Auto-Update: 2025-10-29T11:00:12.541573+00:00

This commit is contained in:
cad-safe-bot committed 2025-10-29 11:03:59 +00:00
1 parent 73c9b0bc9c
commit a2dd2b01fd
36 files changed
+1320 -13

No files matched your search

@@ -0,0 +1,60 @@
{
"id": "CVE-2015-10146",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T10:15:35.383",
"lastModified": "2025-10-29T10:15:35.383",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/wp-responsive-slider-with-lightbox",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/70f04f90-a0b7-46d1-85da-e898a6981fa2?source=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2015-10147",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T10:15:36.587",
"lastModified": "2025-10-29T10:15:36.587",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/easy-testimonial-rotator",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f44483df-e50d-4dcf-8a6f-499e2bd05b89?source=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-12058",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:35.500",
"lastModified": "2025-10-29T09:15:35.500",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery (SSRF).\n\n\nThis vulnerability stems from the way the StringLookup layer is handled during model loading from a specially crafted .keras archive. The constructor for the StringLookup layer accepts a vocabulary argument that can specify a local file path or a remote file path.\n\n * Arbitrary Local File Read: An attacker can create a malicious .keras file that embeds a local path in the StringLookup layer's configuration. When the model is loaded, Keras will attempt to read the content of the specified local file and incorporate it into the model state (e.g., retrievable via get_vocabulary()), allowing an attacker to read arbitrary local files on the hosting system.\n\n\n * Server-Side Request Forgery (SSRF): Keras utilizes tf.io.gfile for file operations. Since tf.io.gfile supports remote filesystem handlers (such as GCS and HDFS) and HTTP/HTTPS protocols, the same mechanism can be leveraged to fetch content from arbitrary network endpoints on the server's behalf, resulting in an SSRF condition.\n\n\nThe security issue is that the feature allowing external path loading was not properly restricted by the safe_mode=True flag, which was intended to prevent such unintended data access."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://github.com/keras-team/keras/pull/21751",
"source": "[email protected]"
},
{
"url": "https://github.com/keras-team/keras/security/advisories/GHSA-qg93-c7p6-gg7f",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12450",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T10:15:36.903",
"lastModified": "2025-10-29T10:15:36.903",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/litespeedtech/lscache_wp/commit/3d473f44d37ec2a834162ff1d86c017e9ae67db3",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=cve",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-58711",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:37.343",
"lastModified": "2025-10-29T09:15:37.343",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-8-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-58939",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:37.903",
"lastModified": "2025-10-29T09:15:37.903",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-7-5-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-60075",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:38.077",
"lastModified": "2025-10-29T09:15:38.077",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress hpbseo allows Reflected XSS.This issue affects hpb seo plugin for WordPress: from n/a through <= 3.0.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hpbseo/vulnerability/wordpress-hpb-seo-plugin-for-wordpress-plugin-3-0-1-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64194",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:38.593",
"lastModified": "2025-10-29T09:15:38.593",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Eduma eduma allows Stored XSS.This issue affects Eduma: from n/a through <= 5.7.6."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/eduma/vulnerability/wordpress-eduma-theme-5-7-6-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64195",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:38.793",
"lastModified": "2025-10-29T09:15:38.793",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress Eduma eduma allows PHP Local File Inclusion.This issue affects Eduma: from n/a through <= 5.7.6."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/eduma/vulnerability/wordpress-eduma-theme-5-7-6-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64197",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:39.277",
"lastModified": "2025-10-29T09:15:39.277",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64199",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:39.490",
"lastModified": "2025-10-29T09:15:39.490",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through <= 5.3.2."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/wpresidence/vulnerability/wordpress-wpresidence-theme-5-3-2-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64200",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:39.960",
"lastModified": "2025-10-29T09:15:39.960",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Stored XSS.This issue affects Email Template Customizer for WooCommerce: from n/a through <= 1.2.17."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/email-template-customizer-for-woo/vulnerability/wordpress-email-template-customizer-for-woocommerce-plugin-1-2-17-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64201",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:40.150",
"lastModified": "2025-10-29T09:15:40.150",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.12."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-13-12-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64202",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:40.623",
"lastModified": "2025-10-29T09:15:40.623",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/sahifa/vulnerability/wordpress-sahifa-theme-5-8-6-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64204",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:40.773",
"lastModified": "2025-10-29T09:15:40.773",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeSphere SmartMag smart-mag allows Stored XSS.This issue affects SmartMag: from n/a through <= 10.3.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/smart-mag/vulnerability/wordpress-smartmag-theme-10-3-1-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64208",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:41.283",
"lastModified": "2025-10-29T09:15:41.283",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through <= 1.1.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jannah-extensions/vulnerability/wordpress-jannah-extensions-plugin-1-1-4-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64210",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:41.433",
"lastModified": "2025-10-29T09:15:41.433",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64211",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:42.010",
"lastModified": "2025-10-29T09:15:42.010",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability-2",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64212",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:42.157",
"lastModified": "2025-10-29T09:15:42.157",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64216",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:42.687",
"lastModified": "2025-10-29T09:15:42.687",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/smart-mag/vulnerability/wordpress-smartmag-theme-10-3-0-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64219",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:42.867",
"lastModified": "2025-10-29T09:15:42.867",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/business-directory-plugin/vulnerability/wordpress-business-directory-plugin-6-4-18-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64220",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:43.393",
"lastModified": "2025-10-29T09:15:43.393",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReyCommerce Rey Core rey-core allows Stored XSS.This issue affects Rey Core: from n/a through <= 3.1.8."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rey-core/vulnerability/wordpress-rey-core-plugin-3-1-8-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64226",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:43.567",
"lastModified": "2025-10-29T09:15:43.567",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cross Site Request Forgery.This issue affects Stockie Extra: from n/a through <= 1.2.11."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/stockie-extra/vulnerability/wordpress-stockie-extra-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64228",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:44.077",
"lastModified": "2025-10-29T09:15:44.077",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-497"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/affs/vulnerability/wordpress-sumo-affiliates-pro-plugin-11-0-0-sensitive-data-exposure-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64229",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:44.250",
"lastModified": "2025-10-29T09:15:44.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sprout-invoices/vulnerability/wordpress-client-invoicing-by-sprout-invoices-plugin-20-8-7-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64234",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:44.763",
"lastModified": "2025-10-29T09:15:44.763",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/evergreen-content-poster/vulnerability/wordpress-evergreen-content-poster-plugin-1-4-5-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64283",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:44.957",
"lastModified": "2025-10-29T09:15:44.957",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through <= 1.6.7."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-1-6-7-insecure-direct-object-references-idor-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64284",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:45.423",
"lastModified": "2025-10-29T09:15:45.423",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through <= 1.1.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/majestic-support/vulnerability/wordpress-majestic-support-plugin-1-1-1-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64285",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:45.573",
"lastModified": "2025-10-29T09:15:45.573",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpress-premmerce-wholesale-pricing-for-woocommerce-plugin-1-1-10-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64286",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:46.097",
"lastModified": "2025-10-29T09:15:46.097",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through <= 3.13.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/wprentals/vulnerability/wordpress-wp-rentals-theme-3-13-1-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64288",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:46.257",
"lastModified": "2025-10-29T09:15:46.257",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through <= 1.3.19."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce/vulnerability/wordpress-premmerce-plugin-1-3-19-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64289",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:46.760",
"lastModified": "2025-10-29T09:15:46.760",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64290",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:46.917",
"lastModified": "2025-10-29T09:15:46.917",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-64291",
"sourceIdentifier": "[email protected]",
"published": "2025-10-29T09:15:47.430",
"lastModified": "2025-10-29T09:15:47.430",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through <= 1.0.13."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-cross-site-scripting-xss-vulnerability",
"source": "[email protected]"
}
]
}
+30 -9
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-29T09:00:11.302442+00:00
2025-10-29T11:00:12.541573+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-29T08:15:30.493000+00:00
2025-10-29T10:15:36.903000+00:00
```
### Last Data Feed Release
@@ -33,23 +33,44 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
316056
316090
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `34`
- [CVE-2023-7320](CVE-2023/CVE-2023-73xx/CVE-2023-7320.json) (`2025-10-29T07:15:33.493`)
- [CVE-2025-11702](CVE-2025/CVE-2025-117xx/CVE-2025-11702.json) (`2025-10-29T07:15:37.713`)
- [CVE-2025-64197](CVE-2025/CVE-2025-641xx/CVE-2025-64197.json) (`2025-10-29T09:15:39.277`)
- [CVE-2025-64199](CVE-2025/CVE-2025-641xx/CVE-2025-64199.json) (`2025-10-29T09:15:39.490`)
- [CVE-2025-64200](CVE-2025/CVE-2025-642xx/CVE-2025-64200.json) (`2025-10-29T09:15:39.960`)
- [CVE-2025-64201](CVE-2025/CVE-2025-642xx/CVE-2025-64201.json) (`2025-10-29T09:15:40.150`)
- [CVE-2025-64202](CVE-2025/CVE-2025-642xx/CVE-2025-64202.json) (`2025-10-29T09:15:40.623`)
- [CVE-2025-64204](CVE-2025/CVE-2025-642xx/CVE-2025-64204.json) (`2025-10-29T09:15:40.773`)
- [CVE-2025-64208](CVE-2025/CVE-2025-642xx/CVE-2025-64208.json) (`2025-10-29T09:15:41.283`)
- [CVE-2025-64210](CVE-2025/CVE-2025-642xx/CVE-2025-64210.json) (`2025-10-29T09:15:41.433`)
- [CVE-2025-64211](CVE-2025/CVE-2025-642xx/CVE-2025-64211.json) (`2025-10-29T09:15:42.010`)
- [CVE-2025-64212](CVE-2025/CVE-2025-642xx/CVE-2025-64212.json) (`2025-10-29T09:15:42.157`)
- [CVE-2025-64216](CVE-2025/CVE-2025-642xx/CVE-2025-64216.json) (`2025-10-29T09:15:42.687`)
- [CVE-2025-64219](CVE-2025/CVE-2025-642xx/CVE-2025-64219.json) (`2025-10-29T09:15:42.867`)
- [CVE-2025-64220](CVE-2025/CVE-2025-642xx/CVE-2025-64220.json) (`2025-10-29T09:15:43.393`)
- [CVE-2025-64226](CVE-2025/CVE-2025-642xx/CVE-2025-64226.json) (`2025-10-29T09:15:43.567`)
- [CVE-2025-64228](CVE-2025/CVE-2025-642xx/CVE-2025-64228.json) (`2025-10-29T09:15:44.077`)
- [CVE-2025-64229](CVE-2025/CVE-2025-642xx/CVE-2025-64229.json) (`2025-10-29T09:15:44.250`)
- [CVE-2025-64234](CVE-2025/CVE-2025-642xx/CVE-2025-64234.json) (`2025-10-29T09:15:44.763`)
- [CVE-2025-64283](CVE-2025/CVE-2025-642xx/CVE-2025-64283.json) (`2025-10-29T09:15:44.957`)
- [CVE-2025-64284](CVE-2025/CVE-2025-642xx/CVE-2025-64284.json) (`2025-10-29T09:15:45.423`)
- [CVE-2025-64285](CVE-2025/CVE-2025-642xx/CVE-2025-64285.json) (`2025-10-29T09:15:45.573`)
- [CVE-2025-64286](CVE-2025/CVE-2025-642xx/CVE-2025-64286.json) (`2025-10-29T09:15:46.097`)
- [CVE-2025-64288](CVE-2025/CVE-2025-642xx/CVE-2025-64288.json) (`2025-10-29T09:15:46.257`)
- [CVE-2025-64289](CVE-2025/CVE-2025-642xx/CVE-2025-64289.json) (`2025-10-29T09:15:46.760`)
- [CVE-2025-64290](CVE-2025/CVE-2025-642xx/CVE-2025-64290.json) (`2025-10-29T09:15:46.917`)
- [CVE-2025-64291](CVE-2025/CVE-2025-642xx/CVE-2025-64291.json) (`2025-10-29T09:15:47.430`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `0`
- [CVE-2025-41443](CVE-2025/CVE-2025-414xx/CVE-2025-41443.json) (`2025-10-29T08:15:30.493`)
- [CVE-2025-8515](CVE-2025/CVE-2025-85xx/CVE-2025-8515.json) (`2025-10-29T07:15:37.913`)
## Download and Usage
+38 -4
View File
@@ -74765,6 +74765,8 @@ CVE-2015-10141,0,0,e1f491387bc9f14b0ed5c1fc04211d6976c1dbe41f0d96019a2cb79065cee
CVE-2015-10142,0,0,1a8b2ed230ce0ad8fefbef0a0cf7219d83335e194da7a5b6b3e86cef2e444857,2025-07-29T14:14:55.157000
CVE-2015-10143,0,0,6bfe43faa34d12007882598ab1d4881a3769765c1e7f6b1be43c44464ead10e5,2025-07-25T15:29:19.837000
CVE-2015-10144,0,0,8354bd1b374cfa57e526efdecaa34bb26658c923d5d563a96128dfaabc8712f3,2025-07-25T15:29:19.837000
CVE-2015-10146,1,1,77fdd5fb1a2d8d9241c9f776d9cdf785adbb1b148a8aee71226cab6701973fab,2025-10-29T10:15:35.383000
CVE-2015-10147,1,1,712ab8ed00dd1dd6157494aa312a8dec9a869e3d239e1d246a55c37bd948794f,2025-10-29T10:15:36.587000
CVE-2015-1015,0,0,b49e3699f4ec89619375a9517e2b5f9d50c3487fa75c75c6378a9b5bce91112f,2025-04-12T10:46:40.837000
CVE-2015-1026,0,0,4e8b5d97c4f066ca1c38fb4a8d17ab347344fb9b5738d5ccdeb08af100a84224,2025-04-12T10:46:40.837000
CVE-2015-1027,0,0,8656357f461ae80057dd5e6360827a63d9921f378a4cdd3e8450b47a52c65e0c,2025-04-20T01:37:25.860000
@@ -245855,7 +245857,7 @@ CVE-2023-7307,0,0,ded2769b677cda55cfcced203b2368abf2f50cf733dd3e2fb23b49d4a91408
CVE-2023-7308,0,0,7aac781f6563bb2c8720d73cbaef3017fdb553beb966f15a8bfe4b78e9945076,2025-09-09T18:44:29.077000
CVE-2023-7309,0,0,773ef803c71f62f4a6d5a98446e20d994384c90ae13e1e89e25866da6b0c5749,2025-08-29T16:24:09.860000
CVE-2023-7311,0,0,f9c2434353cfc2d7f3aa318266b91a3c2a8cea5f5391407b36ffe5f0c40fd09a,2025-10-16T15:29:11.563000
CVE-2023-7320,1,1,80b576c289e85520a27b5a2de80ed0756cb17adb643d5425001eb6ca30eeecea,2025-10-29T07:15:33.493000
CVE-2023-7320,0,0,80b576c289e85520a27b5a2de80ed0756cb17adb643d5425001eb6ca30eeecea,2025-10-29T07:15:33.493000
CVE-2024-0001,0,0,a3803d5da55711ef7259e1abe303432c001f8021792dbcb3d58baa5f1fc32304,2024-09-27T14:08:57.327000
CVE-2024-0002,0,0,62be75bb877da347c07ffaf17dbd26e07bdfc8e85f8e86a969ec56eaba9c8a5a,2024-09-27T14:13:24.427000
CVE-2024-0003,0,0,e729f8f70fc9442e3de56e6fd3e2bd5edc7ef9717eccd1e1bee2f10d8647c9de,2024-09-27T14:23:58.243000
@@ -286792,7 +286794,7 @@ CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1
CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000
CVE-2025-1170,0,0,f7c4bc09181f11b6c73f7828607020c9f0e484c622ceb324f78d52675a120ce6,2025-03-03T16:37:36.117000
CVE-2025-11701,0,0,7ad5d4304ec1eb74222638c60337f5c4ebd0e056bdc09bf379e5bc0bd73ddcdc,2025-10-16T15:28:59.610000
CVE-2025-11702,1,1,eaccf76926a1b605416f7e3b3c42513e596d33233edddfb0c65cfee1b05538f9,2025-10-29T07:15:37.713000
CVE-2025-11702,0,0,eaccf76926a1b605416f7e3b3c42513e596d33233edddfb0c65cfee1b05538f9,2025-10-29T07:15:37.713000
CVE-2025-11703,0,0,2791f342fb924d21bee11681cdfdad8c72de87bccc05788f20d48eddae5b19e8,2025-10-21T19:31:25.450000
CVE-2025-11705,0,0,b89e7159a3c0f13d68ead00f6d97207b9562db34cc76e3ee10c26d4235ac5806,2025-10-29T05:15:36.817000
CVE-2025-11708,0,0,e14e991c00f28b97949dffd986586786622822511f11e1f385a0e30de0fe00e4,2025-10-17T13:12:11.210000
@@ -286954,6 +286956,7 @@ CVE-2025-12034,0,0,335df2effed88eabffe537a29cd7e00114e8dea2927f6cb68f5c3fa61e2cb
CVE-2025-1204,0,0,1a6a6d6d7e9c4d6739bac4886c5ffe95dd752abb1877293a1f41dffddd75c21f,2025-02-25T17:15:14.057000
CVE-2025-12044,0,0,59653891f2f12255dcfdcb980ddb83d0909cf1e8ca8bd6fe2d08a6dad521a4e5,2025-10-27T13:20:15.637000
CVE-2025-12055,0,0,ffa2016177ff5b4063d313e0422caf86da735c50d897577452840df0f1d39f6a,2025-10-27T19:16:00.800000
CVE-2025-12058,1,1,13e7b7d7047d41a1857a73e1cdf155fcebef177a5267dceeef9bbd3ea8ad65c2,2025-10-29T09:15:35.500000
CVE-2025-1206,0,0,ea94e082f0fb2c3e9cbf9071800bfcaa07133d59e9c405a94dd3f8f199626042,2025-02-20T20:39:04.393000
CVE-2025-1207,0,0,7d124cbc886c8b13b8ddd3ab6b7b5525d0938d2d0afc4dcd7d8089b241a520f5,2025-02-12T16:15:44.393000
CVE-2025-12072,0,0,ea49e76e1b67e7487446f68282863e034a757c90e5684c8c63656e097bf362d9,2025-10-27T13:20:15.637000
@@ -287153,6 +287156,7 @@ CVE-2025-12425,0,0,393077517afe78ca3a864831e09581cbebebb3b07f1e3d85ec2cffe35c821
CVE-2025-1243,0,0,b36908327b1b41fa664c4a39c71934592fd1d75bcc40ba67f7d64ed64955da7e,2025-02-12T01:15:09.073000
CVE-2025-1244,0,0,ca7dde03c53f2f538c0b12fb599e84ae66a426ff6488b7e67f4989aba1f7a6f7,2025-03-13T14:15:34.977000
CVE-2025-1245,0,0,02f6531ee412acf536871fa74be895340813b85f3805e0a3e6f8a053107da143,2025-05-16T14:42:18.700000
CVE-2025-12450,1,1,f1a5d4adffb5fc3638655ad3feeef4dc86851537189a2bbfdbb95ae22690b508,2025-10-29T10:15:36.903000
CVE-2025-1246,0,0,ba71751fa27047f7c79c3e8dc96ae22f8996ca289dfa9df416ee4c290be2b815,2025-07-02T21:27:05.870000
CVE-2025-1247,0,0,413d4bcd6e00b55487b15f2b541fa31d8a6169438afa6345f0107f85b8ddc727,2025-03-03T14:15:34.120000
CVE-2025-1249,0,0,6a7f3a2500b58cdcea7c9e46385c15368818268591d8a8d12de3eb4b42bd3d72,2025-02-26T15:15:24.470000
@@ -301728,7 +301732,7 @@ CVE-2025-41439,0,0,ec4f5bce645ac5c77efeb7d3dcb9e00136db17220a76430708d9edf21696d
CVE-2025-4144,0,0,ed44a24e80e1487d547bfe32499c8ba4450309e0e9d0acd2df7ebfcd519c74a9,2025-05-12T19:39:31.053000
CVE-2025-41441,0,0,3b51a802d5e876ef5e3db952c79744bda892bc6a2133cce8cddd52ad9c2cfab2,2025-06-03T15:42:40.710000
CVE-2025-41442,0,0,75992fff3e90ec166ea144cedbb2f28fcf7f60ce1fa8d0fb9c7afc44dcaae4a0,2025-07-23T19:20:42.243000
CVE-2025-41443,0,1,ea618d044ae2197f97da4f5155b23b820a856ee8ae231f2dc70d29a7c813df18,2025-10-29T08:15:30.493000
CVE-2025-41443,0,0,ea618d044ae2197f97da4f5155b23b820a856ee8ae231f2dc70d29a7c813df18,2025-10-29T08:15:30.493000
CVE-2025-41444,0,0,45adb8bb8356468f3459fd14d45ba03aaf4d37562fdb66c71b58ce7f5e0c7cd2,2025-06-16T15:14:06.487000
CVE-2025-4145,0,0,fa58d4933201d65cc9b44e9816af7313e719b690552f69a8a0e4a077c4fb877f,2025-05-12T19:39:15.540000
CVE-2025-41450,0,0,be33119acb525e2f9b796f5260308750e8ca72ef64aa0a04091a0e710bb236e0,2025-08-27T08:15:33.290000
@@ -310767,6 +310771,7 @@ CVE-2025-58702,0,0,5dd6eb79321fe373649fd195e481582461cc6e79072b59d848a5440a8b370
CVE-2025-58703,0,0,fc890405e6a4288e62076d969959e8de43b3c77266b60601e23a3ad63a898f34,2025-09-22T21:22:16.313000
CVE-2025-58704,0,0,3df6a59d30f39a865f80c59e815f3ba4ecc80c278085f624251d90542e0cccb3,2025-09-22T21:22:16.313000
CVE-2025-5871,0,0,cf8b155d3f5676937055fc70fc356be425d106281694dba873cdc0b7b3134e0e,2025-06-09T12:15:47.880000
CVE-2025-58711,1,1,3b36db35e246e6c57bddb89bffa21fa5c4f19883e123acc83d491ac498c3511d,2025-10-29T09:15:37.343000
CVE-2025-58712,0,0,255b13af4d9458e1dbfb980d51e524ddbffdf43ccddf81eee2ab973c98ab416b,2025-10-22T21:12:32.330000
CVE-2025-58714,0,0,149183e4f461d055330fa40744a6b8f8a32dd19395e7eeba1c4b6d89dd88d5d2,2025-10-14T19:35:56.913000
CVE-2025-58715,0,0,24918f1bd3022fd998c93ca5e3302c4a6ff5be2feac1db29f3413d10524917dc,2025-10-14T19:35:56.913000
@@ -310962,6 +310967,7 @@ CVE-2025-58919,0,0,e3ca77d371de5405e99f738acd3b072e5463eb63c56c31ab8794f93a3628c
CVE-2025-5892,0,0,039d5a5f1b878e6a95db2203c9250e58ccec5f811f3e5b5a79a5b1e656493ef9,2025-07-10T16:24:57.087000
CVE-2025-58921,0,0,4601847f66f8aededa8c9f1895b7198792d953e15638ee0b55e6cd0c98d9dd6d,2025-10-23T16:16:41.313000
CVE-2025-5893,0,0,b61b07be300b899b567084a8ad5ced3784281d0bce8aa355a3665ed584929e11,2025-06-09T12:15:47.880000
CVE-2025-58939,1,1,7a35e023177a813c5d4494a68b2c6ab9d2080c0ecc809aa85e9f174acdc55647,2025-10-29T09:15:37.903000
CVE-2025-5894,0,0,f84a3a7402232a02746652be917d286ca270709ff85e33a9bd0da14ddf6b9deb,2025-06-09T12:15:47.880000
CVE-2025-5895,0,0,1f655dba6b0917ab2940289673fcc8ac2dbeb06dff17479124fd9e4dba6f24cc,2025-07-10T16:26:17.607000
CVE-2025-58955,0,0,d786c5c5817d0378304a5e298dd8b25ab4e3515912c7c98ec801563243730a36,2025-10-22T21:12:32.330000
@@ -311646,6 +311652,7 @@ CVE-2025-60041,0,0,6ec84dde702144ca21e9afab8779d8765dce2e7d68c46aa5e143718f3486e
CVE-2025-6005,0,0,9a2ac8246f422ef5614eb749e32675eaa624d97ea333814ae3828209772ff515,2025-06-20T12:48:20.400000
CVE-2025-6006,0,0,7a386c846906f2e1152f82f788f56ad0aa39222b613fc15254d86bd6e33a6943,2025-06-20T12:46:43.687000
CVE-2025-6007,0,0,ad7217a46edf88f3122f03c09e2fdcfd31382468cbe1002c4a5de402899399f2,2025-06-19T01:26:45.850000
CVE-2025-60075,1,1,78a41aa4bfb3ecd779624006a05bb22f0e5922d8de7cd34f5ea43a0a773c68b5,2025-10-29T09:15:38.077000
CVE-2025-6008,0,0,cf45d1b8877307f98a5e962959db4dd8b70df84c99522375a10c3d04cde0826f,2025-06-19T01:26:01.867000
CVE-2025-6009,0,0,78abb2d4f36e6029b865859c44e8b3b2ae426316eb8bf2e15ca3e33565c4ca16,2025-06-19T01:25:17.743000
CVE-2025-60092,0,0,6081eb9d936470ede53fe67b2ce64cbdb0f319883658a54dce60704ad28adf84,2025-09-26T14:32:19.853000
@@ -312979,16 +312986,43 @@ CVE-2025-64162,0,0,7aa3c1bc9862cbf9d76d980061ecf999b965ea04dcb95f5a867d3a45a6746
CVE-2025-6417,0,0,5fc9eb7d4ff925279bc28755909d00f7292cf787d506364151545ca582306f41,2025-06-24T14:41:39.197000
CVE-2025-6418,0,0,467930084b2995640103e80484946461d030e9474f7e698d0adcc4a7d0d356d9,2025-10-23T20:06:00.793000
CVE-2025-6419,0,0,e0f79cc69c3b952ad883b4cedc0662567b41e25afc0f850c7a45f799e90ccca8,2025-10-23T20:06:00.793000
CVE-2025-64194,1,1,3e65619915df10b74c7cd7f4b93c8cbb84771ea640422e7154556063ea214e8e,2025-10-29T09:15:38.593000
CVE-2025-64195,1,1,cd3f7bf2f189203929e2d5768d450a1e00c5b742261276cc57df4a8960db3acd,2025-10-29T09:15:38.793000
CVE-2025-64197,1,1,188dbca8c571f8b276d25d1a67e8ea0938b43715814e72b9c23e58103928047b,2025-10-29T09:15:39.277000
CVE-2025-64199,1,1,f57f30977a17001f4d5268fdc114472e2596a2bf4c2724f51d86694fca26a8fb,2025-10-29T09:15:39.490000
CVE-2025-6420,0,0,99a9cc305768d1122f83805c03e03a5beab519b0519d59a998b368f51edb15c8,2025-10-23T20:06:00.793000
CVE-2025-64200,1,1,5c344d6f2356e6bb7d65249774fd2912505271c966a041c5710d2c6373f4e4c1,2025-10-29T09:15:39.960000
CVE-2025-64201,1,1,7f0ae569f91507dd6c57351e90e37448f3841a388a883580942db4748bec5538,2025-10-29T09:15:40.150000
CVE-2025-64202,1,1,05d174014b0083cd8bce812f3cadb4f0699ecf9991a6b2ba0e03aaecc4f0601d,2025-10-29T09:15:40.623000
CVE-2025-64204,1,1,311f67b70adffd3d15bc1aaeac7b8ff11139bdcb7b1dc44d2f0b77a6faf713a0,2025-10-29T09:15:40.773000
CVE-2025-64208,1,1,6a73bb907e01d9921a17454aebfb409b1f6aa79354b69833d5163043da209113,2025-10-29T09:15:41.283000
CVE-2025-6421,0,0,a383f5c76e5804cb0fd759061f62bf69bf40b27eff38dad79a593480f81154e4,2025-10-23T20:06:00.793000
CVE-2025-64210,1,1,0e171915e52bdde8f7f46c06f4bee3b84ba53f97a3e658f8705555bea24bdf28,2025-10-29T09:15:41.433000
CVE-2025-64211,1,1,0d63d7ba246c2802c4460ec448cbf73216db87a2cbc53e4cacd5ad188aae0e32,2025-10-29T09:15:42.010000
CVE-2025-64212,1,1,b3c717ea14b45bb1026677ff8e102e35731e79ba2f2d89e77c5a7b4bc5be7775,2025-10-29T09:15:42.157000
CVE-2025-64216,1,1,bfff9843f10bab126424ebb495fb11badaceb4cf524e3789518de2ca891f63b8,2025-10-29T09:15:42.687000
CVE-2025-64219,1,1,d55c9145881ce18a22f777e0276296aa7d507088dce68c7da478c744dc53ae6c,2025-10-29T09:15:42.867000
CVE-2025-6422,0,0,b5bb87a55ad52736bcc24be8713e2086821b4454f2e12e2c901389f24f632355,2025-06-25T19:49:55.057000
CVE-2025-64220,1,1,a724e1742a04dd9eb1d1209f282597cd2e2c58f1a1da33a566c3a952eb46bce2,2025-10-29T09:15:43.393000
CVE-2025-64226,1,1,9a08146f135372fb95a8f8967112e0d86968401dfea86483d36100b88dbd25f4,2025-10-29T09:15:43.567000
CVE-2025-64228,1,1,655d3b0f7d7f126a7002cf79147a97979b938ac1f93851b6a7f0a19a3dfd7af1,2025-10-29T09:15:44.077000
CVE-2025-64229,1,1,1e1a5788a237083dc0d313ca9db515d788fdb340b270e0ef01c77d4c9d7ecc9f,2025-10-29T09:15:44.250000
CVE-2025-6423,0,0,cf6cba80504a38ff7a29b3a0381ee064afa96243418f65dbb8389db5a1b6f90d,2025-07-15T13:14:49.980000
CVE-2025-64234,1,1,71e6159e113ecbdcc5846d19fd407047ed34f213abe39709f96f4f444d9c0b0c,2025-10-29T09:15:44.763000
CVE-2025-6424,0,0,1e63adf2085979e6f873069e1f25dbb0b0c105bf60d8b2c9c09f02e2fce4efb4,2025-07-02T21:15:41.517000
CVE-2025-6425,0,0,ed359c9a5ea670caaf19bf5db1eea3fbd4b9675f58a90c4202f824b4c3ec28c1,2025-07-03T16:23:06.293000
CVE-2025-6426,0,0,2af2d5afaa1814b44039ab749a84b5c30afc9779f689158db03907a7ba8065fb,2025-07-14T19:15:33.737000
CVE-2025-6427,0,0,544bf44f0c21c61ec897832022f8bf1a9d5cbdc41357940e72546a9f2c5d1b6f,2025-07-14T19:15:34.340000
CVE-2025-6428,0,0,79c9c55632aa88792fcd79ab2357183f8e1b92ce99d240a9598dba3f2e7140ed,2025-07-03T16:42:54.900000
CVE-2025-64283,1,1,233a647c86cf7354aa69ca872058be554cc2808e9138a0a1fa179537115f47fe,2025-10-29T09:15:44.957000
CVE-2025-64284,1,1,5f82c5765b7bb0443362c15ddf990abd8472f1610d250b1448707b32e73d6cda,2025-10-29T09:15:45.423000
CVE-2025-64285,1,1,8871548d306989d2c33357160e2bd6a2033f4d5a9ba50e959730838ff9a4ef22,2025-10-29T09:15:45.573000
CVE-2025-64286,1,1,a074c189abd3eeb58234f196279c88e0fb82be9d2a8a5e87760b6517929cb7dc,2025-10-29T09:15:46.097000
CVE-2025-64288,1,1,1776581e2d7d5ba52a421b29d68ce487edfa926d7d85740deef81fcf4369520d,2025-10-29T09:15:46.257000
CVE-2025-64289,1,1,951b7af5e4a947aa2667e1d994b8c7418f23d78da09b394f784753870fe9b2fc,2025-10-29T09:15:46.760000
CVE-2025-6429,0,0,babe5529d5b2b60f2134a98f36372be5e2d7a76fa03abad35735d86c70b5d8af,2025-07-14T19:15:34.500000
CVE-2025-64290,1,1,3e730eb24daf27d87fe046b875304dbfbdd0512bcd9a88de0fe5c7982a284419,2025-10-29T09:15:46.917000
CVE-2025-64291,1,1,9720f7797d01ef523985f83657cc3f2c0f55a54edc144792c4a94813b8883fe2,2025-10-29T09:15:47.430000
CVE-2025-64296,0,0,4ad7ea18b9edb3aa89921571d354ab7533d4da09f3a8659bc4890374dff07e61,2025-10-29T04:16:05.760000
CVE-2025-6430,0,0,804f01d5a181cb5f0e0a05f9ad6d77917abae3b9c2b7e843890adbc0f8046225,2025-07-14T19:15:34.660000
CVE-2025-6431,0,0,9fbd91eef457c6101f4b6e5ab20365107357b2af8b79cfe87424eeb47fb2a075,2025-07-03T16:04:21.163000
@@ -314814,7 +314848,7 @@ CVE-2025-8510,0,0,b623733f5b0d00bcee0b79e15e2c8d2d7b66751d830766125c8eb0c16d268c
CVE-2025-8511,0,0,4d11822226d5a41d899ee36afa2fccbfcf673cb9aacad40f953177491cada08e,2025-09-11T14:36:04.480000
CVE-2025-8512,0,0,bb043df5480557845b4285ecbab672ddbc622c72b7f9570156111daaa7b3f094,2025-08-04T15:06:15.833000
CVE-2025-8513,0,0,95e62b3e89bcddb5b6529f9d3985745973e680a298deebe28801c3d7ffd2536d,2025-08-04T15:06:15.833000
CVE-2025-8515,0,1,577869b4d0e6cda07ca3468d362147028aef6b2ae3d40a4767f87ee9706260fc,2025-10-29T07:15:37.913000
CVE-2025-8515,0,0,577869b4d0e6cda07ca3468d362147028aef6b2ae3d40a4767f87ee9706260fc,2025-10-29T07:15:37.913000
CVE-2025-8516,0,0,3545b1065f9ec06091ade53ae786ef95623cb8d306c4058e6178e6e8a4600497,2025-08-05T14:34:17.327000
CVE-2025-8517,0,0,c7f350bb78d7f8d464f372a94b52802c3044d14c2fa09f36e9ea78b256dfab4f,2025-08-27T16:23:54.827000
CVE-2025-8518,0,0,b6e81c5ef6d95fde9b41140048470c8b3ea0f69777c6441ae1c506c3dd9ce02c,2025-08-27T16:22:16.490000
Can't render this file because it is too large.