-8162.json) (`2025-08-28T12:24:30.657`) +- [CVE-2025-8163](CVE-2025/CVE-2025-81xx/CVE-2025-8163.json) (`2025-08-28T12:23:53.083`) +- [CVE-2025-8219](CVE-2025/CVE-2025-82xx/CVE-2025-8219.json) (`2025-08-28T12:22:12.927`) +- [CVE-2025-8345](CVE-2025/CVE-2025-83xx/CVE-2025-8345.json) (`2025-08-28T12:19:48.873`) +- [CVE-2025-8525](CVE-2025/CVE-2025-85xx/CVE-2025-8525.json) (`2025-08-28T12:17:49.460`) +- [CVE-2025-8526](CVE-2025/CVE-2025-85xx/CVE-2025-8526.json) (`2025-08-28T12:15:36.633`) +- [CVE-2025-8527](CVE-2025/CVE-2025-85xx/CVE-2025-8527.json) (`2025-08-28T12:10:19.310`) +- [CVE-2025-8528](CVE-2025/CVE-2025-85xx/CVE-2025-8528.json) (`2025-08-28T11:52:22.193`) +- [CVE-2025-8908](CVE-2025/CVE-2025-89xx/CVE-2025-8908.json) (`2025-08-28T13:55:09.653`) +- [CVE-2025-9140](CVE-2025/CVE-2025-91xx/CVE-2025-9140.json) (`2025-08-28T13:38:37.340`) ## Download and Usage diff --git a/_state.csv b/_state.csv index ecb2df3062d..e12b79f5530 100644 --- a/_state.csv +++ b/_state.csv @@ -240101,7 +240101,7 @@ CVE-2023-49566,0,0,e7562d146ac541757cdf07d900dab8b8eca104f5549de901377a9e1303c58 CVE-2023-49567,0,0,a841f691761772e618fe543a488215d0e3485f5740b523088ede6d381dc6a020,2024-10-22T16:39:16.370000 CVE-2023-49568,0,0,ac97689f0ee3fdbcc2dd33fe136cfca6f31010f7eecffece93c383b28fe472a0,2024-11-21T08:33:34.447000 CVE-2023-49569,0,0,6c6e37b06c255397b0b6ba93613bda98a26f6fadb0c9e852279f687080822d18,2024-11-21T08:33:34.583000 -CVE-2023-4957,0,0,ca889a9477285b07904ddd4eb86ae0d0f9a134a768a54c58b84e7d4c0bad85c1,2024-11-21T08:36:20.357000 +CVE-2023-4957,0,1,c417189ab204fe21315c0ddfc5b69e2266c07c40916381232e4b1d9da49cf837,2025-08-28T08:15:29.560000 CVE-2023-49570,0,0,ca1fd3c4a6664ff51e0f833771fbe4b305afce1cae6ae36eb7fba6255bca1b86,2024-10-22T16:26:47.317000 CVE-2023-49572,0,0,2c1cadca7621fb73b95e8192fd2a4b749ae827a3c968515c5a4c3dbfb15ed7ec,2025-05-21T12:16:12.143000 CVE-2023-49573,0,0,bc1284835243c3a40b2658f02b758f2543e87df33ffb3837476cc5640ea994a4,2025-03-04T17:07:50.210000 @@ -249062,7 +249062,7 @@ CVE-2024-1327,0,0,33c0adc6d164d2527ed98cdbc1917c4fbc66104aec7ae664b0eb02e15371b5 CVE-2024-13270,0,0,e19e36ca10735a99ac92d202515df7b8c68da9c8019a808c17ece126cf208086,2025-08-27T19:27:33.153000 CVE-2024-13271,0,0,5aa10e8ca12315c1e697f73404bb52026dd0ec71c3a8c14705d29745d30d82f2,2025-08-27T19:26:28.490000 CVE-2024-13272,0,0,a217494c253535d049a9440ffbbf9a2a53da96e559bb78cc8e76d8ff42385049,2025-08-27T19:23:46.117000 -CVE-2024-13273,0,0,3d789176ad67fbff32b39a088eba0c643d952760d0221233a5ede099c2704fd6,2025-01-09T21:15:25.913000 +CVE-2024-13273,0,1,cf13a6983882cb4236b57f269a6db094f204bbc70042c9bcb4b43a3dfc537f09,2025-08-28T13:03:20.610000 CVE-2024-13274,0,0,169ff41a6bb27e9a5c098e9fda5c5c7961a341ed7c9b6466bc6c3420249e1d29,2025-01-14T17:15:15.200000 CVE-2024-13275,0,0,68526722be7a52a757a3ff2309054735fc8e5d5fc288dba1afac5a547bfb43b3,2025-01-14T18:15:29.290000 CVE-2024-13276,0,0,f99a6c5d99b3671a462f8c3f04dbe0f625d6c84f42576b8a1482c46e470c52b0,2025-01-10T17:15:14.403000 @@ -249096,12 +249096,12 @@ CVE-2024-13300,0,0,40de5bcbdf3ed48478f15e532ecb3150bb1d94635babe4780a56c171835d1 CVE-2024-13301,0,0,4852fef3af76fba9cda513a22382a138500a4ab36b2401978bcf75a90962b6ff,2025-01-10T17:15:16.647000 CVE-2024-13302,0,0,c2e2f829e272ce3710b30cde276e1b51b430dd27cc63cc0d3e8565746bc825c3,2025-01-10T18:15:20.703000 CVE-2024-13303,0,0,45400694ac4670f48d80d8a7e39a4bc849293c35e8276e2742f48056b9fcfa36,2025-01-10T18:15:20.910000 -CVE-2024-13304,0,0,24b1a36018af16d753703a5b5b1bb932f9f36c2f21a7231aac95060bf05434cb,2025-01-10T18:15:21.263000 -CVE-2024-13305,0,0,3a4cf301307578a6e63a4f0538c798b9e10f6efb81525d14d4ca11f02d0c6cd6,2025-01-10T17:15:16.820000 +CVE-2024-13304,0,1,35ba9fbe57ed5985e532a725f6c08c18d79fcea82d993178f216f4cdf2784530,2025-08-28T11:34:37.383000 +CVE-2024-13305,0,1,47d5250b468286bd62e1c01a6f7dc9fc589f9828782787b0b330a9e1667350fe,2025-08-28T11:32:30.983000 CVE-2024-13306,0,0,554deca0e826c37bf51da8a899065d2d4f2ac8bf4df1dc6c67e59ba5f316519a,2025-05-14T20:34:35.770000 CVE-2024-13307,0,0,4cdddb6e54b0e00efe19b2308669bab914d019465d5766c3d3264377dd995516,2025-04-29T13:52:47.470000 -CVE-2024-13308,0,0,5a7c5de49dea6dce6146be04ca3299c64c19e3ab1de1461d50a35b802bb7ee20,2025-01-30T22:15:08.723000 -CVE-2024-13309,0,0,0b3b8b334a1de7768f2a2e87180e2cff3c33f0ede7bad89f9b0bac93a7d10749,2025-01-30T22:15:08.880000 +CVE-2024-13308,0,1,e28764d07c2f35606e2dd94355fbe1ddcbbcf424c133b714ba08bf60c70d8745,2025-08-28T11:28:52.290000 +CVE-2024-13309,0,1,bdf1036fc039691ce70d46e90217d38df0e2d2bd64f1463eccec2b2df7f89c98,2025-08-28T11:26:42.113000 CVE-2024-1331,0,0,9d173e21c9dc37e78754849b6df46eb1d20847c006b8fdd8b08b4a7feac03dde,2025-05-05T18:08:54.767000 CVE-2024-13310,0,0,c7d7f61ed943995654d2d7f670a6eebe7c0fd61f9032347d9fa323e6d73361eb,2025-01-31T16:15:33.080000 CVE-2024-13311,0,0,8f1f9a5d171f95a7ba0f9eaa7d2951798d439c8a220f4f2f7df62ba50bf29d83,2025-01-31T16:15:33.280000 @@ -249630,7 +249630,7 @@ CVE-2024-13803,0,0,4e24800ba40fc256cc0289d1f872baa86fef30a57808a0b8f614599093938 CVE-2024-13804,0,0,cbe6f9983ceb9bb355e7ac1cc12ef34c0668c82e27d3ad7f433cbf589c97824b,2025-04-01T20:26:30.593000 CVE-2024-13805,0,0,dfa293f301a1c3bc155a6588b9c1152820a63ab24f8e781edb64e055c68f35a7,2025-05-21T18:36:01.783000 CVE-2024-13806,0,0,2b103acb686ba11654b3e2c5ab41948ab81fbeb9ed340b778f561b48dfe3cc2f,2025-03-01T08:15:33.653000 -CVE-2024-13807,1,1,ff3990f1143c5418e65f8149f1f7f8f1ad06253405ea36dac2a1537516d585ba,2025-08-28T06:15:29.420000 +CVE-2024-13807,0,0,ff3990f1143c5418e65f8149f1f7f8f1ad06253405ea36dac2a1537516d585ba,2025-08-28T06:15:29.420000 CVE-2024-13808,0,0,d3c8ed82c822387373f132b08eb3931757549c859a8871599e719ab4d9d672f4,2025-05-06T16:25:27.303000 CVE-2024-13809,0,0,0560f3b13a50d69c775a261a59e91c9ab0b720365e711ebd048429107113c32d,2025-03-05T10:15:17.313000 CVE-2024-1381,0,0,029377302d4050442312d0ea5700149ec4187470e4ad3d8cfad55037f8e5ed9f,2025-04-01T13:39:45.360000 @@ -258211,7 +258211,7 @@ CVE-2024-30037,0,0,f2d401000dd9549b2f095203aa37be55cc4c90841f711ed62b7216ea20cd6 CVE-2024-30038,0,0,27a4c29b38257f8bcafe88f8509a9aba246c05aefab003cf829c6073e1b87d25,2025-01-16T19:13:10.340000 CVE-2024-30039,0,0,23191d33a478dc348eda8a40fbd2f83b18e6bb1f74a9ccca85dcf1a10f153484,2025-08-27T21:15:47.337000 CVE-2024-3004,0,0,9b9339c5574fdb448530abd458d521d40613c4f3e78deb133bde61869353e2a8,2025-03-03T16:24:25.377000 -CVE-2024-30040,0,0,fb31124ddf2b33fd8e2ef2c142d27a813be31f3ad578ac4b72d7211745b0544a,2025-08-27T21:15:47.620000 +CVE-2024-30040,0,1,26ba5e7a867f540a11fc6b3cd8817e9269dd7745404fa9158d350ef723df05e8,2025-08-28T12:55:50.997000 CVE-2024-30041,0,0,f9c10cbe19f35b717577bc6764f2546acc1215ed22680df6006f57d9c2099fde,2025-01-08T19:13:10.127000 CVE-2024-30042,0,0,9544f834a0b92a843308b4d5510959960649fdfd12e3981ba713ba27b676a4c4,2025-01-08T18:59:45.373000 CVE-2024-30043,0,0,4238deb754843aa8d72d31430a10f30c6667ebbbec7c44850b6d8f05dd2eceee,2025-01-08T18:56:55.587000 @@ -279332,6 +279332,7 @@ CVE-2024-58237,0,0,a9a659ff9a145d233927dcaf4bc7e2c23ac24146151446db6a26d6ef51791 CVE-2024-58238,0,0,7e67548b3c788765bf4e603c0191e99296b08f12809269db294325a467194edb,2025-08-11T18:32:48.867000 CVE-2024-58239,0,0,be9e32cf0e2341073db0887e7ba701d349513cbea2fda518d16261bad2fda14c,2025-08-22T18:08:51.663000 CVE-2024-5824,0,0,e1bcdf6d43e3da8ae6ba6ab7de5f8d3f3eaee723b9a1ed9af8e8dbb46b2110c6,2024-11-21T09:48:24.360000 +CVE-2024-58240,1,1,b64309acbdac4824d732dab5665b4b1d65f9a7790c60d8325df442c5ce91afd2,2025-08-28T10:15:31.780000 CVE-2024-58248,0,0,44d3bd7192675d499a169519ce32e74b191afadc084a35cb73d7fe83d11eebd1,2025-07-25T17:15:30.833000 CVE-2024-58249,0,0,46e082cbdc4436e2ec6bd62f3df3fb3fe143b90b067e29566efeb2e0b2706af9,2025-04-17T20:22:16.240000 CVE-2024-5825,0,0,682d9c8db78e32760516d35e8d80736a485272125d13ba44bf7f0b379940e54f,2024-06-11T10:15:13.960000 @@ -283667,9 +283668,9 @@ CVE-2025-0457,0,0,6c68c67055a4f977d01fcaec54af3a741663b7ba3a654f25dcda2d901b15c7 CVE-2025-0458,0,0,c37cb7ebdaaf3bc7705ef83d2e99ddb59483482b8cdc6d424d533c42aa8f234f,2025-01-14T16:15:34.397000 CVE-2025-0459,0,0,fddf6927614e2101a4cb2f0cf08fdaeea0d3ab4a216eb032ac8a00306a813af4,2025-01-14T16:15:34.617000 CVE-2025-0460,0,0,3a6d097bb871ecfd9124aced9860f65e500fbd78b57a5805e7de14c5e4fb38c1,2025-01-14T16:15:34.800000 -CVE-2025-0461,0,0,b946f726d45cf82124403108406f076a61d41b4e2c657b5a9bcc4c874f5ab8a6,2025-01-14T16:15:34.997000 -CVE-2025-0462,0,0,211b8d46397d55623e270e6c103a673373c619d0204ce45d2c12b1c21437e85f,2025-01-14T17:15:21.040000 -CVE-2025-0463,0,0,4ed981ea896dcf71a48c2c09e72737274c33bfdae5c13459ce01815003275e7f,2025-01-14T17:15:21.210000 +CVE-2025-0461,0,1,d1f993e2d3137c1d67276d8d70349730ed1a3c349b5761bb1a354c6cabaf6d08,2025-08-28T11:20:21.007000 +CVE-2025-0462,0,1,c1650f28c90a36e55c51a998c5faa8b354090048afc2c0afdccd4165b8c81049,2025-08-28T11:15:44.340000 +CVE-2025-0463,0,1,0ec58d4483bd734c5bafb908f74317abef8176675bdb770180c4c2f4a5b344af,2025-08-28T10:57:21.367000 CVE-2025-0464,0,0,d03e95d8868ae551ebfe743c91a29954286156e5fd7e3c6614a84c0d59d5891b,2025-02-11T14:59:43.043000 CVE-2025-0465,0,0,ac87b8092144ef2d8d1d41ea23b1ff95c3c32177ff08abf13300a7d5c9b19410,2025-01-14T18:15:29.883000 CVE-2025-0466,0,0,0d09b9c1999c7ddc319b1fdcffef6854bf3b6bcae8f17303991e9c7b3cbcaf47,2025-08-27T12:15:35.820000 @@ -296992,6 +296993,7 @@ CVE-2025-39492,0,0,635507b54ae7eb59f8f5f8b70d7992655601c78f086a4f1ff73bb9e2c41b0 CVE-2025-39493,0,0,545039d4771a67dd4187952a4dc4f19c2fa274a7007f04d5426f2bf8c6d0454a,2025-06-06T22:01:26.113000 CVE-2025-39494,0,0,17f21d8aff8eceb67919fc99c805408298f2506319db4548074f4e9ee7370a3f,2025-05-23T15:54:42.643000 CVE-2025-39495,0,0,777dab53f8cea7e4a2b42375d0685a3376acecaa8b2117a01a1d06aa0095d084,2025-05-23T15:54:42.643000 +CVE-2025-39496,1,1,46b3e97fae7eef4297f31f529aaee5c6cf944c37c8e1bb76cbe295f40baef41d,2025-08-28T12:15:37.480000 CVE-2025-39498,0,0,dfe300f3baad9b96791675af61946710b302c58702c4771e2b52bced0ed375b4,2025-05-28T15:01:30.720000 CVE-2025-39499,0,0,970e925794fb3c0c15e3c0b046d7250a5527b05606ae90a1dd14a5f8abe3ff0c,2025-07-03T12:15:24.660000 CVE-2025-39500,0,0,b29618f36bfc17c698faf0480a5f4d9787f9940c5b23d96490290706049a04d3,2025-05-23T15:54:42.643000 @@ -297391,7 +297393,7 @@ CVE-2025-40916,0,0,66aefa4fed294a0614e802acb8ff8293610cc505989806c6a280f9ca2ec65 CVE-2025-40918,0,0,45b2f27c1016a80389ad569917ea18de3ac87bbdc0475192c81bf03aea1e6995,2025-08-07T10:15:36.860000 CVE-2025-40919,0,0,25f2cbef1ca7cb91c60239c80e895457b84ef7a204ddea43b5152e502901956e,2025-07-16T21:15:27.623000 CVE-2025-4092,0,0,5c481b9edaa4dc01b6e2af0355fb37068b547aa3807c69c17d8381f725e9d766,2025-05-09T19:32:00.773000 -CVE-2025-40920,0,0,8bdef05031c1940e0664f0c268b64140cd47302458f543078636765eb0a3cf3f,2025-08-12T14:25:33.177000 +CVE-2025-40920,0,1,bf3fed4988d1366558fc851fe47e12064c19a047b7e70fe6268e3465c9467220,2025-08-28T12:15:38.967000 CVE-2025-40923,0,0,3c761d7ec7e6e3e07b8e1ef8e64ff09a7848da63924cc19b7630f165ec8cf7c3,2025-07-16T21:15:27.757000 CVE-2025-40924,0,0,3f6655dca3d026059eba08d65b937951086ad1b263181b14ad0cd73edc9ccd13,2025-07-17T21:15:50.197000 CVE-2025-4093,0,0,426d6945e92bfa0f6784cfac27262306e33a71ed38b9d14699e5d2c984a980bf,2025-05-09T19:31:46.917000 @@ -298861,6 +298863,7 @@ CVE-2025-46400,0,0,e3c22789dbc9f284062c57c156a12ee9e630de535328390ad2074b41a5e62 CVE-2025-46405,0,0,802aba8b260bfb58b83eb60464da6165e546d3f3586207c2f2c21ab57aaeb60c,2025-08-13T17:33:46.673000 CVE-2025-46406,0,0,2e4c3440f4ff2a03cd8b12f863fa35b3671fb3d2eb03c2e70792ec4c380d69a4,2025-07-10T13:17:30.017000 CVE-2025-46407,0,0,0ac4b2021a636280af3e7ea46d5ed184dcb5541e909b28cfe0a8b22d36df4f96,2025-08-25T20:24:45.327000 +CVE-2025-46409,1,1,764d341f9853807da11290a774b0440deea8178bc6fa785f9a6df786d67b5869,2025-08-28T09:15:31.733000 CVE-2025-4641,0,0,979d18a96ca002b56795411b6cefd7b8a3dae8c5b417e82cdf647677ad62735b,2025-05-16T14:43:26.160000 CVE-2025-46410,0,0,df174002e5748884b103693c6af95bbc1fa71897795b75bdf8945044c33de3ac,2025-07-29T16:29:27.250000 CVE-2025-46411,0,0,1b380fc97fd56b2e03c38de847155a34f20bb0e07df783dfcc26743adf04f3d1,2025-08-26T21:13:53.330000 @@ -300156,8 +300159,11 @@ CVE-2025-48080,0,0,3ac40a2ee2ffbe53ef86e322d55a6c979dec23087ec5d5ea5075b108588d8 CVE-2025-48081,0,0,20bc8c067d9eff4c223b2c146287fd9fde9e0781d7292edcaad418872d512af2,2025-08-27T05:15:32.267000 CVE-2025-4809,0,0,e3f6cc20f5a1533fd1b852392735aed9d9901924729604ad889c6054553c7632,2025-05-24T01:11:08.893000 CVE-2025-4810,0,0,270051aac468f4554d569120b6bb36c00d35de9491f4fec83a0d57158b5a4129,2025-05-24T01:12:25.480000 +CVE-2025-48100,1,1,76409d0ad0e4bb16273c4cb8f9c57e9f253ca0b663701f854b6f1459ce504ec3,2025-08-28T13:15:36.830000 CVE-2025-48108,0,0,b3ad8c2ba13c585a33d82a19484fb2433fa622d02fa900d1035f6ed77aacb8ac,2025-08-26T13:41:58.950000 +CVE-2025-48109,1,1,757083343029327fc0617550763c778f21ac5e84219c68876398db74bbc4acea,2025-08-28T13:15:37.073000 CVE-2025-4811,0,0,9eab4f494d5f43b25905ba1aef66dad40a6ed677e4ef5df5ebd840c9262f21a3,2025-06-04T16:08:27.713000 +CVE-2025-48110,1,1,1ae2eebc9a8c3f685a51ea6c302320958d31f3d388980138a3efe8e025d63d3c,2025-08-28T13:15:37.280000 CVE-2025-48111,0,0,19e86e7d28d4971e9df12b5ce6d4a717425df63d86cbf9ee73ba5c871e3d0ce1,2025-06-17T20:50:23.507000 CVE-2025-48112,0,0,976815afd2fb42028021011ea43bb142b13a0c9c3e80002f7b0d573f54fa6d7c,2025-05-19T13:35:50.497000 CVE-2025-48113,0,0,51710f8008eb009f623ba9ad7117267a6f6ef7e2a71905860ef82abbed94c16b,2025-05-19T13:35:50.497000 @@ -300324,8 +300330,30 @@ CVE-2025-48300,0,0,d2c6b3d25d1317ebeac8e66648e21e2c80dd3134817c1caef5b167fd2c273 CVE-2025-48301,0,0,0516a5d0c2267a0918dd3bac817b8ab86f360d3f70575621d83fb989b4908e50,2025-07-16T14:58:59.837000 CVE-2025-48302,0,0,ef94807a390aec8870505714ae48828a59b972f749f3b1ec0c77f98f0a453477,2025-08-20T14:39:07.860000 CVE-2025-48303,0,0,5b9d90d2536e28847dc891725bc576b3d47b19e2fc50caa5f61a9b7be7861672,2025-08-25T20:24:45.327000 +CVE-2025-48304,1,1,d4efff48d301004d77770c2bddcbb6af7f1e5d0bd96d8323283df2816f69f82b,2025-08-28T13:15:37.500000 +CVE-2025-48305,1,1,83c2f428da076f91f9ab1469e86661f1c10cbe195eee13e433713c036dd8a7d9,2025-08-28T13:15:37.723000 +CVE-2025-48306,1,1,642a50c1ffbcfd76fd19ede159c42044746465bcb00d344fd1ce8b2106658b68,2025-08-28T13:15:37.943000 +CVE-2025-48307,1,1,1fe448c151bd0466c1330fdedcd265d9afb35474629ebcd2dda62c88f23d9048,2025-08-28T13:15:38.157000 +CVE-2025-48308,1,1,d5f0bb2536e1a31ddb2ff82c4a3cd6626fced23dfee43c6e4b5ee429f61201ff,2025-08-28T13:15:38.373000 +CVE-2025-48309,1,1,33120c3ec1775733c4165a8bc821f9db837ba96123fe33fc4b2278e74a07a334,2025-08-28T13:15:38.583000 CVE-2025-4831,0,0,6c786983aaa82bd3ed151dc0d4cfc7298f0970933e2e93e5edeaae21e32c1589,2025-05-23T15:51:12.887000 +CVE-2025-48310,1,1,9cfdae2b0b569dd31b1ea911b2d1f4d0b01974523dd53900472acb6d39f78cfa,2025-08-28T13:15:39.653000 +CVE-2025-48311,1,1,86fa3514bb9447f5a3a60f716933cf7a7e3613919ec4cce2b1b5d53c667e89a1,2025-08-28T13:15:40.380000 +CVE-2025-48312,1,1,8aec23e39102cdd1ad67beed05ee6e6668f596b6b5c32bf8229f70d6917d0036,2025-08-28T13:15:40.900000 +CVE-2025-48313,1,1,ce1235238735c58ef337d7293bb6ad7ebe7747989e6f0e303b4b3fc144c8f711,2025-08-28T13:15:41.197000 +CVE-2025-48314,1,1,6be9f6a070914e5f1bebc4a9ef2c5a2c15074bc513329e3f9fcbfe4a796dd0ad,2025-08-28T13:15:41.413000 +CVE-2025-48315,1,1,ece65b3b814829d23e360f96da09145a9b8e78df7b3c96c68ea0a2024f272a45,2025-08-28T13:15:42.720000 +CVE-2025-48316,1,1,91a97425b27e800fd4c6a4aafb89143c0e536c4c9f2effda42e1c0997a04ebe7,2025-08-28T13:15:43.987000 +CVE-2025-48318,1,1,e23fb940d3e5318f8f2c438c98e3f4006fc178d44fb1a11620d6b4a2bc726357,2025-08-28T13:15:45.243000 +CVE-2025-48319,1,1,93b9a2f59cfb05f83a47700cb21fffc49e99e0717b8c234e39db9e1debc765eb,2025-08-28T13:15:46.517000 CVE-2025-4832,0,0,5d40eb0b072a9c981644738a05ce42d6d77248f4a38128aded9cccf62a96e302,2025-05-23T15:51:01.460000 +CVE-2025-48320,1,1,f4354f7f510e08fa14bccb37cf1e762e5e6aef2aac9b5d98c5d8f9c213b8679c,2025-08-28T13:15:47.800000 +CVE-2025-48321,1,1,932df79029e28f94c55698fe184ecc9b9c6d0a9dbc411f84b269cd36f15189f4,2025-08-28T13:15:49.027000 +CVE-2025-48322,1,1,2eadb3a84255f4508d510d72d5815782078de8530629bbf5e27e1aafd284e76d,2025-08-28T13:15:50.280000 +CVE-2025-48323,1,1,ecec32b5ad6e79fec152d66f395f02734a9b78c0ce1bdfcdcbcd263b1d74d04d,2025-08-28T13:15:51.543000 +CVE-2025-48324,1,1,90b90273b0d53fc5234eaa3989839450b28b0b3c0984be069fb0b563720f15e2,2025-08-28T13:15:52.833000 +CVE-2025-48325,1,1,d68792356321224242d318ddfb035ca57ca98c01e143d5defc1413846cf2790d,2025-08-28T13:15:53.157000 +CVE-2025-48327,1,1,276a368e190f615175e6c71b3c42c0f2603ccae4ee3702cb4a4a2b63e10052a6,2025-08-28T13:15:53.367000 CVE-2025-48328,0,0,17048bb7a62026f8a508465a37dd897b445dbfd7430f4937f92fd8ab7c1e379a,2025-06-06T14:06:58.193000 CVE-2025-48329,0,0,0cc07453c466449db0eb2f0279eb9cf0939be49d6e9012c00dd75c095e62d25f,2025-06-06T14:06:58.193000 CVE-2025-4833,0,0,524b74208b998ac185cb2f32a80e77b8ca0d39465baae0b1b3d7710a8e9aad50,2025-05-23T15:50:46.407000 @@ -300341,12 +300369,31 @@ CVE-2025-4834,0,0,9c2a9c83d18d527500130276f129f08da541559198002eb377c3cf8f2b02f9 CVE-2025-48340,0,0,58c293148545386ce8f1cd7a061fb39909214f7e42aa54bb702d5191ccbf264e,2025-05-21T20:25:16.407000 CVE-2025-48341,0,0,abae2c01288bc1c148fcc62c512d054501bd99667143f16dc4af421edaa06216,2025-05-21T20:25:33.823000 CVE-2025-48342,0,0,03d13c037526eb09db789d23836bacfda60e33f8a0697a0e6928d4aedd60def4,2025-05-21T20:25:33.823000 +CVE-2025-48343,1,1,57e24f1f7ba9a0ac6f3dc428284b9f91aaca74c801a45b08aec2cbdd94ba4d7a,2025-08-28T13:15:53.590000 CVE-2025-48344,0,0,ba9ec2cf1d4eadb80bfcbe5209456d9014a63bb9820d381804d6db8934bf8703,2025-05-21T20:25:33.823000 CVE-2025-48345,0,0,383386abf34d6393afa5e04a8aecdbda7cbfe9116ab407ff3c8a2a55413e0fee,2025-07-16T14:58:59.837000 CVE-2025-48346,0,0,df44a636fcb8a95eb1777f4620f7844fd80604e2a21bbe85a4714ec18fcfce27,2025-05-21T20:25:33.823000 +CVE-2025-48347,1,1,a6004f6d58af04dc57f79a6359f3268f1e75843230f970dafdbd62d3870d8d26,2025-08-28T13:15:53.783000 +CVE-2025-48348,1,1,39e6c9b4ddf9d8ad1af762c6844a616c1166744518aca2d5e1a5949a5c59d4a0,2025-08-28T13:15:53.993000 +CVE-2025-48349,1,1,99ae169b614c0d2587bc14ebdc40714b498cf68df1029efdc592955c463f1276,2025-08-28T13:15:54.317000 CVE-2025-4835,0,0,2f5ad6229d5b9b413e04a81b59106e5a85fb8d33f4f22cdfba9946f94435c0a6,2025-05-23T15:50:01.543000 +CVE-2025-48350,1,1,4784634aa350b0555a424c9d81c9281c1fef17948dfe04edd57199e5e547ca90,2025-08-28T13:15:54.540000 +CVE-2025-48351,1,1,e10d951955eda93fa50df7b7ad34df1013d5d77870e8ba13165c48356a3e2f8f,2025-08-28T13:15:54.733000 +CVE-2025-48352,1,1,43b72b259f61906742eb1bc89dfce1990dcbcee7de332c3ec5bcb8a7a84b06f0,2025-08-28T13:15:54.943000 +CVE-2025-48353,1,1,09dde78d99a2cab44abb82adefb8db1ef9db27b49c02ec8c5e86cfbb2ab52244,2025-08-28T13:15:55.157000 +CVE-2025-48354,1,1,32b93e7efcbb902db0277ee5bc90583547f5817bfeb4788897aec3d3e29d2cc5,2025-08-28T13:15:55.377000 CVE-2025-48355,0,0,6c8677a4c4702ecf49ebef33db36cafde3582cc97c82d60f33538da43818ac33,2025-08-22T18:09:17.710000 +CVE-2025-48356,1,1,5fa1dbe149cf7547deba85d8a865793840083257b2f8a77f990e2e3d2b1dcf6a,2025-08-28T13:15:55.593000 +CVE-2025-48357,1,1,b4c557534188f0e09f226061522833ec9b1a188c08d79aa90a739cd83936e039,2025-08-28T13:15:55.813000 +CVE-2025-48358,1,1,d12f6637ebf987d0a9084c79264970ff5344aa928bc256e5ef1f4b34b3b885b4,2025-08-28T13:15:56.030000 +CVE-2025-48359,1,1,3347021e0c2f0af3d34ed5c93477cad8cda7cbf7f4f566aff1c339533da758cc,2025-08-28T13:15:56.223000 CVE-2025-4836,0,0,381a21f4fc668a982c9ea0d6a5f4b8a8152eb0ca75926c09f17075729aa073a9,2025-05-28T13:54:46.070000 +CVE-2025-48360,1,1,a24ec365fd4050cce8ac89e6d95f9722aef4b933b08278356c61baf8489faa59,2025-08-28T13:15:56.430000 +CVE-2025-48361,1,1,65521ec3b10283cabe9f3e76ef7d6fd166ba171d2dfc64ee12b6e03405a85722,2025-08-28T13:15:56.650000 +CVE-2025-48362,1,1,e186c34d5438cac52ee663c26ed067489414eff2358e7522eb1786487420d9ee,2025-08-28T13:15:56.877000 +CVE-2025-48363,1,1,379c70851f376db657eb95b72c16f7bff0b7d5a6ca55a691cd62fdec84ec7cdd,2025-08-28T13:15:58.020000 +CVE-2025-48364,1,1,4f1914a7a38a93db0c52c0294532649d6ee8301444409b6d83bff87d254ebceb,2025-08-28T13:15:58.593000 +CVE-2025-48365,1,1,6bec53ab5b1857fbc112fbbe8e0018f525a98aa0e6451b0129bc5e8214e35d11,2025-08-28T13:15:58.803000 CVE-2025-48366,0,0,c4b55aab61c20a48c9f4f35cfff88c4f001aac74c3c0fe509ce92338a5a73cf2,2025-05-30T01:17:53.250000 CVE-2025-48367,0,0,44d310c64b4420e74e85374c67b36b95f0c9e84a38ace60584873a766584b647,2025-07-08T16:18:34.923000 CVE-2025-48368,0,0,7aa43beebddc67e05e855de1c853e16919a3051539d389fbfeaded768e9a7691,2025-05-30T01:17:44.430000 @@ -300660,6 +300707,7 @@ CVE-2025-4896,0,0,eb43857d84c4e3c0ca9bf4ac15086d7606c87aaeb17237d45e10278d343111 CVE-2025-48960,0,0,6388a249faff67cc5a4d2fa4bca8d3989a10ec11030dddacff72a168ec2922af,2025-06-04T14:54:33.783000 CVE-2025-48961,0,0,44e1cee69124b46bd6b795101bc0b7c9c4699ce00a138653c66e2e8aeff53be4,2025-06-04T14:54:33.783000 CVE-2025-48962,0,0,4b2d64282106eed58f9e4647aa4bdcfb03945a2468e53d084f7081033bf14af0,2025-06-04T14:54:33.783000 +CVE-2025-48963,1,1,f788799a42ae9cd0e3a806e73bbeff2410111678ee2d1a7c0844f14dd0fce747,2025-08-28T10:15:32.437000 CVE-2025-48964,0,0,41522971806825d16a616bc7791d5cfe9985e7f9557d437bf4d77778be6f7c12,2025-08-26T19:15:41.143000 CVE-2025-48965,0,0,0788695e55bfe76dc596c5fabe454b0fd57235bdeae8677982636318674ae620,2025-08-07T01:14:49.980000 CVE-2025-4897,0,0,104730cc5ad0680860a774881c7ad06896ad7afe2bb00c017480a43cf79011cd,2025-05-27T16:30:05.410000 @@ -300964,8 +301012,11 @@ CVE-2025-4937,0,0,b11676149af0c28f312982d79c8f35a9ba810703d80c77681d063c82de8ef1 CVE-2025-4938,0,0,9bfbb8aefdfbb754eacbb83a30a05c557a118de2c85e31be873a9e69bcb3eeca,2025-05-28T01:33:36.677000 CVE-2025-49381,0,0,84e2a6b91742476a96022004ff5a0ed354f2b37e707c1e4e5b1dabf386371df5,2025-08-20T14:39:07.860000 CVE-2025-49382,0,0,ba711fba3cf03833b256388968f1cd2292d8fb714919845dc6365d3d4838805f,2025-08-20T14:39:07.860000 +CVE-2025-49383,1,1,98eda6cb55d9054007cb3c19bb77bbd7cc5d56c2187f65628b7c8629abf3c4ea,2025-08-28T13:15:59.013000 CVE-2025-49384,0,0,d1df0d0e2d35eeedd3bba8a918c9da1b9aae1c28af38e48d390d1463711d28c8,2025-08-26T19:39:32.237000 CVE-2025-49385,0,0,f6d6ddb7091a891fc9ff4eee7659b0bf68f30a0869302b80d07aeb0c7f62867c,2025-08-26T19:39:54.587000 +CVE-2025-49387,1,1,462b9761164831a6278142269671a4cfeb4da621087710c39c134cd4a3b68629,2025-08-28T13:15:59.230000 +CVE-2025-49388,1,1,c4104fc2298f073a23917be5b5f4c127c7d07c1f3ed72ff191a5a6ef127edd84,2025-08-28T13:15:59.430000 CVE-2025-49389,0,0,9f710b5677a0ae67a499ee3b0106e4a61ce5acf494ff8e062647615579208c30,2025-08-20T14:39:07.860000 CVE-2025-4939,0,0,5ec31620a920403386badd8ed8c9ad70156a6e4853cf1462dcd01754dc60b7d3,2025-05-28T01:32:20.263000 CVE-2025-49391,0,0,dcc791dc8d47c9d5cc953698cb098dbcc5aa7c999e6d142461e80fc137575a09,2025-08-20T14:39:07.860000 @@ -300976,7 +301027,11 @@ CVE-2025-49397,0,0,dc1b16288c08a5f0a25b313517a6772a5dc2075549a7acc8273d400d04840 CVE-2025-49399,0,0,d6ae942c6bdda9eccf8b15e7cc4b142ec2a4b6d12f9ab880f0f085a8b6ca804a,2025-08-20T14:39:07.860000 CVE-2025-4940,0,0,260d8b62a32cfda7d1f9cdbe4bba3d30912c7644fed6c87e919fb1700ed93983,2025-06-12T16:24:13.067000 CVE-2025-49400,0,0,9503e1efe649a2e56eea8d37f20ddeb92238af689fb4c30f67553afccf154423,2025-08-20T14:39:07.860000 +CVE-2025-49402,1,1,f4a7b175f4f61ccb4d55a4ba61f22ec0b0bc1a6b4845d291a5d04acd5471421a,2025-08-28T13:15:59.623000 +CVE-2025-49404,1,1,6754cac63b713380075cc67a881e8dc6f780bde2c40b79dfa104afd7eaf5c130,2025-08-28T13:15:59.837000 +CVE-2025-49405,1,1,a7887ad5bbfff1c5cf94be02dbf0408eee35d3f38ce99371706ecb3c8b78e152,2025-08-28T13:16:00.063000 CVE-2025-49406,0,0,c7d1fed226423e9b45644d3fae486862ab529a2c5cc0b19f3094fc7b8d873663,2025-08-20T14:39:07.860000 +CVE-2025-49407,1,1,cae790223a25d564663dcaa156c7080112cfcd1c77c3cd48baca26bad6dfd496,2025-08-28T13:16:00.273000 CVE-2025-49408,0,0,00f125a9ffabb1223eedc3ee586fc4a6a14f8749cccc7ca7c4c963259c3be4e2,2025-08-20T14:39:07.860000 CVE-2025-49409,0,0,35faba816d148ce8005ec22be4a1bb55ee57d577bcdfccae30c37be2e4760dbc,2025-08-20T14:39:07.860000 CVE-2025-4941,0,0,7ee6643b2dca5855a4c8910cf9fb3433ecd0901f54d071fbb7ffd69250830b9c,2025-05-28T01:31:03.773000 @@ -302124,6 +302179,7 @@ CVE-2025-52455,0,0,48f58c86d3ed5e4b147ce6eabc70e7a18ecf1fd53ea578168d5cb2256e3f9 CVE-2025-52456,0,0,8fb9c939eb80fa9fd78ec0473cc1f5c6899475707c6d39b519c6540f6cc44d57,2025-08-25T20:24:45.327000 CVE-2025-52459,0,0,c100061eb14dc99ce78cccf9844559cd1d70a0991ca191ac52503592fc794609,2025-07-15T13:14:49.980000 CVE-2025-5246,0,0,58006bd67e3ca573529b2f3e87b16b1c40180151481747e10351ab9236833e82,2025-05-28T20:38:00.033000 +CVE-2025-52460,1,1,e20a9fffc3f1e148885a01a9892514ff5402e1e1516c5a5fde9cc40fc9ba12a1,2025-08-28T09:15:32.843000 CVE-2025-52461,0,0,8df2fb2e4b0f572c01123ba21de919a7d27749b72f16a46e5fcae599abfd2b0f,2025-08-26T21:05:03.687000 CVE-2025-52462,0,0,84552da220ad1e3fbf91338e288a3d915fdfabad82d7550f2922ec859fd74e6c,2025-07-03T15:13:53.147000 CVE-2025-52463,0,0,e80724361f13a08fc94669353bea8e7e4b25e886632719a20d818afdb1b171ec,2025-07-03T15:13:53.147000 @@ -302243,6 +302299,7 @@ CVE-2025-52732,0,0,64e3380632f06ca3035d563e577b62cbbf89935e2e4624568f8f3703f981c CVE-2025-52733,0,0,7b459b7ccea847e17c1de3d7bfd534831df085ed8c830c3122c8262c5439f0d8,2025-06-23T20:16:40.143000 CVE-2025-5275,0,0,5b77f3d7d547bfc5aca0dea72dfa50f5ec03b6706fb1b7fce785a83ffe687ef4,2025-07-08T11:32:22.210000 CVE-2025-5276,0,0,39d67915dab7ad2300f3ccd3a288fcee1075e32b914c45ad140eb6b7725be52b,2025-05-29T14:29:50.247000 +CVE-2025-52761,1,1,aaff2ee9a3929c38c109c9a6e05fd0f594efd5cc9b72c25e2b0924d66233a0a8,2025-08-28T13:16:00.483000 CVE-2025-52765,0,0,70d426fd8a0770d7edb0f36d6962cb3a0db49a22685dee04566831b5637ef197,2025-08-15T13:12:51.217000 CVE-2025-52767,0,0,7eb6861faa67269905b177c4251c7bec3bae86933db08db9dded5b81764a7864,2025-08-15T13:12:51.217000 CVE-2025-52769,0,0,987df366583b2d3ab228f163cfaee1dc68272ea315388e0a114d0b03b739f615,2025-08-15T13:12:51.217000 @@ -302590,15 +302647,28 @@ CVE-2025-53210,0,0,105ec1f588b31259e5af6ebf5e4879607e5a7e18b0772bd4fbebfdd08b2ef CVE-2025-53211,0,0,2abef6a3dfa316373b80998aadb9b980ebc2dc6ea27961810065342330691763,2025-06-30T18:38:48.477000 CVE-2025-53212,0,0,7d630b0913e6d5e598428f6335e6a271dd777eee1bbb325dc70c4841a3ba0a8c,2025-08-20T14:39:07.860000 CVE-2025-53213,0,0,07d1848f7042801f840a452e4e14d70c274be5c9e80192aa1a7bcd67cf26874b,2025-08-20T14:39:07.860000 +CVE-2025-53215,1,1,90c91ed218243087bca0392764570ea522de42eb806cb8900d501b91417bdff9,2025-08-28T13:16:00.703000 +CVE-2025-53216,1,1,734574be292318a79eb30b7347fa740adf8da393a91e3013b890698eb94de751,2025-08-28T13:16:00.913000 CVE-2025-53219,0,0,8f9deef421322f53e659f3d2b1216c25287f3c3a56a76014f1491433db359c99,2025-08-15T13:12:51.217000 CVE-2025-5322,0,0,6cd074297fc750e6ff1735a0dc3faa3256d1d6a3d1e92b9acf4df0a8db7d4c38,2025-07-10T15:15:29.830000 +CVE-2025-53220,1,1,9bc82affb32fe567ec790d55609d7da5270a20b2063cd587ec356d6bdd1372f9,2025-08-28T13:16:01.133000 CVE-2025-53221,0,0,69083483cb7232bb3f8bfa8966fcb892c8efa845c2b86971c53b65989f944856,2025-08-15T13:12:51.217000 +CVE-2025-53223,1,1,fed9a4ac5594ff2d552cf986def67a1c2b61486f2945f0a3c0ecf7b7c5c2f4f0,2025-08-28T13:16:01.343000 +CVE-2025-53224,1,1,5dfdc7d0b4ca23a173aac6d9806372ebdb97c59d3de88432794dbd9f13fc9fdf,2025-08-28T13:16:01.540000 +CVE-2025-53225,1,1,91e728071921b8dc1af596c392e7bb9aedfcddf946f65a886de9ba3649be2c9f,2025-08-28T13:16:01.757000 CVE-2025-53226,0,0,12bb3228288832f90ef14d9348058d4b6156f0e4223d916ce07572a7dc7180cb,2025-08-20T14:39:07.860000 +CVE-2025-53227,1,1,f2e361aeef7fb9ecf0e6fff03383c7a3ab31543bf1ea8153222b110e514bfe81,2025-08-28T13:16:01.997000 CVE-2025-5323,0,0,b0785ba87cd1215b18904af4ecc0dec4461f38599fcb91263ef5f63563e48a70,2025-05-30T16:31:03.107000 +CVE-2025-53230,1,1,0680010ec2a2f1da1b86e4e1473e937c845bfdcda98d36ab6a2284cf43ecd5fa,2025-08-28T13:16:02.203000 CVE-2025-5324,0,0,78e349d2bd14065297b1365314e2e0d4a2b731776a4275b89f97d27f39ee4fa3,2025-05-30T16:31:03.107000 CVE-2025-53241,0,0,4b488834e9f18b86b9ace08ad76550386594777f2816edbfa71fb7a54121538a,2025-08-15T13:12:51.217000 +CVE-2025-53243,1,1,a1214fc2cf0fcfe6c38214d51c74b76da98168f3667637dc757b85189b8b60c7,2025-08-28T13:16:02.410000 +CVE-2025-53244,1,1,9770176c4c121f29d79a0e4637d83bf00acbb785276142966a6531682a69140b,2025-08-28T13:16:02.690000 +CVE-2025-53247,1,1,21a30c326b48eea63ea70863571bccc552968e313aa7b5e423a8959369e8b8b7,2025-08-28T13:16:02.897000 +CVE-2025-53248,1,1,7b4ad4dc24e8217a89753c278c9d43a2ba5e07061b58092ac8f36c2e3bfc7e58,2025-08-28T13:16:03.093000 CVE-2025-53249,0,0,fb6b579a1ec24058e25feb53b005a1c6ba0fafd40fdf3bbe0da3f32b340c6714,2025-08-15T13:12:51.217000 CVE-2025-5325,0,0,c13176172452a62b2dce96df66b8263f391e2e94fbea914673cf01de62808a2d,2025-05-30T16:31:03.107000 +CVE-2025-53250,1,1,7ae64479302072074f88654881f453d1aff5f1d1ff83b9b1a40c8fb9adff74b9,2025-08-28T13:16:03.310000 CVE-2025-53251,0,0,7e0dd3971e6ab57ae03154d0a93c521c346a4308ea00c62947d936e365f2d97e,2025-08-22T18:09:17.710000 CVE-2025-53253,0,0,214e24e64f3a68a364c0361453a4da1d0055b4e89b2079e94acddb30e59f02c0,2025-06-30T18:38:48.477000 CVE-2025-53254,0,0,8d56ffe402bb76b24185845decdc59779e8802d356487d5334398779a07bb1d1,2025-06-30T18:38:48.477000 @@ -302637,6 +302707,7 @@ CVE-2025-53284,0,0,100dd3767b47205087efe33ee516e9edbe4b0739fb0bf493fecedb7889409 CVE-2025-53285,0,0,ab4cb47fec42ae9f07388efe188ac6b88e8d212fecf67904bc41c1810bcf566c,2025-06-30T18:38:48.477000 CVE-2025-53287,0,0,536b182f5b9c173a6da6f82fb2b465a7681c3af5a33541dfcc251fa6aea124ff,2025-06-30T18:38:48.477000 CVE-2025-53288,0,0,b53f28a243c621c536954162fb98cb20a7c2d578e12685cbb4612ffb48beae9a,2025-06-30T18:38:48.477000 +CVE-2025-53289,1,1,986fd5e397ea737f47c54589e60dfe2e8decb6d86bd4c8c226e91d87458f0bfc,2025-08-28T13:16:03.510000 CVE-2025-53290,0,0,9a13ec34af6072856f49bf38d3d2d46f2a70a4f214acd56f18e956e69feb0055,2025-06-30T18:38:48.477000 CVE-2025-53292,0,0,8d5e358bd6b620e25002af6deacba2c69dc22ca7be14b2b8a5ea51d304cf7507,2025-06-30T18:38:48.477000 CVE-2025-53293,0,0,78c2b2206e0582670344322edb51a5619563fd920fa85c6c54e741d3571f3c13,2025-06-30T18:38:48.477000 @@ -302669,13 +302740,17 @@ CVE-2025-53321,0,0,1a958bbb0309b2cd6e35c5e45afcc79ef758c432a5330d382910ccfc287fc CVE-2025-53322,0,0,3af89947669bdce2e880d598d6a9d06679b35f7054696bfee5e6014d0c1f6084,2025-06-30T18:38:48.477000 CVE-2025-53323,0,0,c4bb0bce8eaeeae0db595028fd06fce5fb3a56400cef98de937a1c28dbf5b0b6,2025-06-30T18:38:48.477000 CVE-2025-53325,0,0,8e3e8e26e4dbd5c8412e01ff791fe5a4fb9f0769d9c65e9c6d332a118a91ffa1,2025-06-30T18:38:48.477000 +CVE-2025-53326,1,1,19f580c5f1f3e56a34868d2521162a1edd38a97b2297674b409c15902734f2f7,2025-08-28T13:16:03.720000 CVE-2025-53327,0,0,71efca1e67fedd0f62622f35091acee6852d8d1a47c1510c3872a11834b47c9f,2025-06-30T18:38:48.477000 +CVE-2025-53328,1,1,4567c11ced1dfc463878a436089f8dab262c185ff52ef04e55b0611d591b8b70,2025-08-28T13:16:03.907000 CVE-2025-53329,0,0,7e2bcfdc4e5def99b30f12a3cca8edf3792d6624620d8d3d11051961618387f9,2025-06-30T18:38:23.493000 CVE-2025-5333,0,0,095a3623e81e5c0641246167cbdc73b4561ed3fbe96aaceaf8832f026397e6f1,2025-07-08T16:18:34.923000 CVE-2025-53330,0,0,2c5620b05a63cdc5440287f468511ac67dd4b1c6d8e26b37885b8bdccd07a883,2025-08-15T13:12:51.217000 CVE-2025-53331,0,0,3c6f4df5d64c5323acf0dc09f4c211199c054593ee6f61a47e7d530f381128f8,2025-06-30T18:38:23.493000 CVE-2025-53332,0,0,1d1495d052af56b7272e2c60ea8f8145bc99cb12abd86dc191a9a1b907a375ef,2025-06-30T18:38:23.493000 +CVE-2025-53334,1,1,ac607a7a312dac1914b98c8511cf8c0fa2a7a411426db02ec331262a6a82b999,2025-08-28T13:16:04.120000 CVE-2025-53336,0,0,ac84b14ec4ae1ec81f40af29b24196ef5a7cc4c376492c3cd8f1877425976982,2025-06-30T18:38:23.493000 +CVE-2025-53337,1,1,1ba87c0b7a5de8a24e656cbe855b60948475cd831cc57fffd794712a3c08c1f9,2025-08-28T13:16:04.340000 CVE-2025-53338,0,0,69ee0c5b640fcd72e43f5a3a6d7505b4ccd5499b6d733162f15f39655cb80ead,2025-06-30T18:38:23.493000 CVE-2025-53339,0,0,955bc6b5359aed429b44d347615d0e1318a1b809ec1e3579e3ed2353be810e81,2025-06-30T18:38:23.493000 CVE-2025-5334,0,0,fb14475e980fb397de4901b9efdcaa30993615e4c74780c0502ee0c491e8e5cb,2025-07-02T17:31:56.563000 @@ -302722,6 +302797,7 @@ CVE-2025-53392,0,0,bccadda7d7ed5e7d96eda919617ca61a93ea88413285b2a192f6a5d2885b8 CVE-2025-53393,0,0,7b64755a7e1248a68992b6b63c4b482ad2eb522925d6670add06e1eb0c5e94da,2025-06-30T18:38:23.493000 CVE-2025-53394,0,0,4c42d2475c9cd40ca9ce61145706bfcbb487cf916300babc218695c47d45c0af,2025-08-05T15:15:30.990000 CVE-2025-53395,0,0,a57f081f7720744ba0da35eced4f1909605db4b3a94ca3c200e0660e90c75c2c,2025-08-05T15:15:31.150000 +CVE-2025-53396,1,1,b5c81ac3124bf9e14306709ea26aeeb0acb43bbed8e381cbf26292e1f25f45d4,2025-08-28T09:15:33.627000 CVE-2025-53397,0,0,3f7d390786e01e5946b969a092860936e33842a4cf85966c22d46c0ea3257413,2025-08-01T19:19:25.320000 CVE-2025-53399,0,0,be434cf3d64ec01947042156021097e760ec25ae5c78c467789190b3d8181414,2025-08-04T15:06:15.833000 CVE-2025-5340,0,0,9b48da383be5dfbe2bc488480a2be183877451ec75241964210e2e3aad9a2ceb,2025-06-04T14:54:33.783000 @@ -302821,13 +302897,20 @@ CVE-2025-53567,0,0,2d52aec26cae250987d596e3c27a788219e2f67de57d9dfe84284f98176a3 CVE-2025-53568,0,0,ec672fa14438849d4042331d8f520ecf08d3b5cc6d344f82d58d26ad189f71b5,2025-07-08T16:18:53.607000 CVE-2025-53569,0,0,cdd0c7bd045f505f8a550a7ea0de012d1c57dbed78b7fa2473645446d7d9daf8,2025-07-08T16:18:53.607000 CVE-2025-5357,0,0,907468d4a23bb292098ec30159d44f17f5a58704c8b53f5a961af7ce379d277f,2025-06-16T16:26:46.080000 +CVE-2025-53572,1,1,dafdbd178becb1da23b24194c690078f1536d6618264ad77c9a6782eb8cb41f1,2025-08-28T13:16:04.550000 CVE-2025-53575,0,0,0afb28da46a431fa307ba84f45043d8751862e9b2a87bea42ff6ad918a1db8eb,2025-08-15T13:12:51.217000 +CVE-2025-53576,1,1,b6419eb81738b557a0878f5eb39501983636cb96466e0b409b8f4a53393d82a3,2025-08-28T13:16:04.770000 CVE-2025-53577,0,0,cf8bbf8681cbf05a80d56ef471ae5be5234163dfe62594671b3f30381d33de23,2025-08-20T14:39:07.860000 +CVE-2025-53578,1,1,ab8bfe27c4029c89a627f9eb3f2d58932b877130a37e97b2f78aec97000c46e0,2025-08-28T13:16:04.990000 +CVE-2025-53579,1,1,c7668f966d216266153d82982ab9443c736e43d40f9ea0e6291d2c9e08d881e1,2025-08-28T13:16:05.203000 CVE-2025-5358,0,0,8d1b1a598434ecad4f0ae411fcaa51446d90f020f8729fd93cc9901ead4d16c2,2025-06-10T15:14:21.980000 CVE-2025-53580,0,0,1d2bb696c0960545a84515a2e3151fdbe05da299e020f10913d35caa84884b23,2025-08-20T14:39:07.860000 CVE-2025-53581,0,0,77d8931cc51e20a97b7994ceb8d49d5ac65aa6b8b330913653680a44d2952f0e,2025-08-15T13:12:51.217000 CVE-2025-53582,0,0,06453f0a1662a498038522138e84c569d25df319eb5da700f3303111ae98061d,2025-08-15T13:12:51.217000 +CVE-2025-53583,1,1,b57d35626ee0db28aec1aed203855ddbeb1194143f36c3fcdb54338a512b8aa3,2025-08-28T13:16:05.413000 +CVE-2025-53584,1,1,0b31a705fd62ea18b01df357d1ece9d0fe43281ac41a84f0800aacf24df32fb1,2025-08-28T13:16:05.600000 CVE-2025-53587,0,0,ff0a92b3d189e2f9758dad1160962251d39ec4b13a3e4d6d6ea642f3c19d4a71,2025-08-15T13:12:51.217000 +CVE-2025-53588,1,1,c2998e7999c5a0f68c1df3daffab98feae3210113f506f0907697265e0267c2e,2025-08-28T13:16:05.817000 CVE-2025-5359,0,0,fbaee83932976cabc2c375b7182ecd49a378426f554e3965400f3dd72ff93c16,2025-06-10T15:14:30.460000 CVE-2025-53599,0,0,e5245099382a4c248953baaee2eb51fbb56bc335d20eb343eacb3b8e7ba773bd,2025-07-08T18:15:42.157000 CVE-2025-5360,0,0,f6f6f0a68bcc88f729faa5e7b6e62c265dbe0f87de895580450e0ebfdb395bd6,2025-06-03T15:35:19.237000 @@ -303116,6 +303199,7 @@ CVE-2025-53958,0,0,848a4d88d49efe3b72844c66e726cb2a8cae2322f68355a3ac0990379bf03 CVE-2025-53959,0,0,5469ae18304b4f5e5795ff60a1f228ff6bc30fcfd5e4929c09cc0c08d80f3c58,2025-07-15T20:07:28.023000 CVE-2025-5396,0,0,7a43f31dceac2ea398188984109c158b0906a292e11df62cd3b55e539804b20a,2025-07-17T21:15:50.197000 CVE-2025-53964,0,0,133489af39539ad61ce6a0026d0821548e75ea1c45c3d02476a1be01a14e7f5e,2025-07-17T21:15:50.197000 +CVE-2025-53970,1,1,de32e5df061e97f93ed405783d39fda30735563efcc7b730c242717bc7d1c7cd,2025-08-28T09:15:34.390000 CVE-2025-53971,0,0,fa3ccd6c9e88e9d36918bcd397546e14bd2e5da8e4803e45090e7dc7a00ebe7b,2025-08-22T18:09:17.710000 CVE-2025-5398,0,0,9195ace01e6f17d48b49ceba2edc541c15cd0bed70f8762954e659ebb09afae7,2025-07-07T15:31:31.283000 CVE-2025-53982,0,0,67c0302b2d707474ead113b99ceb36e00220859dcb5a2a0d7d2ffe637e6d4f71,2025-07-16T14:58:59.837000 @@ -303162,6 +303246,7 @@ CVE-2025-54025,0,0,784ac7bc3295c1c17ae10ea5b123b39cc5ad5baad3a85ff4a24ec4c9c3808 CVE-2025-54026,0,0,957d00de626936f1c93ab9407798503a211d5dbe42b04ca2ad0977c9ce5804c9,2025-07-16T14:58:59.837000 CVE-2025-54027,0,0,a108eb730d514fc5021b458b668817ca5f0a247e2d53267fd531dbfa5a4b89f3,2025-08-20T14:39:07.860000 CVE-2025-54028,0,0,3ebaddb182502c46390e9cbc40a762c945936e28f7e6fa3cd70c1be25db32264,2025-08-20T14:39:07.860000 +CVE-2025-54029,1,1,baa5d9c750f2e716bd78d04d09bd15e9d6e8fa88dbf1d7d977e2fd22349bdc72,2025-08-28T13:16:06.043000 CVE-2025-5403,0,0,b7784092ecc6f3a87e42e7b0240fbaed09cb8cf0459833dc28f094c26d89e82c,2025-06-02T17:32:17.397000 CVE-2025-54030,0,0,32d82ddff97589076583a387b1d02056619b6938f9d44748b0d44f3cd78f22b6,2025-07-16T14:58:59.837000 CVE-2025-54031,0,0,8fbb063350858fb4b084cd0bf0422910582c5e7b158016e7a15b5cae959fd580,2025-08-20T14:39:07.860000 @@ -303474,6 +303559,11 @@ CVE-2025-54535,0,0,82d151b1fa0fbb644e1a7e6498d8e119ed0e2e57925ef560b1be7408e4d70 CVE-2025-54536,0,0,82106a8385cc43b0ab1358c01b5a663a1eb263761ad405628ad8ab44958be542,2025-07-31T19:23:45.927000 CVE-2025-54537,0,0,20e741bbf378034e9c34d5f178fcd4a527d3ec78972ec45e88d9bd2011b1c7c2,2025-07-29T16:13:14.477000 CVE-2025-54538,0,0,98cc55231038df670f5d1955345a59e4e20ae498be3bf3b4500439f04c7f6050,2025-07-29T16:13:19.390000 +CVE-2025-54540,1,1,cdd6990821e223efb4b4da37517ab4b7a4d11e229fa2625978d834fdf71b2c8d,2025-08-28T11:15:30.070000 +CVE-2025-54541,1,1,12479d14bc21cd1808798b066632a2d6a6e8164bc7faa012adb9c1f956e8cc99,2025-08-28T11:15:32.297000 +CVE-2025-54542,1,1,3619b57a942372580c3140ad9a30678e2cbdb25fe961c396b14a7c60f627b9cb,2025-08-28T11:15:32.510000 +CVE-2025-54543,1,1,c543a83b4bbf655cdd544504d15afc1fce556d4f8922eafd47a82ef7ddd2dd34,2025-08-28T11:15:32.700000 +CVE-2025-54544,1,1,a7cbecd86a12783deab1b6ede5441c2207c44075d5aa514c2147256de9ded6c3,2025-08-28T11:15:32.900000 CVE-2025-5455,0,0,c1321d8b95e99a1a6b4bd58591f4d8f5ad84a8f09a18d929f7bc30e94a33953f,2025-06-02T17:32:17.397000 CVE-2025-54551,0,0,512190dd8dd8cb868219eb7012e7fbff8907627061060d0460d41a68da9d00ea,2025-08-20T14:39:07.860000 CVE-2025-54554,0,0,3c97b6692542fac0cab1bb23032f041f75646ad7dae5625470c03daf51f9ddfb,2025-08-05T14:34:17.327000 @@ -303609,23 +303699,34 @@ CVE-2025-54705,0,0,96eec6a8cc3d689f3228333cec93d56b119eeeadeec6cf402f6ef8dbf54c5 CVE-2025-54706,0,0,97b6fe986253b92b070ff75eb2d60edd7d8b372f7896e1b948e61e592749e58d,2025-08-14T13:11:53.633000 CVE-2025-54707,0,0,0b691f260544cfc823c3ac94eed415a9167cc03e36262c2b4e4d6154a53a8bf3,2025-08-14T13:11:53.633000 CVE-2025-54708,0,0,208bb3e8eeb7ee1012ae8b2c5c19f62c73693a8e114769417a656c426a750b2c,2025-08-15T13:12:51.217000 +CVE-2025-54710,1,1,1845c07e6d5c4b94a6e6a702486c05ff5948a35b9a71c08bd5207c52fd220613,2025-08-28T13:16:06.953000 CVE-2025-54712,0,0,e73403de88dd935b3de937d00c10c248e36ed7ec4f3b9c55053fed9280da2fe5,2025-08-15T13:12:51.217000 CVE-2025-54713,0,0,592caa3ecfa150087dd8ded37ea0425aebda1165337e2a6a22b40b1771e3ec36,2025-08-20T14:39:07.860000 +CVE-2025-54714,1,1,618467041dadea90c0bb994cbea16896a1310bad88d16434e65e5810380efbd2,2025-08-28T13:16:07.623000 CVE-2025-54715,0,0,a72da9de0c0154a4412cf73a59ac1e79081034cce408f871fad8324e20e341e1,2025-08-15T13:12:51.217000 +CVE-2025-54716,1,1,f9829a598ec8443159b8ee2c072b3c34880fef0022690785788088042b7d0279,2025-08-28T13:16:07.840000 CVE-2025-54717,0,0,cc885897a5fcc1cfd503b28efe600ed176c89e552ebd079be425d5c6574c0f45,2025-08-15T13:12:51.217000 CVE-2025-5472,0,0,c39055ebd5fae443bf4b609e0014fd18a2e9cd9efe8880b7c304eba6a432be09,2025-07-30T20:03:35.977000 +CVE-2025-54720,1,1,432c91213ca5eef53e34e83bc55af790d4e03a264f4fc337a543dfe8222b6383,2025-08-28T13:16:08.050000 +CVE-2025-54724,1,1,ab7ec6e015f31b3db8c9dce26058fa21a5a706358f7afae3f747e4e8de3b197b,2025-08-28T13:16:08.260000 +CVE-2025-54725,1,1,e9495af17e21c50ecc952154f63d31b875b18579af7d64a68e8e4b5f903b7754,2025-08-28T13:16:08.470000 CVE-2025-54726,0,0,3cc2c01ff64ae964af8c5263019254e4af1c9bb9c401b6bdec7c0bccaf4d209e,2025-08-20T14:39:07.860000 CVE-2025-54727,0,0,8895f1f04c9ca87f717a605745040295fc18c259fa68d88b6aca6d7007199a37,2025-08-15T13:12:51.217000 CVE-2025-54728,0,0,cfa99351ab2e28050bbdcfee6b4e38cf554ccba266e132727e0743953b3c7322,2025-08-15T13:12:51.217000 CVE-2025-54729,0,0,d4efda8ebe805942699b04198614e3fe2f4d8aec1985c1547a894d2e2080e260,2025-08-15T13:12:51.217000 CVE-2025-5473,0,0,7cdfa0a3a4ee84c7c9b0e530484cb2042339c6a0c538f4a18fcb7511d663c8f0,2025-08-18T16:00:12.040000 CVE-2025-54730,0,0,1021f4dcc3f7ad156ac69d80d8707f48aad63c08f0b73299a6dec3dbed0a945c,2025-08-15T13:12:51.217000 +CVE-2025-54731,1,1,ab930c95c43f360f1743a89f6ba93c9074063338b9b6c4ffc17e2c143d272361,2025-08-28T13:16:08.683000 CVE-2025-54732,0,0,20aee544ec4ff538df8f8e18c74464630350043fe701ac9dc73b487abc070880,2025-08-15T13:12:51.217000 +CVE-2025-54733,1,1,107d550736fca19784594958572616d67637b2b799b1e3f58f49b92ab588211d,2025-08-28T13:16:08.903000 +CVE-2025-54734,1,1,3b098b46c97daeaa40496b36adeb554df574fdb973c645097d4000511582f6a8,2025-08-28T13:16:09.107000 CVE-2025-54735,0,0,49bb4cf76407ba9c658e2356c471977f8057494da172c52ea731950d31ca4d2b,2025-08-20T14:39:07.860000 CVE-2025-54736,0,0,c7bd820b02e31cc62eba55c0bec2f9d3fde7db80cc36031c9ee6cc092481958a,2025-08-15T13:12:51.217000 +CVE-2025-54738,1,1,6d4a61a0327c997e51d6f17d4e891125cf54a5a697677d026e2f90fd370cede3,2025-08-28T13:16:09.317000 CVE-2025-54739,0,0,e6498bcce4ae8f8308ffce2974291ab383a75a6fcc9e6bf6cd8f4d98503d7acd,2025-08-15T13:12:51.217000 CVE-2025-5474,0,0,9881f2784286ea995078649507a493c56d06fa4b1251e02a33e0c2bb4b492ffd,2025-08-18T15:59:55.057000 CVE-2025-54740,0,0,d966c067f0206c4387c2fa76d143b492121ff4e4daad643270ab541943e8b22c,2025-08-15T13:12:51.217000 +CVE-2025-54742,1,1,cc5f9e96f72eed8b1122da97eb26ed0d591b5ac6ef03fa873fb9746ae81a224e,2025-08-28T13:16:09.530000 CVE-2025-54746,0,0,f98728ff6f6d7855abe264bd71cdaea7e8c8f6fbc52552c552362aa6e06c8199,2025-08-15T13:12:51.217000 CVE-2025-54747,0,0,04dbf91e2448074cb0576b3b8c24f1aed330e96f112e6f5afac897bebbca8309,2025-08-15T13:12:51.217000 CVE-2025-54749,0,0,7ed156a8898662214e5a404acd8952d69dd4ffefd4b8f623d0711d7ad00801a8,2025-08-15T13:12:51.217000 @@ -303635,6 +303736,7 @@ CVE-2025-54752,0,0,9914e3b7bbef908710fb6aece3ca1eadd568dd8eefbcf9193d2ef1d95114b CVE-2025-54757,0,0,cf89f5668786415b57af39eeacfe12fb095e82a6282b09acd06dc90602627d45,2025-08-06T16:41:45.987000 CVE-2025-54759,0,0,f75b9f44a351a31195477ec1610e50042e1228b519eb9697d20402967e8d7d33,2025-08-19T13:42:47.510000 CVE-2025-5476,0,0,a5595525d6f434e5db7ef172355c8c452a60b9d92336ea56dd245c1a6f979cbd,2025-07-08T14:30:24.420000 +CVE-2025-54762,1,1,f83db46ca2a01703c032869abe74f35dfee6d9aa77cd86e107b58a405d4f603f,2025-08-28T09:15:35.020000 CVE-2025-54765,0,0,42cc9164c553604a76ada0dafe11e229aa1a19bcc5ec88d92c8acf2633cf670a,2025-07-29T14:15:37.427000 CVE-2025-54766,0,0,d50ea9ef27be4234a1fb8ab122b04062587a4d2e1e9f18c08d9c280775b3f446,2025-07-29T14:15:37.570000 CVE-2025-54767,0,0,8b47b24decb155fb1f340e97afd6ad9c30ffd11944354847ea45de8eddb0c3e5,2025-07-29T14:15:37.717000 @@ -303673,6 +303775,7 @@ CVE-2025-54809,0,0,9f4386a6e143941a6ea3d6bed679ee97175efbfd8f8b90066ea51cd78cf11 CVE-2025-5481,0,0,adef4a4dbc224cfe4efb46dadb7f86cc7cf88f7b119fc0f4d35089016674a9e0,2025-08-14T01:31:49.920000 CVE-2025-54812,0,0,e6ff686951e088d7cff7520ce5d1e842bfb927699ab9e99da8b5cfd060c43e71,2025-08-26T21:16:55.323000 CVE-2025-54813,0,0,0e99228b3b10003f6adb35dc2c6bcb32d8af8de6e00da61ac1fb85b848cea32d,2025-08-26T21:16:19.213000 +CVE-2025-54819,1,1,dedbe207265d24aa732466b047f8b996717ffb656be48b1d065187fe898c7e37,2025-08-28T09:15:35.767000 CVE-2025-5482,0,0,28a5af8d823bbe34a12b92449946e0177133613f1c363f5ee62ff165a65e1333,2025-07-11T18:50:03.380000 CVE-2025-54823,0,0,8e207f1210ba1f306016d26c9fe5cea935855420b0e714a913e75aef07f7763c,2025-07-31T03:15:33.950000 CVE-2025-54824,0,0,6f67b097d92e6a5afbac82ead560e808e80817af0315a311e96e6769625ec9e7,2025-07-31T03:15:34.037000 @@ -303839,6 +303942,7 @@ CVE-2025-55168,0,0,927ea95e8bc20da97dc188c859198ba10b0e1abb0b578a578af0a9a499bc0 CVE-2025-55169,0,0,3dfd00ba5441003926d71ee8ed98d7acbe41c863b023e3695cdb0db4adb63cac,2025-08-14T01:30:59.277000 CVE-2025-55170,0,0,3717c22343a2034707a7c24dfd16ac92acb7276a374ea30fe26dd38cd988e21b,2025-08-14T01:34:13.663000 CVE-2025-55171,0,0,93739103d638e3b09b8d8553c206a63f32bc5a557b9e12d80341624dbcd4c8be,2025-08-14T01:33:13.160000 +CVE-2025-55175,1,1,e1a0e62123863a4d71b18e9525aec731299d283c381868251d7ede0b2fdf9047,2025-08-28T11:15:33.117000 CVE-2025-55188,0,0,eaf73a63e72a55df8e19c0f7644053697902c4d72b9705636816da8872531865,2025-08-18T17:15:29.763000 CVE-2025-55192,0,0,63b5276b3b6326d5dd4a3c5ff40e5093693c53f445d78b9338f77840a00291d9,2025-08-15T13:12:51.217000 CVE-2025-55193,0,0,99c65ad332dcdaad21e6a83cc3fbe78de4661340c372d0a3aa401f505102732f,2025-08-14T13:11:53.633000 @@ -303969,14 +304073,14 @@ CVE-2025-5561,0,0,37d583178eab41cfcaf572a9f55ac9ee56d529a81129a4bd0f0e52ba8e1b98 CVE-2025-55611,0,0,7f925a6c81b9edea493fc4ea86d52c4cd2bc6796aee860dc3bacf8abc2150ec4,2025-08-26T14:15:43.467000 CVE-2025-55613,0,0,f7a0564535b61c1b675712c5dc72235ba5df16c3529a36cb629cf9a433ec772b,2025-08-25T20:24:45.327000 CVE-2025-55618,0,0,37c3ae04628a8c98b131dc344c194ad844b633b81e157c2e9d3b052557d3bfb5,2025-08-27T21:15:55.390000 -CVE-2025-55619,0,0,618aed9dc67e414ea88edc5a4cf39460972b17bd416ffbcd67b0baa1997a6144,2025-08-26T14:15:43.700000 +CVE-2025-55619,0,1,b146f5ce33aca3ea8146f2f485167557ce87e2790e10d5232b8c46b305cd445c,2025-08-28T13:34:45.180000 CVE-2025-5562,0,0,6240bc0a7dbaa1de6ee01e8085c281ab501398cc54d049e3ba52ef12d9151257,2025-06-10T15:10:36.680000 -CVE-2025-55620,0,0,27db5f6a5cefa1f64ebf69bad8a8846eee8b5595e7f052d01e615b16ba85b39b,2025-08-22T18:15:36.243000 -CVE-2025-55621,0,0,4b381d8ceb7f483b98a7a121bd71f7971d99931102c14f72a106c1a6e693081a,2025-08-22T18:15:36.450000 -CVE-2025-55622,0,0,82657cadfb9aa8d5ffafaf1f8c0a2242b3bfa813adccaf815c0864b77bac5c93,2025-08-22T18:15:36.670000 -CVE-2025-55623,0,0,ed4aa7bf40c4b3dd97eb78f2440294a6b13165a6e45d0cb5bd904eca7cbdfefa,2025-08-22T18:15:36.883000 -CVE-2025-55624,0,0,496de6bed41a36b570135649469a0d569dedd88814010bad9f10a5e84b6a2fde,2025-08-22T20:15:31.993000 -CVE-2025-55625,0,0,d6ea704eb2a8c689bc3f6cbaa741bb06ffbe9b58eac4f58aa02739b75004b619,2025-08-22T20:15:32.220000 +CVE-2025-55620,0,1,7b8abb54d759dac7d402a67efc468ce53af7409693fdb6f2f991d9f0f140dcbc,2025-08-28T13:31:24.653000 +CVE-2025-55621,0,1,93259f1440f28135f7e806883e7b0e195f65ff71da8f5013bb3bdc4a68f7a809,2025-08-28T13:25:00.330000 +CVE-2025-55622,0,1,8054995522372735b7007533d02401818f124466d9cfa7220d58a9a8c574bede,2025-08-28T13:28:54.303000 +CVE-2025-55623,0,1,7719e4866f1439833e23c1de59abe4fea5945122d0c1377746595e6dec4e4421,2025-08-28T13:24:29.790000 +CVE-2025-55624,0,1,5c32f4a2fa54e622ab3dc09ddeb2ae60d601d44e8e72ef21547c062cdcc6850f,2025-08-28T13:21:16.277000 +CVE-2025-55625,0,1,02256b7e9b4f4ef11bad8df17021f96b17005c6703e6d50dbb621edff6cbe173,2025-08-28T13:46:50.657000 CVE-2025-55626,0,0,e22318270d089f4d5ab33581d85febd5300a939eb6ddacfdf3e6b3a8a3372945,2025-08-22T20:15:32.543000 CVE-2025-55627,0,0,9607b1b7acfdad5267658e31d06f6d3dc04fa2e3dfcb69747a6c48b31636d05a,2025-08-22T18:15:37.077000 CVE-2025-55629,0,0,cc895e1860909cfd946b41bce91d89538fa365067d78f50fa910d6e86deb3c50,2025-08-22T18:15:37.263000 @@ -304352,8 +304456,15 @@ CVE-2025-58043,0,0,a72df0c240a9f75a24b5de63b2dcee140d8b5cdc570d6d7bab79e3a25360e CVE-2025-58050,0,0,0f0081c444d1c860bdecc44a412145c3d62abda83ddb6408fa065720690ac3e8,2025-08-27T20:15:33.800000 CVE-2025-5806,0,0,eced74af9a3bd847a96fe591b592713a189dcd85d66bd43936ab31bd4aa88aea,2025-06-09T12:15:47.880000 CVE-2025-5807,0,0,384417ca98f2632e67cea0a8a9efb98a92af12b24d28c8fb1a227d83dcb6b23e,2025-07-10T13:17:30.017000 +CVE-2025-58072,1,1,25660d3607716a6321e691f0a3dba615a20d831e63708552ce0bd1c336ba5999,2025-08-28T09:15:36.493000 +CVE-2025-58081,1,1,8435da5b1d4c4de7dfa548fa0a8e0b6a5f28739c53306c22c50daa86acfdcaf0,2025-08-28T09:15:37.183000 CVE-2025-5811,0,0,13e0ae7b8cbda9114c37b76f293e8c2a35d385baf2d46caeccdd890da0eee606,2025-07-22T13:06:27.983000 CVE-2025-5812,0,0,a8fa614eb185b909327a01b5dadc2a8b72103fb7810bcfabee505f3dccfda767,2025-06-26T18:57:43.670000 +CVE-2025-58123,1,1,9d5d54b3870f91316eaa89a6b46992f266ab9ef82b05c11795914079bb825f9b,2025-08-28T13:16:09.743000 +CVE-2025-58124,1,1,2a000ad98268418d05fac1b43f5073117bef6f9f8e09b32ad0f246ae86eebabf,2025-08-28T13:16:09.977000 +CVE-2025-58125,1,1,9009a5cd7df9052949cbcce5a57a8e54904576fef4c01dc2e56b47b98a95e933,2025-08-28T13:16:10.133000 +CVE-2025-58126,1,1,f4ccb4c26d7e347e452b7e95e3cdf7ca48e00c0646b815e8d2f281bc85e7f683,2025-08-28T13:16:10.330000 +CVE-2025-58127,1,1,a1d1e3281dc1a3e430a255a91af44feea6ae6fa410b89d89a79a8e1a2527df76,2025-08-28T13:16:10.520000 CVE-2025-5813,0,0,cd46b62d3d908778d35675b466ba82ee8dd96b497366599fc4a9680ca39a9bec,2025-07-07T16:04:42.837000 CVE-2025-5814,0,0,a167867f53c6fadb9d3db3d4ef4e109f1fea46d1abeb35216542db72110fa696,2025-06-09T12:15:47.880000 CVE-2025-5815,0,0,3c63e526b28352a674f2d0faaef2707920143cb75a4277d3e7f975593f6cf816,2025-06-16T12:32:18.840000 @@ -304394,6 +304505,7 @@ CVE-2025-5829,0,0,03b4a8bf05a1c5b1e9d996e6e8495630260cf4d8ddf7bf369737091e10ed71 CVE-2025-5830,0,0,8651b96704b39d15b71b6bb20a4df81dbca1ba651c53ec091d157e6c89442c9c,2025-06-26T18:57:43.670000 CVE-2025-5831,0,0,0fb88884353fdaa96c487e11f582e0ea0048d1e4f239650f8934f7328001a126,2025-07-28T15:10:42.240000 CVE-2025-5832,0,0,6bd5950d86f819d12454e9671800b2f6b811c3a961044ec988616ce44c7d917a,2025-07-08T14:52:30.267000 +CVE-2025-58322,1,1,eb4dca63e79d756ee6c5b740c3928892ef3c12c132d270aaec2a0d39fed03536,2025-08-28T08:15:30.720000 CVE-2025-5833,0,0,cec12c76ff06b523c8c03e7643c742bd06ed393153aceeda79abc289dcfddbd9,2025-07-08T14:52:15.600000 CVE-2025-5834,0,0,dc41745f0a4ed9a3b150d1d75c72bfbfe911bb594502e4ba9a64bbed06f217a2,2025-07-08T14:51:29.567000 CVE-2025-5835,0,0,f8da56fc2c648e4af2aa97e08b00207a13dda417cc31b531f4f51516cfab19db,2025-07-28T15:15:01.633000 @@ -304473,7 +304585,7 @@ CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 CVE-2025-5912,0,0,10ff6acf965d367f7f73802da6c280421d13214babe0565635ffb936692b9383,2025-06-16T16:52:15.440000 CVE-2025-5913,0,0,4cba6ee8cf199de13dc8cd6aadd287347b651acc47698b712c4382a0d9737790,2025-06-16T16:49:15.273000 -CVE-2025-5914,0,1,5ca62f4400811773a93e8d7b97058faf7daf792490dc1e86cdaaaa74c189239a,2025-08-28T07:15:35.430000 +CVE-2025-5914,0,1,04673939884bb6d58fb7617ebfc39f582b72f1a43a8b5307857eedc67f9e25cc,2025-08-28T09:15:38 CVE-2025-5915,0,0,fd2f5c60755d836893151bdc8c47ef3c4a507becdd1a8d0d38db05d93ddea61d,2025-08-25T02:28:51.487000 CVE-2025-5916,0,0,8548799ab14530bd43b5f1551368b5e8b5a207d5c54ab4133b32c19d7596f46b,2025-08-15T18:12:06.987000 CVE-2025-5917,0,0,c4194b5a03ecc13eb43c377a4dbedcb6be988eca4692d9c93a44c5ec7c7d23ca,2025-08-15T18:16:42.910000 @@ -304757,7 +304869,7 @@ CVE-2025-6249,0,0,af21716c26badee2b0e9be0289dc06c494e3e2455f5a8621fca28f898c500f CVE-2025-6250,0,0,f86aa971edca455b3672c1372430ee34cca87a7b2c5e296e7489741fc444c7ec,2025-08-04T13:45:22.730000 CVE-2025-6252,0,0,04266fde32de91a19cd75afe711753a0e9f9154bece1418589e4e14bad3b2599,2025-07-07T14:51:20.410000 CVE-2025-6253,0,0,cb5d9b8da47d572dbcd6d6c40c90b13d168a9738cebc8580b12d2462ed6f96c9,2025-08-12T14:25:33.177000 -CVE-2025-6255,1,1,40bb28646993c4cd1ba3a95ce674f9cde4aea2af35980cc9d98e4a014a006097,2025-08-28T07:15:35.947000 +CVE-2025-6255,0,0,40bb28646993c4cd1ba3a95ce674f9cde4aea2af35980cc9d98e4a014a006097,2025-08-28T07:15:35.947000 CVE-2025-6256,0,0,294b3cab2bd3db911bdf2a685f894f61292bb6532436317757d1ecea99330674,2025-08-06T20:23:37.600000 CVE-2025-6257,0,0,cc91b7557b526c88672e08add1b684bde89a65ab4dd7fa052a99a1c1c9c823b5,2025-06-23T20:16:40.143000 CVE-2025-6258,0,0,a4b6be5935c4432c7a129304f469494da82c625050798afddedddfa563a7fe1e,2025-06-26T18:57:43.670000 @@ -306174,8 +306286,8 @@ CVE-2025-7951,0,0,a13b3f4529651c79b14b8c9c474e01d5f8ca54cc3c84608a6d8c8703f2f753 CVE-2025-7952,0,0,99592ba4c00c0cd63c9acc072af778b3273beb2e082d90db20a5b554debf3091,2025-07-23T16:16:10.950000 CVE-2025-7953,0,0,b3cbd431cc2a780e975079f252e97c40548eb1ad97e50d4ba3d897dd04f2441c,2025-08-20T20:19:27.480000 CVE-2025-7954,0,0,13495c1114fe419575079c1f1197da5553a28e04cd5194e04b721b3093efd324,2025-08-07T15:15:33.297000 -CVE-2025-7955,1,1,93f3de550719a986ca13a984590fb0f34706ef12213d1df8fa8b81a99c2a9a66,2025-08-28T06:15:31.253000 -CVE-2025-7956,1,1,44b82fe37cbb977268ef7c138bd242d952c6b7d9b52cfd10792db5f394bd0224,2025-08-28T06:15:31.493000 +CVE-2025-7955,0,0,93f3de550719a986ca13a984590fb0f34706ef12213d1df8fa8b81a99c2a9a66,2025-08-28T06:15:31.253000 +CVE-2025-7956,0,0,44b82fe37cbb977268ef7c138bd242d952c6b7d9b52cfd10792db5f394bd0224,2025-08-28T06:15:31.493000 CVE-2025-7957,0,0,5054e70b59249bb659b424c419ea37f3a8c3518e0d130ffa36c9286252907636,2025-08-25T20:24:45.327000 CVE-2025-7959,0,0,62f2b746ac6cb407aebc6bacdea5326f3791bcc76f73b9e90a946ca5166a0b79,2025-07-25T15:29:19.837000 CVE-2025-7961,0,0,9e7abe978fa161a59c01c3f86a16d998d9f474ead02fa323c66b5c5e8cc4958d,2025-08-18T20:16:28.750000 @@ -306228,7 +306340,7 @@ CVE-2025-8068,0,0,8fc2a783fb4a74740f23e511e8c4cbf48910c72a503561523b753a1b82f89e CVE-2025-8069,0,0,45f65a480b823a9d8f483139ef7dec4376b7a5398674ac7c6e34386243cd887e,2025-07-25T15:29:44.523000 CVE-2025-8070,0,0,3f7b62492fc7cfd56b797c052d3cbcd9ec67af3eb4efee11a82fb4dc3a13d2f4,2025-07-25T15:29:44.523000 CVE-2025-8071,0,0,6c4454134bb489edd78d7acc20f775f6e1fa30e0fbd66eafa92d9c63b2fd23c0,2025-07-25T15:29:19.837000 -CVE-2025-8073,1,1,7c0a45e9ba3dc8520666b96c9c55fff0e563a333d1c680e8104ba9585962bd45,2025-08-28T07:15:36.187000 +CVE-2025-8073,0,0,7c0a45e9ba3dc8520666b96c9c55fff0e563a333d1c680e8104ba9585962bd45,2025-08-28T07:15:36.187000 CVE-2025-8080,0,0,d0237ed728380df0b82877b72bf614229be82e9b1a4404c76921d581a2b018b4,2025-08-15T13:12:51.217000 CVE-2025-8081,0,0,2cce6a8ebb29dd3b62ed70f3a47f882319e43f1d0f1c706c5d0730d0c57393eb,2025-08-15T18:00:55.213000 CVE-2025-8086,0,0,20e8a6bb7d775e296a2c11f829d98486e2e7087235c0873c440c88266a98893f,2025-08-06T23:15:26.987000 @@ -306249,11 +306361,11 @@ CVE-2025-8109,0,0,329043bcbb8a5e5bad595dc769c1916ac73d7ff2177ff2d16e24ed92af4685 CVE-2025-8113,0,0,eb73b71e0607cec914beaf60d828e9bf31147ff390e8e0368cbd406fa1f62bcd,2025-08-18T20:16:28.750000 CVE-2025-8114,0,0,9ba276477857ae90dd5bff566e8994cb948fc433ff21900cd42e3acb73aecb56,2025-08-14T00:45:36.510000 CVE-2025-8115,0,0,739c2f21b8462b17a4eff3f3256e7516f5055d73363e39c5eb2e68c508e2a802,2025-07-28T15:03:14.290000 -CVE-2025-8123,0,0,2ccc8fb8ba7d57ec2dab6f9e01144e33f205ae963fdcc6525076f70c62ac57cb,2025-07-25T15:29:19.837000 -CVE-2025-8124,0,0,514d5cdb0a6b388500fe1b054dfb5a52c62232f774a4d015cd7bced1d3c4f6dc,2025-07-25T15:29:19.837000 +CVE-2025-8123,0,1,25f97e32b67b7df372d0cdbae05b66e7e320d4763b97acbb4f66a041fce4233b,2025-08-28T10:54:44.980000 +CVE-2025-8124,0,1,1a79653ca89d92ab329ce8c0f6852f49e77c21dc85d84c229868d1c8f6196fb1,2025-08-28T10:52:10.783000 CVE-2025-8125,0,0,0d57bf95c38fc83c3ee6c5c07b53bc04edd994e93eb944b08113e7ca03cbee74,2025-08-28T01:56:30.640000 -CVE-2025-8126,0,0,110fb1fb715f697697cf4fd2d59420ef42a306a4ea6622369ceaf459f92569c7,2025-07-25T15:29:19.837000 -CVE-2025-8127,0,0,8ab8f14e586c2f28d189d925cef497532422b090fa2ad864f94256befabe5eac,2025-07-25T15:29:19.837000 +CVE-2025-8126,0,1,f6bef2f7e0f68482480b5c14a15cb045333eac27131829dc2ec886c8b6654a54,2025-08-28T10:50:00.247000 +CVE-2025-8127,0,1,ed46677b35274a91c06f6a248f8f076f7ce92993aa959657f51a85c2a4a485d7,2025-08-28T12:25:53.520000 CVE-2025-8128,0,0,c68e4669c0d9a88dbd08ae888728c9ceec3c65f64a5ad8884ada308553015163,2025-07-25T15:29:19.837000 CVE-2025-8129,0,0,ae0a99a3222dc1048401fc39b4fb19595a9b9aa9e46a360091d8c9a67c1ba911,2025-07-25T15:29:19.837000 CVE-2025-8130,0,0,0a99b4931e54a113d462eca2b8c0d3d7b189559439845f3db115efdfd61cdf44,2025-08-06T19:15:26.883000 @@ -306280,9 +306392,9 @@ CVE-2025-8157,0,0,1eebb936e2452c7f0050860b6cb7818737ce876eb4aea7805b75818194f21d CVE-2025-8158,0,0,acf4920dd043740f5300949550087a565001563227fc50efa9e4bc0deb8183be,2025-07-29T17:18:42.270000 CVE-2025-8159,0,0,2b6489c47dcb4f10a58108e4adc7f63819a969f7ec6a60e7ec64d82d03a54c15,2025-07-25T15:29:19.837000 CVE-2025-8160,0,0,ae0591b8365be61e712b45a120695679f19486a8f0524ed6a43134ef27a71e17,2025-08-05T19:21:50.883000 -CVE-2025-8161,0,0,67f5f409c29fe00a840f128a0e779372d06c73a71c748ad3e5fc4d63439edf34,2025-07-29T14:14:55.157000 -CVE-2025-8162,0,0,58f1591d4c5dd0cd2b92c2405af010c9d7b33b46e5e5aee2f45897d406f9b6b2,2025-07-29T14:14:55.157000 -CVE-2025-8163,0,0,9d594e65753493311c1ce09e2f857fd98cbb8eddf9c2bab565ad7de81aa671d3,2025-07-29T14:14:55.157000 +CVE-2025-8161,0,1,f84443dca5fcaaef67e2c7fe2d78e5678f6a013f49c47fc9bb1fea32421c5931,2025-08-28T12:25:16.450000 +CVE-2025-8162,0,1,121d73e96c1f95f6a6329969eacf1bcfa7348bfe4ed2660bff9841d594959209,2025-08-28T12:24:30.657000 +CVE-2025-8163,0,1,85857deba825376cdadfc14260091ee6bb0b5e5fe3d559e65bafe85daf5dfe71,2025-08-28T12:23:53.083000 CVE-2025-8164,0,0,10892b273a6e6f2c9ffbccf618ab826456eaf7f1774d38d9f0469ce23b77cc1d,2025-08-05T21:05:24.963000 CVE-2025-8165,0,0,8e8579a781bf744a7d4ba16740c942255728d7a0b1a7b8ad7444d81526c13a44,2025-08-05T21:05:13.263000 CVE-2025-8166,0,0,39b6d7dfb1a22c558c460b1051b3991bf48b5025737c5b5f65aba325939a2c73,2025-08-05T21:04:59.080000 @@ -306330,7 +306442,7 @@ CVE-2025-8213,0,0,ac87fa066927f866a8f66d9d1f82a871fb3000d1faa61372243e4bf9924ce5 CVE-2025-8216,0,0,1c93a9c653c0ae471f20c70a5438fd89ef1404421732b85ea31cefab19f98dae,2025-07-29T14:14:29.590000 CVE-2025-8217,0,0,1ac7683c3407eb70408842c1eb62dd8ecdd1a06e5925e82d539ce8805c1c462e,2025-07-31T18:42:37.870000 CVE-2025-8218,0,0,adb3dce0cd798443d5a5d024c4da9aa27a7b30dc686079544e150116b2ec8667,2025-08-19T13:42:47.510000 -CVE-2025-8219,0,0,354f28ffb58aee4c04f6c06e2bf4c3f08055fbc2c41a347086b6b1279430b0ff,2025-07-29T14:14:29.590000 +CVE-2025-8219,0,1,a86f6c6e613e508a43b87ada9d1a27814f56e07c4b5c092e3dbfc425b5bd18bd,2025-08-28T12:22:12.927000 CVE-2025-8220,0,0,3b82698e72806ff02f840ab1011aebc18e11513516b69721045f78d60cf89c6b,2025-08-03T09:15:28.950000 CVE-2025-8221,0,0,b65b1f98204c7ac00c6c3729c393c45799707d4ccc352730e8a599b834eee73c,2025-07-29T14:14:29.590000 CVE-2025-8222,0,0,1145dfaff3cccbbfda1ef0dffcf9100c370294b634622fc282293451c8989c80,2025-07-29T14:14:29.590000 @@ -306430,7 +306542,7 @@ CVE-2025-8341,0,0,18e0124ff420e7c22f615baa165e375da5c27ee9dda258523f08f9b9959e03 CVE-2025-8342,0,0,25347baed7ff7383166096613c490c46a76eb961484fa5579add2348467940ab,2025-08-15T13:12:51.217000 CVE-2025-8343,0,0,0f4dea246a7c1b39541f1933072e3bd9bfa69cf0fa381cf7d808913e6ca5e24a,2025-07-31T18:42:37.870000 CVE-2025-8344,0,0,135c428ef570777af34e47d487f4a66c9374d0bc78b6df52c049bdaee349b94c,2025-07-31T18:42:37.870000 -CVE-2025-8345,0,0,8dd4471d2f0196f51139a054dc1dd90b6d67da203e23532d2cdc1c310824deed,2025-07-31T18:42:37.870000 +CVE-2025-8345,0,1,200a144b5fe667559153b233978b2d3cf1257e0d3b68975cbf3ad15dfaafbf7f,2025-08-28T12:19:48.873000 CVE-2025-8346,0,0,ab30739297a9d5c0f499cfce1c2018adebe89c80ca5370b2e3ddd80d22947594,2025-08-13T14:42:12.980000 CVE-2025-8347,0,0,e456f32ff7dc6bcd9e5a1de91fa621a8385ab4e1eb2244c8657c101c69a7fcd6,2025-07-31T18:42:37.870000 CVE-2025-8348,0,0,ebfbe58f6dc6a4a2f5937708433c060ae6ca8d0854e032586105bc8a63aad976,2025-07-31T18:42:37.870000 @@ -306543,10 +306655,10 @@ CVE-2025-8521,0,0,fe200f400e3d72deef143f3c2df7d94937bda722c6e025d2a1aab2297b1ea5 CVE-2025-8522,0,0,8da0b40420c5483791e9a1713ab168bb95e18ee3ffd692d9fc59c2bb699df2bb,2025-08-27T16:21:28.447000 CVE-2025-8523,0,0,140524134c4f74fbfe86a582b184f0394eb757ccf9c1e4f71ae7227df1fb358d,2025-08-05T14:34:17.327000 CVE-2025-8524,0,0,3dd2faedc6245954b8c7cde1acda6685a30216488bc9fb443097d775de6e4e7c,2025-08-05T14:34:17.327000 -CVE-2025-8525,0,0,388e694c53a1105c5c9f37406807548f751578a6edabf533e600cd455d5af1a9,2025-08-05T16:15:30.937000 -CVE-2025-8526,0,0,10847ccafa68c1a58b7670f9baa015cd9a8b73ee9d2401b3299814cb57fed434,2025-08-05T16:15:31.063000 -CVE-2025-8527,0,0,50a504b3544fd06275e6656c39208242637d10953700bf26e0c8bad66781af65,2025-08-05T14:34:17.327000 -CVE-2025-8528,0,0,e82ed76f29bde7c016bb60b1b5bbf62843d1cdb5045dd0447566e0e1b9527d9e,2025-08-05T14:34:17.327000 +CVE-2025-8525,0,1,15b3373aa7bfd2fa83f651fcc3c26757cd841dba29bce29a7ad9ec9e064f154b,2025-08-28T12:17:49.460000 +CVE-2025-8526,0,1,acbf8b8b602b7f8246006c99899a5da12eeb8075e9390d74d4c165df6e5ba250,2025-08-28T12:15:36.633000 +CVE-2025-8527,0,1,dd9a20a83668574eab1aed2fdad630c68ac80f5418e4aebe76a3177c6c4c4ef3,2025-08-28T12:10:19.310000 +CVE-2025-8528,0,1,dc775d7a3ce7de7af341fe068810f8ab8033609bcd833204f15695ee08ed09f9,2025-08-28T11:52:22.193000 CVE-2025-8529,0,0,78c64ac718f0cf1c2bd52053e34c055cb6dd4fae1f9d8de5c6738de34718ea67,2025-08-05T14:34:17.327000 CVE-2025-8530,0,0,f84145baeb8707cd4a8ad3704e71c787345b91620af56381eb9302da86f789b9,2025-08-05T16:15:31.200000 CVE-2025-8533,0,0,9fbbc876bc37d5ecf11d20a614fada182e2b3ddf9069f8d56166f1a6478168d1,2025-08-07T21:26:37.453000 @@ -306801,7 +306913,7 @@ CVE-2025-8901,0,0,114d7eda402d8ff48c7aa4edd5d664a83b5121f1814dbc85837b45bdc47c5e CVE-2025-8904,0,0,2f7cfaadf7fb6befe14c14aa6a77c8a68a1c54671d9d79fa17ad1415f5b7e51c,2025-08-14T13:11:53.633000 CVE-2025-8905,0,0,65b50ffc87f74e0c33cac4987e599c47c4de7a70174053e65eeee67116815094,2025-08-15T13:12:51.217000 CVE-2025-8907,0,0,e445d466dadafc8e52d130b8b4931188ee6b8503ba431c3f6374f4cdcf67871c,2025-08-13T17:33:46.673000 -CVE-2025-8908,0,0,bf1172d87efce999093555827c7806a1e564a81cf8cda8188136ee2e7fbecb81,2025-08-13T20:15:34.390000 +CVE-2025-8908,0,1,26a4309e14dd99f1b13b27ea7a7c82a9d68ce3ae2fcba5ac5576466773e94b7d,2025-08-28T13:55:09.653000 CVE-2025-8909,0,0,bebd17420ce69232c1d5ee2afd7ca9a3129005249fc9110d113c0c0e30ddc75a,2025-08-21T00:34:08.383000 CVE-2025-8910,0,0,701dbfee59ea684a1b1a1277ae9eba89f1afef988c065f9f10f8d4aff46dd18b,2025-08-21T00:33:30.497000 CVE-2025-8911,0,0,c425c187889ed8047bb87cacbe234ac1778c585942b304be4c06c0cf0dc4444c,2025-08-21T00:32:21.997000 @@ -306958,7 +307070,7 @@ CVE-2025-9136,0,0,6c70063528f1e26f317d3bf1db80d344c0a6f3a84b90e5e255e8148643a0a8 CVE-2025-9137,0,0,fce343e895cb5f59a7647035bdc6e5d8a6cb2414a173b3eaab8bd77514c25739,2025-08-26T15:15:49.047000 CVE-2025-9138,0,0,b8722f1f84f901daba9a8b19571aec5e3bdf950163ad01f583de5f165ff3eb46,2025-08-23T09:15:29.150000 CVE-2025-9139,0,0,45587cbebe79140237aa4822934b5e4c644c694ef7dd08c69564d3c07cb3d71a,2025-08-22T22:15:33.890000 -CVE-2025-9140,0,0,d6918a98c5a8fc46bf1dbe463071f6beee418310904e62bade4e90124530d3a7,2025-08-20T14:40:17.713000 +CVE-2025-9140,0,1,ca9fc411aadabe0006767789fcc62514f7dfb764b4215b772899bf50ba1b57d1,2025-08-28T13:38:37.340000 CVE-2025-9143,0,0,b41fb47d652da14aea69ec27cb0fa5e7abc5eb05f779d59b619e4fb32ee2bfb4,2025-08-23T09:15:29.340000 CVE-2025-9144,0,0,0fb1ce622417a755ca995ce5424d5d1d5cbb4434322e2835da5d9f0c3ef919f1,2025-08-23T09:15:29.513000 CVE-2025-9145,0,0,1a776ae3156f13ddfe428bdd2258b9897dba08ea3627d3795af006191139ba75,2025-08-27T17:15:48.467000 @@ -307063,6 +307175,7 @@ CVE-2025-9360,0,0,089bbe2c8cf99fed2c25660bb6c5831d97d6f394ec5ea863f5c4f1921e1332 CVE-2025-9361,0,0,80ce2af34ec98e6a5bd563b436646b649339b1632f8284681cb9e765e5a91ab0,2025-08-25T20:24:45.327000 CVE-2025-9362,0,0,681094bd5f51297edc72e4c6957582311e5543f0e0705986ec571ac7d9f029d7,2025-08-25T20:24:45.327000 CVE-2025-9363,0,0,1eb621354ece0073c6706edcca649e5dd97b0049b53f79a703b2ce35401afeb2,2025-08-25T20:24:45.327000 +CVE-2025-9376,1,1,f3209e552c2f0ff37e3a483c34b1d98d1cc925f033a5a817ec7021b1cc37e165,2025-08-28T12:15:39.280000 CVE-2025-9379,0,0,7311b48a77023949d91e741212699bdcfcb00888a818398c5226d93869effbfe,2025-08-25T20:24:45.327000 CVE-2025-9380,0,0,26b12fca9989e4410e56adaff222b42e99dd2d821310e7673ae01745f785a207,2025-08-25T20:24:45.327000 CVE-2025-9381,0,0,215c21988fbabb29a9b5526ca6bedccb81aac589a9377cc123f2240112bb96b6,2025-08-25T20:24:45.327000