mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-28 02:10:49 +00:00
Auto-Update: 2025-12-01T23:00:11.583634+00:00
This commit is contained in:
1 parent
a9995badc4
commit
a5701f53c5
78 files changed
+5891
-476
No files matched your search
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50339",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:32.647",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:00:43.643",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,15 +11,75 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()\n\nsyzbot is again reporting attempt to cancel uninitialized work\nat mgmt_index_removed() [1], for setting of HCI_MGMT flag from\nmgmt_init_hdev() from hci_mgmt_cmd() from hci_sock_sendmsg() can\nrace with testing of HCI_MGMT flag from mgmt_index_removed() from\nhci_sock_bind() due to lack of serialization via hci_dev_lock().\n\nSince mgmt_init_hdev() is called with mgmt_chan_list_lock held, we can\nsafely split hci_dev_test_and_set_flag() into hci_dev_test_flag() and\nhci_dev_set_flag(). Thus, in order to close this race, set HCI_MGMT flag\nafter INIT_DELAYED_WORK() completed.\n\nThis is a local fix based on mgmt_chan_list_lock. Lack of serialization\nvia hci_dev_lock() might be causing different race conditions somewhere\nelse. But a global fix based on hci_dev_lock() should deserve a future\npatch."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.0,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.0,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-362"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.0.3",
|
||||
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e53c6180db8dd09de94e0a3bdf4fef6f5f9dd6e6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f74ca25d6d6629ffd4fd80a1a73037253b57d06b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50340",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:33.533",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:00:51.300",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,27 +11,117 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vimc: Fix wrong function called when vimc_init() fails\n\nIn vimc_init(), when platform_driver_register(&vimc_pdrv) fails,\nplatform_driver_unregister(&vimc_pdrv) is wrongly called rather than\nplatform_device_unregister(&vimc_pdev), which causes kernel warning:\n\n Unexpected driver unregister!\n WARNING: CPU: 1 PID: 14517 at drivers/base/driver.c:270 driver_unregister+0x8f/0xb0\n RIP: 0010:driver_unregister+0x8f/0xb0\n Call Trace:\n <TASK>\n vimc_init+0x7d/0x1000 [vimc]\n do_one_initcall+0xd0/0x4e0\n do_init_module+0x1cf/0x6b0\n load_module+0x65c2/0x7820"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-617"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.13",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D9BBFB20-ADB7-4F79-B2A6-AFECAA4DC013"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.86",
|
||||
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/14d85b600bb1f6f8ef61fa8fc1907e2e623d8350",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/681ac2902039d9b497b3ae18fdc204314979e61e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9c9ff35d68691aaea85b2e93763772e23930b3a3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f38df8984ef1b45ba23888d0e232cc21a95bd04b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f74d3f326d1d5b8951ce263c59a121ecfa65e7c0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50341",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:33.660",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:03:08.070",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,31 +11,130 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix oops during encryption\n\nWhen running xfstests against Azure the following oops occurred on an\narm64 system\n\n Unable to handle kernel write to read-only memory at virtual address\n ffff0001221cf000\n Mem abort info:\n ESR = 0x9600004f\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x0f: level 3 permission fault\n Data abort info:\n ISV = 0, ISS = 0x0000004f\n CM = 0, WnR = 1\n swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000294f3000\n [ffff0001221cf000] pgd=18000001ffff8003, p4d=18000001ffff8003,\n pud=18000001ff82e003, pmd=18000001ff71d003, pte=00600001221cf787\n Internal error: Oops: 9600004f [#1] PREEMPT SMP\n ...\n pstate: 80000005 (Nzcv daif -PAN -UAO -TCO BTYPE=--)\n pc : __memcpy+0x40/0x230\n lr : scatterwalk_copychunks+0xe0/0x200\n sp : ffff800014e92de0\n x29: ffff800014e92de0 x28: ffff000114f9de80 x27: 0000000000000008\n x26: 0000000000000008 x25: ffff800014e92e78 x24: 0000000000000008\n x23: 0000000000000001 x22: 0000040000000000 x21: ffff000000000000\n x20: 0000000000000001 x19: ffff0001037c4488 x18: 0000000000000014\n x17: 235e1c0d6efa9661 x16: a435f9576b6edd6c x15: 0000000000000058\n x14: 0000000000000001 x13: 0000000000000008 x12: ffff000114f2e590\n x11: ffffffffffffffff x10: 0000040000000000 x9 : ffff8000105c3580\n x8 : 2e9413b10000001a x7 : 534b4410fb86b005 x6 : 534b4410fb86b005\n x5 : ffff0001221cf008 x4 : ffff0001037c4490 x3 : 0000000000000001\n x2 : 0000000000000008 x1 : ffff0001037c4488 x0 : ffff0001221cf000\n Call trace:\n __memcpy+0x40/0x230\n scatterwalk_map_and_copy+0x98/0x100\n crypto_ccm_encrypt+0x150/0x180\n crypto_aead_encrypt+0x2c/0x40\n crypt_message+0x750/0x880\n smb3_init_transform_rq+0x298/0x340\n smb_send_rqst.part.11+0xd8/0x180\n smb_send_rqst+0x3c/0x100\n compound_send_recv+0x534/0xbc0\n smb2_query_info_compound+0x32c/0x440\n smb2_set_ea+0x438/0x4c0\n cifs_xattr_set+0x5d4/0x7c0\n\nThis is because in scatterwalk_copychunks(), we attempted to write to\na buffer (@sign) that was allocated in the stack (vmalloc area) by\ncrypt_message() and thus accessing its remaining 8 (x2) bytes ended up\ncrossing a page boundary.\n\nTo simply fix it, we could just pass @sign kmalloc'd from\ncrypt_message() and then we're done. Luckily, we don't seem to pass\nany other vmalloc'd buffers in smb_rqst::rq_iov...\n\nInstead, let's map the correct pages and offsets from vmalloc buffers\nas well in cifs_sg_set_buf() and then avoiding such oopses."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "5.4.229",
|
||||
"matchCriteriaId": "35BD75DA-D55E-4B66-8E0E-4931F67E1163"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.87",
|
||||
"matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.1",
|
||||
"matchCriteriaId": "E2D7A7B1-A69F-4536-ADFF-72B77EB8B13D"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a13e51760703f71c25d5fc1f4a62dfa4b0cc80e9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/bf0543b93740916ee91956f9a63da6fc0d79daaa",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e8d16a54842d609fd4a3ed2d81d4333d6329aa94",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e8e2861cc3258dbe407d01ea8c59bb5a53132301",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f7f291e14dde32a07b1f0aa06921d28f875a7b54",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fe6ea044c4f05706cb71040055b1c70c6c8275e0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50342",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:33.807",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:03:16.573",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,23 +11,103 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfloppy: Fix memory leak in do_floppy_init()\n\nA memory leak was reported when floppy_alloc_disk() failed in\ndo_floppy_init().\n\nunreferenced object 0xffff888115ed25a0 (size 8):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 8 bytes):\n 00 ac 67 5b 81 88 ff ff ..g[....\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<00000000a87bfa9e>] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180\n [<000000006f02e8b1>] blk_mq_alloc_tag_set+0x573/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\nunreferenced object 0xffff88810fc30540 (size 32):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<000000006b91eab4>] blk_mq_alloc_tag_set+0x393/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nIf the floppy_alloc_disk() failed, disks of current drive will not be set,\nthus the lastest allocated set->tag cannot be freed in the error handling\npath. A simple call graph shown as below:\n\n floppy_module_init()\n floppy_init()\n do_floppy_init()\n for (drive = 0; drive < N_DRIVE; drive++)\n blk_mq_alloc_tag_set()\n blk_mq_alloc_tag_set_tags()\n blk_mq_realloc_tag_set_tags() # set->tag allocated\n floppy_alloc_disk()\n blk_mq_alloc_disk() # error occurred, disks failed to allocated\n\n ->out_put_disk:\n for (drive = 0; drive < N_DRIVE; drive++)\n if (!disks[drive][0]) # the last disks is not set and loop break\n break;\n blk_mq_free_tag_set() # the latest allocated set->tag leaked\n\nFix this problem by free the set->tag of current drive before jump to\nerror handling path.\n\n[efremov: added stable list, changed title]"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.86",
|
||||
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/55b3c66a0d441cd37154ae95e44d0b82ccfd580e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/75d8c8851a4da0190c2480e84315b5fd3d0356c5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f36d8c8651506aea5f09899f5356ece5d1384f50",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8ace2e304c5dd8a7328db9cd2b8a4b1b98d83ec",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50343",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:33.923",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:03:21.887",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,173 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrapidio: fix possible name leaks when rio_add_device() fails\n\nPatch series \"rapidio: fix three possible memory leaks\".\n\nThis patchset fixes three name leaks in error handling.\n - patch #1 fixes two name leaks while rio_add_device() fails.\n - patch #2 fixes a name leak while rio_register_mport() fails.\n\n\nThis patch (of 2):\n\nIf rio_add_device() returns error, the name allocated by dev_set_name()\nneed be freed. It should use put_device() to give up the reference in the\nerror path, so that the name can be freed in kobject_cleanup(), and the\n'rdev' can be freed in rio_release_dev()."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.30",
|
||||
"versionEndExcluding": "4.9.337",
|
||||
"matchCriteriaId": "103515FB-333E-4369-A6A7-F22A5C600BD2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.303",
|
||||
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.270",
|
||||
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.229",
|
||||
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.86",
|
||||
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3b4676f274a6b5d001176f15d0542100bbf4b59a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/80fad2e53eaed2b3a2ff596575f65669e13ceda5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/85fbf58b15c09d3a6a03098c1e42ebfe9002f39d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/88fa351b20ca300693a206ccd3c4b0e0647944d8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c413f65011ff8caffabcde0e1c3ceede48a48d6f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c482cb0deb57924335103fe592c379a076d867f8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ec3f04f74f50d0b6bac04d795c93c2b852753a7a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f9574cd48679926e2a569e1957a5a1bcc8a719ac",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50344",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.070",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:03:27.743",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,172 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix null-ptr-deref in ext4_write_info\n\nI caught a null-ptr-deref bug as follows:\n==================================================================\nKASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]\nCPU: 1 PID: 1589 Comm: umount Not tainted 5.10.0-02219-dirty #339\nRIP: 0010:ext4_write_info+0x53/0x1b0\n[...]\nCall Trace:\n dquot_writeback_dquots+0x341/0x9a0\n ext4_sync_fs+0x19e/0x800\n __sync_filesystem+0x83/0x100\n sync_filesystem+0x89/0xf0\n generic_shutdown_super+0x79/0x3e0\n kill_block_super+0xa1/0x110\n deactivate_locked_super+0xac/0x130\n deactivate_super+0xb6/0xd0\n cleanup_mnt+0x289/0x400\n __cleanup_mnt+0x16/0x20\n task_work_run+0x11c/0x1c0\n exit_to_user_mode_prepare+0x203/0x210\n syscall_exit_to_user_mode+0x5b/0x3a0\n do_syscall_64+0x59/0x70\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n ==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\nexit_to_user_mode_prepare\n task_work_run\n __cleanup_mnt\n cleanup_mnt\n deactivate_super\n deactivate_locked_super\n kill_block_super\n generic_shutdown_super\n shrink_dcache_for_umount\n dentry = sb->s_root\n sb->s_root = NULL <--- Here set NULL\n sync_filesystem\n __sync_filesystem\n sb->s_op->sync_fs > ext4_sync_fs\n dquot_writeback_dquots\n sb->dq_op->write_info > ext4_write_info\n ext4_journal_start(d_inode(sb->s_root), EXT4_HT_QUOTA, 2)\n d_inode(sb->s_root)\n s_root->d_inode <--- Null pointer dereference\n\nTo solve this problem, we use ext4_journal_start_sb directly\nto avoid s_root being used."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.9.331",
|
||||
"matchCriteriaId": "F5B7C986-E6CA-41ED-A833-EA73FCF421D4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.296",
|
||||
"matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.262",
|
||||
"matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.220",
|
||||
"matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.150",
|
||||
"matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.75",
|
||||
"matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "5.19.17",
|
||||
"matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.0.3",
|
||||
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3638aa1c7d87c0ca0aef23cf58cae2c48e7daca4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/4a657319cfabd6199fd0b7b65bbebf6ded7a11c1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/533c60a0b97cee5daab376933f486207e6680fb7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/947264e00c46de19a016fd81218118c708fed2f3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/bb420e8afc854d2a1caaa23a0c129839acfb7888",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dc451578446afd03c0c21913993c08898a691435",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f34ab95162763cd7352f46df169296eec28b688d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f4b5ff0b794aa94afac7269c494550ca2f66511b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f9c1f248607d5546075d3f731e7607d5571f2b60",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50346",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.330",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:19.057",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,172 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: init quota for 'old.inode' in 'ext4_rename'\n\nSyzbot found the following issue:\next4_parse_param: s_want_extra_isize=128\next4_inode_info_init: s_want_extra_isize=32\next4_rename: old.inode=ffff88823869a2c8 old.dir=ffff888238699828 new.inode=ffff88823869d7e8 new.dir=ffff888238699828\n__ext4_mark_inode_dirty: inode=ffff888238699828 ea_isize=32 want_ea_size=128\n__ext4_mark_inode_dirty: inode=ffff88823869a2c8 ea_isize=32 want_ea_size=128\next4_xattr_block_set: inode=ffff88823869a2c8\n------------[ cut here ]------------\nWARNING: CPU: 13 PID: 2234 at fs/ext4/xattr.c:2070 ext4_xattr_block_set.cold+0x22/0x980\nModules linked in:\nRIP: 0010:ext4_xattr_block_set.cold+0x22/0x980\nRSP: 0018:ffff888227d3f3b0 EFLAGS: 00010202\nRAX: 0000000000000001 RBX: ffff88823007a000 RCX: 0000000000000000\nRDX: 0000000000000a03 RSI: 0000000000000040 RDI: ffff888230078178\nRBP: 0000000000000000 R08: 000000000000002c R09: ffffed1075c7df8e\nR10: ffff8883ae3efc6b R11: ffffed1075c7df8d R12: 0000000000000000\nR13: ffff88823869a2c8 R14: ffff8881012e0460 R15: dffffc0000000000\nFS: 00007f350ac1f740(0000) GS:ffff8883ae200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f350a6ed6a0 CR3: 0000000237456000 CR4: 00000000000006e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n ? ext4_xattr_set_entry+0x3b7/0x2320\n ? ext4_xattr_block_set+0x0/0x2020\n ? ext4_xattr_set_entry+0x0/0x2320\n ? ext4_xattr_check_entries+0x77/0x310\n ? ext4_xattr_ibody_set+0x23b/0x340\n ext4_xattr_move_to_block+0x594/0x720\n ext4_expand_extra_isize_ea+0x59a/0x10f0\n __ext4_expand_extra_isize+0x278/0x3f0\n __ext4_mark_inode_dirty.cold+0x347/0x410\n ext4_rename+0xed3/0x174f\n vfs_rename+0x13a7/0x2510\n do_renameat2+0x55d/0x920\n __x64_sys_rename+0x7d/0xb0\n do_syscall_64+0x3b/0xa0\n entry_SYSCALL_64_after_hwframe+0x72/0xdc\n\nAs 'ext4_rename' will modify 'old.inode' ctime and mark inode dirty,\nwhich may trigger expand 'extra_isize' and allocate block. If inode\ndidn't init quota will lead to warning. To solve above issue, init\n'old.inode' firstly in 'ext4_rename'."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-908"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.9.337",
|
||||
"matchCriteriaId": "9FFBA9B5-26DC-4802-9A86-F7B886954E4A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.303",
|
||||
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.270",
|
||||
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.229",
|
||||
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.87",
|
||||
"matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.18",
|
||||
"matchCriteriaId": "08D38C5F-9644-4549-BBA6-F0860F024D14"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.4",
|
||||
"matchCriteriaId": "BC4189D9-5478-4E88-A78D-9C1DE29B217C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/13271fbbe85d73a7c47058f56a52f2a7f00d6e39",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/135ba9146f4d38abed48a540ef8a8770ff0bd34f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/33fd7031d634f3b46e59f61adfbb0ea9fe514fef",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/67f6d5a4043f3db0c6bb0e14a0d97a7be8bfb8b5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7dfb8259f66faafa68d23a261b284d2c2c67649b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/84a2f2ed49d6a4d92b354219077434c57d334620",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/def7a39091e60e1c4a2f623629082a00092602be",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f263e349bacc2f303526dcfa61c4bc50132418b1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fae381a3d79bb94aa2eb752170d47458d778b797",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50347",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.470",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:23.473",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,173 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value, the memory\nthat allocated in mmc_alloc_host() will be leaked and it will lead a kernel\ncrash because of deleting not added device in the remove path.\n\nSo fix this by checking the return value and calling mmc_free_host() in the\nerror path, besides, led_classdev_unregister() and pm_runtime_disable() also\nneed be called."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "3.16",
|
||||
"versionEndExcluding": "4.9.337",
|
||||
"matchCriteriaId": "5522724B-B972-4CDA-9782-6ACEC2A639E4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.303",
|
||||
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.270",
|
||||
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.229",
|
||||
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.86",
|
||||
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1491667d5450778a265eddddd294219acfd648cb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7fa922c7a3dd623fd59f1af50e8896fd9ca7f654",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/89303ddbb502c3bc8edbf864f9f85500c8fe07e9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/937112e991ed25d1727d878734adcbef3b900274",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a522e26a20a43dcfbef9ee9f71ed803290e852b0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d7ad7278be401b09c9f9a9f522cf4c449c7fd489",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/df683201c7ffbd21a806a7cad657b661c5ebfb6f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e598c9683fe1cf97c2b11b800cc3cee072108220",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fc38a5a10e9e5a75eb9189854abeb8405b214cc9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50348",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.590",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:30.987",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,31 +11,131 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix a memory leak in an error handling path\n\nIf this memdup_user() call fails, the memory allocated in a previous call\na few lines above should be freed. Otherwise it leaks."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.4",
|
||||
"versionEndExcluding": "5.4.220",
|
||||
"matchCriteriaId": "C86E91CD-1AC4-4C91-8097-B6DD58212EE2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.150",
|
||||
"matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.75",
|
||||
"matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "5.19.17",
|
||||
"matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.0.3",
|
||||
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/733dd17158f96aaa25408dc39bbb2738fda9300e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/acc393aecda05bf64ed13b732931462e07a1bf08",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/aed8816305575b38dcc77feb6f1bc1d0ed32f5b8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cc3bca2110ac85cd964da997ef83d84cab0d49fb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e060c4b9f33c1fca74df26d57a98e784295327e6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fd1ef88049de09bc70d60b549992524cfc0e66ff",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50349",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.703",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:36.913",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,173 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: tifm: fix possible memory leak in tifm_7xx1_switch_media()\n\nIf device_register() returns error in tifm_7xx1_switch_media(),\nname of kobject which is allocated in dev_set_name() called in device_add()\nis leaked.\n\nNever directly free @dev after calling device_register(), even\nif it returned an error! Always use put_device() to give up the\nreference initialized."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.22",
|
||||
"versionEndExcluding": "4.9.337",
|
||||
"matchCriteriaId": "50B4031E-0292-4576-9B48-9EDFB1CBDF88"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.303",
|
||||
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.270",
|
||||
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.229",
|
||||
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.163",
|
||||
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.86",
|
||||
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1695b1adcc3a7d985cd22fa3b55761edf3fab50d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2bbb222a54ff501f77ce593d21b76b79c905045e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/35abbc8406cc39e72d3ce85f6e869555afe50d54",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/57c857353d5020bdec8284d9c0fee447484fe5e0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/848c45964ded537107e010aaf353aa30a0855387",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d861b7d41b17942b337d4b87a70de7cd1dc44d4e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ee2715faf7e7153f5142ed09aacfa89a64d45dcb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ef843ee20576039126d34d6eb5f45d14c3e6ce18",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fd2c930cf6a5b9176382c15f9acb1996e76e25ad",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50350",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.833",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:43.630",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,89 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix a race condition between login_work and the login thread\n\nIn case a malicious initiator sends some random data immediately after a\nlogin PDU; the iscsi_target_sk_data_ready() callback will schedule the\nlogin_work and, at the same time, the negotiation may end without clearing\nthe LOGIN_FLAGS_INITIAL_PDU flag (because no additional PDU exchanges are\nrequired to complete the login).\n\nThe login has been completed but the login_work function will find the\nLOGIN_FLAGS_INITIAL_PDU flag set and will never stop from rescheduling\nitself; at this point, if the initiator drops the connection, the\niscsit_conn structure will be freed, login_work will dereference a released\nsocket structure and the kernel crashes.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000230\nPF: supervisor write access in kernel mode\nPF: error_code(0x0002) - not-present page\nWorkqueue: events iscsi_target_do_login_rx [iscsi_target_mod]\nRIP: 0010:_raw_read_lock_bh+0x15/0x30\nCall trace:\n iscsi_target_do_login_rx+0x75/0x3f0 [iscsi_target_mod]\n process_one_work+0x1e8/0x3c0\n\nFix this bug by forcing login_work to stop after the login has been\ncompleted and the socket callbacks have been restored.\n\nAdd a comment to clearify the return values of iscsi_target_do_login()"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 4.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.0,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-362"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "3.12",
|
||||
"versionEndExcluding": "6.0.16",
|
||||
"matchCriteriaId": "85836EA7-7E00-413E-838E-F4D67567E7F9"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1",
|
||||
"versionEndExcluding": "6.1.2",
|
||||
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1533b8b3058db618409f41554ebe768c2e3acfae",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3ecdca49ca49d4770639d81503c873b6d25887c4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fec1b2fa62c162d03f5dcd7b03e3c89d3116d49f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50351",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:34.980",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:48.517",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,94 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix xid leak in cifs_create()\n\nIf the cifs already shutdown, we should free the xid before return,\notherwise, the xid will be leaked."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.13",
|
||||
"versionEndExcluding": "5.15.76",
|
||||
"matchCriteriaId": "59270B6F-5680-4DA5-BC00-6D8E42EFFEFC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.6",
|
||||
"matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/593d877c39aa9f3fe1a4b5b022492886d7d700ec",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/92aa09c86ef297976a3c27c6574c0839418dc2c4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fee0fb1f15054bb6a0ede452acb42da5bef4d587",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-50352",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:35.080",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:54.167",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,164 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns: fix possible memory leak in hnae_ae_register()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff00c01aba2100 (size 128):\n comm \"systemd-udevd\", pid 1259, jiffies 4294903284 (age 294.152s)\n hex dump (first 32 bytes):\n 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<0000000034783f26>] slab_post_alloc_hook+0xa0/0x3e0\n [<00000000748188f2>] __kmem_cache_alloc_node+0x164/0x2b0\n [<00000000ab0743e8>] __kmalloc_node_track_caller+0x6c/0x390\n [<000000006c0ffb13>] kvasprintf+0x8c/0x118\n [<00000000fa27bfe1>] kvasprintf_const+0x60/0xc8\n [<0000000083e10ed7>] kobject_set_name_vargs+0x3c/0xc0\n [<000000000b87affc>] dev_set_name+0x7c/0xa0\n [<000000003fd8fe26>] hnae_ae_register+0xcc/0x190 [hnae]\n [<00000000fe97edc9>] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf]\n [<00000000c36ff1eb>] hns_dsaf_probe+0x548/0x748 [hns_dsaf]"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.4",
|
||||
"versionEndExcluding": "4.9.332",
|
||||
"matchCriteriaId": "1B134647-F377-440F-AF99-883E53BFB15E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.298",
|
||||
"matchCriteriaId": "7140B9A2-EB63-497C-96B1-68A96CD99051"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.264",
|
||||
"matchCriteriaId": "8AE23A9F-BF98-4055-AA49-02118B96226D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.221",
|
||||
"matchCriteriaId": "DF527781-6E98-4DBF-B668-377AA673CDCF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.152",
|
||||
"matchCriteriaId": "AFE2A429-A1A8-4B68-8F1D-A1595AB6A4F7"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.76",
|
||||
"matchCriteriaId": "918A4953-6F82-40F5-B7A9-9836905139C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.0.6",
|
||||
"matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/02dc0db19d944b4a90941db505ecf1aaec714be4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2974f3b330ef25f5d34a4948d04290c2cd7802cf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3b78453cca046d3b03853f0d077ad3ad130db886",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7ae1345f6ad715acbcdc9e1ac28153684fd498bb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/91f8f5342bee726ed5692583d58f69e7cc9ae60e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a3c148955c22fe1d94d7a2096005679c1f22eddf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dfc0337c6dceb6449403b33ecb141f4a1458a1e9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ff2f5ec5d009844ec28f171123f9e58750cef4bf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53304",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:35.240",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:58:59.480",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,35 +11,166 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: fix overlap expiration walk\n\nThe lazy gc on insert that should remove timed-out entries fails to release\nthe other half of the interval, if any.\n\nCan be reproduced with tests/shell/testcases/sets/0044interval_overlap_0\nin nftables.git and kmemleak enabled kernel.\n\nSecond bug is the use of rbe_prev vs. prev pointer.\nIf rbe_prev() returns NULL after at least one iteration, rbe_prev points\nto element that is not an end interval, hence it should not be removed.\n\nLastly, check the genmask of the end interval if this is active in the\ncurrent generation."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.10.166",
|
||||
"versionEndExcluding": "5.10.190",
|
||||
"matchCriteriaId": "D120E24C-92C4-42C2-BDBC-2DA33FB84683"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.15.91",
|
||||
"versionEndExcluding": "5.15.124",
|
||||
"matchCriteriaId": "7C579EE5-29AE-450E-A284-D7401ABCD1D3"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.1.9",
|
||||
"versionEndExcluding": "6.1.43",
|
||||
"matchCriteriaId": "BBB03740-07A5-4A80-A087-A4A2B6127646"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2.1",
|
||||
"versionEndExcluding": "6.4.8",
|
||||
"matchCriteriaId": "ED5C51C1-C86A-404D-A81F-10761E602032"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "C64BDD9D-C663-4E75-AE06-356EDC392B82"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "26544390-88E4-41CA-98BF-7BB1E9D4E243"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53305",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.260",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:59:05.670",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,158 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix use-after-free\n\nFix potential use-after-free in l2cap_le_command_rej."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.14.324",
|
||||
"matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.293",
|
||||
"matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.255",
|
||||
"matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.192",
|
||||
"matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.128",
|
||||
"matchCriteriaId": "1415629F-F97B-4880-BA1E-AF3DBB8EF305"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.47",
|
||||
"matchCriteriaId": "2EEA01B0-0151-4E0F-B140-1A441EEDD717"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.4.12",
|
||||
"matchCriteriaId": "CF8ECF64-40AE-49AB-8315-4D83F9F56ECF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/149daab45922ab1ac7f0cbeacab7251a46bf5e63",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1a40c56e8bff3e424724d78a9a6b3272dd8a371d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/255be68150291440657b2cdb09420b69441af3d8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/548a6b64b3c0688f01119a6fcccceb41f8c984e4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e76bab1b7afa580cd76362540fc37551ada4359b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f752a0b334bb95fe9b42ecb511e0864e2768046f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fe49aa73cca6608714477b74bfc6874b9db979df",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53306",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.370",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:46:08.330",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,15 +11,100 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsdax: force clear dirty mark if CoW\n\nXFS allows CoW on non-shared extents to combat fragmentation[1]. The old\nnon-shared extent could be mwrited before, its dax entry is marked dirty. \n\nThis results in a WARNing:\n\n[ 28.512349] ------------[ cut here ]------------\n[ 28.512622] WARNING: CPU: 2 PID: 5255 at fs/dax.c:390 dax_insert_entry+0x342/0x390\n[ 28.513050] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace fscache netfs nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables\n[ 28.515462] CPU: 2 PID: 5255 Comm: fsstress Kdump: loaded Not tainted 6.3.0-rc1-00001-g85e1481e19c1-dirty #117\n[ 28.515902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.1-1-1 04/01/2014\n[ 28.516307] RIP: 0010:dax_insert_entry+0x342/0x390\n[ 28.516536] Code: 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8b 45 20 48 83 c0 01 e9 e2 fe ff ff 48 8b 45 20 48 83 c0 01 e9 cd fe ff ff <0f> 0b e9 53 ff ff ff 48 8b 7c 24 08 31 f6 e8 1b 61 a1 00 eb 8c 48\n[ 28.517417] RSP: 0000:ffffc9000845fb18 EFLAGS: 00010086\n[ 28.517721] RAX: 0000000000000053 RBX: 0000000000000155 RCX: 000000000018824b\n[ 28.518113] RDX: 0000000000000000 RSI: ffffffff827525a6 RDI: 00000000ffffffff\n[ 28.518515] RBP: ffffea00062092c0 R08: 0000000000000000 R09: ffffc9000845f9c8\n[ 28.518905] R10: 0000000000000003 R11: ffffffff82ddb7e8 R12: 0000000000000155\n[ 28.519301] R13: 0000000000000000 R14: 000000000018824b R15: ffff88810cfa76b8\n[ 28.519703] FS: 00007f14a0c94740(0000) GS:ffff88817bd00000(0000) knlGS:0000000000000000\n[ 28.520148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 28.520472] CR2: 00007f14a0c8d000 CR3: 000000010321c004 CR4: 0000000000770ee0\n[ 28.520863] PKRU: 55555554\n[ 28.521043] Call Trace:\n[ 28.521219] <TASK>\n[ 28.521368] dax_fault_iter+0x196/0x390\n[ 28.521595] dax_iomap_pte_fault+0x19b/0x3d0\n[ 28.521852] __xfs_filemap_fault+0x234/0x2b0\n[ 28.522116] __do_fault+0x30/0x130\n[ 28.522334] do_fault+0x193/0x340\n[ 28.522586] __handle_mm_fault+0x2d3/0x690\n[ 28.522975] handle_mm_fault+0xe6/0x2c0\n[ 28.523259] do_user_addr_fault+0x1bc/0x6f0\n[ 28.523521] exc_page_fault+0x60/0x140\n[ 28.523763] asm_exc_page_fault+0x22/0x30\n[ 28.524001] RIP: 0033:0x7f14a0b589ca\n[ 28.524225] Code: c5 fe 7f 07 c5 fe 7f 47 20 c5 fe 7f 47 40 c5 fe 7f 47 60 c5 f8 77 c3 66 0f 1f 84 00 00 00 00 00 40 0f b6 c6 48 89 d1 48 89 fa <f3> aa 48 89 d0 c5 f8 77 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90\n[ 28.525198] RSP: 002b:00007fff1dea1c98 EFLAGS: 00010202\n[ 28.525505] RAX: 000000000000001e RBX: 000000000014a000 RCX: 0000000000006046\n[ 28.525895] RDX: 00007f14a0c82000 RSI: 000000000000001e RDI: 00007f14a0c8d000\n[ 28.526290] RBP: 000000000000006f R08: 0000000000000004 R09: 000000000014a000\n[ 28.526681] R10: 0000000000000008 R11: 0000000000000246 R12: 028f5c28f5c28f5c\n[ 28.527067] R13: 8f5c28f5c28f5c29 R14: 0000000000011046 R15: 00007f14a0c946c0\n[ 28.527449] </TASK>\n[ 28.527600] ---[ end trace 0000000000000000 ]---\n\n\nTo be able to delete this entry, clear its dirty mark before\ninvalidate_inode_pages2_range().\n\n[1] https://lore.kernel.org/linux-xfs/20230321151339.GA11376@frogsfrogsfrogs/"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.2.11",
|
||||
"matchCriteriaId": "93C03C9A-798F-4CD5-912F-A436BFA0CC7E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "DC271202-7570-4505-89A4-D602D47BFD00"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "D413BB6D-4F74-4C7D-9163-47786619EF53"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f76b3a32879de215ced3f8c754c4077b0c2f79e3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fac05f800abb63dc4d7cc48fe7edf16e0520dc1f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53307",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.477",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:46:18.413",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,159 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails\n\nIf getting an ID or setting up a work queue in rbd_dev_create() fails,\nuse-after-free on rbd_dev->rbd_client, rbd_dev->spec and rbd_dev->opts\nis triggered in do_rbd_add(). The root cause is that the ownership of\nthese structures is transfered to rbd_dev prematurely and they all end\nup getting freed when rbd_dev_create() calls rbd_dev_free() prior to\nreturning to do_rbd_add().\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE, an\nincomplete patch submitted by Natalia Petrova <[email protected]>."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.9",
|
||||
"versionEndExcluding": "4.14.308",
|
||||
"matchCriteriaId": "7292C460-000B-4120-B05D-5672751A14E4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.276",
|
||||
"matchCriteriaId": "C902FC54-DDBD-4DA6-BFEF-26889A267464"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.235",
|
||||
"matchCriteriaId": "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.173",
|
||||
"matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.99",
|
||||
"matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.16",
|
||||
"matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.2.3",
|
||||
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/71da2a151ed1adb0aea4252b16d81b53012e7afd",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9787b328c42c13c4f31e7d5042c4e877e9344068",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a73783e4e0c4d1507794da211eeca75498544dff",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ae16346078b1189aee934afd872d9f3d0a682c33",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cc8c0dd2984503ed09efa37bcafcef3d3da104e8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e3cbb4d60764295992c95344f2d779439e8b34ce",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f7c4d9b133c7a04ca619355574e96b6abf209fba",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/faa7b683e436664fff5648426950718277831348",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53308",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.597",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:46:25.467",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,188 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: Better handle pm_runtime_get() failing in .remove()\n\nIn the (unlikely) event that pm_runtime_get() (disguised as\npm_runtime_resume_and_get()) fails, the remove callback returned an\nerror early. The problem with this is that the driver core ignores the\nerror value and continues removing the device. This results in a\nresource leak. Worse the devm allocated resources are freed and so if a\ncallback of the driver is called later the register mapping is already\ngone which probably results in a crash."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-415"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.9.206",
|
||||
"versionEndExcluding": "4.10",
|
||||
"matchCriteriaId": "CB0798B1-CA64-4529-A5AC-7146F59643A2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.14.158",
|
||||
"versionEndExcluding": "4.14.316",
|
||||
"matchCriteriaId": "5BCD50CB-C2BD-4613-A0B3-BE4E8A70606B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.19.88",
|
||||
"versionEndExcluding": "4.19.284",
|
||||
"matchCriteriaId": "878D0CAD-F0B9-48E6-AC29-67336F3607A4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.3.15",
|
||||
"versionEndExcluding": "5.4",
|
||||
"matchCriteriaId": "DEDD31E3-90F8-4A45-89A5-9B27A3B5FC07"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.4.1",
|
||||
"versionEndExcluding": "5.4.244",
|
||||
"matchCriteriaId": "0AFC823D-6913-4035-B927-27DB60AEE8F0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.181",
|
||||
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.113",
|
||||
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.30",
|
||||
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.4",
|
||||
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/83996d317b1deddc85006376082e8886f55aa709",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9407454a9b18bbeff216e8ecde87ffb2171e9ccf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b22b514209ff8c4287abb853399890ab97e1b5ca",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/be85912c36ddca3e8b2eef1b5392cd8db6bdb730",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c1bc2870f14e526a01897e14c747a0a0ca125231",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d52a0cca591e899d4e5c8ab19e067b4c6b7d104f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e02d8d5b1602689b98d9b91550a11b9b57baedbe",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f816b9829b19394d318e01953aa3b2721bca040d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53309",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.720",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:46:35.660",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,158 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: Fix integer overflow in radeon_cs_parser_init\n\nThe type of size is unsigned, if size is 0x40000000, there will be an\ninteger overflow, size will be zero after size *= sizeof(uint32_t),\nwill cause uninitialized memory to be referenced later"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-190"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.14.324",
|
||||
"matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.293",
|
||||
"matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.255",
|
||||
"matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.192",
|
||||
"matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.123",
|
||||
"matchCriteriaId": "372C0BAA-44F5-4829-A7B0-E4924B682DA4"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.42",
|
||||
"matchCriteriaId": "6E769E6A-7EEF-4FA8-BF41-6CA1CE537361"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.4.7",
|
||||
"matchCriteriaId": "60A1A1ED-EA6C-42F6-80D3-3316DC7608C7"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/25e634d7f44eb13113139040e5366bebe48c882f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2e1be420b86980c25a75325e90dfc3fc73126f61",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c0d7dbc6b7a61a56028118c00af2c8319d44a682",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cfa9148bafb2d3292b65de1bac79dcca65be2643",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d05ba46134d07e889de7d23cf8503574a22ede09",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e6825b30d37fe89ceb87f926d33d4fad321a331e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f828b681d0cd566f86351c0b913e6cb6ed8c7b9c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53310",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.847",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:46:56.757",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,104 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: axp288_fuel_gauge: Fix external_power_changed race\n\nfuel_gauge_external_power_changed() dereferences info->bat,\nwhich gets sets in axp288_fuel_gauge_probe() like this:\n\n info->bat = devm_power_supply_register(dev, &fuel_gauge_desc, &psy_cfg);\n\nAs soon as devm_power_supply_register() has called device_add()\nthe external_power_changed callback can get called. So there is a window\nwhere fuel_gauge_external_power_changed() may get called while\ninfo->bat has not been set yet leading to a NULL pointer dereference.\n\nFixing this is easy. The external_power_changed callback gets passed\nthe power_supply which will eventually get stored in info->bat,\nso fuel_gauge_external_power_changed() can simply directly use\nthe passed in psy argument which is always valid."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 4.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.0,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-362"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.18",
|
||||
"versionEndExcluding": "6.1.31",
|
||||
"matchCriteriaId": "96ED2287-2842-4A17-B79A-9F1F111B827C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.5",
|
||||
"matchCriteriaId": "34DD94CA-4DA1-41C3-9A9B-92ACD7F4E240"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0456b912121e45b3ef54abe3135e5dcb541f956c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a636c6ba9ce898207f283271cb28511206ab739b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8319774d6f1567d6e7d03653174ab0c82c5c66d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53311",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:36.967",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:47:05.500",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,184 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput\n\nDuring unmount process of nilfs2, nothing holds nilfs_root structure after\nnilfs2 detaches its writer in nilfs_detach_log_writer(). Previously,\nnilfs_evict_inode() could cause use-after-free read for nilfs_root if\ninodes are left in \"garbage_list\" and released by nilfs_dispose_list at\nthe end of nilfs_detach_log_writer(), and this bug was fixed by commit\n9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root in\nnilfs_evict_inode()\").\n\nHowever, it turned out that there is another possibility of UAF in the\ncall path where mark_inode_dirty_sync() is called from iput():\n\nnilfs_detach_log_writer()\n nilfs_dispose_list()\n iput()\n mark_inode_dirty_sync()\n __mark_inode_dirty()\n nilfs_dirty_inode()\n __nilfs_mark_inode_dirty()\n nilfs_load_inode_block() --> causes UAF of nilfs_root struct\n\nThis can happen after commit 0ae45f63d4ef (\"vfs: add support for a\nlazytime mount option\"), which changed iput() to call\nmark_inode_dirty_sync() on its final reference if i_state has I_DIRTY_TIME\nflag and i_nlink is non-zero.\n\nThis issue appears after commit 28a65b49eb53 (\"nilfs2: do not write dirty\ndata after degenerating to read-only\") when using the syzbot reproducer,\nbut the issue has potentially existed before.\n\nFix this issue by adding a \"purging flag\" to the nilfs structure, setting\nthat flag while disposing the \"garbage_list\" and checking it in\n__nilfs_mark_inode_dirty().\n\nUnlike commit 9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root\nin nilfs_evict_inode()\"), this patch does not rely on ns_writer to\ndetermine whether to skip operations, so as not to break recovery on\nmount. The nilfs_salvage_orphan_logs routine dirties the buffer of\nsalvaged data before attaching the log writer, so changing\n__nilfs_mark_inode_dirty() to skip the operation when ns_writer is NULL\nwill cause recovery write to fail. The purpose of using the cleanup-only\nflag is to allow for narrowing of such conditions."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.0",
|
||||
"versionEndExcluding": "4.14.323",
|
||||
"matchCriteriaId": "52A09F09-8B97-4E2D-B5B9-E3E7EB2F0241"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.292",
|
||||
"matchCriteriaId": "684F195A-516D-43E8-B1F2-9C808AD362DA"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.254",
|
||||
"matchCriteriaId": "25D01197-E40D-49C5-AA15-4955E10B7AE6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.191",
|
||||
"matchCriteriaId": "A7631AF2-4758-4770-9B7D-A68CACF660D0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.127",
|
||||
"matchCriteriaId": "945AF8F7-5328-4A14-B072-A5740192C9E1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.46",
|
||||
"matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.4.11",
|
||||
"matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/11afd67f1b3c28eb216e50a3ca8dbcb69bb71793",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3645510cf926e6af2f4d44899370d7e5331c93bd",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/37207240872456fbab44a110bde6640445233963",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5828d5f5dc877dcfdd7b23102e978e2ecfd86d82",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7532ff6edbf5242376b24a95a2fefb59bb653e5a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a3c3b4cbf9b8554120fb230e6516e980c6277487",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d2c539c216cce74837a9cf5804eb205939b82227",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8654743a0e6909dc634cbfad6db6816f10f3399",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53312",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.117",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:47:12.323",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,89 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix net_dev_start_xmit trace event vs skb_transport_offset()\n\nAfter blamed commit, we must be more careful about using\nskb_transport_offset(), as reminded us by syzbot:\n\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 skb_transport_offset include/linux/skbuff.h:2977 [inline]\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nModules linked in:\nCPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 6.1.30-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023\nWorkqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet\nRIP: 0010:skb_transport_header include/linux/skbuff.h:2868 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:2977 [inline]\nRIP: 0010:perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nCode: 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 4e 04 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc e8 56 22 01 fd <0f> 0b e9 f6 fc ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 86 f9 ff\nRSP: 0018:ffffc900002bf700 EFLAGS: 00010293\nRAX: ffffffff8485d8ca RBX: 000000000000ffff RCX: ffff888100914280\nRDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff\nRBP: ffffc900002bf818 R08: ffffffff8485d5b6 R09: fffffbfff0f8fb5e\nR10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110217d8f67\nR13: ffff88810bec7b3a R14: dffffc0000000000 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f96cf6d52f0 CR3: 000000012224c000 CR4: 0000000000350ef0\nCall Trace:\n<TASK>\n[<ffffffff84715e35>] trace_net_dev_start_xmit include/trace/events/net.h:14 [inline]\n[<ffffffff84715e35>] xmit_one net/core/dev.c:3643 [inline]\n[<ffffffff84715e35>] dev_hard_start_xmit+0x705/0x980 net/core/dev.c:3660\n[<ffffffff8471a232>] __dev_queue_xmit+0x16b2/0x3370 net/core/dev.c:4324\n[<ffffffff85416493>] dev_queue_xmit include/linux/netdevice.h:3030 [inline]\n[<ffffffff85416493>] batadv_send_skb_packet+0x3f3/0x680 net/batman-adv/send.c:108\n[<ffffffff85416744>] batadv_send_broadcast_skb+0x24/0x30 net/batman-adv/send.c:127\n[<ffffffff853bc52a>] batadv_iv_ogm_send_to_if net/batman-adv/bat_iv_ogm.c:393 [inline]\n[<ffffffff853bc52a>] batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:421 [inline]\n[<ffffffff853bc52a>] batadv_iv_send_outstanding_bat_ogm_packet+0x69a/0x840 net/batman-adv/bat_iv_ogm.c:1701\n[<ffffffff8151023c>] process_one_work+0x8ac/0x1170 kernel/workqueue.c:2289\n[<ffffffff81511938>] worker_thread+0xaa8/0x12d0 kernel/workqueue.c:2436"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.19",
|
||||
"versionEndExcluding": "6.1.39",
|
||||
"matchCriteriaId": "84700E9E-E09F-4B40-8370-141BD7FF69FB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.4.4",
|
||||
"matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/58f9e88eb247263c74383b4ee8858abac15cdbe0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ced61418f46993d571385812bafed3a7d4ab6918",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f88fcb1d7d961b4b402d675109726f94db87571c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53313",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.233",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:47:30.267",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,43 +11,173 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix wrong setting of max_corr_read_errors\n\nThere is no input check when echo md/max_read_errors and overflow might\noccur. Add check of input number."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.33",
|
||||
"versionEndExcluding": "4.14.322",
|
||||
"matchCriteriaId": "5ED9B08F-CA6D-4544-B95A-2B1CA26C9D8D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.291",
|
||||
"matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.251",
|
||||
"matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.188",
|
||||
"matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.121",
|
||||
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.39",
|
||||
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.13",
|
||||
"matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.4",
|
||||
"versionEndExcluding": "6.4.4",
|
||||
"matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/025fde32fb957a5c271711bc66841f817ff5f299",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/05d10428e8dffed0bac2502f34151729fc189cd3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/31c805a44b7569ca1017a4714385182d98bba212",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3c76920e547d4b931bed758bad83fd658dd88b4e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/74050a3fdd4aecfd2cbf74d3c145812ab2744375",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/aef6e98eb772594edd4399625e4e1bbe45971fa1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b1d8f38310bce3282374983b229d94edbaf1e570",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e83cb411aa1c6c9617db9329897f4506ba9e9b9d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8b20a405428803bd9881881d8242c9d72c6b2b2",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53314",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.360",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:24:11.990",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,159 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n\nDo not assing the Linux device to struct fb_info.dev. The call to\nregister_framebuffer() initializes the field to the fbdev device.\nDrivers should not override its value.\n\nFixes a bug where the driver incorrectly decreases the hardware\ndevice's reference counter and leaks the fbdev device.\n\nv2:\n\t* add Fixes tag (Dan)"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.32",
|
||||
"versionEndExcluding": "4.14.326",
|
||||
"matchCriteriaId": "8CCD729D-2240-4059-B0B9-CD3195C6094C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.295",
|
||||
"matchCriteriaId": "D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.257",
|
||||
"matchCriteriaId": "834BD148-28EC-43A4-A4F5-458124A1E39F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.195",
|
||||
"matchCriteriaId": "C385B650-53DB-4BFB-83D1-1D8FADF653EF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.132",
|
||||
"matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.54",
|
||||
"matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.5.4",
|
||||
"matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0517fc5a71333b315164736bbd32608894fbb872",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1c6ff2a7c593db851f23e31ace2baf557ea9d0ff",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/309c27162afea79b3c7f8747bb650faf6923b639",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/4aade6c9100a3537788b6a9c7ac481037d19efdf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8ffa40ff64aa43a9a28fcf209b48d86a3e0f4972",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f83c1b13f8154e0284448912756d0a351a1a602a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f90a0e5265b60cdd3c77990e8105f79aa2fac994",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ffdf2b020db717853167391a3a8d912e13428fa6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53315",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.480",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:23:45.870",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,27 +11,117 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Fix SKB corruption in REO destination ring\n\nWhile running traffics for a long time, randomly an RX descriptor\nfilled with value \"0\" from REO destination ring is received.\nThis descriptor which is invalid causes the wrong SKB (SKB stored in\nthe IDR lookup with buffer id \"0\") to be fetched which in turn\ncauses SKB memory corruption issue and the same leads to crash\nafter some time.\n\nChanged the start id for idr allocation to \"1\" and the buffer id \"0\"\nis reserved for error validation. Introduced Sanity check to validate\nthe descriptor, before processing the SKB.\n\nCrash Signature :\n\nUnable to handle kernel paging request at virtual address 3f004900\nPC points to \"b15_dma_inv_range+0x30/0x50\"\nLR points to \"dma_cache_maint_page+0x8c/0x128\".\nThe Backtrace obtained is as follows:\n[<8031716c>] (b15_dma_inv_range) from [<80313a4c>] (dma_cache_maint_page+0x8c/0x128)\n[<80313a4c>] (dma_cache_maint_page) from [<80313b90>] (__dma_page_dev_to_cpu+0x28/0xcc)\n[<80313b90>] (__dma_page_dev_to_cpu) from [<7fb5dd68>] (ath11k_dp_process_rx+0x1e8/0x4a4 [ath11k])\n[<7fb5dd68>] (ath11k_dp_process_rx [ath11k]) from [<7fb53c20>] (ath11k_dp_service_srng+0xb0/0x2ac [ath11k])\n[<7fb53c20>] (ath11k_dp_service_srng [ath11k]) from [<7f67bba4>] (ath11k_pci_ext_grp_napi_poll+0x1c/0x78 [ath11k_pci])\n[<7f67bba4>] (ath11k_pci_ext_grp_napi_poll [ath11k_pci]) from [<807d5cf4>] (__napi_poll+0x28/0xb8)\n[<807d5cf4>] (__napi_poll) from [<807d5f28>] (net_rx_action+0xf0/0x280)\n[<807d5f28>] (net_rx_action) from [<80302148>] (__do_softirq+0xd0/0x280)\n[<80302148>] (__do_softirq) from [<80320408>] (irq_exit+0x74/0xd4)\n[<80320408>] (irq_exit) from [<803638a4>] (__handle_domain_irq+0x90/0xb4)\n[<803638a4>] (__handle_domain_irq) from [<805bedec>] (gic_handle_irq+0x58/0x90)\n[<805bedec>] (gic_handle_irq) from [<80301a78>] (__irq_svc+0x58/0x8c)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.6",
|
||||
"versionEndExcluding": "5.10.181",
|
||||
"matchCriteriaId": "F1F238F8-F08D-489D-9C86-1B74CBB71CFE"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.113",
|
||||
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.30",
|
||||
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.4",
|
||||
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/068fd06148fbf0af95bb08dc77cff34ee679fdbc",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3d3f8fe01a01d94a17fe1ae0d2e894049a972717",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/67459491f78146bcf7d93596e5b709d063dff5d8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/866921dc06b94df91acfcf9359b57da943ed99b3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f9fff67d2d7ca6fa8066132003a3deef654c55b1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53316",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.600",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:23:37.097",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,31 +11,131 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dp: Free resources after unregistering them\n\nThe DP component's unbind operation walks through the submodules to\nunregister and clean things up. But if the unbind happens because the DP\ncontroller itself is being removed, all the memory for those submodules\nhas just been freed.\n\nChange the order of these operations to avoid the many use-after-free\nthat otherwise happens in this code path.\n\nPatchwork: https://patchwork.freedesktop.org/patch/542166/"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.10",
|
||||
"versionEndExcluding": "5.10.188",
|
||||
"matchCriteriaId": "2D01EB1B-F702-46D9-8474-32673E5A1006"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.121",
|
||||
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.39",
|
||||
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.13",
|
||||
"matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.4",
|
||||
"versionEndExcluding": "6.4.4",
|
||||
"matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3c3f3d35f5e05c468b048eb42a4f8c62c6655692",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/4e9f1a2367aea7d61f6781213e25313cd983b0d7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5c3278db06e332fdc14f3f297499fb88ded264d2",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c67a55f7cc8d767d624235bf1bcd0947e56abe0f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ca47d0dc00968358c136a1847cfed550cedfd1b5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53317",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.713",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:23:28.940",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,163 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix WARNING in mb_find_extent\n\nSyzbot found the following issue:\n\nEXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!\nEXT4-fs (loop0): orphan cleanup on readonly fs\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 5067 at fs/ext4/mballoc.c:1869 mb_find_extent+0x8a1/0xe30\nModules linked in:\nCPU: 1 PID: 5067 Comm: syz-executor307 Not tainted 6.2.0-rc1-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nRIP: 0010:mb_find_extent+0x8a1/0xe30 fs/ext4/mballoc.c:1869\nRSP: 0018:ffffc90003c9e098 EFLAGS: 00010293\nRAX: ffffffff82405731 RBX: 0000000000000041 RCX: ffff8880783457c0\nRDX: 0000000000000000 RSI: 0000000000000041 RDI: 0000000000000040\nRBP: 0000000000000040 R08: ffffffff82405723 R09: ffffed10053c9402\nR10: ffffed10053c9402 R11: 1ffff110053c9401 R12: 0000000000000000\nR13: ffffc90003c9e538 R14: dffffc0000000000 R15: ffffc90003c9e2cc\nFS: 0000555556665300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000056312f6796f8 CR3: 0000000022437000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n ext4_mb_complex_scan_group+0x353/0x1100 fs/ext4/mballoc.c:2307\n ext4_mb_regular_allocator+0x1533/0x3860 fs/ext4/mballoc.c:2735\n ext4_mb_new_blocks+0xddf/0x3db0 fs/ext4/mballoc.c:5605\n ext4_ext_map_blocks+0x1868/0x6880 fs/ext4/extents.c:4286\n ext4_map_blocks+0xa49/0x1cc0 fs/ext4/inode.c:651\n ext4_getblk+0x1b9/0x770 fs/ext4/inode.c:864\n ext4_bread+0x2a/0x170 fs/ext4/inode.c:920\n ext4_quota_write+0x225/0x570 fs/ext4/super.c:7105\n write_blk fs/quota/quota_tree.c:64 [inline]\n get_free_dqblk+0x34a/0x6d0 fs/quota/quota_tree.c:130\n do_insert_tree+0x26b/0x1aa0 fs/quota/quota_tree.c:340\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n dq_insert_tree fs/quota/quota_tree.c:401 [inline]\n qtree_write_dquot+0x3b6/0x530 fs/quota/quota_tree.c:420\n v2_write_dquot+0x11b/0x190 fs/quota/quota_v2.c:358\n dquot_acquire+0x348/0x670 fs/quota/dquot.c:444\n ext4_acquire_dquot+0x2dc/0x400 fs/ext4/super.c:6740\n dqget+0x999/0xdc0 fs/quota/dquot.c:914\n __dquot_initialize+0x3d0/0xcf0 fs/quota/dquot.c:1492\n ext4_process_orphan+0x57/0x2d0 fs/ext4/orphan.c:329\n ext4_orphan_cleanup+0xb60/0x1340 fs/ext4/orphan.c:474\n __ext4_fill_super fs/ext4/super.c:5516 [inline]\n ext4_fill_super+0x81cd/0x8700 fs/ext4/super.c:5644\n get_tree_bdev+0x400/0x620 fs/super.c:1282\n vfs_get_tree+0x88/0x270 fs/super.c:1489\n do_new_mount+0x289/0xad0 fs/namespace.c:3145\n do_mount fs/namespace.c:3488 [inline]\n __do_sys_mount fs/namespace.c:3697 [inline]\n __se_sys_mount+0x2d3/0x3c0 fs/namespace.c:3674\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nAdd some debug information:\nmb_find_extent: mb_find_extent block=41, order=0 needed=64 next=0 ex=0/41/1@3735929054 64 64 7\nblock_bitmap: ff 3f 0c 00 fc 01 00 00 d2 3d 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n\nAcctually, blocks per group is 64, but block bitmap indicate at least has\n128 blocks. Now, ext4_validate_block_bitmap() didn't check invalid block's\nbitmap if set.\nTo resolve above issue, add check like fsck \"Padding at end of block bitmap is\nnot set\"."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.19.283",
|
||||
"matchCriteriaId": "4CD72EDE-728E-485C-B222-F269B229C33E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.243",
|
||||
"matchCriteriaId": "E54ACEF5-C8C1-4266-85FC-7D513FFD1DEC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.180",
|
||||
"matchCriteriaId": "78422AC3-CC89-479E-B4BC-62381D8F3564"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.112",
|
||||
"matchCriteriaId": "8612AB29-948C-4D53-84D9-6CA2E4A8B015"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.29",
|
||||
"matchCriteriaId": "D48F00B5-5471-4D1B-BE47-1DAB8122F35A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.2.16",
|
||||
"matchCriteriaId": "F92F7C8E-A977-4255-B1B6-D1908D8B408F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.3",
|
||||
"versionEndExcluding": "6.3.3",
|
||||
"matchCriteriaId": "6D96A7FC-D812-4458-AEA8-3FF4023E6B75"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1b90fbc7590124c57a2e590de7fd07eba26606f1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5d356d902e9d5b1aaaaf2326d365340fa8a90c1b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/775b00ba23f6f916fe2ac60c5ff7fd0fe4f28d0d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d55e76e11592a1d18a179c7fd34ca1b52632beb3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dba62fa84a8eac44a53a2862de8a40e5bdfa0ae3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dd45e536f47a82e0a405f9a4b6c7ceb367171ee9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e4d503c956a744cb59e509ca5f134cfad423c7a3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fa08a7b61dff8a4df11ff1e84abfc214b487caf7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53318",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.833",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:22:40.880",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,39 +11,158 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrecordmcount: Fix memory leaks in the uwrite function\n\nCommon realloc mistake: 'file_append' nulled but not freed upon failure"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.14.316",
|
||||
"matchCriteriaId": "A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.284",
|
||||
"matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.244",
|
||||
"matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.181",
|
||||
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.113",
|
||||
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.30",
|
||||
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.3.4",
|
||||
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/25c9b185f121812cbc215fdaa1192c6b9025b428",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2d9ca5f62f2ba160ff9c9be4adf401c46c04edef",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3ed95a6f6c646e8bb15c354536e0ab10e8f39c08",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/444ec005404cead222ebce2561a9451c9ee5ad89",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/895130e63c93926f07caf5db286b97bd27b81de9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/bd39f68a309a947670379bf9a39b16c584f86ddb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fa359d068574d29e7d2f0fdd0ebe4c6a12b5cfb9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ff70ad9159fbb566b2c15724f44207e8deccd527",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53319",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:37.947",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:22:28.760",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,15 +11,85 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm\n\nCurrently there is no synchronisation between finalize_pkvm() and\nkvm_arm_init() initcalls. The finalize_pkvm() proceeds happily even if\nkvm_arm_init() fails resulting in the following warning on all the CPUs\nand eventually a HYP panic:\n\n | kvm [1]: IPA Size Limit: 48 bits\n | kvm [1]: Failed to init hyp memory protection\n | kvm [1]: error initializing Hyp mode: -22\n |\n | <snip>\n |\n | WARNING: CPU: 0 PID: 0 at arch/arm64/kvm/pkvm.c:226 _kvm_host_prot_finalize+0x30/0x50\n | Modules linked in:\n | CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | pstate: 634020c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n | pc : _kvm_host_prot_finalize+0x30/0x50\n | lr : __flush_smp_call_function_queue+0xd8/0x230\n |\n | Call trace:\n | _kvm_host_prot_finalize+0x3c/0x50\n | on_each_cpu_cond_mask+0x3c/0x6c\n | pkvm_drop_host_privileges+0x4c/0x78\n | finalize_pkvm+0x3c/0x5c\n | do_one_initcall+0xcc/0x240\n | do_initcall_level+0x8c/0xac\n | do_initcalls+0x54/0x94\n | do_basic_setup+0x1c/0x28\n | kernel_init_freeable+0x100/0x16c\n | kernel_init+0x20/0x1a0\n | ret_from_fork+0x10/0x20\n | Failed to finalize Hyp protection: -22\n | dtb=fvp-base-revc.dtb\n | kvm [95]: nVHE hyp BUG at: arch/arm64/kvm/hyp/nvhe/mem_protect.c:540!\n | kvm [95]: nVHE call trace:\n | kvm [95]: [<ffff800081052984>] __kvm_nvhe_hyp_panic+0xac/0xf8\n | kvm [95]: [<ffff800081059644>] __kvm_nvhe_handle_host_mem_abort+0x1a0/0x2ac\n | kvm [95]: [<ffff80008105511c>] __kvm_nvhe_handle_trap+0x4c/0x160\n | kvm [95]: [<ffff8000810540fc>] __kvm_nvhe___skip_pauth_save+0x4/0x4\n | kvm [95]: ---[ end nVHE call trace ]---\n | kvm [95]: Hyp Offset: 0xfffe8db00ffa0000\n | Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000\n | CPU: 3 PID: 95 Comm: kworker/u16:2 Tainted: G W 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | Workqueue: rpciod rpc_async_schedule\n | Call trace:\n | dump_backtrace+0xec/0x108\n | show_stack+0x18/0x2c\n | dump_stack_lvl+0x50/0x68\n | dump_stack+0x18/0x24\n | panic+0x138/0x33c\n | nvhe_hyp_panic_handler+0x100/0x184\n | new_slab+0x23c/0x54c\n | ___slab_alloc+0x3e4/0x770\n | kmem_cache_alloc_node+0x1f0/0x278\n | __alloc_skb+0xdc/0x294\n | tcp_stream_alloc_skb+0x2c/0xf0\n | tcp_sendmsg_locked+0x3d0/0xda4\n | tcp_sendmsg+0x38/0x5c\n | inet_sendmsg+0x44/0x60\n | sock_sendmsg+0x1c/0x34\n | xprt_sock_sendmsg+0xdc/0x274\n | xs_tcp_send_request+0x1ac/0x28c\n | xprt_transmit+0xcc/0x300\n | call_transmit+0x78/0x90\n | __rpc_execute+0x114/0x3d8\n | rpc_async_schedule+0x28/0x48\n | process_one_work+0x1d8/0x314\n | worker_thread+0x248/0x474\n | kthread+0xfc/0x184\n | ret_from_fork+0x10/0x20\n | SMP: stopping secondary CPUs\n | Kernel Offset: 0x57c5cb460000 from 0xffff800080000000\n | PHYS_OFFSET: 0x80000000\n | CPU features: 0x00000000,1035b7a3,ccfe773f\n | Memory Limit: none\n | ---[ end Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000 ]---\n\nFix it by checking for the successfull initialisation of kvm_arm_init()\nin finalize_pkvm() before proceeding any futher."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.4",
|
||||
"versionEndExcluding": "6.4.8",
|
||||
"matchCriteriaId": "645579C2-235B-4FCC-A399-CECF5423170F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/91450dec0445f4d12f960ba68d8d05c3cb2ab5b8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fa729bc7c9c8c17a2481358c841ef8ca920485d3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-53320",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T17:15:38.050",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:15:46.453",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,89 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()\n\nThe function mpi3mr_get_all_tgt_info() has four issues:\n\n1) It calculates valid entry length in alltgt_info assuming the header part\n of the struct mpi3mr_device_map_info would equal to sizeof(u32). The\n correct size is sizeof(u64).\n\n2) When it calculates the valid entry length kern_entrylen, it excludes one\n entry by subtracting 1 from num_devices.\n\n3) It copies num_device by calling memcpy(). Substitution is enough.\n\n4) It does not specify the calculated length to sg_copy_from_buffer().\n Instead, it specifies the payload length which is larger than the\n alltgt_info size. It causes \"BUG: KASAN: slab-out-of-bounds\".\n\nFix the issues by using the correct header size, removing the subtraction\nfrom num_devices, replacing the memcpy() with substitution and specifying\nthe correct length to sg_copy_from_buffer()."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-787"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.19",
|
||||
"versionEndExcluding": "6.1.16",
|
||||
"matchCriteriaId": "A9E5492C-0786-4BD9-A043-DBAA6E28BFE6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.2.3",
|
||||
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2f3d3fa5b8ed7d3b147478f42b00b468eeb1ecd2",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8ba997b22f2cd5d29aad8c39f6201f7608ed0c04",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fb428a2005fc1260d18b989cc5199f281617f44d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,90 @@
|
||||
{
|
||||
"id": "CVE-2024-51999",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:49.100",
|
||||
"lastModified": "2025-12-01T21:15:49.100",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Express.js minimalist web framework for node. Prior to 5.2.0 and 4.22.0, when using the extended query parser in express ('query parser': 'extended'), the request.query object inherits all object prototype properties, but these properties can be overwritten by query string parameter keys that match the property names. This vulnerability is fixed in 5.2.0 and 4.22.0."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 2.7,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "UNREPORTED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-915"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/expressjs/express/commit/2f64f68c37c64ae333e41ff38032d21860f22255",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/expressjs/express/releases/tag/4.22.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/expressjs/express/releases/tag/v5.2.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-11561",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-09T14:15:54.447",
|
||||
"lastModified": "2025-11-27T12:15:46.180",
|
||||
"lastModified": "2025-12-01T22:15:47.440",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -108,6 +108,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:21795",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-11561",
|
||||
"source": "[email protected]"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-12183",
|
||||
"sourceIdentifier": "103e4ec9-0a87-450b-af77-479448ddef11",
|
||||
"published": "2025-11-28T16:15:51.823",
|
||||
"lastModified": "2025-12-01T15:39:33.110",
|
||||
"lastModified": "2025-12-01T21:15:49.800",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -77,6 +77,10 @@
|
||||
{
|
||||
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183",
|
||||
"source": "103e4ec9-0a87-450b-af77-479448ddef11"
|
||||
},
|
||||
{
|
||||
"url": "http://www.openwall.com/lists/oss-security/2025/12/01/5",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-13786",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-30T09:15:45.480",
|
||||
"lastModified": "2025-12-01T15:39:33.110",
|
||||
"lastModified": "2025-12-01T21:15:49.950",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -140,6 +140,14 @@
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.689523",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md#3-proof-of-concept-poc",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-32988",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-07-10T08:15:24.223",
|
||||
"lastModified": "2025-11-06T23:15:36.797",
|
||||
"lastModified": "2025-12-01T22:15:47.790",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -158,6 +158,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-32988",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-32989",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-07-10T08:15:24.430",
|
||||
"lastModified": "2025-11-06T23:15:36.993",
|
||||
"lastModified": "2025-12-01T22:15:48.027",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -133,6 +133,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-32989",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-32990",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-07-10T10:15:33.060",
|
||||
"lastModified": "2025-11-06T23:15:37.137",
|
||||
"lastModified": "2025-12-01T22:15:48.200",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -157,6 +157,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-32990",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-39834",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T14:15:51.717",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T22:03:46.933",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,15 +11,90 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow\n\nWhen an invalid stc_type is provided, the function allocates memory for\nshared_stc but jumps to unlock_and_out without freeing it, causing a\nmemory leak.\n\nFix by jumping to free_shared_stc label instead to ensure proper cleanup."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.12",
|
||||
"versionEndExcluding": "6.16.5",
|
||||
"matchCriteriaId": "37954284-5844-43A0-988C-A8928FBC9ADF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/051fd8576a2e4e95d5870c5c9f8679c5b16882e4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a630f83592cdad1253523a1b760cfe78fef6cd9c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-39836",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-09-16T14:15:51.983",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-12-01T21:59:35.697",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -11,19 +11,104 @@
|
||||
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: stmm: Fix incorrect buffer allocation method\n\nThe communication buffer allocated by setup_mm_hdr() is later on passed\nto tee_shm_register_kernel_buf(). The latter expects those buffers to be\ncontiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause\nvarious corruptions or BUGs, specifically since commit 9aec2fb0fd5e\n(\"slab: allocate frozen pages\"), though it was broken before as well.\n\nFix this by using alloc_pages_exact() instead of kmalloc()."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-787"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.8",
|
||||
"versionEndExcluding": "6.12.45",
|
||||
"matchCriteriaId": "B2466775-B7E8-4219-A095-F4111F872F29"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.16.5",
|
||||
"matchCriteriaId": "EB781080-7001-4FA1-B388-517FFEFBC73E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/630c0e6064daf84f17aad1a7d9ca76b562e3fe47",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/77ff27ff0e4529a003c8a1c2492c111968c378d3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c5e81e672699e0c5557b2b755cc8f7a69aa92bff",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -1,14 +1,14 @@
|
||||
{
|
||||
"id": "CVE-2025-48709",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"published": "2025-08-07T20:15:28.117",
|
||||
"lastModified": "2025-10-27T16:15:40.490",
|
||||
"lastModified": "2025-12-01T22:15:48.363",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbu_connection_details.vbs with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations."
|
||||
"value": "BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on, it runs 'DBUStatus.exe' frequently, which then calls 'dbu_connection_details.vbs' with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations. Fixed in PACTV.9.0.21.307."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,9 +16,53 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
@@ -41,9 +85,13 @@
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-214"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-532"
|
||||
@@ -52,13 +100,9 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bmc.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://docs.bmc.com/xwiki/bin/view/Control-M-Orchestration/Control-M/ctm9021/Patches/Control-M-Server-PACTV-9-0-21-307/",
|
||||
"source": "[email protected]"
|
||||
"source": "9119a7d8-5eab-497f-8521-727c672e3725"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-48980",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-31T00:15:36.327",
|
||||
"lastModified": "2025-11-04T15:41:56.843",
|
||||
"lastModified": "2025-12-01T21:15:50.250",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -35,6 +35,18 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-565"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3253725",
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-48982",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-31T00:15:36.437",
|
||||
"lastModified": "2025-11-13T14:47:08.707",
|
||||
"vulnStatus": "Analyzed",
|
||||
"lastModified": "2025-12-01T21:15:50.380",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -67,6 +67,16 @@
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-269"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-48983",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-31T00:15:36.553",
|
||||
"lastModified": "2025-11-11T02:07:03.383",
|
||||
"vulnStatus": "Analyzed",
|
||||
"lastModified": "2025-12-01T21:15:50.527",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -45,6 +45,16 @@
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-284"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-48985",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-07T01:15:36.567",
|
||||
"lastModified": "2025-11-12T16:20:22.257",
|
||||
"lastModified": "2025-12-01T21:15:50.673",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -35,6 +35,18 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-20"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-50736",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-30T14:15:43.393",
|
||||
"lastModified": "2025-11-04T16:16:00.453",
|
||||
"lastModified": "2025-12-01T21:15:50.820",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -35,6 +35,18 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-601"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50736",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-52662",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-07T01:15:36.803",
|
||||
"lastModified": "2025-11-12T16:20:22.257",
|
||||
"lastModified": "2025-12-01T21:15:51.000",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -35,6 +35,18 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/nuxt/devtools/commit/7cadbbe9",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-52667",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-20T20:16:22.830",
|
||||
"lastModified": "2025-11-21T15:13:13.800",
|
||||
"lastModified": "2025-12-01T21:15:51.130",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -35,6 +35,18 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3399809",
|
||||
|
||||
@@ -0,0 +1,94 @@
|
||||
{
|
||||
"id": "CVE-2025-55749",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:51.617",
|
||||
"lastModified": "2025-12-01T21:15:51.617",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials. Fixed in 16.10.11, 17.4.4, and 17.7.0."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-284"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/xwiki/xwiki-platform/commit/42fb063749dd88cc78196f72d7318b7179285ebd",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/xwiki/xwiki-platform/commit/99a04a0e2143583f5154a43e02174155da7e8e10",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-53gx-j3p6-2rw9",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://jira.xwiki.org/browse/XWIKI-23438",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-58044",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:51.807",
|
||||
"lastModified": "2025-12-01T21:15:51.807",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "LOW",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-601"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/jumpserver/jumpserver/commit/36ae076cb021f16d2053a63651bc16d15a3ed53b",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/jumpserver/jumpserver/security/advisories/GHSA-h762-mj7p-jwjq",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-63523",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T15:15:50.973",
|
||||
"lastModified": "2025-12-01T15:39:33.110",
|
||||
"lastModified": "2025-12-01T21:15:51.980",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -11,7 +11,42 @@
|
||||
"value": "FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as \"read-only.\" An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 2.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-125"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63523.md",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-6395",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-07-10T16:15:25.110",
|
||||
"lastModified": "2025-11-07T00:15:55.290",
|
||||
"lastModified": "2025-12-01T22:15:51.513",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -80,6 +80,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-6395",
|
||||
"source": "[email protected]"
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-65621",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:52.193",
|
||||
"lastModified": "2025-12-01T21:15:52.193",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator's session, enabling privilege escalation."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "http://snipeitapp.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65621",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-65622",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:48.697",
|
||||
"lastModified": "2025-12-01T22:15:48.697",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Snipe-IT before 8.3.4 allows stored XSS via the Locations \"Country\" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "http://snipeitapp.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65622",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-65840",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:52.320",
|
||||
"lastModified": "2025-12-01T21:15:52.320",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/CSRF_1.md",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/sanluan/PublicCMS/issues/102",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66205",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:52.443",
|
||||
"lastModified": "2025-12-01T21:15:52.443",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 4.2
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/frappe/frappe/commit/984c641bff9539b6126a01146096f133db6a955b",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-mp93-8vxr-hqq9",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-66206",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:52.623",
|
||||
"lastModified": "2025-12-01T21:15:52.623",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path traversal attacks, wherein some files from the server could be retrieved if the full path was known. Sites hosted on Frappe Cloud, and even other setups that are behind a reverse proxy like NGINX are unaffected. This would mainly affect someone directly using werkzeug/gunicorn. In those cases, either an upgrade or changing the setup to use a reverse proxy is recommended. This vulnerability is fixed in 15.86.0 and 14.99.2."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 4.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-v4wg-gqfr-rpjm",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-66252",
|
||||
"sourceIdentifier": "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
|
||||
"published": "2025-11-26T01:16:08.273",
|
||||
"lastModified": "2025-11-28T23:11:55.537",
|
||||
"lastModified": "2025-12-01T22:15:48.860",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -73,6 +73,10 @@
|
||||
{
|
||||
"url": "https://www.abdulmhsblog.com/posts/webfmvulns/",
|
||||
"source": "b7efe717-a805-47cf-8e9a-921fca0ce0ce"
|
||||
},
|
||||
{
|
||||
"url": "https://www.abdulmhsblog.com/posts/webfmvulns/",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,86 @@
|
||||
{
|
||||
"id": "CVE-2025-66294",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:52.843",
|
||||
"lastModified": "2025-12-01T21:15:52.843",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by unauthenticated attackers. This vulnerability stems from weak regex validation in the cleanDangerousTwig method. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-94"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1336"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-662m-56v4-3r8f",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66295",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:53.000",
|
||||
"lastModified": "2025-12-01T21:15:53.000",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new user through the Admin UI and supplies a username containing path traversal sequences (for example ..\\Nijat or ../Nijat), Grav writes the account YAML file to an unintended path outside user/accounts/. The written YAML can contain account fields such as email, fullname, twofa_secret, and hashed_password. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-h756-wh59-hhjv",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66296",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:53.157",
|
||||
"lastModified": "2025-12-01T21:15:53.157",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav\u2019s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an existing administrator account, set a new password/email, and then log in as that administrator. This effectively allows privilege escalation from limited user-manager permissions to full administrator access. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-266"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-cjcp-qxvg-4rjm",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66297",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T21:15:53.327",
|
||||
"lastModified": "2025-12-01T21:15:53.327",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1336"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66298",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.103",
|
||||
"lastModified": "2025-12-01T22:15:49.103",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1336"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-8535-hvm8-2hmv",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-66299",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.290",
|
||||
"lastModified": "2025-12-01T22:15:49.290",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox. Since the security sandbox does not fully protect the Twig object, it is possible to interact with it (e.g., call methods, read/write attributes) through maliciously crafted Twig template directives injected into a web page. This allows an authenticated editor to add arbitrary functions to the Twig attribute system.twig.safe_filters, effectively bypassing the Grav CMS sandbox. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-94"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1336"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gjc5-8cfh-653x",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66300",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.447",
|
||||
"lastModified": "2025-12-01T22:15:49.447",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using \"Frontmatter\" form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
|
||||
"baseScore": 8.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 4.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-66301",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.607",
|
||||
"lastModified": "2025-12-01T22:15:49.607",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-285"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-v8x2-fjv7-8hjh",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66302",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.750",
|
||||
"lastModified": "2025-12-01T22:15:49.750",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of the user account running the application. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 4.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-j422-qmxp-hv94",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66303",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:49.913",
|
||||
"lastModified": "2025-12-01T22:15:49.913",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service (DoS) vulnerability has been identified in Grav related to the handling of scheduled_at parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduled_at parameter with a malicious input, such as a single quote, the application admin panel becomes non-functional, causing significant disruptions to administrative operations. The only way to recover from this issue is to manually access the host server and modify the backup.yaml file to correct the corrupted cron expression. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 4.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-400"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-x62q-p736-3997",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-66304",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.080",
|
||||
"lastModified": "2025-12-01T22:15:50.080",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, users with read access on the user account management section of the admin panel can view the password hashes of all users, including the admin user. This exposure can potentially lead to privilege escalation if an attacker can crack these password hashes. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 0.7,
|
||||
"impactScore": 5.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-200"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-201"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gq3g-666w-7h85",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66305",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.250",
|
||||
"lastModified": "2025-12-01T22:15:50.250",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service (DoS) vulnerability was identified in the \"Languages\" submenu of the Grav admin configuration panel (/admin/config/system). Specifically, the Supported parameter fails to properly validate user input. If a malformed value is inserted\u2014such as a single forward slash (/) or an XSS test string\u2014it causes a fatal regular expression parsing error on the server. This leads to application-wide failure due to the use of the preg_match() function with an improperly constructed regular expression, resulting in an error. Once triggered, the site becomes completely unavailable to all users. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-248"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66306",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.413",
|
||||
"lastModified": "2025-12-01T22:15:50.413",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, there is an IDOR (Insecure Direct Object Reference) vulnerability in the Grav CMS Admin Panel which allows low-privilege users to access sensitive information from other accounts. Although direct account takeover is not possible, admin email addresses and other metadata can be exposed, increasing the risk of phishing, credential stuffing, and social engineering. This vulnerability is fixed in 1.8.0-beta.27."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-639"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/commit/b7e1958a6e807ac14919447b60e5204a2ea77f62",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-4cwq-j7jv-qmwg",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-66307",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.570",
|
||||
"lastModified": "2025-12-01T22:15:50.570",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a user enumeration and email disclosure vulnerability exists in Grav. The \"Forgot Password\" functionality at /admin/forgot leaks information about valid usernames and their associated email addresses through distinct server responses. This allows an attacker to enumerate users and disclose sensitive email addresses, which can be leveraged for targeted attacks such as password spraying, phishing, or social engineering. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 2.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-204"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66308",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.743",
|
||||
"lastModified": "2025-12-01T22:15:50.743",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/config/site endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[taxonomies] parameter. The injected payload is stored on the server and automatically executed in the browser of any user who accesses the affected site configuration, resulting in a persistent attack vector. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gqxx-248x-g29f",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66309",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:50.910",
|
||||
"lastModified": "2025-12-01T22:15:50.910",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][content][items] parameter. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-65mj-f7p4-wggq",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66310",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:51.067",
|
||||
"lastModified": "2025-12-01T22:15:51.067",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][template] parameter. The script is saved within the page's frontmatter and executed automatically whenever the affected content is rendered in the administrative interface or frontend view. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-7g78-5g5g-mvfj",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66311",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:51.217",
|
||||
"lastModified": "2025-12-01T22:15:51.217",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][metadata], data[header][taxonomy][category], and data[header][taxonomy][tag] parameters. These scripts are stored in the page frontmatter and executed automatically whenever the affected page is accessed or rendered in the administrative interface. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-mpjj-4688-3fxg",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-66312",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-01T22:15:51.367",
|
||||
"lastModified": "2025-12-01T22:15:51.367",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/accounts/groups/Grupo endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[readableName] parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 1.11.0-beta.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-rmw5-f87r-w988",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-12-01T21:00:11.814072+00:00
|
||||
2025-12-01T23:00:11.583634+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-12-01T20:15:57.370000+00:00
|
||||
2025-12-01T22:15:51.513000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,54 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
319745
|
||||
319772
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `10`
|
||||
Recently added CVEs: `27`
|
||||
|
||||
- [CVE-2025-11772](CVE-2025/CVE-2025-117xx/CVE-2025-11772.json) (`2025-12-01T19:15:49.130`)
|
||||
- [CVE-2025-12756](CVE-2025/CVE-2025-127xx/CVE-2025-12756.json) (`2025-12-01T20:15:49.147`)
|
||||
- [CVE-2025-34297](CVE-2025/CVE-2025-342xx/CVE-2025-34297.json) (`2025-12-01T19:15:50.420`)
|
||||
- [CVE-2025-51682](CVE-2025/CVE-2025-516xx/CVE-2025-51682.json) (`2025-12-01T20:15:51.660`)
|
||||
- [CVE-2025-51683](CVE-2025/CVE-2025-516xx/CVE-2025-51683.json) (`2025-12-01T20:15:51.783`)
|
||||
- [CVE-2025-63317](CVE-2025/CVE-2025-633xx/CVE-2025-63317.json) (`2025-12-01T20:15:52.907`)
|
||||
- [CVE-2025-63365](CVE-2025/CVE-2025-633xx/CVE-2025-63365.json) (`2025-12-01T19:15:51.373`)
|
||||
- [CVE-2025-65407](CVE-2025/CVE-2025-654xx/CVE-2025-65407.json) (`2025-12-01T19:15:52.417`)
|
||||
- [CVE-2025-65836](CVE-2025/CVE-2025-658xx/CVE-2025-65836.json) (`2025-12-01T20:15:57.103`)
|
||||
- [CVE-2025-65838](CVE-2025/CVE-2025-658xx/CVE-2025-65838.json) (`2025-12-01T20:15:57.240`)
|
||||
- [CVE-2025-58044](CVE-2025/CVE-2025-580xx/CVE-2025-58044.json) (`2025-12-01T21:15:51.807`)
|
||||
- [CVE-2025-65621](CVE-2025/CVE-2025-656xx/CVE-2025-65621.json) (`2025-12-01T21:15:52.193`)
|
||||
- [CVE-2025-65622](CVE-2025/CVE-2025-656xx/CVE-2025-65622.json) (`2025-12-01T22:15:48.697`)
|
||||
- [CVE-2025-65840](CVE-2025/CVE-2025-658xx/CVE-2025-65840.json) (`2025-12-01T21:15:52.320`)
|
||||
- [CVE-2025-66205](CVE-2025/CVE-2025-662xx/CVE-2025-66205.json) (`2025-12-01T21:15:52.443`)
|
||||
- [CVE-2025-66206](CVE-2025/CVE-2025-662xx/CVE-2025-66206.json) (`2025-12-01T21:15:52.623`)
|
||||
- [CVE-2025-66294](CVE-2025/CVE-2025-662xx/CVE-2025-66294.json) (`2025-12-01T21:15:52.843`)
|
||||
- [CVE-2025-66295](CVE-2025/CVE-2025-662xx/CVE-2025-66295.json) (`2025-12-01T21:15:53.000`)
|
||||
- [CVE-2025-66296](CVE-2025/CVE-2025-662xx/CVE-2025-66296.json) (`2025-12-01T21:15:53.157`)
|
||||
- [CVE-2025-66297](CVE-2025/CVE-2025-662xx/CVE-2025-66297.json) (`2025-12-01T21:15:53.327`)
|
||||
- [CVE-2025-66298](CVE-2025/CVE-2025-662xx/CVE-2025-66298.json) (`2025-12-01T22:15:49.103`)
|
||||
- [CVE-2025-66299](CVE-2025/CVE-2025-662xx/CVE-2025-66299.json) (`2025-12-01T22:15:49.290`)
|
||||
- [CVE-2025-66300](CVE-2025/CVE-2025-663xx/CVE-2025-66300.json) (`2025-12-01T22:15:49.447`)
|
||||
- [CVE-2025-66301](CVE-2025/CVE-2025-663xx/CVE-2025-66301.json) (`2025-12-01T22:15:49.607`)
|
||||
- [CVE-2025-66302](CVE-2025/CVE-2025-663xx/CVE-2025-66302.json) (`2025-12-01T22:15:49.750`)
|
||||
- [CVE-2025-66303](CVE-2025/CVE-2025-663xx/CVE-2025-66303.json) (`2025-12-01T22:15:49.913`)
|
||||
- [CVE-2025-66304](CVE-2025/CVE-2025-663xx/CVE-2025-66304.json) (`2025-12-01T22:15:50.080`)
|
||||
- [CVE-2025-66305](CVE-2025/CVE-2025-663xx/CVE-2025-66305.json) (`2025-12-01T22:15:50.250`)
|
||||
- [CVE-2025-66306](CVE-2025/CVE-2025-663xx/CVE-2025-66306.json) (`2025-12-01T22:15:50.413`)
|
||||
- [CVE-2025-66307](CVE-2025/CVE-2025-663xx/CVE-2025-66307.json) (`2025-12-01T22:15:50.570`)
|
||||
- [CVE-2025-66308](CVE-2025/CVE-2025-663xx/CVE-2025-66308.json) (`2025-12-01T22:15:50.743`)
|
||||
- [CVE-2025-66309](CVE-2025/CVE-2025-663xx/CVE-2025-66309.json) (`2025-12-01T22:15:50.910`)
|
||||
- [CVE-2025-66310](CVE-2025/CVE-2025-663xx/CVE-2025-66310.json) (`2025-12-01T22:15:51.067`)
|
||||
- [CVE-2025-66311](CVE-2025/CVE-2025-663xx/CVE-2025-66311.json) (`2025-12-01T22:15:51.217`)
|
||||
- [CVE-2025-66312](CVE-2025/CVE-2025-663xx/CVE-2025-66312.json) (`2025-12-01T22:15:51.367`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `59`
|
||||
Recently modified CVEs: `49`
|
||||
|
||||
- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-12-01T19:15:51.010`)
|
||||
- [CVE-2025-62728](CVE-2025/CVE-2025-627xx/CVE-2025-62728.json) (`2025-12-01T19:15:51.180`)
|
||||
- [CVE-2025-63095](CVE-2025/CVE-2025-630xx/CVE-2025-63095.json) (`2025-12-01T20:15:52.757`)
|
||||
- [CVE-2025-63520](CVE-2025/CVE-2025-635xx/CVE-2025-63520.json) (`2025-12-01T20:15:53.247`)
|
||||
- [CVE-2025-63522](CVE-2025/CVE-2025-635xx/CVE-2025-63522.json) (`2025-12-01T20:15:53.417`)
|
||||
- [CVE-2025-63526](CVE-2025/CVE-2025-635xx/CVE-2025-63526.json) (`2025-12-01T20:15:53.647`)
|
||||
- [CVE-2025-63527](CVE-2025/CVE-2025-635xx/CVE-2025-63527.json) (`2025-12-01T20:15:53.873`)
|
||||
- [CVE-2025-63528](CVE-2025/CVE-2025-635xx/CVE-2025-63528.json) (`2025-12-01T20:15:54.057`)
|
||||
- [CVE-2025-63529](CVE-2025/CVE-2025-635xx/CVE-2025-63529.json) (`2025-12-01T19:15:51.520`)
|
||||
- [CVE-2025-63531](CVE-2025/CVE-2025-635xx/CVE-2025-63531.json) (`2025-12-01T19:15:51.730`)
|
||||
- [CVE-2025-63532](CVE-2025/CVE-2025-635xx/CVE-2025-63532.json) (`2025-12-01T19:15:51.927`)
|
||||
- [CVE-2025-63533](CVE-2025/CVE-2025-635xx/CVE-2025-63533.json) (`2025-12-01T19:15:52.080`)
|
||||
- [CVE-2025-63709](CVE-2025/CVE-2025-637xx/CVE-2025-63709.json) (`2025-12-01T20:15:54.240`)
|
||||
- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-12-01T20:15:54.430`)
|
||||
- [CVE-2025-64030](CVE-2025/CVE-2025-640xx/CVE-2025-64030.json) (`2025-12-01T20:15:54.607`)
|
||||
- [CVE-2025-64775](CVE-2025/CVE-2025-647xx/CVE-2025-64775.json) (`2025-12-01T19:15:52.240`)
|
||||
- [CVE-2025-65112](CVE-2025/CVE-2025-651xx/CVE-2025-65112.json) (`2025-12-01T20:15:54.823`)
|
||||
- [CVE-2025-65113](CVE-2025/CVE-2025-651xx/CVE-2025-65113.json) (`2025-12-01T20:15:54.943`)
|
||||
- [CVE-2025-65276](CVE-2025/CVE-2025-652xx/CVE-2025-65276.json) (`2025-12-01T20:15:55.097`)
|
||||
- [CVE-2025-65403](CVE-2025/CVE-2025-654xx/CVE-2025-65403.json) (`2025-12-01T20:15:55.257`)
|
||||
- [CVE-2025-65404](CVE-2025/CVE-2025-654xx/CVE-2025-65404.json) (`2025-12-01T20:15:55.403`)
|
||||
- [CVE-2025-65405](CVE-2025/CVE-2025-654xx/CVE-2025-65405.json) (`2025-12-01T20:15:55.560`)
|
||||
- [CVE-2025-65406](CVE-2025/CVE-2025-654xx/CVE-2025-65406.json) (`2025-12-01T20:15:56.120`)
|
||||
- [CVE-2025-65408](CVE-2025/CVE-2025-654xx/CVE-2025-65408.json) (`2025-12-01T20:15:56.923`)
|
||||
- [CVE-2025-66219](CVE-2025/CVE-2025-662xx/CVE-2025-66219.json) (`2025-12-01T20:15:57.370`)
|
||||
- [CVE-2023-53315](CVE-2023/CVE-2023-533xx/CVE-2023-53315.json) (`2025-12-01T21:23:45.870`)
|
||||
- [CVE-2023-53316](CVE-2023/CVE-2023-533xx/CVE-2023-53316.json) (`2025-12-01T21:23:37.097`)
|
||||
- [CVE-2023-53317](CVE-2023/CVE-2023-533xx/CVE-2023-53317.json) (`2025-12-01T21:23:28.940`)
|
||||
- [CVE-2023-53318](CVE-2023/CVE-2023-533xx/CVE-2023-53318.json) (`2025-12-01T21:22:40.880`)
|
||||
- [CVE-2023-53319](CVE-2023/CVE-2023-533xx/CVE-2023-53319.json) (`2025-12-01T21:22:28.760`)
|
||||
- [CVE-2023-53320](CVE-2023/CVE-2023-533xx/CVE-2023-53320.json) (`2025-12-01T21:15:46.453`)
|
||||
- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-12-01T22:15:47.440`)
|
||||
- [CVE-2025-12183](CVE-2025/CVE-2025-121xx/CVE-2025-12183.json) (`2025-12-01T21:15:49.800`)
|
||||
- [CVE-2025-13786](CVE-2025/CVE-2025-137xx/CVE-2025-13786.json) (`2025-12-01T21:15:49.950`)
|
||||
- [CVE-2025-32988](CVE-2025/CVE-2025-329xx/CVE-2025-32988.json) (`2025-12-01T22:15:47.790`)
|
||||
- [CVE-2025-32989](CVE-2025/CVE-2025-329xx/CVE-2025-32989.json) (`2025-12-01T22:15:48.027`)
|
||||
- [CVE-2025-32990](CVE-2025/CVE-2025-329xx/CVE-2025-32990.json) (`2025-12-01T22:15:48.200`)
|
||||
- [CVE-2025-39834](CVE-2025/CVE-2025-398xx/CVE-2025-39834.json) (`2025-12-01T22:03:46.933`)
|
||||
- [CVE-2025-39836](CVE-2025/CVE-2025-398xx/CVE-2025-39836.json) (`2025-12-01T21:59:35.697`)
|
||||
- [CVE-2025-48709](CVE-2025/CVE-2025-487xx/CVE-2025-48709.json) (`2025-12-01T22:15:48.363`)
|
||||
- [CVE-2025-48980](CVE-2025/CVE-2025-489xx/CVE-2025-48980.json) (`2025-12-01T21:15:50.250`)
|
||||
- [CVE-2025-48982](CVE-2025/CVE-2025-489xx/CVE-2025-48982.json) (`2025-12-01T21:15:50.380`)
|
||||
- [CVE-2025-48983](CVE-2025/CVE-2025-489xx/CVE-2025-48983.json) (`2025-12-01T21:15:50.527`)
|
||||
- [CVE-2025-48985](CVE-2025/CVE-2025-489xx/CVE-2025-48985.json) (`2025-12-01T21:15:50.673`)
|
||||
- [CVE-2025-50736](CVE-2025/CVE-2025-507xx/CVE-2025-50736.json) (`2025-12-01T21:15:50.820`)
|
||||
- [CVE-2025-52662](CVE-2025/CVE-2025-526xx/CVE-2025-52662.json) (`2025-12-01T21:15:51.000`)
|
||||
- [CVE-2025-52667](CVE-2025/CVE-2025-526xx/CVE-2025-52667.json) (`2025-12-01T21:15:51.130`)
|
||||
- [CVE-2025-63523](CVE-2025/CVE-2025-635xx/CVE-2025-63523.json) (`2025-12-01T21:15:51.980`)
|
||||
- [CVE-2025-6395](CVE-2025/CVE-2025-63xx/CVE-2025-6395.json) (`2025-12-01T22:15:51.513`)
|
||||
- [CVE-2025-66252](CVE-2025/CVE-2025-662xx/CVE-2025-66252.json) (`2025-12-01T22:15:48.860`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+145
-118
@@ -215236,20 +215236,20 @@ CVE-2022-50335,0,0,7c93b926e8abd725d637622e669c4f4b960de3c5b87fed27f17bebc35deb9
|
||||
CVE-2022-50336,0,0,ecd64ec35bc878139a797e0a70ed1612d8dfb99a41aecf4139d7fcd1ed0c1ef9,2025-09-15T15:22:27.090000
|
||||
CVE-2022-50337,0,0,4d06b41d978b782ae1870a874c9ce6f1f9789fd8e0463d494a0e26b1b287d2af,2025-09-15T15:22:27.090000
|
||||
CVE-2022-50338,0,0,445462c037bc90df3ff937184349fb37c7b519129fdf9573724de5b16bc6189b,2025-10-10T16:15:49.533000
|
||||
CVE-2022-50339,0,0,c7dc847160fad7f6ce85fe8eb3787a5b02e337738c012f6aaf9738e3e71bea52,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50340,0,0,8ff83f59089284e1887030036df22c7f81f2b7ac6006ccce2cf4791eebf42415,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50341,0,0,d8ad500dc1120e7e17085587b9186f25cc6f2b24c0dd8d4933349f52382ed006,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50342,0,0,85e306716788bc396f6461362a84b846220aef2aae247263cf169687ae989aa8,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50343,0,0,248c1bdc199314914c40f01f673b62a03d1c47134281c921bfe1104f4ab76225,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50344,0,0,d3db5df67c4a9d9ebde3cb50b010de77af698085507fd81293d207e084e450d7,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50339,0,1,a2644a5d60c1dbaf7087cd967ecfa675511828fedf7822068ec286c0d63e3cca,2025-12-01T22:00:43.643000
|
||||
CVE-2022-50340,0,1,f85bec820f37f0a107f965afa676f6f133d03760bebd5bcd1d9264bbf95b0195,2025-12-01T22:00:51.300000
|
||||
CVE-2022-50341,0,1,ef522f59b8bbc981d8cf2eecf39f86174326678ba3fa0d7c164d322cdad522d5,2025-12-01T22:03:08.070000
|
||||
CVE-2022-50342,0,1,0f218bd263990cda437c4ec97f85d66111f03c3557c63120e625a82a88a5ad35,2025-12-01T22:03:16.573000
|
||||
CVE-2022-50343,0,1,3c965efbaa8316620d25b1d9ff334dca9451e7ebb5b786dd4887623725423248,2025-12-01T22:03:21.887000
|
||||
CVE-2022-50344,0,1,e3e8f9c70647e71cbfdbba6379b0913d1fd94ac6da7d64bafb11d2fcc948c218,2025-12-01T22:03:27.743000
|
||||
CVE-2022-50345,0,0,0ca9090c34f70eac057c159170f0601c5e6bcf48713aa4c61050decf361eba6c,2025-09-29T19:15:33.190000
|
||||
CVE-2022-50346,0,0,9a08ad54266f2a78367275124e8e8c4067a6194e6dbcf6a17f59b3c3baad364b,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50347,0,0,e75c2e75380341e26ec559a9f7ab461cdf9f892b94eaad1d04c41d4696849298,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50348,0,0,004e295db9a4dccfdb947f142c7f6ebc7e519cb5184fc4c9f870d01ced0fa067,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50349,0,0,f3cde7d47dca61af4fa513e0e5f7a368a2f965d422b3a00a9e22957d95ecfee8,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50350,0,0,5ae75be1a49d597eee5ee5749c61abee732091a45afa5c84bdbea6891e14b1b9,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50351,0,0,967590694013b19226a246c0cc4afb8bf579d0f89e93dd0cf340eaa158b353e2,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50352,0,0,c91dfd4973c7cd17b9925ffb02013b76f046dff86cc07c10155441f5444df222,2025-09-17T14:18:55.093000
|
||||
CVE-2022-50346,0,1,5425c3c711fa3985834c7194e60194036227a746bd30fd45a0a8d4130d8561e4,2025-12-01T21:58:19.057000
|
||||
CVE-2022-50347,0,1,1efafde0b61c5d3393d06682f8f9b19ba569c12e03af5f5e04f445f6dea05465,2025-12-01T21:58:23.473000
|
||||
CVE-2022-50348,0,1,8a898727589af12d3c6c38f1244efac818b737e65038600ceb1774726c820435,2025-12-01T21:58:30.987000
|
||||
CVE-2022-50349,0,1,e79ff0ea995b071167fd89b1cdf2ef1fcaddc5ee68c0b51f718c2b798c825971,2025-12-01T21:58:36.913000
|
||||
CVE-2022-50350,0,1,464b748636a1f2e13c759dc611dec97750b07cce2acc110068d20e60a929026c,2025-12-01T21:58:43.630000
|
||||
CVE-2022-50351,0,1,6c4a0fe85ff51690562937168c7c496e5cd072a0553891a18190340f6a7db13a,2025-12-01T21:58:48.517000
|
||||
CVE-2022-50352,0,1,4ed5e4dd9d0853e9e49bd95022c40965c5354735735f0352e23b4135c4a3e4e4,2025-12-01T21:58:54.167000
|
||||
CVE-2022-50353,0,0,b0be5a7a87611fe9f6d51b40991a36d8ca88e6bacfde7da32d8c0ae1d4c8735b,2025-09-18T13:43:34.310000
|
||||
CVE-2022-50354,0,0,5d3f93135d0b04ec34898ea157559c407dd649f66622f09f533c5c7e94ce45fb,2025-09-18T13:43:34.310000
|
||||
CVE-2022-50355,0,0,b95e7ed4dc25273534a27aef29cc7dff14a0b22de369f5addca104e333599813,2025-09-18T13:43:34.310000
|
||||
@@ -243708,25 +243708,25 @@ CVE-2023-53300,0,0,e2a694a166f78952b7a68e9f6e5bc4df999f24a074b44db96e24f0f10210c
|
||||
CVE-2023-53301,0,0,6412b42d2cf5147ea19ede7c3574f21a64cb04a59b54f6fb9d76cec87066477e,2025-09-16T12:49:16.060000
|
||||
CVE-2023-53302,0,0,0ecc00caa6675fd71964ab2a19dbef727cfe7bd2594464107857639f7d8c9720,2025-09-16T12:49:16.060000
|
||||
CVE-2023-53303,0,0,3c90ead4e94ede791a0f521c7772300756df88f0ca45be172ab26d59a11feb29,2025-09-16T12:49:16.060000
|
||||
CVE-2023-53304,0,0,8e7564a93b89e9a51acff2c81e8fb45ce501e0f626e1cf3803b1fa1e23515618,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53305,0,0,6562068eeb5e67e371d23fc049f80279a92d18e5652d5cb922c4a74aa1bf5ce5,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53306,0,0,6cbf44c20d9528014c5253219893a066d699a4a3a0c2c96c1cf1554e539a7bdc,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53307,0,0,633006832246437c151030cee1c2131a6310d8f43adab7ebc6ee3b36f3816af4,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53308,0,0,ef46bede7d6274208b5dad2f71c3fc4bbc4965ba220aa57e4ef7c8c25b2610f2,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53309,0,0,647272e3bebaee42d5a2bc7a44d1dc2d03e0ec9e0e814c3ae8e0b264e036f87e,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53304,0,1,a1d182138e6135fcd324f17c0fe0aee619791f654e56f0d4d8cbd6c8a46800c6,2025-12-01T21:58:59.480000
|
||||
CVE-2023-53305,0,1,437e89b0f2d300803336fd44db413c226a743b08a311555d6b79a6c1c6865ab3,2025-12-01T21:59:05.670000
|
||||
CVE-2023-53306,0,1,21823df9d4fa2740ea0ae7a62393125835d406cc6ae387d886c2f7803f8322be,2025-12-01T21:46:08.330000
|
||||
CVE-2023-53307,0,1,6f074118809139bc8b7bd6d76ac9d30ba11db559c9280a93ab0525e30a7388a9,2025-12-01T21:46:18.413000
|
||||
CVE-2023-53308,0,1,ee0a259fe8a2c741bcf535e212ac83d9a10a956ccdacef064138f4322ef076aa,2025-12-01T21:46:25.467000
|
||||
CVE-2023-53309,0,1,0b63a775e687daa547e837c16223f09d325b9fd62d78e7da2ecbf487f4f0acef,2025-12-01T21:46:35.660000
|
||||
CVE-2023-5331,0,0,905019108665e93472a16e8702e015b2c86b26e5c458a698c25f3fb5c42b8549,2024-11-21T08:41:32.870000
|
||||
CVE-2023-53310,0,0,8d69fe39516a159afee9d452133b374f690f7ff4b2f1b63774df7131cfa2c277,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53311,0,0,66761025ecb7eeb23d7cf7e375c59f39096c51b277b3cba53cfd78f116b94856,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53312,0,0,06ed656b4905f358efa308b8c0bdfb4d5c50668d773b1fd63e018fab0266bc22,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53313,0,0,b10b120ad221b0e9b101f21b23379590620506ee01de41b1d81e7a0584e22d25,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53314,0,0,01ac44531a0b97f27873037382b61b3797a9e221728f05dcbff5f12df9a62a35,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53315,0,0,86f532aaa2e287c8d232f7d48bead74e8085f2126ae4f01c7feb373e188b59b3,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53316,0,0,6134bbb075a1dada51ef11ca52c28323b828cc3f64bb9efec7dc6ac0713163fb,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53317,0,0,89156330e4aaaf33210f1a71025bcc10572f6d3ea19363dd1f944e411d99e5ef,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53318,0,0,fe937fcb1fc3b16184e0abf3133b14c6697350ba98ea28c6441cf86bf1efa6be,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53319,0,0,599716eac069a0d756b74365acde70f195d0a03cde9facd910bc1ce7a3d2cfb9,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53310,0,1,1ad0757d223ff1d7de4f89655c9ff573662434bd598bcf81d6f62b58c5708e1f,2025-12-01T21:46:56.757000
|
||||
CVE-2023-53311,0,1,371977f7d818fb174ce96b9b99b78b9bbfb5134cf00e96ec51a58db5dc7c2fc0,2025-12-01T21:47:05.500000
|
||||
CVE-2023-53312,0,1,4c9c1ed18ff591954c22e1a0e34121b21aa493fc82c6473b8a8c4506693717a3,2025-12-01T21:47:12.323000
|
||||
CVE-2023-53313,0,1,c4cf2c8a08a5767fcfb555b7b4cad513fb6b19d20d2fad87b359eb4706769014,2025-12-01T21:47:30.267000
|
||||
CVE-2023-53314,0,1,6785f7126e99b99b0ba2f7619db9e1541bdef20ae2a464e9261a336f7a4bfdb7,2025-12-01T21:24:11.990000
|
||||
CVE-2023-53315,0,1,990308e62458c432f909956dd1463774e479f57316da00d7aeb8b0d1d04dd502,2025-12-01T21:23:45.870000
|
||||
CVE-2023-53316,0,1,157ac496c9f9079cd2ec1148334e33737c7a7bf2440fc08ed6c4ba378380d53e,2025-12-01T21:23:37.097000
|
||||
CVE-2023-53317,0,1,bfcf81605924a842e73425f8d10ae49e7d623de7e87c498799146f108c428d08,2025-12-01T21:23:28.940000
|
||||
CVE-2023-53318,0,1,1c5b90ba7281163681b079da139ad432503bc03eecb43b702402abac32a62b76,2025-12-01T21:22:40.880000
|
||||
CVE-2023-53319,0,1,209c3b3176737762e6367e042a2ad4894c39c4719d3a38aec30b91afb68dbd5b,2025-12-01T21:22:28.760000
|
||||
CVE-2023-5332,0,0,5c0ddb4e9eeb8ba2013bd50dc9e8f6942b77c70e3f31e48601ef79977b1c561d,2024-11-21T08:41:33.020000
|
||||
CVE-2023-53320,0,0,31184b23cb6c3671ac147a30b2eb3133d7cc29e10f7296c7e2bd44087efef87d,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53320,0,1,0d097682c4a8d0a66d950991ffad3b6d744431e87f6758832fc6978d7278bff7,2025-12-01T21:15:46.453000
|
||||
CVE-2023-53321,0,0,88dc66cd45552e0ad6e07172438f384040eab24887dc557b8904e7dd1816939c,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53322,0,0,b556a52fef16501cd098ed8f84481908f87f02840f9d89731b785b079af638bd,2025-09-17T14:18:55.093000
|
||||
CVE-2023-53323,0,0,93b9d7a29bdbec5155aa79f3bd84cfa33e3d6c63228b6c7e570fa6afcb221d79,2025-09-17T14:18:55.093000
|
||||
@@ -266819,7 +266819,7 @@ CVE-2024-39133,0,0,80d57ff929af4443c9967278b5200d0e137c9d36fd0907d09dedd0a00c0e7
|
||||
CVE-2024-39134,0,0,77b1670887f7f19fde2ebfef4910df3e6a5a10efb3081ca8aebf39e2a9942443,2025-07-10T12:56:12.247000
|
||||
CVE-2024-3914,0,0,e1df0e281df16096f76c00858b773615a6f934260a9ac46ec96e612528588ee7,2024-12-19T19:03:05.733000
|
||||
CVE-2024-39143,0,0,b9815aa22eaa7fbb94073c69cc26c5c96a5ad996cff75f08c127a4567140623e,2024-11-21T09:27:14.440000
|
||||
CVE-2024-39148,0,1,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000
|
||||
CVE-2024-39148,0,0,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000
|
||||
CVE-2024-3915,0,0,f35436eabf78a67ac47670681f7c3fdac78cbdff20f4e8e4ee8d2aaf0fec6148,2024-11-21T09:30:41.487000
|
||||
CVE-2024-39150,0,0,e546bf0ffe6f1310ec7c20b4e93e68865b230c0c3d923fa3a8c0422bc63c6b5d,2025-08-20T17:49:31.033000
|
||||
CVE-2024-39152,0,0,0fd1d13d45fa07b57e918fb6ab1233243318239aba2106a0e70a3a44b557aeb7,2024-07-18T19:15:12.330000
|
||||
@@ -276715,6 +276715,7 @@ CVE-2024-51995,0,0,1992d2322fc226b33a5684039bb4ec2b0294491b1347d873cbbc207dd7559
|
||||
CVE-2024-51996,0,0,ff85801f2278caabbb88a673f5522aa23a97c2f9d7260bda4506e22cbaf33529,2024-11-15T14:00:09.720000
|
||||
CVE-2024-51997,0,0,acce3d20366994a4b626635e9d1a5180796478ce8a1652c0c783857ab39acd0f,2024-11-12T13:56:54.483000
|
||||
CVE-2024-51998,0,0,9839aa62f76a80c9973f2fb8d41eecba253f6b3142e87cdc34afb99ddaff8394,2024-11-08T19:01:03.880000
|
||||
CVE-2024-51999,1,1,bfeb2109a7d15d3a7d16c3d91b842f5c763e163e32b16aac0e151d96f8ce1323,2025-12-01T21:15:49.100000
|
||||
CVE-2024-5200,0,0,52d40bdd237dbce394715b45d86724ac3deda79d4cdca7fd89942bea3f08b0a3,2025-11-13T21:15:48.233000
|
||||
CVE-2024-52000,0,0,164c382f8c88982eb63ce07c2be596e0b502f12f5ca998748920dbcc2ce078fc,2025-01-07T16:52:48.723000
|
||||
CVE-2024-52001,0,0,78f4b3f4ac098d84e7755b87917d54c89f68966e660cd2cf99fbfaea2ecc818e,2025-01-07T16:48:41.057000
|
||||
@@ -277088,7 +277089,7 @@ CVE-2024-52535,0,0,bef515410181a811c26fc680524553d9ad7877ab91586d8a4ff019d636628
|
||||
CVE-2024-52537,0,0,452ae911f4de5122c99d1e9bb0a1a51cc02727fc3434d173d3a4156ab777cd38,2025-02-04T16:13:09.543000
|
||||
CVE-2024-52538,0,0,295d2e6b8a4aaa886e973854e976112e349de1c4d0c46424ea3efe146793220b,2025-08-04T19:15:30.007000
|
||||
CVE-2024-5254,0,0,b08a56d01443c9abf44ee33ecfae9cdfa73a8d20318044fcd2f5caa1e9d31f2e,2024-11-21T09:47:17.063000
|
||||
CVE-2024-52541,0,1,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000
|
||||
CVE-2024-52541,0,0,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000
|
||||
CVE-2024-52542,0,0,782d30ca63c890d96ad6bbe11bf7f4bbe0aeaf8efe12cef1c1148c420124d676,2025-02-04T15:56:24.143000
|
||||
CVE-2024-52543,0,0,33519c6ddd0702e3ff651d02a1fcc974b38a1e8f86180d3c4f24bb697efb92b1,2025-01-29T20:26:09.100000
|
||||
CVE-2024-52544,0,0,e71974852ab984c425352f8b8a135c763e1277389245cadadd85675938665e03,2025-09-05T09:15:31.400000
|
||||
@@ -279317,7 +279318,7 @@ CVE-2024-56084,0,0,a773f0b27f606f7036d51b2acf244cec3d09f5e4101745dbe67bbc00feb59
|
||||
CVE-2024-56085,0,0,bba9421fdb624ebe6b89b9f8300d02af17bc144bbd18788adbf415afd6d7bc33,2025-04-17T01:48:50.467000
|
||||
CVE-2024-56086,0,0,338e8681b6da73ef2d425d533755238a5249dbff92eca4292b7b051dba69ffce,2025-04-17T01:50:13.210000
|
||||
CVE-2024-56087,0,0,fa5b9d49e58cddd34d89b133d1ade77948d2396510c529bc1409ece170210a91,2025-04-17T01:50:51.800000
|
||||
CVE-2024-56089,0,1,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000
|
||||
CVE-2024-56089,0,0,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000
|
||||
CVE-2024-5609,0,0,4c03a855f07c8ea18d8e7a70e1e2d3467f32254daea5abf62f130fb919fa93d1,2024-06-06T19:16:09.920000
|
||||
CVE-2024-5610,0,0,c876fccd541dbbe5edac90b3257f7d2b3efde4d5bff83326921f06d03b7a383e,2025-01-08T23:15:09.653000
|
||||
CVE-2024-5611,0,0,52c51c7a288f3c0ab122ffc809ef2624c3045fff37cac024f8608d70739aac41,2024-11-21T09:48:00.920000
|
||||
@@ -286649,7 +286650,7 @@ CVE-2025-11128,0,0,bcfebada1a666cbf69243dcde7af147b2dc34fb1a812138c60550ed8740ab
|
||||
CVE-2025-11129,0,0,3fd77e483a6bbabc9c1af5b1ceea836e641a8aa08d8d0131bebc0c12f62e8eae,2025-11-12T16:19:59.103000
|
||||
CVE-2025-1113,0,0,e5f8c788cf368398c9beeca18f9ddf681684f5123ecd1fcada0a1cd88526889e,2025-08-21T20:29:15.170000
|
||||
CVE-2025-11130,0,0,e4fb16b8132c378b40de8c68972d189abf355a56419494e7964e70955aa3840f,2025-09-29T19:34:10.030000
|
||||
CVE-2025-11131,0,1,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000
|
||||
CVE-2025-11131,0,0,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000
|
||||
CVE-2025-11132,0,0,24d069a308eafc30cafe0485a92b69f6672adefcd180657bfc8abebba88f675a,2025-12-01T15:39:33.110000
|
||||
CVE-2025-11133,0,0,5009cd8f1ad05d46949329c493a9c59793603777409d7b812e319ea4d41eb31a,2025-12-01T15:39:33.110000
|
||||
CVE-2025-11134,0,0,2029f9216d643e10ceb0c2c08f1276fcc04d82872d6d19b3d6748aa627636d9e,2025-09-29T19:34:10.030000
|
||||
@@ -287035,7 +287036,7 @@ CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda22
|
||||
CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000
|
||||
CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000
|
||||
CVE-2025-11560,0,0,41320c7bca653724aeefb1698dfcf2aadec5bc08db4bbad174499d8896fbeb69,2025-11-13T18:15:49.173000
|
||||
CVE-2025-11561,0,0,60be4025a817fdf295949cd46cbe7334878326d8a89518cf775bba6ae6ddd2ce,2025-11-27T12:15:46.180000
|
||||
CVE-2025-11561,0,1,1aeacd26bedd128f28a1d8d9c97023ecc5d91732a938846875d64824ea78c9da,2025-12-01T22:15:47.440000
|
||||
CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000
|
||||
CVE-2025-11565,0,0,44c855fafbee39febbaa989ebf207f4b697c93f30d053c844bb7f314672b7f75,2025-11-12T19:15:35.053000
|
||||
CVE-2025-11566,0,0,167a7ef1a80923294a00731c1f5a2e1258720e60656847b02b5e635b35a75974,2025-11-12T16:19:12.850000
|
||||
@@ -287168,7 +287169,7 @@ CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1
|
||||
CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000
|
||||
CVE-2025-11696,0,0,36550cf0ada55c8e38e560820cce1add2d8ce8c1aea2284620eff9d4225b433a,2025-11-12T16:19:34.210000
|
||||
CVE-2025-11697,0,0,0ba8beba7725c00d0cf8084297945c43976b6d47fbb61f496e24fded8ef5a1b3,2025-11-12T16:19:34.210000
|
||||
CVE-2025-11699,0,1,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000
|
||||
CVE-2025-11699,0,0,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000
|
||||
CVE-2025-1170,0,0,f7c4bc09181f11b6c73f7828607020c9f0e484c622ceb324f78d52675a120ce6,2025-03-03T16:37:36.117000
|
||||
CVE-2025-11700,0,0,19cc4ede8773653a6ec2c7ea7d83729c71fb8d6f1a8589c5a9a5db2d85469151,2025-11-14T19:30:44.700000
|
||||
CVE-2025-11701,0,0,7ad5d4304ec1eb74222638c60337f5c4ebd0e056bdc09bf379e5bc0bd73ddcdc,2025-10-16T15:28:59.610000
|
||||
@@ -287229,7 +287230,7 @@ CVE-2025-11769,0,0,a679a256d9f80cbb1389cd7c7600b2160d12933c942b2e5b5a41181c02ae9
|
||||
CVE-2025-1177,0,0,a9031c02ad15cd3b79dae0a4c247f1d863fa16483cc0621210d54f890eaefbe0,2025-02-20T15:58:50.097000
|
||||
CVE-2025-11770,0,0,3eb022a62c0324ba035382005ef2e3a6e3e2f9459455a7e14932f4532ae6829c,2025-11-21T15:13:13.800000
|
||||
CVE-2025-11771,0,0,3dbc58f384013a34fcc31cb3e81c99ff270de2e8526548045481512aee9182e9,2025-11-21T15:13:13.800000
|
||||
CVE-2025-11772,1,1,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000
|
||||
CVE-2025-11772,0,0,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000
|
||||
CVE-2025-11773,0,0,1145bcd73afded945a94d06020411a77c28c6f0c6da628619fb6eec609ff33df,2025-11-21T15:13:13.800000
|
||||
CVE-2025-11776,0,0,c77e09493779ca2a8622c03c44c090476ff7fedf67760c77c46b8df3053a8e48,2025-11-17T17:52:51.513000
|
||||
CVE-2025-11777,0,0,17e530f57587bcf36b60effe46a9fe7c96547db6e1c99688ca684cfa0bc37ff8,2025-11-17T18:05:07.173000
|
||||
@@ -287503,7 +287504,7 @@ CVE-2025-12101,0,0,694a033c3edc5cf7c26bb82a899caea6ef6671dfa0c3e2011384b598caf56
|
||||
CVE-2025-12103,0,0,9cb868e56a5f8415fe29fac8a54f349f47a6c5ee1ab2822035f6eaf091069ed7,2025-11-12T17:15:36.007000
|
||||
CVE-2025-12104,0,0,421627973ed8ce426d2efa1b9643012161e382c32a17d6a29addbb6be7235fb5,2025-11-07T20:05:44.410000
|
||||
CVE-2025-12105,0,0,dc7d0fd951528726918a837ee4537454016ca91429ec1333d1b5957a78a953df,2025-10-27T13:20:33.350000
|
||||
CVE-2025-12106,0,1,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000
|
||||
CVE-2025-12106,0,0,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000
|
||||
CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a178e7,2025-11-06T19:45:30.990000
|
||||
CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000
|
||||
CVE-2025-12110,0,0,8f17bdbc8d8059197a3ad63e1dfa5913bc635f41dbcdb27b22f83cc64212d9ee,2025-11-28T04:15:59.740000
|
||||
@@ -287556,7 +287557,7 @@ CVE-2025-12176,0,0,51600658b76b8abed7d6a398e4c4cb5526eda72706d4808694322523753d8
|
||||
CVE-2025-12177,0,0,a516ceb62e2212e2658270c753c65a8528d1292d4adb5d88e6ed3c1f6752e688,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12180,0,0,706ded67723279ae679ea8a333580d98de93133f559c2ae245f3cd4a4afbff28,2025-11-04T15:41:31.450000
|
||||
CVE-2025-12182,0,0,04714423c38cafa185523dc6e162118ee4841c3fbc17fa16f369cb4b3a84e7f3,2025-11-18T14:06:55.963000
|
||||
CVE-2025-12183,0,0,be7bb0fa1b9d7505292810fe463fe3a03e0f9256ce91524bb0c7c20d9f977811,2025-12-01T15:39:33.110000
|
||||
CVE-2025-12183,0,1,367e2afa8a2b7673afc1cfdd5f058820877baae401c6ea6b4bb5d351370b35ee,2025-12-01T21:15:49.800000
|
||||
CVE-2025-12184,0,0,be752abd2f1d114dc84a062fb352b4536431571405a4ab3177e8747475735a18,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12185,0,0,0c1f0a26d080e334a74a6c6b8deee641f8133460696c8d1238e911b5e7c6218b,2025-12-01T15:39:33.110000
|
||||
CVE-2025-12187,0,0,3056c3ab8d89d2755db634d4cb95d2e7cae150f33cecf32d33886a5af85e72bb,2025-11-14T19:15:56.707000
|
||||
@@ -288011,14 +288012,14 @@ CVE-2025-12751,0,0,9e6dedcefca617264af74e3f8b9f1202acfa2416645e6d3c2c6524757430d
|
||||
CVE-2025-12752,0,0,bc1fe114ab5ed09c761d7c5a92b6db91aca05986efdcc1e82cfce45392b31a48,2025-11-25T22:16:42.557000
|
||||
CVE-2025-12753,0,0,dce5488b6a7e1342b5f0ee5bf5522a34d7f724ae148d764c7afd4a1dd45f1372,2025-11-12T16:19:34.210000
|
||||
CVE-2025-12754,0,0,c80a4804ba616568e0704a3735004746ab5b310abd5ad2c2e74aaf0f477e6450,2025-11-12T16:19:34.210000
|
||||
CVE-2025-12756,1,1,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000
|
||||
CVE-2025-12756,0,0,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000
|
||||
CVE-2025-12758,0,0,b025435981121766904eddf5fd85a5d25e7cee730f8ffdab23f44d04f0ab6520,2025-12-01T15:39:33.110000
|
||||
CVE-2025-12759,0,0,1e4b0d0f56ea4176048a6d84d99ce33c188aac4441308cd04ac71d6e3535f776,2025-11-23T23:15:45.843000
|
||||
CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000
|
||||
CVE-2025-12760,0,0,a666c297bccf6721f0333387866caf56ff4a0772e51ff22a1223020f78ef1d77,2025-11-19T19:14:59.327000
|
||||
CVE-2025-12761,0,0,c2d0e2f6b80f07425e45247ebb3e7c4a065a174d5542efad80c9ce6302fa38be,2025-11-19T19:14:59.327000
|
||||
CVE-2025-12762,0,1,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000
|
||||
CVE-2025-12763,0,1,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000
|
||||
CVE-2025-12762,0,0,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000
|
||||
CVE-2025-12763,0,0,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000
|
||||
CVE-2025-12764,0,0,6d986726ffd81d1c808da0d6c07a6f5bf3345f639a5f139e01434f3732f41cfa,2025-11-19T21:19:33.810000
|
||||
CVE-2025-12765,0,0,babbaf007153935150e7ca0b0f22c092fcddbb8a7b9735345ab84b334998a41f,2025-11-19T21:18:09.750000
|
||||
CVE-2025-12766,0,0,1c2df7dd550d41dc4d18eccb534b3f0f66da11227cba6410f47d415ef6b8dcc3,2025-12-01T17:22:03.653000
|
||||
@@ -288304,7 +288305,7 @@ CVE-2025-13210,0,0,4962badd6a94f63b55db5dd69152518462def29d748f4154f688f397b2a96
|
||||
CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000
|
||||
CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000
|
||||
CVE-2025-13221,0,0,f11e0d2569a48d2fcac26bc250b2c712a99ed195f472f50be6a93a8ffd553a97,2025-11-18T14:06:55.963000
|
||||
CVE-2025-13223,0,1,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000
|
||||
CVE-2025-13223,0,0,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000
|
||||
CVE-2025-13224,0,0,199be984c14458a980f221bda566b7c7977627dc2f72a4bc3c1a17760645dcec,2025-11-19T13:04:59.100000
|
||||
CVE-2025-13225,0,0,45f62704526647b3500fb7084f4632a07186faae4900a87cffbdb5f4cd017c9a,2025-11-19T19:15:47.533000
|
||||
CVE-2025-13226,0,0,568acad095c31f51f3a19f2821f40a46e0e960fe78399e405e65236cde6691ea,2025-11-19T13:04:51.433000
|
||||
@@ -288430,7 +288431,7 @@ CVE-2025-13389,0,0,9cad26e55a5d23485fef4c2d9e093c0daa8542c618c2db32da617b45c6bf0
|
||||
CVE-2025-1339,0,0,6860f8f36032bcedc9f18d921cb05e31dc82859a782caff2668b67d0b58904a7,2025-03-10T17:11:37.343000
|
||||
CVE-2025-13395,0,0,8a83c10db023db91e3918ecab17835650f1b29de2171d664ec4aa75545f788f4,2025-11-19T19:14:59.327000
|
||||
CVE-2025-13396,0,0,cdbb29c720acc849dc4a055fe6fe98de320a6c825d75c1c3145c6e8f97621cd1,2025-11-20T16:23:57.650000
|
||||
CVE-2025-13397,0,1,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000
|
||||
CVE-2025-13397,0,0,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000
|
||||
CVE-2025-1340,0,0,b9875780a16a13744dbcd5d844e8ca36a7e2aa268ada35546ad50497001d4e5b,2025-03-10T17:14:20.723000
|
||||
CVE-2025-13400,0,0,fe6813d8f32cb93e656589cf22f4b883ba80630fab349d971cbfffe4e3cd3b64,2025-11-20T17:08:03.573000
|
||||
CVE-2025-13404,0,0,3106ac07f0d9c7689dda9e740a980c99530f0c00b6681d1537dd06bf02a80ba3,2025-11-25T22:16:16.690000
|
||||
@@ -288571,11 +288572,11 @@ CVE-2025-13735,0,0,fbdc12440d4b645fa4a328734a96f5915261a0822b6db338ddfbfc4e9d1d2
|
||||
CVE-2025-13737,0,0,06ed0d0bcaf1dec57d0679e220b48e09b47dfbd27d83fc23363e60a384c4e6d3,2025-12-01T15:39:33.110000
|
||||
CVE-2025-1374,0,0,c63cfcac4cc7e61dba55405a222ef271dee63812916e3abadacbbeed1056c0bb,2025-10-23T20:06:00.793000
|
||||
CVE-2025-13742,0,0,651e9c656e7488b9eb0b1b5c825c8da1ef1fcda990eddf39cbb4856d4b71250d,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13757,0,1,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000
|
||||
CVE-2025-13758,0,1,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000
|
||||
CVE-2025-13757,0,0,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000
|
||||
CVE-2025-13758,0,0,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000
|
||||
CVE-2025-1376,0,0,de4237f06ae76bb371bb37755604dd21a28e325c264f69c8440e79b38d9646a3,2025-11-04T20:21:18.260000
|
||||
CVE-2025-13762,0,0,e4a9613b67d1e2508956ecb01c28f9782277d78d11fe449e34337920a125d445,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13765,0,1,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000
|
||||
CVE-2025-13765,0,0,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000
|
||||
CVE-2025-13768,0,0,a163ea22657ba17715998855bb30ef9bfa0d5adac1c1af6ac0293213577b77bd,2025-12-01T14:39:31.940000
|
||||
CVE-2025-13769,0,0,297bea2dc34ad119dc2980daa6e5f81e5dd2c38cb285e425b7f8693c8edfd54d,2025-12-01T13:13:51.040000
|
||||
CVE-2025-1377,0,0,cdf3c00849797fee9786ea08188d37668b21a456809fa64aaace8c05203cfaf9,2025-11-04T20:26:20.043000
|
||||
@@ -288586,14 +288587,14 @@ CVE-2025-13782,0,0,633143ed5b774c88beabc099d543e2124efd2f569a0381fdff0ee06d6230d
|
||||
CVE-2025-13783,0,0,9e3fa079ee37ab52fc60bd87d5e1e1a80b89c5fa1ce7efec325fdcaccf7b074f,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13784,0,0,400b5424778aa984892876e01cb91cb42eb2668e77edbcee3b75ef4bfb76ca69,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13785,0,0,8f91a4cfde425cf28727747e3a8324f58919a55662a74d3e021a6fb4dfe16095,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13786,0,0,7bc988f078e9b09747fa85e6529d9798348ebea2411115bc41aa708f8a1fadf9,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13786,0,1,faefec8f82eace823af3eadfdd9e401c1532825e4b65225972b717f2138f6bdc,2025-12-01T21:15:49.950000
|
||||
CVE-2025-13787,0,0,21b6a867d86792c53769e6eac82f07d87e652d15e541875aa9a8b91e33b02c2b,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13788,0,0,80c51aa429c3a336348e7489daccb9a7098889688d2bb77a8664aa3696634111,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13789,0,0,aa68242411fe5000c2ea58eea6dbb1eb40df4049de97ac6bf98e8da118da9faa,2025-12-01T15:39:33.110000
|
||||
CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000
|
||||
CVE-2025-13790,0,0,420efa5394e93c667c667dedd7b9563b492b63833c60c220c04de86852e3a2dd,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13791,0,0,e08c12980bc607bebba43166171191e321a125cbeedd99efdbbd2f6af7f05e5d,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13792,0,1,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000
|
||||
CVE-2025-13792,0,0,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000
|
||||
CVE-2025-13793,0,0,cee72f8cf2011358fcb17c0da768201ddc2b1d608827f8b279ec4e127b5e3ff0,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13795,0,0,997af5e0bec0000a9aa80bb7fa15a961c6515812519d9cb784cb425b0c07ab10,2025-12-01T15:39:33.110000
|
||||
CVE-2025-13796,0,0,851a06944e44367a53781cedd5bb574eea06934997eb7084a4bc11f8c553d3e1,2025-12-01T15:39:33.110000
|
||||
@@ -288622,8 +288623,8 @@ CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074
|
||||
CVE-2025-13829,0,0,4f64fcd3ef610c312085803267e8f9cf95c0674c501918a12f46a5a7e6cbf0cb,2025-12-01T17:15:48.807000
|
||||
CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000
|
||||
CVE-2025-13835,0,0,639c6007deb0cac63cbe44fa6bb52543cff1e013603be33d3a41554407e3a5b9,2025-12-01T18:16:04
|
||||
CVE-2025-13836,0,1,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000
|
||||
CVE-2025-13837,0,1,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000
|
||||
CVE-2025-13836,0,0,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000
|
||||
CVE-2025-13837,0,0,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000
|
||||
CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000
|
||||
CVE-2025-1385,0,0,cd0488ff01f383d9bed7e9dfcd438a68752b6f1d05d46ab0fe46ec06da7cead8,2025-03-20T08:15:11.723000
|
||||
CVE-2025-1386,0,0,1e2bc83eeb339828b23f6854fed3e26712eaf84d02859537da20d28063a18e14,2025-04-11T16:15:19.490000
|
||||
@@ -295424,7 +295425,7 @@ CVE-2025-27204,0,0,915ee58270bed657aa3414a33920c2828a16919cebf1c439beba158fba489
|
||||
CVE-2025-27205,0,0,f966fa29a96c9fd50b3bf62dee097dccb11f1346c8935ce19a945be5d4c76047,2025-08-05T15:59:53.160000
|
||||
CVE-2025-27206,0,0,d294d50f3906c6fb3fe785cd1596aadcf69ed2db2162953cfc8dc1288ebf1c78,2025-06-23T19:25:38.097000
|
||||
CVE-2025-27207,0,0,1c7dcef4ac4e484392f18d8488dffbf14e7319161e3db5ca63f06641870014a6,2025-07-11T16:42:26.887000
|
||||
CVE-2025-27208,0,1,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000
|
||||
CVE-2025-27208,0,0,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000
|
||||
CVE-2025-27209,0,0,2ed4734330db6198f7eeccdcf43602bc5989a3c88bc5f2f9d0e33392e557679c,2025-11-04T22:16:08.007000
|
||||
CVE-2025-2721,0,0,aa8959d6414ccd78b185fee276132fe2183524f73060666b030d6ef296f0e6b0,2025-04-22T13:15:42.990000
|
||||
CVE-2025-27210,0,0,c435f52bee6497699eb0de44c88f27cb60e7ed7642a107b37268e6389ac4bc6b,2025-11-04T22:16:08.123000
|
||||
@@ -296270,7 +296271,7 @@ CVE-2025-2875,0,0,0fc58b1873d97c82b44352a6a2dfe32000dd19d00f391df82ed79458e6e0bb
|
||||
CVE-2025-2876,0,0,34c79ebfe20c2fc13294537c33b0ff61b155c827ab3c12d5f8ab0c5b0bc4cade,2025-07-17T18:15:22.720000
|
||||
CVE-2025-2877,0,0,84ec84d2bfb12624c83348efbdfe58ac8be43428be65066c732bbd9fdb6142cb,2025-04-07T16:15:25.720000
|
||||
CVE-2025-2878,0,0,91ed70612b37527f5a64720333f3ec88a66eb4235ee494c58d3cdb31eafddc33,2025-03-28T18:11:40.180000
|
||||
CVE-2025-2879,0,1,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000
|
||||
CVE-2025-2879,0,0,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000
|
||||
CVE-2025-2880,0,0,e389725818c992645d02e6070b5c39fb3800bf8237a4c9078a3291c23ae5430a,2025-05-02T13:52:51.693000
|
||||
CVE-2025-2881,0,0,fdb559a0489fd102237eb30f41f019d2f5c2b3faa82f877e9abc8e7c02b82b2c,2025-04-15T18:39:43.697000
|
||||
CVE-2025-2882,0,0,c97b3f3ea8d4bf1b525408e9c0aeb5839e6b1dab2a43ddecf7ef1915f34a41ad,2025-04-08T18:13:53.347000
|
||||
@@ -299764,10 +299765,10 @@ CVE-2025-32984,0,0,8105d87a07c5c95a1a426ae174deda99d5a554c19d681b58930899a19e6a0
|
||||
CVE-2025-32985,0,0,15098eb35dd96554c37930bd6550d414995a3f61b8322bd641d2b24b0e89c7ce,2025-05-27T16:57:03.517000
|
||||
CVE-2025-32986,0,0,2131eb0c109893f204ec917def61d06bfff3cfebc0c3882e871b74792f8d9430,2025-05-27T16:56:44.530000
|
||||
CVE-2025-32987,0,0,22fee82644638daf52e45d25879682a7b8e6315d4283004fcb29ee09fc3f6bc1,2025-04-15T18:39:27.967000
|
||||
CVE-2025-32988,0,0,c4b94285c0c011b479cd87db54225b654eb1f239d7da2a775ef1e13290e388f0,2025-11-06T23:15:36.797000
|
||||
CVE-2025-32989,0,0,44fc94eb8d69ea61abd434c881a29195641b5871999a534c7fa067af1465acc2,2025-11-06T23:15:36.993000
|
||||
CVE-2025-32988,0,1,7d280d4a9c155d9ba35794717309cc47a3972860e2c86caa2627c419ea605ee7,2025-12-01T22:15:47.790000
|
||||
CVE-2025-32989,0,1,a783d4fbd6243b0cb1c288ac63944ffb14a445bae60d8756875dabd681cea579,2025-12-01T22:15:48.027000
|
||||
CVE-2025-3299,0,0,4bb68d1a77531b6cf0d60c8ebf8a47f27b8c946ab637bd433e4b42368b67a253,2025-04-08T16:48:45.137000
|
||||
CVE-2025-32990,0,0,6645099b34d1408a143681639c241a61a2f1ad0178e960a96432bd602227a2cd,2025-11-06T23:15:37.137000
|
||||
CVE-2025-32990,0,1,1ff121c2edc4a308ae27fd27459b92f6363cfbb4ea8c06bb4048a82e6422006c,2025-12-01T22:15:48.200000
|
||||
CVE-2025-32992,0,0,e5bec7e3fca95a91fdf085a1367f7fe05ffcb743c4da97df3b58e4c770ff8cd0,2025-08-18T21:15:30.130000
|
||||
CVE-2025-32993,0,0,efe10e43b700d805bab5f9cbf4da0d85804a68c5ec719e614ee799809a295233,2025-04-15T18:39:27.967000
|
||||
CVE-2025-32996,0,0,44b03681b27714100d4188a860d77e764119a0a8b23389da352345dd35fd80ad,2025-10-21T14:43:20.087000
|
||||
@@ -300252,7 +300253,7 @@ CVE-2025-3429,0,0,e111017acbfc3ad488b5577926e388fe8cea296485a5a387e88a0046c384d1
|
||||
CVE-2025-34292,0,0,3f361b5a4f6bc0cfd7abe2b332d5aa343eab9382aa0b054f8136dcaa1ca5bf46,2025-10-30T15:05:50.613000
|
||||
CVE-2025-34293,0,0,4fc900fd6217442a213ce5cdfa3d3646768f35c35d6fedd37bbd4b03720a4453,2025-10-27T13:20:15.637000
|
||||
CVE-2025-34294,0,0,dfa0f81a66a7dba230cfc3d9417171e889ba13690a242d8eccede1a9e8e02e96,2025-10-30T15:05:32.197000
|
||||
CVE-2025-34297,1,1,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000
|
||||
CVE-2025-34297,0,0,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000
|
||||
CVE-2025-34298,0,0,7794cda8b7a546bc2c75cad122bc0c18f88ef91ff907c81fd0fd1d02cb6d7468,2025-11-06T16:27:12.660000
|
||||
CVE-2025-34299,0,0,e64967b428dd7916224ed796e4958560e643eef2969604f0a4d6f96dd463a5cc,2025-11-12T16:20:22.257000
|
||||
CVE-2025-3430,0,0,a8dd209d2f3ffc999e493da170fd38f29e4ca6c65941e704b12a73f04051bb5e,2025-07-10T14:18:52.400000
|
||||
@@ -301972,7 +301973,7 @@ CVE-2025-3864,0,0,444a554174f3a166bd8cf43652805e71b133026b842d6829548d5a78647f68
|
||||
CVE-2025-38640,0,0,72ae58957a2e676235a4b1f4bc27057e142ddbe22b0ed6b29ffe395ea06d730a,2025-11-26T16:36:32.227000
|
||||
CVE-2025-38641,0,0,d2d32dfdbdd1ea9942126c1d29c744e9fa9d35d6e818336c24f86145a68587bc,2025-11-26T16:37:03.980000
|
||||
CVE-2025-38642,0,0,6458672a68fdffc56fdc614a317fb2b1d8ddd1bfc6fdcbc3395a523dd441038c,2025-11-26T16:38:47.103000
|
||||
CVE-2025-38643,0,1,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000
|
||||
CVE-2025-38643,0,0,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000
|
||||
CVE-2025-38644,0,0,88f783f716df7ecacc61cd82108df8a73fea0e7a98e73d1ea802714ca1172b1d,2025-11-03T18:16:32.873000
|
||||
CVE-2025-38645,0,0,5938c94c945ec43e2003923042d3937b680d8755a9da0a3f581ade96f6ac6ba8,2025-11-03T18:16:32.980000
|
||||
CVE-2025-38646,0,0,ddf2369894f5ff9ef8f7d69b65bfa8d47476f90b0d18fb557e12a010319400b0,2025-11-26T16:42:46.323000
|
||||
@@ -302611,9 +302612,9 @@ CVE-2025-39830,0,0,ffe943b0dbec618488d4717374a731b5ca359e082d0f7089f86c088675da3
|
||||
CVE-2025-39831,0,0,8b82e557885e9f7a0e39f4f87a070d6aa09b026c43c9de5a54aaf8a55351093d,2025-09-17T14:18:55.093000
|
||||
CVE-2025-39832,0,0,91373722795e1e8ae7aea4c639be3e4823e0b516b2b5228335a2333eb689154f,2025-09-17T14:18:55.093000
|
||||
CVE-2025-39833,0,0,feac8baa878b5b4d83ac1abb10596ddc370b18b14a36547354d01212ae27e7eb,2025-09-17T14:18:55.093000
|
||||
CVE-2025-39834,0,0,455f9fe51780559d00358fafc49bf85e2c8fa49d5eb572db6140b9c77c927f97,2025-09-17T14:18:55.093000
|
||||
CVE-2025-39834,0,1,0f910e59f5ee47a7f87c358fe434001982550b40ddffb25f611f1bc1fe9526ba,2025-12-01T22:03:46.933000
|
||||
CVE-2025-39835,0,0,63c0d3d47fda581dc11d378ea0bc5c43d45c6e4526251ff60a729ae99de73c4d,2025-11-03T18:16:49.293000
|
||||
CVE-2025-39836,0,0,ead37077839b6d4d8c6159a3f6cabc1da50384b75704cf01dee941f6956efc2e,2025-09-17T14:18:55.093000
|
||||
CVE-2025-39836,0,1,6cda1d39f84e3d5d01bd3183a9da8e603b7e2d62e46854a48d5183b752de4016,2025-12-01T21:59:35.697000
|
||||
CVE-2025-39837,0,0,2f4bf1765df1fbfc8999adc3a1ae3b1021ff31d4f7efc38bd56982f7e4504dfc,2025-09-22T21:23:01.543000
|
||||
CVE-2025-39838,0,0,538492d17fe0c78654b609bbafa513cd9c18323e0e46e40e054ae3b82bd46c20,2025-11-03T18:16:49.403000
|
||||
CVE-2025-39839,0,0,0d2e0366a692fec697b67dc9bc2395bd52bade71b715f3d0fde3615a93b5b3f0,2025-11-03T18:16:49.507000
|
||||
@@ -304155,7 +304156,7 @@ CVE-2025-43357,0,0,e7df40bad97e198cd8962fff4f23f3c4670d400a0cc9f4ae35d9331a66cdd
|
||||
CVE-2025-43358,0,0,23bd418b07c5c11fc29130251971d113c77668911900289fe6894037b710f0e8,2025-11-04T02:15:43.223000
|
||||
CVE-2025-43359,0,0,1e38c08b23fe717bf38119c51640122068e421ebc9c1483d84e2d8163bd572de,2025-11-04T02:15:43.390000
|
||||
CVE-2025-4336,0,0,e90be9fd0f0e50081b5081697499ebf47068955b362669f42164ef244e890187,2025-07-11T19:32:44.473000
|
||||
CVE-2025-43360,0,1,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000
|
||||
CVE-2025-43360,0,0,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000
|
||||
CVE-2025-43361,0,0,42389cf848830a2b854dd7b4dab3f7852a072781ad3970a779cd9914a5a77c7b,2025-11-04T16:30:17.110000
|
||||
CVE-2025-43362,0,0,c8bcb764c761d46222ba8fe72ac4eb95b638c759745bf614c6c9f6753a5b8319,2025-11-04T02:15:43.783000
|
||||
CVE-2025-43364,0,0,5a05b555ffb156bc3012a304d9426844f63b73bb25b65426d4f78e2a9ef73b66,2025-11-04T18:48:00.353000
|
||||
@@ -304211,8 +304212,8 @@ CVE-2025-43419,0,0,62e6863f342f6f96056dcdd65d320feeb44ecaac5cdbad231e125f387cccb
|
||||
CVE-2025-4342,0,0,910cb2a3ed27ed3fa67d71bb9bcb8375be73922349e890c48c75ddf2575d2d05,2025-05-13T20:25:14.167000
|
||||
CVE-2025-43420,0,0,ff05007d34a6abd0c7f03da3dbdc2a549574d0458ce904d330040fd36275f278,2025-11-05T14:50:00.137000
|
||||
CVE-2025-43421,0,0,531e0f88749117edd8e61f800e1564aa6b553596af41e87b523b10b17e22a0ed,2025-11-05T15:00:05.023000
|
||||
CVE-2025-43422,0,1,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000
|
||||
CVE-2025-43423,0,1,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000
|
||||
CVE-2025-43422,0,0,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000
|
||||
CVE-2025-43423,0,0,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000
|
||||
CVE-2025-43424,0,0,b5141f9dd0e3527803ccb9b819c2d322d105eab122061b902f235482e88a9265,2025-11-05T15:15:36.513000
|
||||
CVE-2025-43425,0,0,a4cf2045567ec74c3c9c84c2e49963bfed9ee9bcefce0b3d073ca938cc1de1c4,2025-11-05T14:50:22.293000
|
||||
CVE-2025-43426,0,0,3d86a21e38696c1651d4ff3ffe30b173663e245f74678d21e2b3cdafe8466d8b,2025-11-05T15:00:13.510000
|
||||
@@ -304220,9 +304221,9 @@ CVE-2025-43427,0,0,662601c48be5eeb5425fa272580250220eebd7cc20a68b4f34d034bc0bc34
|
||||
CVE-2025-43429,0,0,0d9e25d8945dcc2dc9a43fd71bbc676a58a318cb4383b9bea7252b3c4572f4a4,2025-11-05T19:15:54.043000
|
||||
CVE-2025-4343,0,0,923c0cef6ae5fa92856bfede6a2cee07988d425e984f25a366a7d1c75ef5d05f,2025-05-13T20:25:07.850000
|
||||
CVE-2025-43430,0,0,5c9e69a500ca2b0da322efce72994b7855dbd14c4331cf906f4e81ff6d375555,2025-11-05T14:50:34.663000
|
||||
CVE-2025-43431,0,1,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000
|
||||
CVE-2025-43431,0,0,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000
|
||||
CVE-2025-43432,0,0,cf40603c89fe31e5e8b64be015ae61c9f2522f5c9e69bdb802636055942f4872,2025-11-05T14:38:49.690000
|
||||
CVE-2025-43433,0,1,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000
|
||||
CVE-2025-43433,0,0,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000
|
||||
CVE-2025-43434,0,0,aa8666695543e273d4d465469006e85b841e32969487dd60abcbef52b9695109,2025-11-05T19:15:54.893000
|
||||
CVE-2025-43435,0,0,be14637997d04872d042c502f924fd1eab83a9a94b75a6e6fde725353eb851ae,2025-11-05T19:15:55.100000
|
||||
CVE-2025-43436,0,0,8f9e4a39a8390087760746d3a4ca6f87a6e43958e23227fb98718057f10a693b,2025-11-04T19:05:45.737000
|
||||
@@ -307248,7 +307249,7 @@ CVE-2025-48705,0,0,3b069502956cb6d5483858210e4d04c3f8625df0adda679c58e63091bbf50
|
||||
CVE-2025-48706,0,0,3349ef920a170cd95999b04241686d934123b5e89f5df0438e336ebcc42ff437,2025-07-08T14:32:12.930000
|
||||
CVE-2025-48707,0,0,e781fd2453735517746189035ba4bad9690e5b7c4978e63eb1bf36a42fe0f588,2025-10-14T19:43:56.150000
|
||||
CVE-2025-48708,0,0,2f2ee7f6835a24101b8f2fad92720fa7e2d2cfee9343296271ef3f76df75e315,2025-06-20T17:13:54.913000
|
||||
CVE-2025-48709,0,0,3066088dfd43f5e6cba5fbc6373ee61a340815e1e67f3822b974dd271797c0c5,2025-10-27T16:15:40.490000
|
||||
CVE-2025-48709,0,1,44aa87f4fce2043c2e04f4e8b18e4d0ec7f4b2e601885427b5fca799fdcc9f6f,2025-12-01T22:15:48.363000
|
||||
CVE-2025-4871,0,0,d9183a6ea5a2afa28642be53d20b661c6aa8059e9e6e695046b3eafadb08ebe3,2025-06-12T16:27:46.547000
|
||||
CVE-2025-48710,0,0,f0402bb1ed6d8f6e40d35a516c63ba6d11524553c0fc1bb2ee868d959afc0447,2025-06-04T14:54:33.783000
|
||||
CVE-2025-4872,0,0,4b7ea139f9585caeb8a40fd0035b9b3fc93b672209c7308e8ad73688646ffdc6,2025-06-12T16:27:20.143000
|
||||
@@ -307458,12 +307459,12 @@ CVE-2025-48976,0,0,4d8a1819d637e6166101b801eaa25e6266b92f68bd80a362cedf1a2bb8c1c
|
||||
CVE-2025-48978,0,0,c8dca1a164c5a771ff8fc86700581a0a831318bcb504f858c82c2b7f2669bd4d,2025-08-22T18:09:17.710000
|
||||
CVE-2025-48979,0,0,8cc67cff8b6a26bac1e3c9e584deb394783a7b871462ef6cae5df7254fdda330,2025-08-29T16:24:29.730000
|
||||
CVE-2025-4898,0,0,088de021e18707e0dc4ec8499500601b39900fc456f0a7d4c0f7a0b50fbac254,2025-05-21T19:37:41.533000
|
||||
CVE-2025-48980,0,0,cfc9c82df391460a5b0dfba93742cbfd08021cba3a24443990e74a4bc5570477,2025-11-04T15:41:56.843000
|
||||
CVE-2025-48980,0,1,ca5fbc21c29e02d5fac8009d58def82ad46ef27ec2dc37014217cfd33fd0b4b6,2025-12-01T21:15:50.250000
|
||||
CVE-2025-48981,0,0,5be2fc13748260c76be76145001536ae61607b4d9787a12735902d8a8de2cb0f,2025-10-08T19:38:09.863000
|
||||
CVE-2025-48982,0,0,fecc905a116bc4cd6e6bdd2bebd95539516075ea56b025b6bcf0607514fb78c1,2025-11-13T14:47:08.707000
|
||||
CVE-2025-48983,0,0,e4f0c6261174e13900bbc1426d176dffe4cf6ef240dea0e9994f5d8e002ed08c,2025-11-11T02:07:03.383000
|
||||
CVE-2025-48982,0,1,31be25a9f02f1bfb195a817124a290d608990a69e91b7d6460a94a52806fffc9,2025-12-01T21:15:50.380000
|
||||
CVE-2025-48983,0,1,7eb5f674887decf12aa11bdc66e3ca961d9a6749ac34af258ea8cc101ced68f7,2025-12-01T21:15:50.527000
|
||||
CVE-2025-48984,0,0,4615a534e05deec6f9a4718b4ebf1f6c8be52138f0367c85fd6e7a4ec7a89c8a,2025-11-11T02:08:57.443000
|
||||
CVE-2025-48985,0,0,7537e95b5fa5cca849f052e15aa0ac61b2bfa7c42fe0f34ae0cdef3459dbd5fd,2025-11-12T16:20:22.257000
|
||||
CVE-2025-48985,0,1,d84a841f9d92c52c21bbeeabd9172b255bf65c06f0ba3ea32ec9dfd7b0ebed79,2025-12-01T21:15:50.673000
|
||||
CVE-2025-48986,0,0,dfc979c17576cbd9d9c7402ae09116c1299ecd60b08063c41fe09a5a49f44d93,2025-11-25T18:57:29.873000
|
||||
CVE-2025-48987,0,0,239192091f36c33ec6a9bdcdf307e7164d53d25495609a09c45da828cdbe71d9,2025-11-25T18:56:45.073000
|
||||
CVE-2025-48988,0,0,b950ad497f92ccff1815f5da970ae7efbac48cca58a8625908e10e1ae29d920d,2025-11-03T20:19:07.890000
|
||||
@@ -308645,7 +308646,7 @@ CVE-2025-50722,0,0,d6bcacbb1740597c0a941f7288bab7406d5aefb809a20248779e32451bce0
|
||||
CVE-2025-5073,0,0,a1230535d583b5f466b5fe2615cca31afcba55333f600b324f190ec047a41d18,2025-06-05T20:13:49.707000
|
||||
CVE-2025-50733,0,0,f821bb94d1001de4039d24c263726e694130cc538192f5709a6a9774af20b795,2025-08-26T14:15:38.110000
|
||||
CVE-2025-50735,0,0,d68f8132adfe6e9a9f3af16cf39cfede1775cb165df543545c4baf2167c82619,2025-11-05T18:53:52.923000
|
||||
CVE-2025-50736,0,0,f84f002547ae1698344f6114a466c251719903765ce394da235f1ccad1df3e70,2025-11-04T16:16:00.453000
|
||||
CVE-2025-50736,0,1,0d37c8562487acb3e78617ed8b7f846c003076686ca19fe6c3eda738e7b3c518,2025-12-01T21:15:50.820000
|
||||
CVE-2025-50738,0,0,bed0e0606dea2d270a63639d5c97b46375266cf3e08cc405aa6406622cbea9e7,2025-08-22T16:15:43.973000
|
||||
CVE-2025-50739,0,0,e219787f244b3cf9059dc22a5ad144c42307e11d20456f395bad824de53e31ea,2025-11-04T16:16:00.617000
|
||||
CVE-2025-5074,0,0,b32e6a163eb96eec8f69e51ca7a85c7da766b8b9d224e7b4f2f300a52a5b9bc3,2025-06-05T20:14:07.020000
|
||||
@@ -308889,8 +308890,8 @@ CVE-2025-5167,0,0,d0507ecf0b5b21e24f107649f2515c6afbb660790e07751f18cd594dd93f34
|
||||
CVE-2025-51671,0,0,e799dcb5c7f4e2c72e975ca6f751fefdaf18628907cc07caa283e469a95a7814,2025-07-01T15:53:21.097000
|
||||
CVE-2025-51672,0,0,e9ac7fb0b8689d514c7731fd7b55a9a807b757912d941a99aaf4ad5aedffa427,2025-07-01T18:03:27.253000
|
||||
CVE-2025-5168,0,0,74f02a822faaa8b5a46a78e41282b22e771403dfc5a44608e54bea89178ff6fe,2025-06-03T15:40:48.337000
|
||||
CVE-2025-51682,1,1,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000
|
||||
CVE-2025-51683,1,1,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000
|
||||
CVE-2025-51682,0,0,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000
|
||||
CVE-2025-51683,0,0,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000
|
||||
CVE-2025-5169,0,0,478bfc131e88e29d02dd1ccd61a9e6c142c0208ac4743abe27cdac119eac9f7b,2025-06-03T15:41:01.973000
|
||||
CVE-2025-51691,0,0,2a24a3eaa651e3e5b601a1abd027fcb755c20898339314610b9553186583b0fb,2025-08-13T20:15:30.700000
|
||||
CVE-2025-5170,0,0,2d3c44ad97f24506915e1ae8aa2894c6137b30f378f725193e8dabaa89f599c6,2025-06-03T15:41:52.177000
|
||||
@@ -309250,16 +309251,16 @@ CVE-2025-52655,0,0,0a3417f10e99f455113a8c82ee0982dedd7254527f8e71c9ef53b86c316b2
|
||||
CVE-2025-52656,0,0,7d2866edd15a19d6e55dd9373522bdab479736e1c8528c549dcea246be31b833,2025-10-08T16:50:39.200000
|
||||
CVE-2025-52658,0,0,e73966b0bc7bf6d5305b4e87e39250d15ac770e39ee0ad5c04eca6d4f64d1a7b,2025-10-10T15:16:04.233000
|
||||
CVE-2025-5266,0,0,8a2ca669598a03f46dff8bb37dd9a638cdabbb10fe085013cc63a920d1c1f994,2025-11-03T20:19:16.240000
|
||||
CVE-2025-52662,0,0,13bcc4552f7de60d6cf943f71c382b8a38c9b40d4e3d3982f658bd2c622fba71,2025-11-12T16:20:22.257000
|
||||
CVE-2025-52662,0,1,a6665977862cc329ebffd8b6983bc46f6641a469c1cf01ccc16cb03a422b13c7,2025-12-01T21:15:51
|
||||
CVE-2025-52663,0,0,89c70b1f284d5a929e459e22e646e0ae54f066a21de9f1960adeb90f3b16154c,2025-11-04T15:41:56.843000
|
||||
CVE-2025-52664,0,1,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000
|
||||
CVE-2025-52664,0,0,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000
|
||||
CVE-2025-52665,0,0,a5b22c967c7804f42540105aa948eeadd5ad62886fc137a68b2d02413d7d18d3,2025-11-12T14:51:21.057000
|
||||
CVE-2025-52666,0,0,7ab4726d0697eb34940e0b135269d8034c4df7ab4fa0f58868a7f44be70775b4,2025-11-21T15:13:13.800000
|
||||
CVE-2025-52667,0,0,398f6fd405e62f481c8b603b65b280c886c7bafa2f737d59e1ea823b6102d325,2025-11-21T15:13:13.800000
|
||||
CVE-2025-52667,0,1,7244e5dc4ececa3b5b47c916fa1c6000ee8b4319e581d01da0bbaca848e3e0e4,2025-12-01T21:15:51.130000
|
||||
CVE-2025-52668,0,0,32b1d8def53b9bd7381fddab9a9c311fac16df6e6f67f17b06bfd4a8b5565ca9,2025-11-21T15:13:13.800000
|
||||
CVE-2025-52669,0,0,928791c25a69858760e9cbeb8bcc71caf24fa8666dbd453ed5175528350d1c0d,2025-11-21T15:13:13.800000
|
||||
CVE-2025-5267,0,0,e23087e179cf44134836de7a812203898ef64aba608e835a2c99df1f209d68b6,2025-11-03T20:19:16.420000
|
||||
CVE-2025-52670,0,1,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000
|
||||
CVE-2025-52670,0,0,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000
|
||||
CVE-2025-52671,0,0,61e9d542ce061f46eade221aa20a05cded05024d037223bc36a0d7576e84dfbf,2025-11-21T15:13:13.800000
|
||||
CVE-2025-5268,0,0,4fb0b611433478e9ed53bf2511f1d56960e851188c13f16758c88f8de9dc4515,2025-11-03T20:19:16.580000
|
||||
CVE-2025-52687,0,0,557ddea57b56a7b1244ed82f9fa376bd958c5c08f84a9a0459f2b831b26b0483,2025-07-16T14:58:59.837000
|
||||
@@ -310920,7 +310921,7 @@ CVE-2025-5452,0,0,0e03c28eb8c141e82fe45d8129b4ad74d2c08674693ab9035a9b621d688d6c
|
||||
CVE-2025-54520,0,0,edd9ee2cd20dd7e399aca89dd0be968134d588f4cd10885e1f75e0e2db03c0c9,2025-09-26T14:32:53.583000
|
||||
CVE-2025-54525,0,0,a1ada4667a5f6ed06c64267db33ab9564a4d52ea9dd896e46bfad9899dfdb5e8,2025-09-24T00:37:15.620000
|
||||
CVE-2025-54526,0,0,cf531368e951714c311568bc1673d34e619a1cd6d941cc3d86f20ff91f179d4a,2025-11-12T17:15:43.807000
|
||||
CVE-2025-54527,0,1,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000
|
||||
CVE-2025-54527,0,0,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000
|
||||
CVE-2025-54528,0,0,374eec28724541b7dcd69d2e1fb24b23f752d8027f792298e528690c4e9ece28,2025-07-31T19:50:48.957000
|
||||
CVE-2025-54529,0,0,b12713fd7fa3d2e47374229689fe67a388c255c104d141a1a48e6e16ba8af27f,2025-07-31T19:50:40.900000
|
||||
CVE-2025-54530,0,0,ccaa0ece89b4752bb65ce8d5ac5caecd14370b0d2ae9a36ad37355b827e4efb6,2025-07-31T19:33:52.173000
|
||||
@@ -311466,9 +311467,9 @@ CVE-2025-55118,0,0,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418
|
||||
CVE-2025-5512,0,0,e298909e7d933eb5f783304ac70fd519fe6ced2380a8d0fd8cc914efcaaadd53,2025-10-03T01:14:16.500000
|
||||
CVE-2025-55123,0,0,4984fb9150d448c08ba530fb65dc11c3731eedda0fb2848df325f4fdbdb0e97c,2025-11-21T15:13:13.800000
|
||||
CVE-2025-55124,0,0,7abedd197a13cf5472452b0432f0949cf33c3886d077efccf60690b1d9d204ba,2025-11-26T16:56:10.200000
|
||||
CVE-2025-55126,0,1,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000
|
||||
CVE-2025-55126,0,0,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000
|
||||
CVE-2025-55127,0,0,1b3e4227e0185aad2d93e5338145a40571fe8b2c3950ae640038a03e7612558c,2025-11-21T15:13:13.800000
|
||||
CVE-2025-55128,0,1,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000
|
||||
CVE-2025-55128,0,0,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000
|
||||
CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000
|
||||
CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000
|
||||
CVE-2025-55134,0,0,b2c2e6641a08a1f90a382e7c16f9cbf1a484104a3e1d2676e21bb24dcd6efc00,2025-08-08T13:15:30.060000
|
||||
@@ -311826,6 +311827,7 @@ CVE-2025-55745,0,0,77e8e7deb1f9ac7d7645c86bc9ea08d03deb7b1db642cac6e47a5ee5c536d
|
||||
CVE-2025-55746,0,0,822ae1c572f9c6cc338687fed05b8cfae84cc556af252bb06e5182d575d85dab,2025-08-22T18:09:17.710000
|
||||
CVE-2025-55747,0,0,4af9e156321c6eb4a98f102326b9f1c173fba5fd125ab6b68182086c9591b0cc,2025-09-10T17:47:28.840000
|
||||
CVE-2025-55748,0,0,70ed25c38b854033b335629a41cd8379fd34a23b732a303413cfcee8fb0c5492,2025-09-10T17:24:13.273000
|
||||
CVE-2025-55749,1,1,9b963a1a40af40a3c987ecfe84ba8c7fbeb29c6ec560c9cd70f6ef69a4ba1384,2025-12-01T21:15:51.617000
|
||||
CVE-2025-5575,0,0,81a126dfb6ccad488366b77c36606cd2156f744efbd821f36b71a3dcd92de139,2025-06-05T14:07:21.913000
|
||||
CVE-2025-55750,0,0,c7f71132a361ef7a2f532acf5ac74140aa021bcd0394f2b25fa15eb64da50a99,2025-08-29T16:24:29.730000
|
||||
CVE-2025-55751,0,0,ef0af972860c9f59fb78952103082e0a696acedc5d99a1c6eea16c8506f9fef4,2025-08-22T18:09:17.710000
|
||||
@@ -312278,7 +312280,7 @@ CVE-2025-5746,0,0,056ea6c0a98547dc03e9ea5b7d2db7b23a8dcd4896e6644f25db46e7fea0be
|
||||
CVE-2025-5747,0,0,9410a6fcc6f1e9cd8c246cf721bbe4bfba0a8b250e3ca3f56d775e4424b1302f,2025-08-14T15:38:22.347000
|
||||
CVE-2025-5748,0,0,39caf40af2aacd2cfc2b42317035d749c59ae8998a36cf4447a3f1abeb4e337b,2025-08-14T15:38:09.270000
|
||||
CVE-2025-57483,0,0,b1b9293bcf50896d7eefc9714143360bd18454866634eb4bb773bdd81159ce86,2025-09-29T19:34:10.030000
|
||||
CVE-2025-57489,0,1,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000
|
||||
CVE-2025-57489,0,0,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000
|
||||
CVE-2025-5749,0,0,ec22dd262f8a415309c73a825e4820b4defb47a318a5d22ea127c3b49428b748,2025-08-14T15:37:47.553000
|
||||
CVE-2025-5750,0,0,0522ae88229fa48e68298579539df2b624bebd2c022f860b5e3cd27b08cb071c,2025-08-14T15:25:38.723000
|
||||
CVE-2025-5751,0,0,037bc71659035a991d898ba010a2da50f33841cec08f07740be35c7942ac3e72,2025-08-14T15:25:26.630000
|
||||
@@ -312656,6 +312658,7 @@ CVE-2025-58040,0,0,a5dc67134c1b6c5c10f2668a5001f560d4a3f0f3a957460bf9473dcdf0e36
|
||||
CVE-2025-58041,0,0,14f68ff57ab594895e8fadd59e0a7af6ba0e23268320f84dc1b078e97c7b18f1,2025-08-23T03:15:30.933000
|
||||
CVE-2025-58042,0,0,afde999db2d6b13c0256ffacc3380d6dbac99243a0ef4f2cb69b8eb003ec053e,2025-08-23T03:15:31.010000
|
||||
CVE-2025-58043,0,0,a72df0c240a9f75a24b5de63b2dcee140d8b5cdc570d6d7bab79e3a25360ef98,2025-08-23T03:15:31.090000
|
||||
CVE-2025-58044,1,1,850cd835ad4ab2401c0d32c8e294d087ff0e87f9d8b487f3d2186b4917c60d10,2025-12-01T21:15:51.807000
|
||||
CVE-2025-58045,0,0,3ff2ebe42e7cfd7fd65d050503d1fb2114ff54ed41384e7bfd8911a991969ca5,2025-09-19T19:34:04.427000
|
||||
CVE-2025-58046,0,0,8fe752c9e7f895d5deaf23ef1d25845f80e2a09bba18a5f148d144c822508408,2025-09-19T19:31:40.467000
|
||||
CVE-2025-58047,0,0,717169482b04e15936de61dddc435e056119f8da63739e30bc5ef88872066d17,2025-11-04T22:16:32.057000
|
||||
@@ -314481,7 +314484,7 @@ CVE-2025-60738,0,0,a2ac202c21e7d66bfb815d4ce97afa6915c1b03e8efaba35f9f2d4210272a
|
||||
CVE-2025-60739,0,0,27768e75d821653786d2f5d07f85d9171eac92618566d8c47e90b3027c5714f6,2025-11-25T22:16:16.690000
|
||||
CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418ac5,2025-07-08T16:19:11.700000
|
||||
CVE-2025-60749,0,0,cb6eff06b3c969716cbd50b62ca268ccadd09b2dc6ddbd4cbc884dd540525813,2025-11-04T15:41:31.450000
|
||||
CVE-2025-6075,0,1,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000
|
||||
CVE-2025-6075,0,0,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000
|
||||
CVE-2025-60751,0,0,f5eaa48c625fdb0205a85b237f3c799027abfdf3ab10e1cb659e5821d12da741,2025-11-04T01:15:33.430000
|
||||
CVE-2025-60753,0,0,15450117be9a1be5a41b632e18f78a54dbfc2477e1f5ae295ca657381ab0fd3d,2025-11-06T19:45:30.990000
|
||||
CVE-2025-6076,0,0,635acddb1df949ec971c9f45189c86260de1f34e97e8435edd6c8e987048cb8b,2025-11-03T20:19:17.897000
|
||||
@@ -314639,7 +314642,7 @@ CVE-2025-6121,0,0,ac34c215559700b52c27e4eb85187c0f90e04bada26cf85e1da5d5a006994f
|
||||
CVE-2025-6122,0,0,9512210d31f0e4aa9c3be187ffaab640323dcef8bc9e333d46732643321b9cbc,2025-06-24T20:14:31.217000
|
||||
CVE-2025-61220,0,0,85e201a1d86d971cabbf95d7eb484d100fcd65a7addd6b92a92a6aca0a93dff5,2025-10-21T21:15:40.113000
|
||||
CVE-2025-61224,0,0,af46fdc0b40d4101f480cce3253e4578300e39fa7a9e658db5f22eed46dba090,2025-10-08T19:38:32.610000
|
||||
CVE-2025-61228,0,1,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000
|
||||
CVE-2025-61228,0,0,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000
|
||||
CVE-2025-61229,0,0,49b89dbe293bc5253fe1cb57bf73ded4ecfc9caf5bd1fdca76582d30ad0d4b82,2025-12-01T16:15:55.167000
|
||||
CVE-2025-6123,0,0,01a17e91f4fa042185aa8c895b59d44590ceba8c7d0bf881122c15a612d738ad,2025-07-07T18:49:25.137000
|
||||
CVE-2025-61234,0,0,a98fb6606bd295d125a356304af437f1a11a9292e2b607c522893d2fc923f777,2025-10-30T21:15:36.677000
|
||||
@@ -315136,9 +315139,9 @@ CVE-2025-62220,0,0,13db24cb242ebeed0c1f4737a706504c9ba1a5992e04dbd74728bd9c8ea2a
|
||||
CVE-2025-62222,0,0,b32955abddda902773d9d62b850849311cb72f231f33ab235a1d71b83f6486a6,2025-11-14T15:47:58.830000
|
||||
CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000
|
||||
CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000
|
||||
CVE-2025-62229,0,1,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000
|
||||
CVE-2025-62230,0,1,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000
|
||||
CVE-2025-62231,0,1,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000
|
||||
CVE-2025-62229,0,0,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000
|
||||
CVE-2025-62230,0,0,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000
|
||||
CVE-2025-62231,0,0,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000
|
||||
CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000
|
||||
CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000
|
||||
CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000
|
||||
@@ -315473,7 +315476,7 @@ CVE-2025-62724,0,0,3da1fb4b0371355a092d683658ad02b19097fc2138e3f2ada56b9842cf245
|
||||
CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000
|
||||
CVE-2025-62726,0,0,46f9cb2b8e1946c29cd401e65c80606f5a7ef4fcd1a045f5bc576b237579244c,2025-11-04T15:41:56.843000
|
||||
CVE-2025-62727,0,0,ee45c642db070ed29854f756bb902966037f607edbf636d4de7e5ef2bb4cbd54,2025-11-04T18:16:45.480000
|
||||
CVE-2025-62728,0,1,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000
|
||||
CVE-2025-62728,0,0,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000
|
||||
CVE-2025-62729,0,0,b98bf878b65b862912754cc82d841d7c5113366584f8f3cd74af60ba98a4dbbb,2025-11-24T13:52:24.263000
|
||||
CVE-2025-6273,0,0,7fbd43be0636c447274ca5dd224661b382933a1bb0936c93b976e34f99babf3b,2025-06-23T20:16:40.143000
|
||||
CVE-2025-62730,0,0,c04bc08ffabb612ddf969d9689e1768016be4417a08056e1f52b595505ec6395,2025-11-24T13:53:07.567000
|
||||
@@ -315671,7 +315674,7 @@ CVE-2025-6306,0,0,bead9ba68260c847671d090490ab869cefdc3095014bf5c641fccc2374f7f9
|
||||
CVE-2025-6307,0,0,cdfa642aabb8c4cdf66783b40415b41a741bc33c428a1594c0a2ee18b9dbde7e,2025-06-26T21:18:41.737000
|
||||
CVE-2025-6308,0,0,6d0dabc6e15511e6982b3f870c32ad733481d3f0e5cab616caf841904feb7a8d,2025-06-26T21:18:27.487000
|
||||
CVE-2025-6309,0,0,61dd5cd93b2ec6200afa5c38e7a47ac97ababf226b518b0b020ae4f8c5d368ba,2025-06-26T21:18:20.710000
|
||||
CVE-2025-63095,0,1,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000
|
||||
CVE-2025-63095,0,0,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000
|
||||
CVE-2025-6310,0,0,09efea7aa8eb7ea0695ad0b081248d9d4e4101041c7c67a88e7c220d9a16d6e2,2025-06-26T21:18:04.723000
|
||||
CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b9317300,2025-07-11T15:50:37.860000
|
||||
CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000
|
||||
@@ -315733,7 +315736,7 @@ CVE-2025-63298,0,0,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1
|
||||
CVE-2025-6330,0,0,533f8688fa05d700cc76636e59e86bc0eb723f7b595a46351852e77368267ff9,2025-06-26T18:48:43.913000
|
||||
CVE-2025-63307,0,0,6c44c08904d782d4a70a5a7cb02de5fd71e2dcd2328f94f8308ce378d4706690,2025-11-06T20:15:50.693000
|
||||
CVE-2025-6331,0,0,0a8994ea3249d7eae52872533d96e734a825872bdbb388afb306ca44b9867b0d,2025-06-26T18:46:13.133000
|
||||
CVE-2025-63317,1,1,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000
|
||||
CVE-2025-63317,0,0,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000
|
||||
CVE-2025-6332,0,0,2135c39d96f5f5f51610426459e1766e7e77a827bb39a5d88eeb3366dd1bf430,2025-06-26T18:39:05.587000
|
||||
CVE-2025-6333,0,0,26527bc36673d9e039362729b4406f5a98df04c44c68d06dd05f36e7caa8b426,2025-06-26T18:35:06.553000
|
||||
CVE-2025-63334,0,0,b637f3ac0afd16683422fad3dcd9e95e62c39110ecf9a6395a24b8447b6421d6,2025-11-06T19:45:09.883000
|
||||
@@ -315741,7 +315744,7 @@ CVE-2025-6334,0,0,2a215e04e3be6c866c04768dbe135e466fe601c1c77251573fae1bf844a3e7
|
||||
CVE-2025-6335,0,0,5b8214517b4e2328705628c07c57cad7dcf339f56383ed25d7611a220d052c4c,2025-07-18T12:25:17.053000
|
||||
CVE-2025-63353,0,0,10beafb26269421ec3662bcbd226b87b7850e4eb01d0d80e2226539e3aaba7e3,2025-11-13T16:15:53.553000
|
||||
CVE-2025-6336,0,0,c2ae3339f7f556d7f8479109d39981c789e75e2a76c15e57531c64e864f48049,2025-06-26T18:28:59.800000
|
||||
CVE-2025-63365,1,1,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000
|
||||
CVE-2025-63365,0,0,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000
|
||||
CVE-2025-6337,0,0,20ffa5ad97e2fb5de859648c4c2bd5cf249ca44b435fa5f7c3de6344b086ac2d,2025-08-01T22:18:15.433000
|
||||
CVE-2025-63371,0,0,f85274d81a0dde49fb05c2c1bf8892732ecfd0ec16b0e7409ce0f050acb4b824,2025-11-21T15:13:59.083000
|
||||
CVE-2025-6338,0,0,d5c800ed34d59ce85516e9843ed463eb9c8b7acbef325ec9a754b0076681afc3,2025-10-16T15:28:59.610000
|
||||
@@ -315807,18 +315810,18 @@ CVE-2025-63512,0,0,fb9b2e6f20fa24a31c3b324b6541fb73d5a9e82d5076e7bd845d1b7452be4
|
||||
CVE-2025-63513,0,0,77f0379ed940c32021762ed219df800f46c0c479772ae7fe91e8d4d3d0319688,2025-11-20T21:57:49.427000
|
||||
CVE-2025-63514,0,0,a48a4fe98cc0afdd6ca735b421e2951c674c2395b539204fb8d3a74ba18fbb6f,2025-11-20T21:54:40.943000
|
||||
CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000
|
||||
CVE-2025-63520,0,1,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000
|
||||
CVE-2025-63522,0,1,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000
|
||||
CVE-2025-63523,0,0,3167fb7ffb42abacf5b12f7a33f02b4edbca3b9a6ff93be4e08c620b311a4570,2025-12-01T15:39:33.110000
|
||||
CVE-2025-63520,0,0,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000
|
||||
CVE-2025-63522,0,0,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000
|
||||
CVE-2025-63523,0,1,4fd2b30e7855168929ec4ca95c9348cd5e3ee75333b34828342d661a4a99dc02,2025-12-01T21:15:51.980000
|
||||
CVE-2025-63525,0,0,85fe0b3f8b392a9fa72a33e6259dd0cbce0091769080ee20fc238024536b9f7f,2025-12-01T15:39:33.110000
|
||||
CVE-2025-63526,0,1,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000
|
||||
CVE-2025-63527,0,1,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000
|
||||
CVE-2025-63528,0,1,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000
|
||||
CVE-2025-63529,0,1,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000
|
||||
CVE-2025-63526,0,0,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000
|
||||
CVE-2025-63527,0,0,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000
|
||||
CVE-2025-63528,0,0,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000
|
||||
CVE-2025-63529,0,0,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000
|
||||
CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000
|
||||
CVE-2025-63531,0,1,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000
|
||||
CVE-2025-63532,0,1,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000
|
||||
CVE-2025-63533,0,1,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000
|
||||
CVE-2025-63531,0,0,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000
|
||||
CVE-2025-63532,0,0,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000
|
||||
CVE-2025-63533,0,0,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000
|
||||
CVE-2025-63534,0,0,b9e6b405345279846a1bacfaeeece97782f83b85bf77250c3f3c63b1ce8c5ca9,2025-12-01T17:15:49.777000
|
||||
CVE-2025-63535,0,0,b06846b5385742bb282c662314f5e2cf23bf52417c0b1a4250ca45df579ed9e0,2025-12-01T17:15:49.927000
|
||||
CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000
|
||||
@@ -315879,7 +315882,7 @@ CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc
|
||||
CVE-2025-63700,0,0,942943563001999f3bd48d097dc4b86630407b7258fe8c9de50992f96fff6e00,2025-11-21T15:13:13.800000
|
||||
CVE-2025-63701,0,0,662ea7849c27be5b80c25e2e58f382b31e98a3c765f38948a74aa0fa7306e223,2025-11-18T14:06:55.963000
|
||||
CVE-2025-63708,0,0,daf3ebd701919b695e0a83c8005a392854f3a79d50268da940d9cac92eda2fe6,2025-11-20T20:27:23.200000
|
||||
CVE-2025-63709,0,1,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000
|
||||
CVE-2025-63709,0,0,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000
|
||||
CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000
|
||||
CVE-2025-63710,0,0,dfc7d90b2d530bde90ae81c5e4ff726084913ff81e9fbb0730777dd7846d41c7,2025-11-17T18:18:39.677000
|
||||
CVE-2025-63711,0,0,a0fcdb7a0d12a966f99d72cee69441f70249d14a1c2676daf4cf74dc39d5f04c,2025-11-17T18:16:51.357000
|
||||
@@ -315920,7 +315923,7 @@ CVE-2025-63828,0,0,9f83ae1fae3a05b08418a2eab46883448f1a6b2213a1bb4f96f6991bd6555
|
||||
CVE-2025-63829,0,0,26a17fec77482163105fa59f15f451ab242482540116aae576873c25a54afaf4,2025-11-19T19:14:59.327000
|
||||
CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000
|
||||
CVE-2025-63830,0,0,64bb7b74542849e475a50c70d15ab1b2e1a45c8ce9737df66a6fb312752a7b07,2025-11-19T13:20:11.367000
|
||||
CVE-2025-63834,0,1,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000
|
||||
CVE-2025-63834,0,0,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000
|
||||
CVE-2025-63835,0,0,1137446835ae921038cd75e6ade7d3d1796207b3e1bef7c2167d975169b2c7a3,2025-11-18T17:16:13.363000
|
||||
CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000
|
||||
CVE-2025-63848,0,0,98188db2a3a2c26fc6f5e46e615c2c2f02b2c1a0d5f2c9b13ed9a8ecacd8325b,2025-11-21T15:13:13.800000
|
||||
@@ -315950,7 +315953,7 @@ CVE-2025-6393,0,0,1a35217c3b800b18b49bcd9013075f8fa6cac52b24da4da242fbe596d982b2
|
||||
CVE-2025-63932,0,0,8f00ddb7b81c8111efe059edc3d54cee94e1cf82fe418142e977a7939bfc787b,2025-11-21T15:13:59.083000
|
||||
CVE-2025-63938,0,0,f59205b1e696fea95ca28433f191c9b156cc3be0c29755b4fd0768e633af691d,2025-12-01T15:39:53.100000
|
||||
CVE-2025-6394,0,0,89f814907edd3ebe4d5f59011c66ab7c6d332856a0844d277aa889bcfc935525,2025-10-23T20:06:00.793000
|
||||
CVE-2025-6395,0,0,cb3c0c913443d3dc2f885a3f5cc382abf9dce52bfd5d3e81f83b6ebd90077743,2025-11-07T00:15:55.290000
|
||||
CVE-2025-6395,0,1,22c67856941aa04443d5061f189f011e19ded8861180ba260f6fb7c5887851e2,2025-12-01T22:15:51.513000
|
||||
CVE-2025-63952,0,0,572cf6fa40caa117e18fddead39ae0b9d246db6d186fd69c2d3d4fb03d656e98,2025-11-25T22:16:16.690000
|
||||
CVE-2025-63953,0,0,553928eaef8a5fc5474ce6a4e50b82b764063e943c8b2c29c4dfbdf94c79a76d,2025-11-25T22:16:16.690000
|
||||
CVE-2025-63955,0,0,beb4b32987ba24f1e28ffd3bae48cdcc4e19e80aa8fe2b86279445dbe3b813c6,2025-11-20T17:27:58.507000
|
||||
@@ -315964,7 +315967,7 @@ CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff
|
||||
CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000
|
||||
CVE-2025-64027,0,0,470afad40ddbedb17a5b049e25f07fea4418f8c394859528eb668b671557531a,2025-11-26T16:15:50.103000
|
||||
CVE-2025-6403,0,0,007861183f6687f9c9a79ed265c27e5792ce1d4050de9b4571cc349ce6d48442,2025-07-02T18:56:36.940000
|
||||
CVE-2025-64030,0,1,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000
|
||||
CVE-2025-64030,0,0,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000
|
||||
CVE-2025-6404,0,0,f0c24c4f38cddef26208faf5fffbe2ab0f5998ff0d6d820bde73ac92320b2d1d,2025-06-24T19:33:00.033000
|
||||
CVE-2025-64046,0,0,2473d61fcd444f7107420add86bfb5a479b28afca70336dc60642cd4e6e6ba2c,2025-11-19T13:11:59.527000
|
||||
CVE-2025-64047,0,0,2cf7bb40ae06e9b5d65d709020e8f3083f47448e40a9b3db194b3dd46afdace1,2025-11-25T22:16:16.690000
|
||||
@@ -316392,7 +316395,7 @@ CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c3372331388
|
||||
CVE-2025-64770,0,0,9f6d874024d46174136454b2b8784191b86d838279b0afddf1eb50435c5eceaf,2025-11-21T15:13:13.800000
|
||||
CVE-2025-64772,0,0,14b5eb97d0aa66d077fbece2b7e27003f6618b775fb26192d8d1595810b97280,2025-12-01T15:39:33.110000
|
||||
CVE-2025-64773,0,0,59049fa938a874236a592ec4986adf18874e19e9a9d1ab314c7036607af19763,2025-11-21T12:57:53.123000
|
||||
CVE-2025-64775,0,1,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000
|
||||
CVE-2025-64775,0,0,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000
|
||||
CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000
|
||||
CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000
|
||||
CVE-2025-6480,0,0,93237f12d754008f7fd67ea5d034bb783649924c98eaa92f468d9844c78fedc5,2025-06-25T19:18:18.497000
|
||||
@@ -316477,8 +316480,8 @@ CVE-2025-65108,0,0,8654395a049218b7bb70e1d0a3d7d6a2bfb0b8acfe9b255f9b034f0dbc08e
|
||||
CVE-2025-65109,0,0,3e2b7c0e2bcc97290a2ee779e8f2869ba045adc7612d41c8f9fb4f6dc8f7daf0,2025-11-25T22:16:42.557000
|
||||
CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000
|
||||
CVE-2025-65111,0,0,23a14c16207f851a4f2756b810c5b708df7743d12ffc02562da5fa7d2fc146d6,2025-11-25T22:16:42.557000
|
||||
CVE-2025-65112,0,1,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000
|
||||
CVE-2025-65113,0,1,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000
|
||||
CVE-2025-65112,0,0,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000
|
||||
CVE-2025-65113,0,0,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000
|
||||
CVE-2025-6512,0,0,fafc14028fc8e6d0cf5d1c26ecddf3f178d4b119f094c564dc999ae28df07a2c,2025-06-23T20:16:21.633000
|
||||
CVE-2025-6513,0,0,31aa7f858e5f0036c4b8df8555240c1143a48501c8ecdc51eff54ca1e5b97fde,2025-06-23T20:16:21.633000
|
||||
CVE-2025-6514,0,0,2e857a137de569aae69fc5e8b5ee04b5a374d907c22caf5d111c51eef7f69cd9,2025-07-10T13:17:30.017000
|
||||
@@ -316506,7 +316509,7 @@ CVE-2025-6524,0,0,a7275ea041ffa7e979afd064b5baf753a7b8d034996389a1d24dc2a4b9f0ab
|
||||
CVE-2025-6525,0,0,f9a4484f271973188d980443d7c340a5c21c022439185d3e11e100f20a1e0b89,2025-06-26T18:58:14.280000
|
||||
CVE-2025-6526,0,0,38fb1bd29c1b6ed21d1635ed073af71be9b9e2f0ee3829828e30d24a8dc48b04,2025-11-14T15:02:28.340000
|
||||
CVE-2025-6527,0,0,3081b8f89105c5a4934c421a3bf407c898825f874c4ac4d7085b5d837b965611,2025-11-14T14:46:49.813000
|
||||
CVE-2025-65276,0,1,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000
|
||||
CVE-2025-65276,0,0,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000
|
||||
CVE-2025-65278,0,0,872bb38eaab169ac716b659fd9467b89845d82a56a5ea96b6203b5dd4e0e15d3,2025-12-01T15:39:33.110000
|
||||
CVE-2025-6528,0,0,a84b58003f0fbfdab073bd26e1b4c7edb3a9507243de4187c76be61f732c25e1,2025-11-14T14:33:46.660000
|
||||
CVE-2025-6529,0,0,ad88146ae23ea3ea8f25684a5176b38f126d14015cf0853a92015c69b0e16bef,2025-11-14T14:12:50.063000
|
||||
@@ -316521,12 +316524,12 @@ CVE-2025-6537,0,0,6cc047e68af8cc140a533baef81117cae1d7e838b2f26be233dae033dab14e
|
||||
CVE-2025-6538,0,0,e09f0a97dfdb50a09d0300934010eb6d0f1d88eba5fa750c8cc98ba07c13c662,2025-07-07T18:33:37.610000
|
||||
CVE-2025-6539,0,0,78ecc1fdd76d73ccd36c87a5455dc45373488fca38a0ae555e8c322dea869192,2025-07-25T15:29:19.837000
|
||||
CVE-2025-6540,0,0,082438792186c440bf4ff42d97a1cb1ef2ee9a0b9d0da94f6ceb561b424c8589,2025-07-07T15:02:44.263000
|
||||
CVE-2025-65403,0,1,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000
|
||||
CVE-2025-65404,0,1,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000
|
||||
CVE-2025-65405,0,1,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000
|
||||
CVE-2025-65406,0,1,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000
|
||||
CVE-2025-65407,1,1,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000
|
||||
CVE-2025-65408,0,1,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000
|
||||
CVE-2025-65403,0,0,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000
|
||||
CVE-2025-65404,0,0,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000
|
||||
CVE-2025-65405,0,0,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000
|
||||
CVE-2025-65406,0,0,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000
|
||||
CVE-2025-65407,0,0,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000
|
||||
CVE-2025-65408,0,0,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000
|
||||
CVE-2025-6541,0,0,8e813e74d5024d2c640fde6671e2bd22ecb1ab2a380d8bbd469e941f977ab580,2025-10-24T13:45:38.010000
|
||||
CVE-2025-6542,0,0,855ea415849f7679b9c628fd68cbf55c441dac333e93193e039cd249d23ab7ae,2025-10-24T13:50:10.897000
|
||||
CVE-2025-6543,0,0,7c17eb41d33e1ac44fdd08a7293ed23a397efa51eb2c1bfb61acf746a22684a8,2025-10-24T13:42:21.210000
|
||||
@@ -316560,6 +316563,8 @@ CVE-2025-6559,0,0,9cb71ac3711fb3b86b569e9a51eb156c4586cc1e2e8b0bcfb406579e47f4c3
|
||||
CVE-2025-6560,0,0,0fbeb242211a22ef947f1fcdbf6b0e2a9cc7c2add8384266780a00d3eb1ea522,2025-06-26T18:58:14.280000
|
||||
CVE-2025-6561,0,0,7c1cc2e462ee3f4cfbfd909428f12d4b1c394ea55775d6a19975a5b62f69a18f,2025-06-26T18:57:43.670000
|
||||
CVE-2025-6562,0,0,27f22edb2ae89e7e5ca0f08da1c6b89d3ea0e09ce8efc41223de0ab990d8069e,2025-06-26T18:57:43.670000
|
||||
CVE-2025-65621,1,1,6f7a550fbbee7de80495c146766eb3c129d8b5b719e16fedf643c77538c0caec,2025-12-01T21:15:52.193000
|
||||
CVE-2025-65622,1,1,975f8456d19f4d83caf345ee1d6e5ab3ff43494ed1e3958eb4da6011fc4d86ef,2025-12-01T22:15:48.697000
|
||||
CVE-2025-6563,0,0,9898e80f0fc110857b3fce24e3b506c3d4f000fedbadc3dbe241b4411d081672,2025-07-03T15:13:53.147000
|
||||
CVE-2025-65647,0,0,44aa01554dda7b1356446682f5e198619339fed49a7488d4025e8e43a6281ba3,2025-12-01T14:22:42.593000
|
||||
CVE-2025-6565,0,0,edbd540d511b85519129c288260b1fc37f33ec2182d67f9f0be78d5a0f7f9423,2025-06-26T18:58:14.280000
|
||||
@@ -316587,8 +316592,9 @@ CVE-2025-6580,0,0,14c9a21bff52d8562deb8a5ff102203adfe298df563381633ada51bbda9d23
|
||||
CVE-2025-6581,0,0,9eb16713b89b10d47a3355e63f223e1d1babaf81dbe3bf267fcf583104bec561,2025-07-02T17:11:46.147000
|
||||
CVE-2025-6582,0,0,06b49d50890d886846d052750b63a829a4a61d16f96e10b0780325588b187412,2025-07-02T17:04:36.247000
|
||||
CVE-2025-6583,0,0,30d0558eb9467ec1d68b23c75a699e90fa70f2c3c0ad5646089f1aba65b21e55,2025-07-02T16:46:47.320000
|
||||
CVE-2025-65836,1,1,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000
|
||||
CVE-2025-65838,1,1,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000
|
||||
CVE-2025-65836,0,0,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000
|
||||
CVE-2025-65838,0,0,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000
|
||||
CVE-2025-65840,1,1,448accf4e2c2619b3910de4537b34283af9d323c3d3bc8432e94c9f25b2c949c,2025-12-01T21:15:52.320000
|
||||
CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95ad,2025-07-22T13:05:40.573000
|
||||
CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000
|
||||
CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000
|
||||
@@ -316713,10 +316719,12 @@ CVE-2025-66187,0,0,952662b39938f1c4fd582d536c74a2e1beb8f6c48bce3128e45c0d7a53bcb
|
||||
CVE-2025-6619,0,0,7d502e0f9c280ac237d264ea47e9d56f2c9f885e9391d98b4346ea7561f6a820,2025-06-27T18:19:19.447000
|
||||
CVE-2025-6620,0,0,a58ab2b80e3779d32d4e3358d3d356ad6dfc021a674a6471533aa7b324e1ebbe,2025-06-27T18:11:26.180000
|
||||
CVE-2025-66201,0,0,a8275dbdf292ebfbd1cde1dc9da04f81e4490594014f7399918003fe14c9a3f5,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66205,1,1,d859be4f80e10760e52a3b77e8a5e3a26f37f998aaf1a2aaa10da20429bf25ca,2025-12-01T21:15:52.443000
|
||||
CVE-2025-66206,1,1,5e027b4e960fa535ee0e03fb0c2a4b1f0deb0ec18187fbd419f819871536c82b,2025-12-01T21:15:52.623000
|
||||
CVE-2025-6621,0,0,31225189b3a0ed561d6ef4522df51388559053b3febb508a0b1393ddfa4112ad,2025-06-27T18:10:30.697000
|
||||
CVE-2025-66216,0,0,10043334f406e37b8388a5bc981c4bcf96fce6ed5ad078ea3150c9a36e79060c,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66217,0,0,ae56e3dd192353327e26455db6f96f059511019cec01bb7242e26d03db58eb35,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66219,0,1,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000
|
||||
CVE-2025-66219,0,0,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000
|
||||
CVE-2025-66221,0,0,104e2e5ed755bd23c52091e4321c1eead6c1f9b604b09a0791716eee8369aa7f,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66223,0,0,342c34db92c35bd6bb381fb52f300468da2f0ba45182833f9a2354529c4da0f2,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66224,0,0,b69359b50a265bd901adcf2031b698abf62056c18d8a1e312f3d5ca9d4a48dfd,2025-12-01T15:39:33.110000
|
||||
@@ -316733,7 +316741,7 @@ CVE-2025-6624,0,0,97dba7b444edfb1a26270ffbacc4a0765e856cfa4c9084bb10655088350330
|
||||
CVE-2025-6625,0,0,6b5ce1ef015c31200b1841c65a67498f95b9314a4f4532397cc0be8fe969c50b,2025-08-18T20:16:28.750000
|
||||
CVE-2025-66250,0,0,4641e8f45cb7750e5dd4870a8e9adbe3034be5afa8d32fff39f4a0b7573c878d,2025-11-28T23:11:55.537000
|
||||
CVE-2025-66251,0,0,1e1d3127ebe85266a644a9ad6c37c08b62e4d6e878d1838a3dfd3048ec5200f0,2025-11-28T23:11:55.537000
|
||||
CVE-2025-66252,0,0,b43c337bec8c16b7290abf0216abfadd15142dbfbd1730c852eb01b740a518c7,2025-11-28T23:11:55.537000
|
||||
CVE-2025-66252,0,1,60b674f439e82b447297d397582246b382e561d19b7bb989d82881e549b40332,2025-12-01T22:15:48.860000
|
||||
CVE-2025-66253,0,0,175a1c4228ae28196c32ba905ccb8910954f8e2f135d2f41bab2d88dac5080a5,2025-11-28T23:11:55.537000
|
||||
CVE-2025-66254,0,0,b12368dae348e769f9ec032872915832fe719d345722b888f3b81389f173dfaf,2025-11-28T23:11:55.537000
|
||||
CVE-2025-66255,0,0,e74e279c1bae06c83c290b4a5fe6620e5dd5517be3b684cca51aa662ca24d513,2025-11-28T23:11:55.537000
|
||||
@@ -316754,7 +316762,26 @@ CVE-2025-6627,0,0,ac42708d70135c1e2f3d3c95b24cee76ad7c50967f5771ee2df2dd6c238666
|
||||
CVE-2025-66289,0,0,6063359e463cb1b7b2b27669c30287ee26a9d8344b82e6f7afc2de770f57c0af,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66290,0,0,628f18d01710935f3d64e1c8fb933bfececc54c394f13b16d074c33ea36434ea,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66291,0,0,2d3c030f895c83ac65981544374b108a2eebc2c0310b1dbfbbb1a72dbfe14235,2025-12-01T15:39:33.110000
|
||||
CVE-2025-66294,1,1,fde177b4760647ee3e485b764ff4464e0d24af41982f7fe4d7b2ec9e8ea7c58c,2025-12-01T21:15:52.843000
|
||||
CVE-2025-66295,1,1,c128dcc9e5fdf392166b004c2b475ba2890b11cc8099833eeb62f8f93826ea18,2025-12-01T21:15:53
|
||||
CVE-2025-66296,1,1,0c81ebc5426dfd0b30668b206d393c6f12c415db189efc009eee92f83d3d12b3,2025-12-01T21:15:53.157000
|
||||
CVE-2025-66297,1,1,b91a67a09b947dd67fb4e1b93b457d2e00b5cadf6242e689d5816adab1fc5fc6,2025-12-01T21:15:53.327000
|
||||
CVE-2025-66298,1,1,d06cd34f0809f060831c811618efcd232bd3c00c4f758ca3985a6372f91d35ec,2025-12-01T22:15:49.103000
|
||||
CVE-2025-66299,1,1,8580646ed611a19aaf8ec6d3e0ce924b1961b3be8f3c48413b1b7c3d211a4fbd,2025-12-01T22:15:49.290000
|
||||
CVE-2025-66300,1,1,20b9bd6535de398bcd527d34a27d860425b0c99f25cafd82e3a237ef43b87d06,2025-12-01T22:15:49.447000
|
||||
CVE-2025-66301,1,1,93fb040835ef0abbab89b8d2001df5b0ea3b97e6db1af811cc6f56133120cac4,2025-12-01T22:15:49.607000
|
||||
CVE-2025-66302,1,1,84ee6c3122ba8610d6db4b5bc416e0edc0793cbd154001ad7a30018a6c64f32e,2025-12-01T22:15:49.750000
|
||||
CVE-2025-66303,1,1,40b0ce9aff7b1a576ea3904bf78b2b3c4fbb9fcfe5ecefdaead38f10ecf28ea4,2025-12-01T22:15:49.913000
|
||||
CVE-2025-66304,1,1,41d777bd4cc79f211bed09bff7cfb38e70397f2cb5767d895dbc0e9362a4ccde,2025-12-01T22:15:50.080000
|
||||
CVE-2025-66305,1,1,1f2f96d138069108b203792ee07ca3dcf57d2350afa0d4fbcd7d9d5029febecf,2025-12-01T22:15:50.250000
|
||||
CVE-2025-66306,1,1,ae0b6b18be314916f1c54a31ec90e732647f52a348b3b8bfc59f92216a8c3003,2025-12-01T22:15:50.413000
|
||||
CVE-2025-66307,1,1,76e825ea72125588b08f8b26d6634022f9921484003d4a8a49850026f74e0f0b,2025-12-01T22:15:50.570000
|
||||
CVE-2025-66308,1,1,1924844c3b44066cf4435627b1aeef2ebdeb8304fec8fa11633c5c860f07e0e4,2025-12-01T22:15:50.743000
|
||||
CVE-2025-66309,1,1,bf3885c97189b997573aab2ab599b5ca0c7f2722c9dfe4b9d49a939b50cd7ac0,2025-12-01T22:15:50.910000
|
||||
CVE-2025-6631,0,0,86d2ee25bdf69ddf1aaf6049188589a2db446e1def446432dc1bb9a87223c0b5,2025-08-19T14:15:41.790000
|
||||
CVE-2025-66310,1,1,2625faea8f66ab53ea5be4758257d2f4b02d19ea52b632dda380d6cce30eb641,2025-12-01T22:15:51.067000
|
||||
CVE-2025-66311,1,1,0927a7afee5757093dc17c8c6edea050e702818126ed91cbffb400b0e9ccbb40,2025-12-01T22:15:51.217000
|
||||
CVE-2025-66312,1,1,6da2ce4745a4736ea462c5e4805c5fd7c41405ebd0215b28f948eb6e20eac4ff,2025-12-01T22:15:51.367000
|
||||
CVE-2025-66314,0,0,699e0894bd19536cc5e756dbd81eb3fe8a4a1f39b0a4127e4530f9cf67fe6c1f,2025-12-01T15:39:33.110000
|
||||
CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959eeb7,2025-11-13T19:41:50.260000
|
||||
CVE-2025-6633,0,0,117eeffdf2f8f6e2fed9dd7c3a57930753c8f6f12ea2d2e4f36e69d3e6dfc33d,2025-11-13T20:04:14.093000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user