From 945a6dea0cb366d5b1678982bcad1536c92bc459 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Thu, 25 Sep 2025 12:03:57 +0000 Subject: [PATCH] Auto-Update: 2025-09-25T12:00:13.614421+00:00 --- CVE-2025/CVE-2025-104xx/CVE-2025-10438.json | 56 ++++++++ CVE-2025/CVE-2025-109xx/CVE-2025-10940.json | 137 ++++++++++++++++++ CVE-2025/CVE-2025-109xx/CVE-2025-10941.json | 141 +++++++++++++++++++ CVE-2025/CVE-2025-109xx/CVE-2025-10942.json | 145 ++++++++++++++++++++ CVE-2025/CVE-2025-221xx/CVE-2025-22106.json | 10 +- CVE-2025/CVE-2025-383xx/CVE-2025-38322.json | 6 +- CVE-2025/CVE-2025-387xx/CVE-2025-38709.json | 6 +- CVE-2025/CVE-2025-398xx/CVE-2025-39816.json | 6 +- CVE-2025/CVE-2025-61xx/CVE-2025-6198.json | 14 +- CVE-2025/CVE-2025-79xx/CVE-2025-7937.json | 12 +- README.md | 22 ++- _state.csv | 20 +-- 12 files changed, 539 insertions(+), 36 deletions(-) create mode 100644 CVE-2025/CVE-2025-104xx/CVE-2025-10438.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10940.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10941.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10942.json diff --git a/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json b/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json new file mode 100644 index 00000000000..1c60e5f35cb --- /dev/null +++ b/CVE-2025/CVE-2025-104xx/CVE-2025-10438.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-10438", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-09-25T10:15:29.397", + "lastModified": "2025-09-25T10:15:29.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog allows Path Traversal.This issue affects Yordam Katalog: before 21.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-27" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0296", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10940.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10940.json new file mode 100644 index 00000000000..a5830b0a3d2 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10940.json @@ -0,0 +1,137 @@ +{ + "id": "CVE-2025-10940", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T11:15:45.757", + "lastModified": "2025-09-25T11:15:45.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layouts_save of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N", + "baseScore": 3.3, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "LOW", + "exploitabilityScore": 6.4, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vuldb.com/?ctiid.325810", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325810", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651867", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10941.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10941.json new file mode 100644 index 00000000000..680f7d44320 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10941.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10941", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T11:15:47.120", + "lastModified": "2025-09-25T11:15:47.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in Topaz SERVCore Teller 2.14.0-RC2/2.14.1. Affected by this issue is some unknown functionality of the file SERVCoreTeller_2.0.40D.msi of the component Installer. Executing manipulation can lead to permission issues. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", + "baseScore": 6.8, + "accessVector": "LOCAL", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 3.1, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + }, + { + "lang": "en", + "value": "CWE-275" + } + ] + } + ], + "references": [ + { + "url": "https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325811", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325811", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651434", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10942.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10942.json new file mode 100644 index 00000000000..f89be080281 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10942.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-10942", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T11:15:47.367", + "lastModified": "2025-09-25T11:15:47.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", + "baseScore": 9.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 8.0, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + }, + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lin-3-start/lin-cve/blob/main/H3C%2BMagic%2BB3/H3C%20routers%20Buffer%20overflow.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/lin-3-start/lin-cve/blob/main/H3C%2BMagic%2BB3/H3C%20routers%20Buffer%20overflow.md#poc", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325812", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325812", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.651813", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-221xx/CVE-2025-22106.json b/CVE-2025/CVE-2025-221xx/CVE-2025-22106.json index 07003ce6002..9d7b9cc1a78 100644 --- a/CVE-2025/CVE-2025-221xx/CVE-2025-22106.json +++ b/CVE-2025/CVE-2025-221xx/CVE-2025-22106.json @@ -2,7 +2,7 @@ "id": "CVE-2025-22106", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:16:04.913", - "lastModified": "2025-04-17T20:22:16.240", + "lastModified": "2025-09-25T10:15:31.020", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -21,9 +21,17 @@ "url": "https://git.kernel.org/stable/c/0dd765fae295832934bf28e45dd5a355e0891ed4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/23da4e0bb2a38966d29db0ff90a8fe68fdfa1744", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/9908541a9e235b7c5e2fbdd59910eaf9c32c3075", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a6157484bee3385a425d288a69e1eaf03232f5fc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-383xx/CVE-2025-38322.json b/CVE-2025/CVE-2025-383xx/CVE-2025-38322.json index 1fe2478c2e0..b0e4328c77b 100644 --- a/CVE-2025/CVE-2025-383xx/CVE-2025-38322.json +++ b/CVE-2025/CVE-2025-383xx/CVE-2025-38322.json @@ -2,7 +2,7 @@ "id": "CVE-2025-38322", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-10T09:15:26.240", - "lastModified": "2025-08-28T15:15:48.370", + "lastModified": "2025-09-25T10:15:31.257", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -32,6 +32,10 @@ { "url": "https://git.kernel.org/stable/c/b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e97c45c770f5e56c784a46c2a96ab968d26b97d9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json b/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json index 7d7f5883530..0bffbd8308c 100644 --- a/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json +++ b/CVE-2025/CVE-2025-387xx/CVE-2025-38709.json @@ -2,7 +2,7 @@ "id": "CVE-2025-38709", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-04T16:15:39.997", - "lastModified": "2025-09-05T17:47:24.833", + "lastModified": "2025-09-25T10:15:31.403", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -28,10 +28,6 @@ { "url": "https://git.kernel.org/stable/c/b928438cc87c0bf7ae078e4b7b6e14261e84c5c5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" - }, - { - "url": "https://git.kernel.org/stable/c/ce8da5d13d8c2a7b30b2fb376a22e8eb1a70b8bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39816.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39816.json index bb98318f6bd..6872a93cdf6 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39816.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39816.json @@ -2,7 +2,7 @@ "id": "CVE-2025-39816", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T13:15:56.790", - "lastModified": "2025-09-18T13:43:34.310", + "lastModified": "2025-09-25T10:15:31.527", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -17,6 +17,10 @@ "url": "https://git.kernel.org/stable/c/390a61d284e1ced088d43928dfcf6f86fffdd780", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, + { + "url": "https://git.kernel.org/stable/c/695673eb5711ee5eb1769481cf1503714716a7d1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, { "url": "https://git.kernel.org/stable/c/98b6fa62c84f2e129161e976a5b9b3cb4ccd117b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" diff --git a/CVE-2025/CVE-2025-61xx/CVE-2025-6198.json b/CVE-2025/CVE-2025-61xx/CVE-2025-6198.json index b62692d399a..b87e179dbd4 100644 --- a/CVE-2025/CVE-2025-61xx/CVE-2025-6198.json +++ b/CVE-2025/CVE-2025-61xx/CVE-2025-6198.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6198", "sourceIdentifier": "def9a96e-e099-41a9-bfac-30fd4f82c411", "published": "2025-09-19T02:15:44.133", - "lastModified": "2025-09-19T16:00:27.847", + "lastModified": "2025-09-25T10:15:31.670", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -18,19 +18,19 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", - "baseScore": 6.4, - "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", "attackVector": "NETWORK", - "attackComplexity": "HIGH", + "attackComplexity": "LOW", "privilegesRequired": "HIGH", - "userInteraction": "REQUIRED", + "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 0.5, + "exploitabilityScore": 1.2, "impactScore": 5.9 } ] diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7937.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7937.json index a0c8ab80193..21a333349bb 100644 --- a/CVE-2025/CVE-2025-79xx/CVE-2025-7937.json +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7937.json @@ -2,7 +2,7 @@ "id": "CVE-2025-7937", "sourceIdentifier": "def9a96e-e099-41a9-bfac-30fd4f82c411", "published": "2025-09-19T03:15:50.033", - "lastModified": "2025-09-19T16:00:27.847", + "lastModified": "2025-09-25T10:15:31.877", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -18,11 +18,11 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 6.6, - "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", "attackVector": "NETWORK", - "attackComplexity": "HIGH", + "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", @@ -30,7 +30,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 0.7, + "exploitabilityScore": 1.2, "impactScore": 5.9 } ] diff --git a/README.md b/README.md index 67b8715aa80..f6b7b6d2c62 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-09-25T10:00:12.900296+00:00 +2025-09-25T12:00:13.614421+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-09-25T09:15:29.453000+00:00 +2025-09-25T11:15:47.367000+00:00 ``` ### Last Data Feed Release @@ -33,21 +33,29 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -311493 +311497 ``` ### CVEs added in the last Commit -Recently added CVEs: `0` +Recently added CVEs: `4` +- [CVE-2025-10438](CVE-2025/CVE-2025-104xx/CVE-2025-10438.json) (`2025-09-25T10:15:29.397`) +- [CVE-2025-10940](CVE-2025/CVE-2025-109xx/CVE-2025-10940.json) (`2025-09-25T11:15:45.757`) +- [CVE-2025-10941](CVE-2025/CVE-2025-109xx/CVE-2025-10941.json) (`2025-09-25T11:15:47.120`) +- [CVE-2025-10942](CVE-2025/CVE-2025-109xx/CVE-2025-10942.json) (`2025-09-25T11:15:47.367`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `6` -- [CVE-2023-5236](CVE-2023/CVE-2023-52xx/CVE-2023-5236.json) (`2025-09-25T09:15:29.453`) -- [CVE-2024-7885](CVE-2024/CVE-2024-78xx/CVE-2024-7885.json) (`2025-09-25T08:15:36.243`) +- [CVE-2025-22106](CVE-2025/CVE-2025-221xx/CVE-2025-22106.json) (`2025-09-25T10:15:31.020`) +- [CVE-2025-38322](CVE-2025/CVE-2025-383xx/CVE-2025-38322.json) (`2025-09-25T10:15:31.257`) +- [CVE-2025-38709](CVE-2025/CVE-2025-387xx/CVE-2025-38709.json) (`2025-09-25T10:15:31.403`) +- [CVE-2025-39816](CVE-2025/CVE-2025-398xx/CVE-2025-39816.json) (`2025-09-25T10:15:31.527`) +- [CVE-2025-6198](CVE-2025/CVE-2025-61xx/CVE-2025-6198.json) (`2025-09-25T10:15:31.670`) +- [CVE-2025-7937](CVE-2025/CVE-2025-79xx/CVE-2025-7937.json) (`2025-09-25T10:15:31.877`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 6e0b0a93406..a24206c82c7 100644 --- a/_state.csv +++ b/_state.csv @@ -242416,7 +242416,7 @@ CVE-2023-52356,0,0,e2b4173e3711dff29cdbafe3aee754b4ad46c795b37babed1ee8e0680c177 CVE-2023-52357,0,0,c90b8cf2c9fd4f0bd5f3a1801bd62383f3576028919c434b9e3c4930a49535c4,2024-12-06T19:31:16.340000 CVE-2023-52358,0,0,caff3a3cceeaa9f53391afabc8456e4d7818c60c58df2a6f9a8d9ac878bf0536,2025-03-13T14:47:46.747000 CVE-2023-52359,0,0,d111661793c7321f70f0dc313319112ada0d9977237410299ea5e29f987c203b,2025-03-27T21:15:43.330000 -CVE-2023-5236,0,1,6e8a66b38070831c1ec380ffbf507c56c3782183d577214ee3c92abf86eee345,2025-09-25T09:15:29.453000 +CVE-2023-5236,0,0,6e8a66b38070831c1ec380ffbf507c56c3782183d577214ee3c92abf86eee345,2025-09-25T09:15:29.453000 CVE-2023-52360,0,0,226e23600ef295082458c88722bbff585b570a1b29c169a33a3ea276579c74b8,2025-03-17T15:15:39.547000 CVE-2023-52361,0,0,e8145c184aa1d630e38e5e391cbf0efb13b269936042053c6de8ae608f61a2a3,2024-12-09T16:15:19.790000 CVE-2023-52362,0,0,9e722c56194659043dfa737e5a5b2325fec6e3c7a8b7eee99833b85f856cbd08,2025-03-13T14:48:14.840000 @@ -282038,7 +282038,7 @@ CVE-2024-7881,0,0,525d58e417dceb66a5b0f9f13838544357ad87e5c8db2e7101bdc31c522326 CVE-2024-7882,0,0,b5c42de5e52c278ea04660fcca138342ebdc5cf6a193722d2d8e37faac1f4a56,2024-11-26T13:15:16.430000 CVE-2024-7883,0,0,0fe05f5c235184a9378943a8ba395bb993464cf40f0c149f508c0664d21adb87,2024-11-01T12:57:03.417000 CVE-2024-7884,0,0,b7fc6693cf34d63278a8b8aeec24a1860c381de4a1b67124c745f170d4444fd2,2024-09-12T20:47:13.387000 -CVE-2024-7885,0,1,b1d006c4adef62b379b172b0f25e714211228c4c60c1fcab0ddb0c4310cf0710,2025-09-25T08:15:36.243000 +CVE-2024-7885,0,0,b1d006c4adef62b379b172b0f25e714211228c4c60c1fcab0ddb0c4310cf0710,2025-09-25T08:15:36.243000 CVE-2024-7886,0,0,f9c72d1d78fb8f84e70ae93153c412ad6382aa790420d2e239c31816ca263281,2025-01-10T19:15:38.143000 CVE-2024-7887,0,0,6fa3beb7655de3fccc40aa4dedca7277128b34a20692a93480a6fafd35294465,2024-08-19T12:59:59.177000 CVE-2024-7888,0,0,7adddaf84f97993fcce0457901f20c3cd1e7db2c5a211da9de67a114edd3aa2d,2024-09-27T13:45:33.030000 @@ -285152,6 +285152,7 @@ CVE-2025-10433,0,0,b43f24c0bce8de742cf431a2eb964b20478589fcc9f48e30948f4931605da CVE-2025-10434,0,0,566295c72d39946410c2309480fa8fc7d9aeb7c4d38aabeb863009539ff6b2c3,2025-09-15T15:21:42.937000 CVE-2025-10435,0,0,8fc0124e2d800034fdad74e6798e13f26fccc87632300a92587bdbcc0cebe3fc,2025-09-18T19:01:20.383000 CVE-2025-10436,0,0,f21ff44bf17938ec96a18cacce855adcf01291edfd9db2076ff92e727b5711b5,2025-09-20T02:53:02.110000 +CVE-2025-10438,1,1,f28b288cc3ae6df8ec2a7d7cf839c1a74932411af182d83387faf9fb76eb375c,2025-09-25T10:15:29.397000 CVE-2025-10439,0,0,1029fd6f848ac3e882b3ab9cbf5ee55679810a321f8eed0af85ef8621512b267,2025-09-17T14:18:55.093000 CVE-2025-1044,0,0,9f8be6c10874ff2755d0454f22f2307f6446f5aad49de046e6d1d7bccf9d96f4,2025-02-18T21:34:01.863000 CVE-2025-10440,0,0,3d43700e9f7bcfd9f5bd2f556ae6ed2f63c5b9922e8602e594be7f1fe4330af3,2025-09-15T15:21:42.937000 @@ -285437,6 +285438,9 @@ CVE-2025-10909,0,0,1eb03db3b4da894115bbf5f69e3a273a6a80a3e00cac6bb5e6337dc71eb89 CVE-2025-1091,0,0,41f3aeac640c3e0e17c6b04948a8dcf1ae635325d94a919fd15d739e41c450e8,2025-02-26T00:15:11.250000 CVE-2025-1093,0,0,a1af9eec6f0022f735b68b643db8d78e6b7244074d1a4213b525a706734f31b1,2025-04-21T14:23:45.950000 CVE-2025-1094,0,0,dca1378d2e11e054a0baff76bda52bd172b0e41af32ad66e0ce66e679989e2ec,2025-02-21T18:15:20.033000 +CVE-2025-10940,1,1,cc658f406e4858b727f47412604774306938318ca02ffa2593c76fb325c2d5e2,2025-09-25T11:15:45.757000 +CVE-2025-10941,1,1,d7b6d906818254f265af5cae57af4881b3c8c01134c4c42e477e1b5a292dd634,2025-09-25T11:15:47.120000 +CVE-2025-10942,1,1,b156651f98215b4bc886d3e7b2323de5e05d5c073a436985435549159baf5727,2025-09-25T11:15:47.367000 CVE-2025-1095,0,0,9a08709ed6821d4cec41bca98af9a9b4f3ba88066959c4b4eaf1ce8a45c37d8a,2025-08-13T00:36:44.613000 CVE-2025-1096,0,0,f369ee58dbaa6e142f3d975d8711cac15a0a303facd75e898c558f3e454cc535,2025-02-08T01:15:07.947000 CVE-2025-1097,0,0,2202b89d343208abc4d734355b4c7ffd6f25bdeae0a3549fe1a1a5c18a5619b5,2025-03-27T16:45:46.410000 @@ -287973,7 +287977,7 @@ CVE-2025-22102,0,0,aafb8aaf417740d4f2c9c765df7a7e9a98b393fab4d00aa5af81146235973 CVE-2025-22103,0,0,fb8519d5321e527190a8c8a6b633643e6f5493378674f983bdcd72a85048e32b,2025-09-09T17:15:42.080000 CVE-2025-22104,0,0,7cf96e0bd6c8158cd41d6bffca94da844b351f0d1f046837bb0b23aabda50794,2025-04-17T20:22:16.240000 CVE-2025-22105,0,0,d416fd0a91da32acf44347f05e6b130fd7dc099d9a192966e2becb8dc656f7c9,2025-04-17T20:22:16.240000 -CVE-2025-22106,0,0,58b5c438db044ac318d81d97fc1a400b2c328e1635898a13be242dba7fd715ef,2025-04-17T20:22:16.240000 +CVE-2025-22106,0,1,e7af8a854c91bb47edb7d20c8fb431f482183e778e52a5053c0cc5b7081e368c,2025-09-25T10:15:31.020000 CVE-2025-22107,0,0,f43241b797b93b66f1856dc15b2b7fde84ca92f9be815a74e5f73dc1924333ad,2025-04-17T20:22:16.240000 CVE-2025-22108,0,0,69ed97ae836362dfb59ef378023e4c29999a30bdb77cb0944e9239e9b0faaf08,2025-04-17T20:22:16.240000 CVE-2025-22109,0,0,6c017c0d55ef11fe8a3ae2a70d312106a6c60128a1f8df941c03aa07e42fbdaa,2025-04-17T20:22:16.240000 @@ -298020,7 +298024,7 @@ CVE-2025-38319,0,0,b99f4bc99fb4291170d8d94f412d81ae4fa0f61b1dd3b679b3668ac74d31a CVE-2025-3832,0,0,4341ec7053cdfcd8a390d90346badb808517e6099d45c1d26164d2b6c67b7ee1,2025-04-29T13:52:47.470000 CVE-2025-38320,0,0,cea7acfd482107795b44e5a1586f1acbd675f1fb55c57d89dab70b4c5975882c,2025-07-10T13:17:30.017000 CVE-2025-38321,0,0,30137b204209f422663400e75f784c76243a78a6b5760f6cf54fd416d0f4ad05,2025-07-10T13:17:30.017000 -CVE-2025-38322,0,0,1794d09719dfb1d30a40587be73e6a42f23496ba7648a6c77451fb4ddf7312f1,2025-08-28T15:15:48.370000 +CVE-2025-38322,0,1,8175cdaa5c2e78b3293daf1182b73618e59e5e079b513aa79edc63d8ea573b2b,2025-09-25T10:15:31.257000 CVE-2025-38323,0,0,662ad134d360b4f4ed533e4c8dc25d51a9aa9fd15632237fad78e93afc9f2e0e,2025-07-10T13:17:30.017000 CVE-2025-38324,0,0,6c3995b0f91a9b9a796b3c29eba968bc0d8625d9bd13837968ff84fd7925b333,2025-07-10T13:17:30.017000 CVE-2025-38325,0,0,dc1154ae7b98b51683ab3e328490ea82053fbacc920d2d67898ae74f89f11286,2025-08-01T09:15:32.903000 @@ -298443,7 +298447,7 @@ CVE-2025-38705,0,0,f0012e19e538168c0c44949292bcf1c2ff6a7e201d893be667cf6c34d6311 CVE-2025-38706,0,0,9fc70ae537eb0cd7992e377ca8ddddf2718a0cde0bd29baeef74e0f3fb774a91,2025-09-05T17:47:24.833000 CVE-2025-38707,0,0,df84d30c59ba3c33dfc928d6f46ec670fa3ba84432f7d47561d01338259b7758,2025-09-05T17:47:24.833000 CVE-2025-38708,0,0,185adc9394704d32f36bb7c9e4cacf068fe977394e1c29bbaf77d9ccd07ef353,2025-09-05T17:47:24.833000 -CVE-2025-38709,0,0,c68386aa68240518c2ab555d947ebaedc99e5d07339721280e0d46116d89c05b,2025-09-05T17:47:24.833000 +CVE-2025-38709,0,1,9f299ee755d13bfc4d0a8bf5b21ee1d859f24ffc149381fead78175d01485547,2025-09-25T10:15:31.403000 CVE-2025-3871,0,0,5fda6470f74db15cc9c4cca669930c49610170c12f61b6c7bb768f048b6a64f9,2025-07-16T14:58:59.837000 CVE-2025-38710,0,0,bf129ba7c1155ce7d95e4e24cb25dbd28f3377fc922e93594b842ad6012f3717,2025-09-05T17:47:24.833000 CVE-2025-38711,0,0,4f64675be0142d4c4c03d9a3788a9d03d3c81fbd13bed743f8b7f5705c1fa901,2025-09-05T17:47:24.833000 @@ -298982,7 +298986,7 @@ CVE-2025-39812,0,0,36cf6ac3d052b4576588989e95cab54f6ff3d49be2386555e920dadfc7d74 CVE-2025-39813,0,0,10be887a6f3b812f6d91343984b5c7f3fc195bb87a1133b0c4631a203d4bdc25,2025-09-18T13:43:34.310000 CVE-2025-39814,0,0,e5ec26493c90eb0fa04a6cf686051854df2eed7694e83e12e598d4c4e78f0a75,2025-09-18T13:43:34.310000 CVE-2025-39815,0,0,b47d5d4dda987a5a07fbce80c7af6ee9acad4155c8b1416f4499dcaaaf37ded0,2025-09-18T13:43:34.310000 -CVE-2025-39816,0,0,37eb66530fb8034c2d7028d1e8f0e0ba0e706d040274652e6360b539a4611408,2025-09-18T13:43:34.310000 +CVE-2025-39816,0,1,0a8fce17ec90251c12fae65ed47eaef55ebf5d8b983e26cfa098881e4a94ee3b,2025-09-25T10:15:31.527000 CVE-2025-39817,0,0,8c0aa42eb858903798ded779a9c84f5a5a3de7eefbc134edc21b475bf645111f,2025-09-18T13:43:34.310000 CVE-2025-39818,0,0,f8b371817bbeecfb6858c8efeefa1bc553524d565cb046c7915fbb3a2e0ffb9e,2025-09-18T13:43:34.310000 CVE-2025-39819,0,0,fdb9158f179e199933eac8fdb935f0c954d5769057b68d67ee76bf1696fa44ab,2025-09-18T13:43:34.310000 @@ -308461,7 +308465,7 @@ CVE-2025-6192,0,0,483547ea6319c95642872363e4e6436ee4f0ce08e6f3ace0cccb8a4053638f CVE-2025-6193,0,0,1b9eea71b477bf9c4e7b9bd5cc5d3e3853a840bafa78d229ba7a22652ff2fec9,2025-09-02T19:15:32.700000 CVE-2025-6196,0,0,ba4eb4f2cb8082e0f1d30085aa97c2b8c1f0646682e0a11fdab60e191c75b93f,2025-08-12T12:48:43.230000 CVE-2025-6197,0,0,ed52a546a3f13ce1b5e199dd6d87c3691e93f6fcb6a6040c167bb160cdaae7ed,2025-07-22T13:06:27.983000 -CVE-2025-6198,0,0,ecbe38c20b8822d20251d9007ce4cc4cbc1202ea8b10458e48fe78037e687690,2025-09-19T16:00:27.847000 +CVE-2025-6198,0,1,db1c039487e8b4d4c3b8081066603ccfd944901fc68c285d492da4db9add531a,2025-09-25T10:15:31.670000 CVE-2025-6199,0,0,4b699fc3d41c1cd5ec554598f0043d4faabf4d3adf3f9e852ac413108625db8b,2025-08-21T01:16:43.190000 CVE-2025-6200,0,0,9a910a38b88392376f5190b20a5562991881e482a016d8b5bec3bcfcf4cf4f4e,2025-07-17T01:04:44.910000 CVE-2025-6201,0,0,09953b11a7588a9edc2f3925b0cbb84add185ea803d7765dc4a2a786cd413a85,2025-06-23T20:16:59.783000 @@ -309950,7 +309954,7 @@ CVE-2025-7933,0,0,9712a3b42ffd9d0cce1b92d6860fa09463158a947d61cb746cfd9213e292e4 CVE-2025-7934,0,0,46c06809130887af133e1af727e3a118a56a04f817ff6f91a8209cd1f0235382,2025-07-22T13:05:40.573000 CVE-2025-7935,0,0,87e9d0314bc99bb703a196588ab292657453b812548f39ef2e433d9dbbe87a66,2025-07-22T13:05:40.573000 CVE-2025-7936,0,0,2226fe9a4b5afffaddadd02bcf0588d877521548899b3f79c4950079fe35c950,2025-07-22T13:05:40.573000 -CVE-2025-7937,0,0,50a61f1b7e586014c29616ba113527df53a9ac8abf7353bd0f5dd6d40dae91b2,2025-09-19T16:00:27.847000 +CVE-2025-7937,0,1,314a5062fd4e35d59b66d894fa10a4a13950dcf28fbc963df3a135847651d17a,2025-09-25T10:15:31.877000 CVE-2025-7938,0,0,044b542cdad617c01a4fbddaeb7bc5ebb5bd34bd05771495f238e4a8aded9376,2025-07-22T13:05:40.573000 CVE-2025-7939,0,0,64b0b0662f7d933b92291442b002ddafaaef2f717b195855d85b8861f909f3cf,2025-07-22T13:05:40.573000 CVE-2025-7940,0,0,c8d0889e71151cd036609a253054f266e0036ad8a9ce53bfb32b4af9439b922b,2025-07-22T13:05:40.573000