diff --git a/CVE-2015/CVE-2015-101xx/CVE-2015-10146.json b/CVE-2015/CVE-2015-101xx/CVE-2015-10146.json new file mode 100644 index 00000000000..a9278815138 --- /dev/null +++ b/CVE-2015/CVE-2015-101xx/CVE-2015-10146.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2015-10146", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-29T10:15:35.383", + "lastModified": "2025-10-29T10:15:35.383", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/wp-responsive-slider-with-lightbox", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/70f04f90-a0b7-46d1-85da-e898a6981fa2?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2015/CVE-2015-101xx/CVE-2015-10147.json b/CVE-2015/CVE-2015-101xx/CVE-2015-10147.json new file mode 100644 index 00000000000..fe8d55aa7b6 --- /dev/null +++ b/CVE-2015/CVE-2015-101xx/CVE-2015-10147.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2015-10147", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-29T10:15:36.587", + "lastModified": "2025-10-29T10:15:36.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://wordpress.org/plugins/easy-testimonial-rotator", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f44483df-e50d-4dcf-8a6f-499e2bd05b89?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12058.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12058.json new file mode 100644 index 00000000000..bdba2ca9cac --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12058.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-12058", + "sourceIdentifier": "cve-coordination@google.com", + "published": "2025-10-29T09:15:35.500", + "lastModified": "2025-10-29T09:15:35.500", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vulnerable to arbitrary local file loading and Server-Side Request Forgery (SSRF).\n\n\nThis vulnerability stems from the way the StringLookup layer is handled during model loading from a specially crafted .keras archive. The constructor for the StringLookup layer accepts a vocabulary argument that can specify a local file path or a remote file path.\n\n * Arbitrary Local File Read: An attacker can create a malicious .keras file that embeds a local path in the StringLookup layer's configuration. When the model is loaded, Keras will attempt to read the content of the specified local file and incorporate it into the model state (e.g., retrievable via get_vocabulary()), allowing an attacker to read arbitrary local files on the hosting system.\n\n\n * Server-Side Request Forgery (SSRF): Keras utilizes tf.io.gfile for file operations. Since tf.io.gfile supports remote filesystem handlers (such as GCS and HDFS) and HTTP/HTTPS protocols, the same mechanism can be leveraged to fetch content from arbitrary network endpoints on the server's behalf, resulting in an SSRF condition.\n\n\nThe security issue is that the feature allowing external path loading was not properly restricted by the safe_mode=True flag, which was intended to prevent such unintended data access." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@google.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@google.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/keras-team/keras/pull/21751", + "source": "cve-coordination@google.com" + }, + { + "url": "https://github.com/keras-team/keras/security/advisories/GHSA-qg93-c7p6-gg7f", + "source": "cve-coordination@google.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12450.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12450.json new file mode 100644 index 00000000000..e35f80c1b6a --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12450.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12450", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-29T10:15:36.903", + "lastModified": "2025-10-29T10:15:36.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/litespeedtech/lscache_wp/commit/3d473f44d37ec2a834162ff1d86c017e9ae67db3", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58711.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58711.json new file mode 100644 index 00000000000..e93d412b22e --- /dev/null +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58711.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58711", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:37.343", + "lastModified": "2025-10-29T09:15:37.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-8-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58939.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58939.json new file mode 100644 index 00000000000..9657ca6fc8a --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58939.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58939", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:37.903", + "lastModified": "2025-10-29T09:15:37.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-7-5-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-600xx/CVE-2025-60075.json b/CVE-2025/CVE-2025-600xx/CVE-2025-60075.json new file mode 100644 index 00000000000..bf5254d73e3 --- /dev/null +++ b/CVE-2025/CVE-2025-600xx/CVE-2025-60075.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60075", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:38.077", + "lastModified": "2025-10-29T09:15:38.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress hpbseo allows Reflected XSS.This issue affects hpb seo plugin for WordPress: from n/a through <= 3.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hpbseo/vulnerability/wordpress-hpb-seo-plugin-for-wordpress-plugin-3-0-1-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64194.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64194.json new file mode 100644 index 00000000000..f9f5e94193c --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64194.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64194", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:38.593", + "lastModified": "2025-10-29T09:15:38.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Eduma eduma allows Stored XSS.This issue affects Eduma: from n/a through <= 5.7.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/eduma/vulnerability/wordpress-eduma-theme-5-7-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64195.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64195.json new file mode 100644 index 00000000000..0b7808621a4 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64195.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64195", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:38.793", + "lastModified": "2025-10-29T09:15:38.793", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress Eduma eduma allows PHP Local File Inclusion.This issue affects Eduma: from n/a through <= 5.7.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/eduma/vulnerability/wordpress-eduma-theme-5-7-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64197.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64197.json new file mode 100644 index 00000000000..3693172d093 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64197.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64197", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:39.277", + "lastModified": "2025-10-29T09:15:39.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64199.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64199.json new file mode 100644 index 00000000000..dbbbe974067 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64199.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64199", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:39.490", + "lastModified": "2025-10-29T09:15:39.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through <= 5.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/wpresidence/vulnerability/wordpress-wpresidence-theme-5-3-2-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64200.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64200.json new file mode 100644 index 00000000000..7300fa1a6ef --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64200.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64200", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:39.960", + "lastModified": "2025-10-29T09:15:39.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Stored XSS.This issue affects Email Template Customizer for WooCommerce: from n/a through <= 1.2.17." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/email-template-customizer-for-woo/vulnerability/wordpress-email-template-customizer-for-woocommerce-plugin-1-2-17-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64201.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64201.json new file mode 100644 index 00000000000..afc0c6169ff --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64201.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64201", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:40.150", + "lastModified": "2025-10-29T09:15:40.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.12." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-13-12-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64202.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64202.json new file mode 100644 index 00000000000..1073a15512f --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64202.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64202", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:40.623", + "lastModified": "2025-10-29T09:15:40.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/sahifa/vulnerability/wordpress-sahifa-theme-5-8-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64204.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64204.json new file mode 100644 index 00000000000..700076dc56e --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64204.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64204", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:40.773", + "lastModified": "2025-10-29T09:15:40.773", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeSphere SmartMag smart-mag allows Stored XSS.This issue affects SmartMag: from n/a through <= 10.3.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/smart-mag/vulnerability/wordpress-smartmag-theme-10-3-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64208.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64208.json new file mode 100644 index 00000000000..198b9020e0b --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64208.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64208", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:41.283", + "lastModified": "2025-10-29T09:15:41.283", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through <= 1.1.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jannah-extensions/vulnerability/wordpress-jannah-extensions-plugin-1-1-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64210.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64210.json new file mode 100644 index 00000000000..5ddba4e0d43 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64210.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64210", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:41.433", + "lastModified": "2025-10-29T09:15:41.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64211.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64211.json new file mode 100644 index 00000000000..cae40a7643d --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64211.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64211", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:42.010", + "lastModified": "2025-10-29T09:15:42.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy Elementor Widgets: from n/a through <= 1.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-elementor-widgets/vulnerability/wordpress-masterstudy-elementor-widgets-plugin-1-2-4-broken-access-control-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64212.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64212.json new file mode 100644 index 00000000000..cc5bad87183 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64212.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64212", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:42.157", + "lastModified": "2025-10-29T09:15:42.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64216.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64216.json new file mode 100644 index 00000000000..14217f4a01a --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64216.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64216", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:42.687", + "lastModified": "2025-10-29T09:15:42.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/smart-mag/vulnerability/wordpress-smartmag-theme-10-3-0-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64219.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64219.json new file mode 100644 index 00000000000..3bb924fe4d0 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64219.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64219", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:42.867", + "lastModified": "2025-10-29T09:15:42.867", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/business-directory-plugin/vulnerability/wordpress-business-directory-plugin-6-4-18-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64220.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64220.json new file mode 100644 index 00000000000..898b669a54d --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64220.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64220", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:43.393", + "lastModified": "2025-10-29T09:15:43.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReyCommerce Rey Core rey-core allows Stored XSS.This issue affects Rey Core: from n/a through <= 3.1.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rey-core/vulnerability/wordpress-rey-core-plugin-3-1-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64226.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64226.json new file mode 100644 index 00000000000..51f09c0165e --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64226.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64226", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:43.567", + "lastModified": "2025-10-29T09:15:43.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cross Site Request Forgery.This issue affects Stockie Extra: from n/a through <= 1.2.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/stockie-extra/vulnerability/wordpress-stockie-extra-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64228.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64228.json new file mode 100644 index 00000000000..ef2eca6f5fa --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64228.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64228", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:44.077", + "lastModified": "2025-10-29T09:15:44.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/affs/vulnerability/wordpress-sumo-affiliates-pro-plugin-11-0-0-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64229.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64229.json new file mode 100644 index 00000000000..617a712ca52 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64229.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64229", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:44.250", + "lastModified": "2025-10-29T09:15:44.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sprout-invoices/vulnerability/wordpress-client-invoicing-by-sprout-invoices-plugin-20-8-7-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64234.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64234.json new file mode 100644 index 00000000000..9c1ad8b4bc9 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64234.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64234", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:44.763", + "lastModified": "2025-10-29T09:15:44.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/evergreen-content-poster/vulnerability/wordpress-evergreen-content-poster-plugin-1-4-5-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64283.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64283.json new file mode 100644 index 00000000000..2dd333af824 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64283.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64283", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:44.957", + "lastModified": "2025-10-29T09:15:44.957", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through <= 1.6.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-1-6-7-insecure-direct-object-references-idor-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64284.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64284.json new file mode 100644 index 00000000000..8e654406549 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64284.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64284", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:45.423", + "lastModified": "2025-10-29T09:15:45.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through <= 1.1.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/majestic-support/vulnerability/wordpress-majestic-support-plugin-1-1-1-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64285.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64285.json new file mode 100644 index 00000000000..76f62667d46 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64285.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64285", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:45.573", + "lastModified": "2025-10-29T09:15:45.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpress-premmerce-wholesale-pricing-for-woocommerce-plugin-1-1-10-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64286.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64286.json new file mode 100644 index 00000000000..e5f7026d38b --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64286.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64286", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:46.097", + "lastModified": "2025-10-29T09:15:46.097", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through <= 3.13.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/wprentals/vulnerability/wordpress-wp-rentals-theme-3-13-1-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64288.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64288.json new file mode 100644 index 00000000000..3f42a802786 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64288.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64288", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:46.257", + "lastModified": "2025-10-29T09:15:46.257", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through <= 1.3.19." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce/vulnerability/wordpress-premmerce-plugin-1-3-19-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64289.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64289.json new file mode 100644 index 00000000000..0c7c57286ba --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64289.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64289", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:46.760", + "lastModified": "2025-10-29T09:15:46.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64290.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64290.json new file mode 100644 index 00000000000..e80ce5a8d53 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64290.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64290", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:46.917", + "lastModified": "2025-10-29T09:15:46.917", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-642xx/CVE-2025-64291.json b/CVE-2025/CVE-2025-642xx/CVE-2025-64291.json new file mode 100644 index 00000000000..580df3ef567 --- /dev/null +++ b/CVE-2025/CVE-2025-642xx/CVE-2025-64291.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-64291", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-29T09:15:47.430", + "lastModified": "2025-10-29T09:15:47.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through <= 1.0.13." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index c877ad43d9a..8de3ee88c2b 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-29T09:00:11.302442+00:00 +2025-10-29T11:00:12.541573+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-29T08:15:30.493000+00:00 +2025-10-29T10:15:36.903000+00:00 ``` ### Last Data Feed Release @@ -33,23 +33,44 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -316056 +316090 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `34` -- [CVE-2023-7320](CVE-2023/CVE-2023-73xx/CVE-2023-7320.json) (`2025-10-29T07:15:33.493`) -- [CVE-2025-11702](CVE-2025/CVE-2025-117xx/CVE-2025-11702.json) (`2025-10-29T07:15:37.713`) +- [CVE-2025-64197](CVE-2025/CVE-2025-641xx/CVE-2025-64197.json) (`2025-10-29T09:15:39.277`) +- [CVE-2025-64199](CVE-2025/CVE-2025-641xx/CVE-2025-64199.json) (`2025-10-29T09:15:39.490`) +- [CVE-2025-64200](CVE-2025/CVE-2025-642xx/CVE-2025-64200.json) (`2025-10-29T09:15:39.960`) +- [CVE-2025-64201](CVE-2025/CVE-2025-642xx/CVE-2025-64201.json) (`2025-10-29T09:15:40.150`) +- [CVE-2025-64202](CVE-2025/CVE-2025-642xx/CVE-2025-64202.json) (`2025-10-29T09:15:40.623`) +- [CVE-2025-64204](CVE-2025/CVE-2025-642xx/CVE-2025-64204.json) (`2025-10-29T09:15:40.773`) +- [CVE-2025-64208](CVE-2025/CVE-2025-642xx/CVE-2025-64208.json) (`2025-10-29T09:15:41.283`) +- [CVE-2025-64210](CVE-2025/CVE-2025-642xx/CVE-2025-64210.json) (`2025-10-29T09:15:41.433`) +- [CVE-2025-64211](CVE-2025/CVE-2025-642xx/CVE-2025-64211.json) (`2025-10-29T09:15:42.010`) +- [CVE-2025-64212](CVE-2025/CVE-2025-642xx/CVE-2025-64212.json) (`2025-10-29T09:15:42.157`) +- [CVE-2025-64216](CVE-2025/CVE-2025-642xx/CVE-2025-64216.json) (`2025-10-29T09:15:42.687`) +- [CVE-2025-64219](CVE-2025/CVE-2025-642xx/CVE-2025-64219.json) (`2025-10-29T09:15:42.867`) +- [CVE-2025-64220](CVE-2025/CVE-2025-642xx/CVE-2025-64220.json) (`2025-10-29T09:15:43.393`) +- [CVE-2025-64226](CVE-2025/CVE-2025-642xx/CVE-2025-64226.json) (`2025-10-29T09:15:43.567`) +- [CVE-2025-64228](CVE-2025/CVE-2025-642xx/CVE-2025-64228.json) (`2025-10-29T09:15:44.077`) +- [CVE-2025-64229](CVE-2025/CVE-2025-642xx/CVE-2025-64229.json) (`2025-10-29T09:15:44.250`) +- [CVE-2025-64234](CVE-2025/CVE-2025-642xx/CVE-2025-64234.json) (`2025-10-29T09:15:44.763`) +- [CVE-2025-64283](CVE-2025/CVE-2025-642xx/CVE-2025-64283.json) (`2025-10-29T09:15:44.957`) +- [CVE-2025-64284](CVE-2025/CVE-2025-642xx/CVE-2025-64284.json) (`2025-10-29T09:15:45.423`) +- [CVE-2025-64285](CVE-2025/CVE-2025-642xx/CVE-2025-64285.json) (`2025-10-29T09:15:45.573`) +- [CVE-2025-64286](CVE-2025/CVE-2025-642xx/CVE-2025-64286.json) (`2025-10-29T09:15:46.097`) +- [CVE-2025-64288](CVE-2025/CVE-2025-642xx/CVE-2025-64288.json) (`2025-10-29T09:15:46.257`) +- [CVE-2025-64289](CVE-2025/CVE-2025-642xx/CVE-2025-64289.json) (`2025-10-29T09:15:46.760`) +- [CVE-2025-64290](CVE-2025/CVE-2025-642xx/CVE-2025-64290.json) (`2025-10-29T09:15:46.917`) +- [CVE-2025-64291](CVE-2025/CVE-2025-642xx/CVE-2025-64291.json) (`2025-10-29T09:15:47.430`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `0` -- [CVE-2025-41443](CVE-2025/CVE-2025-414xx/CVE-2025-41443.json) (`2025-10-29T08:15:30.493`) -- [CVE-2025-8515](CVE-2025/CVE-2025-85xx/CVE-2025-8515.json) (`2025-10-29T07:15:37.913`) ## Download and Usage diff --git a/_state.csv b/_state.csv index c9912de1341..3198926bb45 100644 --- a/_state.csv +++ b/_state.csv @@ -74765,6 +74765,8 @@ CVE-2015-10141,0,0,e1f491387bc9f14b0ed5c1fc04211d6976c1dbe41f0d96019a2cb79065cee CVE-2015-10142,0,0,1a8b2ed230ce0ad8fefbef0a0cf7219d83335e194da7a5b6b3e86cef2e444857,2025-07-29T14:14:55.157000 CVE-2015-10143,0,0,6bfe43faa34d12007882598ab1d4881a3769765c1e7f6b1be43c44464ead10e5,2025-07-25T15:29:19.837000 CVE-2015-10144,0,0,8354bd1b374cfa57e526efdecaa34bb26658c923d5d563a96128dfaabc8712f3,2025-07-25T15:29:19.837000 +CVE-2015-10146,1,1,77fdd5fb1a2d8d9241c9f776d9cdf785adbb1b148a8aee71226cab6701973fab,2025-10-29T10:15:35.383000 +CVE-2015-10147,1,1,712ab8ed00dd1dd6157494aa312a8dec9a869e3d239e1d246a55c37bd948794f,2025-10-29T10:15:36.587000 CVE-2015-1015,0,0,b49e3699f4ec89619375a9517e2b5f9d50c3487fa75c75c6378a9b5bce91112f,2025-04-12T10:46:40.837000 CVE-2015-1026,0,0,4e8b5d97c4f066ca1c38fb4a8d17ab347344fb9b5738d5ccdeb08af100a84224,2025-04-12T10:46:40.837000 CVE-2015-1027,0,0,8656357f461ae80057dd5e6360827a63d9921f378a4cdd3e8450b47a52c65e0c,2025-04-20T01:37:25.860000 @@ -245855,7 +245857,7 @@ CVE-2023-7307,0,0,ded2769b677cda55cfcced203b2368abf2f50cf733dd3e2fb23b49d4a91408 CVE-2023-7308,0,0,7aac781f6563bb2c8720d73cbaef3017fdb553beb966f15a8bfe4b78e9945076,2025-09-09T18:44:29.077000 CVE-2023-7309,0,0,773ef803c71f62f4a6d5a98446e20d994384c90ae13e1e89e25866da6b0c5749,2025-08-29T16:24:09.860000 CVE-2023-7311,0,0,f9c2434353cfc2d7f3aa318266b91a3c2a8cea5f5391407b36ffe5f0c40fd09a,2025-10-16T15:29:11.563000 -CVE-2023-7320,1,1,80b576c289e85520a27b5a2de80ed0756cb17adb643d5425001eb6ca30eeecea,2025-10-29T07:15:33.493000 +CVE-2023-7320,0,0,80b576c289e85520a27b5a2de80ed0756cb17adb643d5425001eb6ca30eeecea,2025-10-29T07:15:33.493000 CVE-2024-0001,0,0,a3803d5da55711ef7259e1abe303432c001f8021792dbcb3d58baa5f1fc32304,2024-09-27T14:08:57.327000 CVE-2024-0002,0,0,62be75bb877da347c07ffaf17dbd26e07bdfc8e85f8e86a969ec56eaba9c8a5a,2024-09-27T14:13:24.427000 CVE-2024-0003,0,0,e729f8f70fc9442e3de56e6fd3e2bd5edc7ef9717eccd1e1bee2f10d8647c9de,2024-09-27T14:23:58.243000 @@ -286792,7 +286794,7 @@ CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1 CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000 CVE-2025-1170,0,0,f7c4bc09181f11b6c73f7828607020c9f0e484c622ceb324f78d52675a120ce6,2025-03-03T16:37:36.117000 CVE-2025-11701,0,0,7ad5d4304ec1eb74222638c60337f5c4ebd0e056bdc09bf379e5bc0bd73ddcdc,2025-10-16T15:28:59.610000 -CVE-2025-11702,1,1,eaccf76926a1b605416f7e3b3c42513e596d33233edddfb0c65cfee1b05538f9,2025-10-29T07:15:37.713000 +CVE-2025-11702,0,0,eaccf76926a1b605416f7e3b3c42513e596d33233edddfb0c65cfee1b05538f9,2025-10-29T07:15:37.713000 CVE-2025-11703,0,0,2791f342fb924d21bee11681cdfdad8c72de87bccc05788f20d48eddae5b19e8,2025-10-21T19:31:25.450000 CVE-2025-11705,0,0,b89e7159a3c0f13d68ead00f6d97207b9562db34cc76e3ee10c26d4235ac5806,2025-10-29T05:15:36.817000 CVE-2025-11708,0,0,e14e991c00f28b97949dffd986586786622822511f11e1f385a0e30de0fe00e4,2025-10-17T13:12:11.210000 @@ -286954,6 +286956,7 @@ CVE-2025-12034,0,0,335df2effed88eabffe537a29cd7e00114e8dea2927f6cb68f5c3fa61e2cb CVE-2025-1204,0,0,1a6a6d6d7e9c4d6739bac4886c5ffe95dd752abb1877293a1f41dffddd75c21f,2025-02-25T17:15:14.057000 CVE-2025-12044,0,0,59653891f2f12255dcfdcb980ddb83d0909cf1e8ca8bd6fe2d08a6dad521a4e5,2025-10-27T13:20:15.637000 CVE-2025-12055,0,0,ffa2016177ff5b4063d313e0422caf86da735c50d897577452840df0f1d39f6a,2025-10-27T19:16:00.800000 +CVE-2025-12058,1,1,13e7b7d7047d41a1857a73e1cdf155fcebef177a5267dceeef9bbd3ea8ad65c2,2025-10-29T09:15:35.500000 CVE-2025-1206,0,0,ea94e082f0fb2c3e9cbf9071800bfcaa07133d59e9c405a94dd3f8f199626042,2025-02-20T20:39:04.393000 CVE-2025-1207,0,0,7d124cbc886c8b13b8ddd3ab6b7b5525d0938d2d0afc4dcd7d8089b241a520f5,2025-02-12T16:15:44.393000 CVE-2025-12072,0,0,ea49e76e1b67e7487446f68282863e034a757c90e5684c8c63656e097bf362d9,2025-10-27T13:20:15.637000 @@ -287153,6 +287156,7 @@ CVE-2025-12425,0,0,393077517afe78ca3a864831e09581cbebebb3b07f1e3d85ec2cffe35c821 CVE-2025-1243,0,0,b36908327b1b41fa664c4a39c71934592fd1d75bcc40ba67f7d64ed64955da7e,2025-02-12T01:15:09.073000 CVE-2025-1244,0,0,ca7dde03c53f2f538c0b12fb599e84ae66a426ff6488b7e67f4989aba1f7a6f7,2025-03-13T14:15:34.977000 CVE-2025-1245,0,0,02f6531ee412acf536871fa74be895340813b85f3805e0a3e6f8a053107da143,2025-05-16T14:42:18.700000 +CVE-2025-12450,1,1,f1a5d4adffb5fc3638655ad3feeef4dc86851537189a2bbfdbb95ae22690b508,2025-10-29T10:15:36.903000 CVE-2025-1246,0,0,ba71751fa27047f7c79c3e8dc96ae22f8996ca289dfa9df416ee4c290be2b815,2025-07-02T21:27:05.870000 CVE-2025-1247,0,0,413d4bcd6e00b55487b15f2b541fa31d8a6169438afa6345f0107f85b8ddc727,2025-03-03T14:15:34.120000 CVE-2025-1249,0,0,6a7f3a2500b58cdcea7c9e46385c15368818268591d8a8d12de3eb4b42bd3d72,2025-02-26T15:15:24.470000 @@ -301728,7 +301732,7 @@ CVE-2025-41439,0,0,ec4f5bce645ac5c77efeb7d3dcb9e00136db17220a76430708d9edf21696d CVE-2025-4144,0,0,ed44a24e80e1487d547bfe32499c8ba4450309e0e9d0acd2df7ebfcd519c74a9,2025-05-12T19:39:31.053000 CVE-2025-41441,0,0,3b51a802d5e876ef5e3db952c79744bda892bc6a2133cce8cddd52ad9c2cfab2,2025-06-03T15:42:40.710000 CVE-2025-41442,0,0,75992fff3e90ec166ea144cedbb2f28fcf7f60ce1fa8d0fb9c7afc44dcaae4a0,2025-07-23T19:20:42.243000 -CVE-2025-41443,0,1,ea618d044ae2197f97da4f5155b23b820a856ee8ae231f2dc70d29a7c813df18,2025-10-29T08:15:30.493000 +CVE-2025-41443,0,0,ea618d044ae2197f97da4f5155b23b820a856ee8ae231f2dc70d29a7c813df18,2025-10-29T08:15:30.493000 CVE-2025-41444,0,0,45adb8bb8356468f3459fd14d45ba03aaf4d37562fdb66c71b58ce7f5e0c7cd2,2025-06-16T15:14:06.487000 CVE-2025-4145,0,0,fa58d4933201d65cc9b44e9816af7313e719b690552f69a8a0e4a077c4fb877f,2025-05-12T19:39:15.540000 CVE-2025-41450,0,0,be33119acb525e2f9b796f5260308750e8ca72ef64aa0a04091a0e710bb236e0,2025-08-27T08:15:33.290000 @@ -310767,6 +310771,7 @@ CVE-2025-58702,0,0,5dd6eb79321fe373649fd195e481582461cc6e79072b59d848a5440a8b370 CVE-2025-58703,0,0,fc890405e6a4288e62076d969959e8de43b3c77266b60601e23a3ad63a898f34,2025-09-22T21:22:16.313000 CVE-2025-58704,0,0,3df6a59d30f39a865f80c59e815f3ba4ecc80c278085f624251d90542e0cccb3,2025-09-22T21:22:16.313000 CVE-2025-5871,0,0,cf8b155d3f5676937055fc70fc356be425d106281694dba873cdc0b7b3134e0e,2025-06-09T12:15:47.880000 +CVE-2025-58711,1,1,3b36db35e246e6c57bddb89bffa21fa5c4f19883e123acc83d491ac498c3511d,2025-10-29T09:15:37.343000 CVE-2025-58712,0,0,255b13af4d9458e1dbfb980d51e524ddbffdf43ccddf81eee2ab973c98ab416b,2025-10-22T21:12:32.330000 CVE-2025-58714,0,0,149183e4f461d055330fa40744a6b8f8a32dd19395e7eeba1c4b6d89dd88d5d2,2025-10-14T19:35:56.913000 CVE-2025-58715,0,0,24918f1bd3022fd998c93ca5e3302c4a6ff5be2feac1db29f3413d10524917dc,2025-10-14T19:35:56.913000 @@ -310962,6 +310967,7 @@ CVE-2025-58919,0,0,e3ca77d371de5405e99f738acd3b072e5463eb63c56c31ab8794f93a3628c CVE-2025-5892,0,0,039d5a5f1b878e6a95db2203c9250e58ccec5f811f3e5b5a79a5b1e656493ef9,2025-07-10T16:24:57.087000 CVE-2025-58921,0,0,4601847f66f8aededa8c9f1895b7198792d953e15638ee0b55e6cd0c98d9dd6d,2025-10-23T16:16:41.313000 CVE-2025-5893,0,0,b61b07be300b899b567084a8ad5ced3784281d0bce8aa355a3665ed584929e11,2025-06-09T12:15:47.880000 +CVE-2025-58939,1,1,7a35e023177a813c5d4494a68b2c6ab9d2080c0ecc809aa85e9f174acdc55647,2025-10-29T09:15:37.903000 CVE-2025-5894,0,0,f84a3a7402232a02746652be917d286ca270709ff85e33a9bd0da14ddf6b9deb,2025-06-09T12:15:47.880000 CVE-2025-5895,0,0,1f655dba6b0917ab2940289673fcc8ac2dbeb06dff17479124fd9e4dba6f24cc,2025-07-10T16:26:17.607000 CVE-2025-58955,0,0,d786c5c5817d0378304a5e298dd8b25ab4e3515912c7c98ec801563243730a36,2025-10-22T21:12:32.330000 @@ -311646,6 +311652,7 @@ CVE-2025-60041,0,0,6ec84dde702144ca21e9afab8779d8765dce2e7d68c46aa5e143718f3486e CVE-2025-6005,0,0,9a2ac8246f422ef5614eb749e32675eaa624d97ea333814ae3828209772ff515,2025-06-20T12:48:20.400000 CVE-2025-6006,0,0,7a386c846906f2e1152f82f788f56ad0aa39222b613fc15254d86bd6e33a6943,2025-06-20T12:46:43.687000 CVE-2025-6007,0,0,ad7217a46edf88f3122f03c09e2fdcfd31382468cbe1002c4a5de402899399f2,2025-06-19T01:26:45.850000 +CVE-2025-60075,1,1,78a41aa4bfb3ecd779624006a05bb22f0e5922d8de7cd34f5ea43a0a773c68b5,2025-10-29T09:15:38.077000 CVE-2025-6008,0,0,cf45d1b8877307f98a5e962959db4dd8b70df84c99522375a10c3d04cde0826f,2025-06-19T01:26:01.867000 CVE-2025-6009,0,0,78abb2d4f36e6029b865859c44e8b3b2ae426316eb8bf2e15ca3e33565c4ca16,2025-06-19T01:25:17.743000 CVE-2025-60092,0,0,6081eb9d936470ede53fe67b2ce64cbdb0f319883658a54dce60704ad28adf84,2025-09-26T14:32:19.853000 @@ -312979,16 +312986,43 @@ CVE-2025-64162,0,0,7aa3c1bc9862cbf9d76d980061ecf999b965ea04dcb95f5a867d3a45a6746 CVE-2025-6417,0,0,5fc9eb7d4ff925279bc28755909d00f7292cf787d506364151545ca582306f41,2025-06-24T14:41:39.197000 CVE-2025-6418,0,0,467930084b2995640103e80484946461d030e9474f7e698d0adcc4a7d0d356d9,2025-10-23T20:06:00.793000 CVE-2025-6419,0,0,e0f79cc69c3b952ad883b4cedc0662567b41e25afc0f850c7a45f799e90ccca8,2025-10-23T20:06:00.793000 +CVE-2025-64194,1,1,3e65619915df10b74c7cd7f4b93c8cbb84771ea640422e7154556063ea214e8e,2025-10-29T09:15:38.593000 +CVE-2025-64195,1,1,cd3f7bf2f189203929e2d5768d450a1e00c5b742261276cc57df4a8960db3acd,2025-10-29T09:15:38.793000 +CVE-2025-64197,1,1,188dbca8c571f8b276d25d1a67e8ea0938b43715814e72b9c23e58103928047b,2025-10-29T09:15:39.277000 +CVE-2025-64199,1,1,f57f30977a17001f4d5268fdc114472e2596a2bf4c2724f51d86694fca26a8fb,2025-10-29T09:15:39.490000 CVE-2025-6420,0,0,99a9cc305768d1122f83805c03e03a5beab519b0519d59a998b368f51edb15c8,2025-10-23T20:06:00.793000 +CVE-2025-64200,1,1,5c344d6f2356e6bb7d65249774fd2912505271c966a041c5710d2c6373f4e4c1,2025-10-29T09:15:39.960000 +CVE-2025-64201,1,1,7f0ae569f91507dd6c57351e90e37448f3841a388a883580942db4748bec5538,2025-10-29T09:15:40.150000 +CVE-2025-64202,1,1,05d174014b0083cd8bce812f3cadb4f0699ecf9991a6b2ba0e03aaecc4f0601d,2025-10-29T09:15:40.623000 +CVE-2025-64204,1,1,311f67b70adffd3d15bc1aaeac7b8ff11139bdcb7b1dc44d2f0b77a6faf713a0,2025-10-29T09:15:40.773000 +CVE-2025-64208,1,1,6a73bb907e01d9921a17454aebfb409b1f6aa79354b69833d5163043da209113,2025-10-29T09:15:41.283000 CVE-2025-6421,0,0,a383f5c76e5804cb0fd759061f62bf69bf40b27eff38dad79a593480f81154e4,2025-10-23T20:06:00.793000 +CVE-2025-64210,1,1,0e171915e52bdde8f7f46c06f4bee3b84ba53f97a3e658f8705555bea24bdf28,2025-10-29T09:15:41.433000 +CVE-2025-64211,1,1,0d63d7ba246c2802c4460ec448cbf73216db87a2cbc53e4cacd5ad188aae0e32,2025-10-29T09:15:42.010000 +CVE-2025-64212,1,1,b3c717ea14b45bb1026677ff8e102e35731e79ba2f2d89e77c5a7b4bc5be7775,2025-10-29T09:15:42.157000 +CVE-2025-64216,1,1,bfff9843f10bab126424ebb495fb11badaceb4cf524e3789518de2ca891f63b8,2025-10-29T09:15:42.687000 +CVE-2025-64219,1,1,d55c9145881ce18a22f777e0276296aa7d507088dce68c7da478c744dc53ae6c,2025-10-29T09:15:42.867000 CVE-2025-6422,0,0,b5bb87a55ad52736bcc24be8713e2086821b4454f2e12e2c901389f24f632355,2025-06-25T19:49:55.057000 +CVE-2025-64220,1,1,a724e1742a04dd9eb1d1209f282597cd2e2c58f1a1da33a566c3a952eb46bce2,2025-10-29T09:15:43.393000 +CVE-2025-64226,1,1,9a08146f135372fb95a8f8967112e0d86968401dfea86483d36100b88dbd25f4,2025-10-29T09:15:43.567000 +CVE-2025-64228,1,1,655d3b0f7d7f126a7002cf79147a97979b938ac1f93851b6a7f0a19a3dfd7af1,2025-10-29T09:15:44.077000 +CVE-2025-64229,1,1,1e1a5788a237083dc0d313ca9db515d788fdb340b270e0ef01c77d4c9d7ecc9f,2025-10-29T09:15:44.250000 CVE-2025-6423,0,0,cf6cba80504a38ff7a29b3a0381ee064afa96243418f65dbb8389db5a1b6f90d,2025-07-15T13:14:49.980000 +CVE-2025-64234,1,1,71e6159e113ecbdcc5846d19fd407047ed34f213abe39709f96f4f444d9c0b0c,2025-10-29T09:15:44.763000 CVE-2025-6424,0,0,1e63adf2085979e6f873069e1f25dbb0b0c105bf60d8b2c9c09f02e2fce4efb4,2025-07-02T21:15:41.517000 CVE-2025-6425,0,0,ed359c9a5ea670caaf19bf5db1eea3fbd4b9675f58a90c4202f824b4c3ec28c1,2025-07-03T16:23:06.293000 CVE-2025-6426,0,0,2af2d5afaa1814b44039ab749a84b5c30afc9779f689158db03907a7ba8065fb,2025-07-14T19:15:33.737000 CVE-2025-6427,0,0,544bf44f0c21c61ec897832022f8bf1a9d5cbdc41357940e72546a9f2c5d1b6f,2025-07-14T19:15:34.340000 CVE-2025-6428,0,0,79c9c55632aa88792fcd79ab2357183f8e1b92ce99d240a9598dba3f2e7140ed,2025-07-03T16:42:54.900000 +CVE-2025-64283,1,1,233a647c86cf7354aa69ca872058be554cc2808e9138a0a1fa179537115f47fe,2025-10-29T09:15:44.957000 +CVE-2025-64284,1,1,5f82c5765b7bb0443362c15ddf990abd8472f1610d250b1448707b32e73d6cda,2025-10-29T09:15:45.423000 +CVE-2025-64285,1,1,8871548d306989d2c33357160e2bd6a2033f4d5a9ba50e959730838ff9a4ef22,2025-10-29T09:15:45.573000 +CVE-2025-64286,1,1,a074c189abd3eeb58234f196279c88e0fb82be9d2a8a5e87760b6517929cb7dc,2025-10-29T09:15:46.097000 +CVE-2025-64288,1,1,1776581e2d7d5ba52a421b29d68ce487edfa926d7d85740deef81fcf4369520d,2025-10-29T09:15:46.257000 +CVE-2025-64289,1,1,951b7af5e4a947aa2667e1d994b8c7418f23d78da09b394f784753870fe9b2fc,2025-10-29T09:15:46.760000 CVE-2025-6429,0,0,babe5529d5b2b60f2134a98f36372be5e2d7a76fa03abad35735d86c70b5d8af,2025-07-14T19:15:34.500000 +CVE-2025-64290,1,1,3e730eb24daf27d87fe046b875304dbfbdd0512bcd9a88de0fe5c7982a284419,2025-10-29T09:15:46.917000 +CVE-2025-64291,1,1,9720f7797d01ef523985f83657cc3f2c0f55a54edc144792c4a94813b8883fe2,2025-10-29T09:15:47.430000 CVE-2025-64296,0,0,4ad7ea18b9edb3aa89921571d354ab7533d4da09f3a8659bc4890374dff07e61,2025-10-29T04:16:05.760000 CVE-2025-6430,0,0,804f01d5a181cb5f0e0a05f9ad6d77917abae3b9c2b7e843890adbc0f8046225,2025-07-14T19:15:34.660000 CVE-2025-6431,0,0,9fbd91eef457c6101f4b6e5ab20365107357b2af8b79cfe87424eeb47fb2a075,2025-07-03T16:04:21.163000 @@ -314814,7 +314848,7 @@ CVE-2025-8510,0,0,b623733f5b0d00bcee0b79e15e2c8d2d7b66751d830766125c8eb0c16d268c CVE-2025-8511,0,0,4d11822226d5a41d899ee36afa2fccbfcf673cb9aacad40f953177491cada08e,2025-09-11T14:36:04.480000 CVE-2025-8512,0,0,bb043df5480557845b4285ecbab672ddbc622c72b7f9570156111daaa7b3f094,2025-08-04T15:06:15.833000 CVE-2025-8513,0,0,95e62b3e89bcddb5b6529f9d3985745973e680a298deebe28801c3d7ffd2536d,2025-08-04T15:06:15.833000 -CVE-2025-8515,0,1,577869b4d0e6cda07ca3468d362147028aef6b2ae3d40a4767f87ee9706260fc,2025-10-29T07:15:37.913000 +CVE-2025-8515,0,0,577869b4d0e6cda07ca3468d362147028aef6b2ae3d40a4767f87ee9706260fc,2025-10-29T07:15:37.913000 CVE-2025-8516,0,0,3545b1065f9ec06091ade53ae786ef95623cb8d306c4058e6178e6e8a4600497,2025-08-05T14:34:17.327000 CVE-2025-8517,0,0,c7f350bb78d7f8d464f372a94b52802c3044d14c2fa09f36e9ea78b256dfab4f,2025-08-27T16:23:54.827000 CVE-2025-8518,0,0,b6e81c5ef6d95fde9b41140048470c8b3ea0f69777c6441ae1c506c3dd9ce02c,2025-08-27T16:22:16.490000