From a5701f53c519609341a7e1aecd937097fa3d3fc2 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 1 Dec 2025 23:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-12-01T23:00:11.583634+00:00 --- CVE-2022/CVE-2022-503xx/CVE-2022-50339.json | 70 +++++- CVE-2022/CVE-2022-503xx/CVE-2022-50340.json | 106 +++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50341.json | 117 ++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50342.json | 94 ++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50343.json | 154 +++++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50344.json | 153 +++++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50346.json | 153 +++++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50347.json | 154 +++++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50348.json | 118 ++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50349.json | 154 +++++++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50350.json | 82 +++++- CVE-2022/CVE-2022-503xx/CVE-2022-50351.json | 87 ++++++- CVE-2022/CVE-2022-503xx/CVE-2022-50352.json | 147 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53304.json | 151 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53305.json | 141 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53306.json | 95 ++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53307.json | 142 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53308.json | 171 ++++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53309.json | 141 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53310.json | 97 +++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53311.json | 167 ++++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53312.json | 82 +++++- CVE-2023/CVE-2023-533xx/CVE-2023-53313.json | 154 +++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53314.json | 142 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53315.json | 106 +++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53316.json | 118 ++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53317.json | 146 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53318.json | 141 ++++++++++- CVE-2023/CVE-2023-533xx/CVE-2023-53319.json | 80 +++++- CVE-2023/CVE-2023-533xx/CVE-2023-53320.json | 82 +++++- CVE-2024/CVE-2024-519xx/CVE-2024-51999.json | 90 +++++++ CVE-2025/CVE-2025-115xx/CVE-2025-11561.json | 6 +- CVE-2025/CVE-2025-121xx/CVE-2025-12183.json | 6 +- CVE-2025/CVE-2025-137xx/CVE-2025-13786.json | 14 +- CVE-2025/CVE-2025-329xx/CVE-2025-32988.json | 6 +- CVE-2025/CVE-2025-329xx/CVE-2025-32989.json | 6 +- CVE-2025/CVE-2025-329xx/CVE-2025-32990.json | 6 +- CVE-2025/CVE-2025-398xx/CVE-2025-39834.json | 85 ++++++- CVE-2025/CVE-2025-398xx/CVE-2025-39836.json | 97 +++++++- CVE-2025/CVE-2025-487xx/CVE-2025-48709.json | 64 ++++- CVE-2025/CVE-2025-489xx/CVE-2025-48980.json | 14 +- CVE-2025/CVE-2025-489xx/CVE-2025-48982.json | 14 +- CVE-2025/CVE-2025-489xx/CVE-2025-48983.json | 14 +- CVE-2025/CVE-2025-489xx/CVE-2025-48985.json | 14 +- CVE-2025/CVE-2025-507xx/CVE-2025-50736.json | 14 +- CVE-2025/CVE-2025-526xx/CVE-2025-52662.json | 14 +- CVE-2025/CVE-2025-526xx/CVE-2025-52667.json | 14 +- CVE-2025/CVE-2025-557xx/CVE-2025-55749.json | 94 +++++++ CVE-2025/CVE-2025-580xx/CVE-2025-58044.json | 82 ++++++ CVE-2025/CVE-2025-635xx/CVE-2025-63523.json | 39 ++- CVE-2025/CVE-2025-63xx/CVE-2025-6395.json | 6 +- CVE-2025/CVE-2025-656xx/CVE-2025-65621.json | 25 ++ CVE-2025/CVE-2025-656xx/CVE-2025-65622.json | 25 ++ CVE-2025/CVE-2025-658xx/CVE-2025-65840.json | 25 ++ CVE-2025/CVE-2025-662xx/CVE-2025-66205.json | 60 +++++ CVE-2025/CVE-2025-662xx/CVE-2025-66206.json | 56 +++++ CVE-2025/CVE-2025-662xx/CVE-2025-66252.json | 6 +- CVE-2025/CVE-2025-662xx/CVE-2025-66294.json | 86 +++++++ CVE-2025/CVE-2025-662xx/CVE-2025-66295.json | 60 +++++ CVE-2025/CVE-2025-662xx/CVE-2025-66296.json | 60 +++++ CVE-2025/CVE-2025-662xx/CVE-2025-66297.json | 82 ++++++ CVE-2025/CVE-2025-662xx/CVE-2025-66298.json | 82 ++++++ CVE-2025/CVE-2025-662xx/CVE-2025-66299.json | 64 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66300.json | 60 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66301.json | 78 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66302.json | 60 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66303.json | 60 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66304.json | 64 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66305.json | 82 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66306.json | 60 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66307.json | 60 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66308.json | 82 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66309.json | 82 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66310.json | 82 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66311.json | 82 ++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66312.json | 82 ++++++ README.md | 95 ++++--- _state.csv | 263 +++++++++++--------- 78 files changed, 5891 insertions(+), 476 deletions(-) create mode 100644 CVE-2024/CVE-2024-519xx/CVE-2024-51999.json create mode 100644 CVE-2025/CVE-2025-557xx/CVE-2025-55749.json create mode 100644 CVE-2025/CVE-2025-580xx/CVE-2025-58044.json create mode 100644 CVE-2025/CVE-2025-656xx/CVE-2025-65621.json create mode 100644 CVE-2025/CVE-2025-656xx/CVE-2025-65622.json create mode 100644 CVE-2025/CVE-2025-658xx/CVE-2025-65840.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66205.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66206.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66294.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66295.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66296.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66297.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66298.json create mode 100644 CVE-2025/CVE-2025-662xx/CVE-2025-66299.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66300.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66301.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66302.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66303.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66304.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66305.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66306.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66307.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66308.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66309.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66310.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66311.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66312.json diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50339.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50339.json index 8b5a57c0cd9..929c472567d 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50339.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50339.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50339", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:32.647", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:00:43.643", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,75 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()\n\nsyzbot is again reporting attempt to cancel uninitialized work\nat mgmt_index_removed() [1], for setting of HCI_MGMT flag from\nmgmt_init_hdev() from hci_mgmt_cmd() from hci_sock_sendmsg() can\nrace with testing of HCI_MGMT flag from mgmt_index_removed() from\nhci_sock_bind() due to lack of serialization via hci_dev_lock().\n\nSince mgmt_init_hdev() is called with mgmt_chan_list_lock held, we can\nsafely split hci_dev_test_and_set_flag() into hci_dev_test_flag() and\nhci_dev_set_flag(). Thus, in order to close this race, set HCI_MGMT flag\nafter INIT_DELAYED_WORK() completed.\n\nThis is a local fix based on mgmt_chan_list_lock. Lack of serialization\nvia hci_dev_lock() might be causing different race conditions somewhere\nelse. But a global fix based on hci_dev_lock() should deserve a future\npatch." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/e53c6180db8dd09de94e0a3bdf4fef6f5f9dd6e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f74ca25d6d6629ffd4fd80a1a73037253b57d06b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50340.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50340.json index 289c96d63dd..a9791ad494a 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50340.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50340.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50340", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:33.533", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:00:51.300", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,27 +11,117 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vimc: Fix wrong function called when vimc_init() fails\n\nIn vimc_init(), when platform_driver_register(&vimc_pdrv) fails,\nplatform_driver_unregister(&vimc_pdrv) is wrongly called rather than\nplatform_device_unregister(&vimc_pdev), which causes kernel warning:\n\n Unexpected driver unregister!\n WARNING: CPU: 1 PID: 14517 at drivers/base/driver.c:270 driver_unregister+0x8f/0xb0\n RIP: 0010:driver_unregister+0x8f/0xb0\n Call Trace:\n \n vimc_init+0x7d/0x1000 [vimc]\n do_one_initcall+0xd0/0x4e0\n do_init_module+0x1cf/0x6b0\n load_module+0x65c2/0x7820" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.13", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D9BBFB20-ADB7-4F79-B2A6-AFECAA4DC013" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/14d85b600bb1f6f8ef61fa8fc1907e2e623d8350", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/681ac2902039d9b497b3ae18fdc204314979e61e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c9ff35d68691aaea85b2e93763772e23930b3a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f38df8984ef1b45ba23888d0e232cc21a95bd04b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f74d3f326d1d5b8951ce263c59a121ecfa65e7c0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50341.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50341.json index 6a2b5b68c77..9df4d8dfa6c 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50341.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50341.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50341", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:33.660", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:03:08.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,31 +11,130 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix oops during encryption\n\nWhen running xfstests against Azure the following oops occurred on an\narm64 system\n\n Unable to handle kernel write to read-only memory at virtual address\n ffff0001221cf000\n Mem abort info:\n ESR = 0x9600004f\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x0f: level 3 permission fault\n Data abort info:\n ISV = 0, ISS = 0x0000004f\n CM = 0, WnR = 1\n swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000294f3000\n [ffff0001221cf000] pgd=18000001ffff8003, p4d=18000001ffff8003,\n pud=18000001ff82e003, pmd=18000001ff71d003, pte=00600001221cf787\n Internal error: Oops: 9600004f [#1] PREEMPT SMP\n ...\n pstate: 80000005 (Nzcv daif -PAN -UAO -TCO BTYPE=--)\n pc : __memcpy+0x40/0x230\n lr : scatterwalk_copychunks+0xe0/0x200\n sp : ffff800014e92de0\n x29: ffff800014e92de0 x28: ffff000114f9de80 x27: 0000000000000008\n x26: 0000000000000008 x25: ffff800014e92e78 x24: 0000000000000008\n x23: 0000000000000001 x22: 0000040000000000 x21: ffff000000000000\n x20: 0000000000000001 x19: ffff0001037c4488 x18: 0000000000000014\n x17: 235e1c0d6efa9661 x16: a435f9576b6edd6c x15: 0000000000000058\n x14: 0000000000000001 x13: 0000000000000008 x12: ffff000114f2e590\n x11: ffffffffffffffff x10: 0000040000000000 x9 : ffff8000105c3580\n x8 : 2e9413b10000001a x7 : 534b4410fb86b005 x6 : 534b4410fb86b005\n x5 : ffff0001221cf008 x4 : ffff0001037c4490 x3 : 0000000000000001\n x2 : 0000000000000008 x1 : ffff0001037c4488 x0 : ffff0001221cf000\n Call trace:\n __memcpy+0x40/0x230\n scatterwalk_map_and_copy+0x98/0x100\n crypto_ccm_encrypt+0x150/0x180\n crypto_aead_encrypt+0x2c/0x40\n crypt_message+0x750/0x880\n smb3_init_transform_rq+0x298/0x340\n smb_send_rqst.part.11+0xd8/0x180\n smb_send_rqst+0x3c/0x100\n compound_send_recv+0x534/0xbc0\n smb2_query_info_compound+0x32c/0x440\n smb2_set_ea+0x438/0x4c0\n cifs_xattr_set+0x5d4/0x7c0\n\nThis is because in scatterwalk_copychunks(), we attempted to write to\na buffer (@sign) that was allocated in the stack (vmalloc area) by\ncrypt_message() and thus accessing its remaining 8 (x2) bytes ended up\ncrossing a page boundary.\n\nTo simply fix it, we could just pass @sign kmalloc'd from\ncrypt_message() and then we're done. Luckily, we don't seem to pass\nany other vmalloc'd buffers in smb_rqst::rq_iov...\n\nInstead, let's map the correct pages and offsets from vmalloc buffers\nas well in cifs_sg_set_buf() and then avoiding such oopses." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "35BD75DA-D55E-4B66-8E0E-4931F67E1163" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.87", + "matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.1", + "matchCriteriaId": "E2D7A7B1-A69F-4536-ADFF-72B77EB8B13D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/a13e51760703f71c25d5fc1f4a62dfa4b0cc80e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bf0543b93740916ee91956f9a63da6fc0d79daaa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8d16a54842d609fd4a3ed2d81d4333d6329aa94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8e2861cc3258dbe407d01ea8c59bb5a53132301", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f7f291e14dde32a07b1f0aa06921d28f875a7b54", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe6ea044c4f05706cb71040055b1c70c6c8275e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50342.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50342.json index 426c5abb60a..ed01016768f 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50342.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50342.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50342", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:33.807", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:03:16.573", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfloppy: Fix memory leak in do_floppy_init()\n\nA memory leak was reported when floppy_alloc_disk() failed in\ndo_floppy_init().\n\nunreferenced object 0xffff888115ed25a0 (size 8):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 8 bytes):\n 00 ac 67 5b 81 88 ff ff ..g[....\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<00000000a87bfa9e>] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180\n [<000000006f02e8b1>] blk_mq_alloc_tag_set+0x573/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\nunreferenced object 0xffff88810fc30540 (size 32):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<000000006b91eab4>] blk_mq_alloc_tag_set+0x393/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nIf the floppy_alloc_disk() failed, disks of current drive will not be set,\nthus the lastest allocated set->tag cannot be freed in the error handling\npath. A simple call graph shown as below:\n\n floppy_module_init()\n floppy_init()\n do_floppy_init()\n for (drive = 0; drive < N_DRIVE; drive++)\n blk_mq_alloc_tag_set()\n blk_mq_alloc_tag_set_tags()\n blk_mq_realloc_tag_set_tags() # set->tag allocated\n floppy_alloc_disk()\n blk_mq_alloc_disk() # error occurred, disks failed to allocated\n\n ->out_put_disk:\n for (drive = 0; drive < N_DRIVE; drive++)\n if (!disks[drive][0]) # the last disks is not set and loop break\n break;\n blk_mq_free_tag_set() # the latest allocated set->tag leaked\n\nFix this problem by free the set->tag of current drive before jump to\nerror handling path.\n\n[efremov: added stable list, changed title]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/55b3c66a0d441cd37154ae95e44d0b82ccfd580e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/75d8c8851a4da0190c2480e84315b5fd3d0356c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f36d8c8651506aea5f09899f5356ece5d1384f50", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8ace2e304c5dd8a7328db9cd2b8a4b1b98d83ec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50343.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50343.json index 54768cb65d1..510b370d70e 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50343.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50343.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50343", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:33.923", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:03:21.887", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrapidio: fix possible name leaks when rio_add_device() fails\n\nPatch series \"rapidio: fix three possible memory leaks\".\n\nThis patchset fixes three name leaks in error handling.\n - patch #1 fixes two name leaks while rio_add_device() fails.\n - patch #2 fixes a name leak while rio_register_mport() fails.\n\n\nThis patch (of 2):\n\nIf rio_add_device() returns error, the name allocated by dev_set_name()\nneed be freed. It should use put_device() to give up the reference in the\nerror path, so that the name can be freed in kobject_cleanup(), and the\n'rdev' can be freed in rio_release_dev()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.30", + "versionEndExcluding": "4.9.337", + "matchCriteriaId": "103515FB-333E-4369-A6A7-F22A5C600BD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3b4676f274a6b5d001176f15d0542100bbf4b59a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/80fad2e53eaed2b3a2ff596575f65669e13ceda5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/85fbf58b15c09d3a6a03098c1e42ebfe9002f39d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/88fa351b20ca300693a206ccd3c4b0e0647944d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c413f65011ff8caffabcde0e1c3ceede48a48d6f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c482cb0deb57924335103fe592c379a076d867f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec3f04f74f50d0b6bac04d795c93c2b852753a7a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9574cd48679926e2a569e1957a5a1bcc8a719ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50344.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50344.json index af2e0b25b9e..0f9339d35cc 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50344.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50344.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50344", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.070", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:03:27.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,172 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix null-ptr-deref in ext4_write_info\n\nI caught a null-ptr-deref bug as follows:\n==================================================================\nKASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]\nCPU: 1 PID: 1589 Comm: umount Not tainted 5.10.0-02219-dirty #339\nRIP: 0010:ext4_write_info+0x53/0x1b0\n[...]\nCall Trace:\n dquot_writeback_dquots+0x341/0x9a0\n ext4_sync_fs+0x19e/0x800\n __sync_filesystem+0x83/0x100\n sync_filesystem+0x89/0xf0\n generic_shutdown_super+0x79/0x3e0\n kill_block_super+0xa1/0x110\n deactivate_locked_super+0xac/0x130\n deactivate_super+0xb6/0xd0\n cleanup_mnt+0x289/0x400\n __cleanup_mnt+0x16/0x20\n task_work_run+0x11c/0x1c0\n exit_to_user_mode_prepare+0x203/0x210\n syscall_exit_to_user_mode+0x5b/0x3a0\n do_syscall_64+0x59/0x70\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n ==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\nexit_to_user_mode_prepare\n task_work_run\n __cleanup_mnt\n cleanup_mnt\n deactivate_super\n deactivate_locked_super\n kill_block_super\n generic_shutdown_super\n shrink_dcache_for_umount\n dentry = sb->s_root\n sb->s_root = NULL <--- Here set NULL\n sync_filesystem\n __sync_filesystem\n sb->s_op->sync_fs > ext4_sync_fs\n dquot_writeback_dquots\n sb->dq_op->write_info > ext4_write_info\n ext4_journal_start(d_inode(sb->s_root), EXT4_HT_QUOTA, 2)\n d_inode(sb->s_root)\n s_root->d_inode <--- Null pointer dereference\n\nTo solve this problem, we use ext4_journal_start_sb directly\nto avoid s_root being used." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.331", + "matchCriteriaId": "F5B7C986-E6CA-41ED-A833-EA73FCF421D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3638aa1c7d87c0ca0aef23cf58cae2c48e7daca4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a657319cfabd6199fd0b7b65bbebf6ded7a11c1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/533c60a0b97cee5daab376933f486207e6680fb7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/947264e00c46de19a016fd81218118c708fed2f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bb420e8afc854d2a1caaa23a0c129839acfb7888", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc451578446afd03c0c21913993c08898a691435", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f34ab95162763cd7352f46df169296eec28b688d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4b5ff0b794aa94afac7269c494550ca2f66511b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9c1f248607d5546075d3f731e7607d5571f2b60", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50346.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50346.json index 1ae2bd3764a..e39d3e2b901 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50346.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50346.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50346", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.330", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:19.057", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,172 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: init quota for 'old.inode' in 'ext4_rename'\n\nSyzbot found the following issue:\next4_parse_param: s_want_extra_isize=128\next4_inode_info_init: s_want_extra_isize=32\next4_rename: old.inode=ffff88823869a2c8 old.dir=ffff888238699828 new.inode=ffff88823869d7e8 new.dir=ffff888238699828\n__ext4_mark_inode_dirty: inode=ffff888238699828 ea_isize=32 want_ea_size=128\n__ext4_mark_inode_dirty: inode=ffff88823869a2c8 ea_isize=32 want_ea_size=128\next4_xattr_block_set: inode=ffff88823869a2c8\n------------[ cut here ]------------\nWARNING: CPU: 13 PID: 2234 at fs/ext4/xattr.c:2070 ext4_xattr_block_set.cold+0x22/0x980\nModules linked in:\nRIP: 0010:ext4_xattr_block_set.cold+0x22/0x980\nRSP: 0018:ffff888227d3f3b0 EFLAGS: 00010202\nRAX: 0000000000000001 RBX: ffff88823007a000 RCX: 0000000000000000\nRDX: 0000000000000a03 RSI: 0000000000000040 RDI: ffff888230078178\nRBP: 0000000000000000 R08: 000000000000002c R09: ffffed1075c7df8e\nR10: ffff8883ae3efc6b R11: ffffed1075c7df8d R12: 0000000000000000\nR13: ffff88823869a2c8 R14: ffff8881012e0460 R15: dffffc0000000000\nFS: 00007f350ac1f740(0000) GS:ffff8883ae200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f350a6ed6a0 CR3: 0000000237456000 CR4: 00000000000006e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n ? ext4_xattr_set_entry+0x3b7/0x2320\n ? ext4_xattr_block_set+0x0/0x2020\n ? ext4_xattr_set_entry+0x0/0x2320\n ? ext4_xattr_check_entries+0x77/0x310\n ? ext4_xattr_ibody_set+0x23b/0x340\n ext4_xattr_move_to_block+0x594/0x720\n ext4_expand_extra_isize_ea+0x59a/0x10f0\n __ext4_expand_extra_isize+0x278/0x3f0\n __ext4_mark_inode_dirty.cold+0x347/0x410\n ext4_rename+0xed3/0x174f\n vfs_rename+0x13a7/0x2510\n do_renameat2+0x55d/0x920\n __x64_sys_rename+0x7d/0xb0\n do_syscall_64+0x3b/0xa0\n entry_SYSCALL_64_after_hwframe+0x72/0xdc\n\nAs 'ext4_rename' will modify 'old.inode' ctime and mark inode dirty,\nwhich may trigger expand 'extra_isize' and allocate block. If inode\ndidn't init quota will lead to warning. To solve above issue, init\n'old.inode' firstly in 'ext4_rename'." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.337", + "matchCriteriaId": "9FFBA9B5-26DC-4802-9A86-F7B886954E4A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.87", + "matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.18", + "matchCriteriaId": "08D38C5F-9644-4549-BBA6-F0860F024D14" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.4", + "matchCriteriaId": "BC4189D9-5478-4E88-A78D-9C1DE29B217C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/13271fbbe85d73a7c47058f56a52f2a7f00d6e39", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/135ba9146f4d38abed48a540ef8a8770ff0bd34f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/33fd7031d634f3b46e59f61adfbb0ea9fe514fef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67f6d5a4043f3db0c6bb0e14a0d97a7be8bfb8b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7dfb8259f66faafa68d23a261b284d2c2c67649b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/84a2f2ed49d6a4d92b354219077434c57d334620", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/def7a39091e60e1c4a2f623629082a00092602be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f263e349bacc2f303526dcfa61c4bc50132418b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fae381a3d79bb94aa2eb752170d47458d778b797", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50347.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50347.json index d01db54d97b..df0d65135cd 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50347.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50347.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50347", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.470", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:23.473", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value, the memory\nthat allocated in mmc_alloc_host() will be leaked and it will lead a kernel\ncrash because of deleting not added device in the remove path.\n\nSo fix this by checking the return value and calling mmc_free_host() in the\nerror path, besides, led_classdev_unregister() and pm_runtime_disable() also\nneed be called." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.16", + "versionEndExcluding": "4.9.337", + "matchCriteriaId": "5522724B-B972-4CDA-9782-6ACEC2A639E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1491667d5450778a265eddddd294219acfd648cb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7fa922c7a3dd623fd59f1af50e8896fd9ca7f654", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89303ddbb502c3bc8edbf864f9f85500c8fe07e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/937112e991ed25d1727d878734adcbef3b900274", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a522e26a20a43dcfbef9ee9f71ed803290e852b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7ad7278be401b09c9f9a9f522cf4c449c7fd489", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/df683201c7ffbd21a806a7cad657b661c5ebfb6f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e598c9683fe1cf97c2b11b800cc3cee072108220", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fc38a5a10e9e5a75eb9189854abeb8405b214cc9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50348.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50348.json index 8c2f97066ea..0364b625cc8 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50348.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50348.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50348", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.590", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:30.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,31 +11,131 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix a memory leak in an error handling path\n\nIf this memdup_user() call fails, the memory allocated in a previous call\na few lines above should be freed. Otherwise it leaks." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "C86E91CD-1AC4-4C91-8097-B6DD58212EE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/733dd17158f96aaa25408dc39bbb2738fda9300e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/acc393aecda05bf64ed13b732931462e07a1bf08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aed8816305575b38dcc77feb6f1bc1d0ed32f5b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc3bca2110ac85cd964da997ef83d84cab0d49fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e060c4b9f33c1fca74df26d57a98e784295327e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd1ef88049de09bc70d60b549992524cfc0e66ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50349.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50349.json index 389b277118f..128d4ac2162 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50349.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50349.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50349", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.703", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:36.913", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: tifm: fix possible memory leak in tifm_7xx1_switch_media()\n\nIf device_register() returns error in tifm_7xx1_switch_media(),\nname of kobject which is allocated in dev_set_name() called in device_add()\nis leaked.\n\nNever directly free @dev after calling device_register(), even\nif it returned an error! Always use put_device() to give up the\nreference initialized." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.22", + "versionEndExcluding": "4.9.337", + "matchCriteriaId": "50B4031E-0292-4576-9B48-9EDFB1CBDF88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1695b1adcc3a7d985cd22fa3b55761edf3fab50d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2bbb222a54ff501f77ce593d21b76b79c905045e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/35abbc8406cc39e72d3ce85f6e869555afe50d54", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/57c857353d5020bdec8284d9c0fee447484fe5e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/848c45964ded537107e010aaf353aa30a0855387", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d861b7d41b17942b337d4b87a70de7cd1dc44d4e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee2715faf7e7153f5142ed09aacfa89a64d45dcb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef843ee20576039126d34d6eb5f45d14c3e6ce18", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd2c930cf6a5b9176382c15f9acb1996e76e25ad", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50350.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50350.json index d96d1503a47..e01082a460e 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50350.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50350.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50350", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.833", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:43.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix a race condition between login_work and the login thread\n\nIn case a malicious initiator sends some random data immediately after a\nlogin PDU; the iscsi_target_sk_data_ready() callback will schedule the\nlogin_work and, at the same time, the negotiation may end without clearing\nthe LOGIN_FLAGS_INITIAL_PDU flag (because no additional PDU exchanges are\nrequired to complete the login).\n\nThe login has been completed but the login_work function will find the\nLOGIN_FLAGS_INITIAL_PDU flag set and will never stop from rescheduling\nitself; at this point, if the initiator drops the connection, the\niscsit_conn structure will be freed, login_work will dereference a released\nsocket structure and the kernel crashes.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000230\nPF: supervisor write access in kernel mode\nPF: error_code(0x0002) - not-present page\nWorkqueue: events iscsi_target_do_login_rx [iscsi_target_mod]\nRIP: 0010:_raw_read_lock_bh+0x15/0x30\nCall trace:\n iscsi_target_do_login_rx+0x75/0x3f0 [iscsi_target_mod]\n process_one_work+0x1e8/0x3c0\n\nFix this bug by forcing login_work to stop after the login has been\ncompleted and the socket callbacks have been restored.\n\nAdd a comment to clearify the return values of iscsi_target_do_login()" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.12", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "85836EA7-7E00-413E-838E-F4D67567E7F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1533b8b3058db618409f41554ebe768c2e3acfae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ecdca49ca49d4770639d81503c873b6d25887c4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fec1b2fa62c162d03f5dcd7b03e3c89d3116d49f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50351.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50351.json index 0ca9b3c3f99..4da64c35fb3 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50351.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50351.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50351", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:34.980", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:48.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,94 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix xid leak in cifs_create()\n\nIf the cifs already shutdown, we should free the xid before return,\notherwise, the xid will be leaked." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.76", + "matchCriteriaId": "59270B6F-5680-4DA5-BC00-6D8E42EFFEFC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.6", + "matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/593d877c39aa9f3fe1a4b5b022492886d7d700ec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/92aa09c86ef297976a3c27c6574c0839418dc2c4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fee0fb1f15054bb6a0ede452acb42da5bef4d587", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50352.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50352.json index 89be0ebd9b9..6d7d9890c10 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50352.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50352.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50352", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:35.080", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:54.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,164 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns: fix possible memory leak in hnae_ae_register()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff00c01aba2100 (size 128):\n comm \"systemd-udevd\", pid 1259, jiffies 4294903284 (age 294.152s)\n hex dump (first 32 bytes):\n 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<0000000034783f26>] slab_post_alloc_hook+0xa0/0x3e0\n [<00000000748188f2>] __kmem_cache_alloc_node+0x164/0x2b0\n [<00000000ab0743e8>] __kmalloc_node_track_caller+0x6c/0x390\n [<000000006c0ffb13>] kvasprintf+0x8c/0x118\n [<00000000fa27bfe1>] kvasprintf_const+0x60/0xc8\n [<0000000083e10ed7>] kobject_set_name_vargs+0x3c/0xc0\n [<000000000b87affc>] dev_set_name+0x7c/0xa0\n [<000000003fd8fe26>] hnae_ae_register+0xcc/0x190 [hnae]\n [<00000000fe97edc9>] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf]\n [<00000000c36ff1eb>] hns_dsaf_probe+0x548/0x748 [hns_dsaf]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "4.9.332", + "matchCriteriaId": "1B134647-F377-440F-AF99-883E53BFB15E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.298", + "matchCriteriaId": "7140B9A2-EB63-497C-96B1-68A96CD99051" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.264", + "matchCriteriaId": "8AE23A9F-BF98-4055-AA49-02118B96226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.221", + "matchCriteriaId": "DF527781-6E98-4DBF-B668-377AA673CDCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.152", + "matchCriteriaId": "AFE2A429-A1A8-4B68-8F1D-A1595AB6A4F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.76", + "matchCriteriaId": "918A4953-6F82-40F5-B7A9-9836905139C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.6", + "matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02dc0db19d944b4a90941db505ecf1aaec714be4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2974f3b330ef25f5d34a4948d04290c2cd7802cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3b78453cca046d3b03853f0d077ad3ad130db886", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7ae1345f6ad715acbcdc9e1ac28153684fd498bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91f8f5342bee726ed5692583d58f69e7cc9ae60e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3c148955c22fe1d94d7a2096005679c1f22eddf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dfc0337c6dceb6449403b33ecb141f4a1458a1e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff2f5ec5d009844ec28f171123f9e58750cef4bf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53304.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53304.json index 23aedcdb2b3..148b7bd5122 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53304.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53304.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53304", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:35.240", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:58:59.480", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,35 +11,166 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: fix overlap expiration walk\n\nThe lazy gc on insert that should remove timed-out entries fails to release\nthe other half of the interval, if any.\n\nCan be reproduced with tests/shell/testcases/sets/0044interval_overlap_0\nin nftables.git and kmemleak enabled kernel.\n\nSecond bug is the use of rbe_prev vs. prev pointer.\nIf rbe_prev() returns NULL after at least one iteration, rbe_prev points\nto element that is not an end interval, hence it should not be removed.\n\nLastly, check the genmask of the end interval if this is active in the\ncurrent generation." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.166", + "versionEndExcluding": "5.10.190", + "matchCriteriaId": "D120E24C-92C4-42C2-BDBC-2DA33FB84683" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.91", + "versionEndExcluding": "5.15.124", + "matchCriteriaId": "7C579EE5-29AE-450E-A284-D7401ABCD1D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.9", + "versionEndExcluding": "6.1.43", + "matchCriteriaId": "BBB03740-07A5-4A80-A087-A4A2B6127646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.1", + "versionEndExcluding": "6.4.8", + "matchCriteriaId": "ED5C51C1-C86A-404D-A81F-10761E602032" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*", + "matchCriteriaId": "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C64BDD9D-C663-4E75-AE06-356EDC392B82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*", + "matchCriteriaId": "26544390-88E4-41CA-98BF-7BB1E9D4E243" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53305.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53305.json index 4f6f0a6bfe9..5e6b05305c4 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53305.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53305.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53305", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.260", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:59:05.670", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix use-after-free\n\nFix potential use-after-free in l2cap_le_command_rej." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.324", + "matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.293", + "matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.255", + "matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.192", + "matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.128", + "matchCriteriaId": "1415629F-F97B-4880-BA1E-AF3DBB8EF305" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.47", + "matchCriteriaId": "2EEA01B0-0151-4E0F-B140-1A441EEDD717" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.12", + "matchCriteriaId": "CF8ECF64-40AE-49AB-8315-4D83F9F56ECF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/149daab45922ab1ac7f0cbeacab7251a46bf5e63", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1a40c56e8bff3e424724d78a9a6b3272dd8a371d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/255be68150291440657b2cdb09420b69441af3d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/548a6b64b3c0688f01119a6fcccceb41f8c984e4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e76bab1b7afa580cd76362540fc37551ada4359b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f752a0b334bb95fe9b42ecb511e0864e2768046f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe49aa73cca6608714477b74bfc6874b9db979df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53306.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53306.json index c4f9405f751..8c6af91776c 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53306.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53306.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53306", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.370", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:46:08.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,100 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsdax: force clear dirty mark if CoW\n\nXFS allows CoW on non-shared extents to combat fragmentation[1]. The old\nnon-shared extent could be mwrited before, its dax entry is marked dirty. \n\nThis results in a WARNing:\n\n[ 28.512349] ------------[ cut here ]------------\n[ 28.512622] WARNING: CPU: 2 PID: 5255 at fs/dax.c:390 dax_insert_entry+0x342/0x390\n[ 28.513050] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace fscache netfs nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables\n[ 28.515462] CPU: 2 PID: 5255 Comm: fsstress Kdump: loaded Not tainted 6.3.0-rc1-00001-g85e1481e19c1-dirty #117\n[ 28.515902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.1-1-1 04/01/2014\n[ 28.516307] RIP: 0010:dax_insert_entry+0x342/0x390\n[ 28.516536] Code: 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8b 45 20 48 83 c0 01 e9 e2 fe ff ff 48 8b 45 20 48 83 c0 01 e9 cd fe ff ff <0f> 0b e9 53 ff ff ff 48 8b 7c 24 08 31 f6 e8 1b 61 a1 00 eb 8c 48\n[ 28.517417] RSP: 0000:ffffc9000845fb18 EFLAGS: 00010086\n[ 28.517721] RAX: 0000000000000053 RBX: 0000000000000155 RCX: 000000000018824b\n[ 28.518113] RDX: 0000000000000000 RSI: ffffffff827525a6 RDI: 00000000ffffffff\n[ 28.518515] RBP: ffffea00062092c0 R08: 0000000000000000 R09: ffffc9000845f9c8\n[ 28.518905] R10: 0000000000000003 R11: ffffffff82ddb7e8 R12: 0000000000000155\n[ 28.519301] R13: 0000000000000000 R14: 000000000018824b R15: ffff88810cfa76b8\n[ 28.519703] FS: 00007f14a0c94740(0000) GS:ffff88817bd00000(0000) knlGS:0000000000000000\n[ 28.520148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 28.520472] CR2: 00007f14a0c8d000 CR3: 000000010321c004 CR4: 0000000000770ee0\n[ 28.520863] PKRU: 55555554\n[ 28.521043] Call Trace:\n[ 28.521219] \n[ 28.521368] dax_fault_iter+0x196/0x390\n[ 28.521595] dax_iomap_pte_fault+0x19b/0x3d0\n[ 28.521852] __xfs_filemap_fault+0x234/0x2b0\n[ 28.522116] __do_fault+0x30/0x130\n[ 28.522334] do_fault+0x193/0x340\n[ 28.522586] __handle_mm_fault+0x2d3/0x690\n[ 28.522975] handle_mm_fault+0xe6/0x2c0\n[ 28.523259] do_user_addr_fault+0x1bc/0x6f0\n[ 28.523521] exc_page_fault+0x60/0x140\n[ 28.523763] asm_exc_page_fault+0x22/0x30\n[ 28.524001] RIP: 0033:0x7f14a0b589ca\n[ 28.524225] Code: c5 fe 7f 07 c5 fe 7f 47 20 c5 fe 7f 47 40 c5 fe 7f 47 60 c5 f8 77 c3 66 0f 1f 84 00 00 00 00 00 40 0f b6 c6 48 89 d1 48 89 fa aa 48 89 d0 c5 f8 77 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90\n[ 28.525198] RSP: 002b:00007fff1dea1c98 EFLAGS: 00010202\n[ 28.525505] RAX: 000000000000001e RBX: 000000000014a000 RCX: 0000000000006046\n[ 28.525895] RDX: 00007f14a0c82000 RSI: 000000000000001e RDI: 00007f14a0c8d000\n[ 28.526290] RBP: 000000000000006f R08: 0000000000000004 R09: 000000000014a000\n[ 28.526681] R10: 0000000000000008 R11: 0000000000000246 R12: 028f5c28f5c28f5c\n[ 28.527067] R13: 8f5c28f5c28f5c29 R14: 0000000000011046 R15: 00007f14a0c946c0\n[ 28.527449] \n[ 28.527600] ---[ end trace 0000000000000000 ]---\n\n\nTo be able to delete this entry, clear its dirty mark before\ninvalidate_inode_pages2_range().\n\n[1] https://lore.kernel.org/linux-xfs/20230321151339.GA11376@frogsfrogsfrogs/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.11", + "matchCriteriaId": "93C03C9A-798F-4CD5-912F-A436BFA0CC7E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*", + "matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*", + "matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*", + "matchCriteriaId": "DC271202-7570-4505-89A4-D602D47BFD00" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D413BB6D-4F74-4C7D-9163-47786619EF53" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/f76b3a32879de215ced3f8c754c4077b0c2f79e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fac05f800abb63dc4d7cc48fe7edf16e0520dc1f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53307.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53307.json index 39ef2211168..143a4f852c8 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53307.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53307.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53307", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.477", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:46:18.413", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,159 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails\n\nIf getting an ID or setting up a work queue in rbd_dev_create() fails,\nuse-after-free on rbd_dev->rbd_client, rbd_dev->spec and rbd_dev->opts\nis triggered in do_rbd_add(). The root cause is that the ownership of\nthese structures is transfered to rbd_dev prematurely and they all end\nup getting freed when rbd_dev_create() calls rbd_dev_free() prior to\nreturning to do_rbd_add().\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE, an\nincomplete patch submitted by Natalia Petrova ." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "4.14.308", + "matchCriteriaId": "7292C460-000B-4120-B05D-5672751A14E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.276", + "matchCriteriaId": "C902FC54-DDBD-4DA6-BFEF-26889A267464" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.235", + "matchCriteriaId": "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.173", + "matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.99", + "matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.16", + "matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.3", + "matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/71da2a151ed1adb0aea4252b16d81b53012e7afd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9787b328c42c13c4f31e7d5042c4e877e9344068", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a73783e4e0c4d1507794da211eeca75498544dff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae16346078b1189aee934afd872d9f3d0a682c33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc8c0dd2984503ed09efa37bcafcef3d3da104e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3cbb4d60764295992c95344f2d779439e8b34ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f7c4d9b133c7a04ca619355574e96b6abf209fba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/faa7b683e436664fff5648426950718277831348", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53308.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53308.json index e2c427eb819..8157bbd6d32 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53308.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53308.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53308", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.597", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:46:25.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,188 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: Better handle pm_runtime_get() failing in .remove()\n\nIn the (unlikely) event that pm_runtime_get() (disguised as\npm_runtime_resume_and_get()) fails, the remove callback returned an\nerror early. The problem with this is that the driver core ignores the\nerror value and continues removing the device. This results in a\nresource leak. Worse the devm allocated resources are freed and so if a\ncallback of the driver is called later the register mapping is already\ngone which probably results in a crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9.206", + "versionEndExcluding": "4.10", + "matchCriteriaId": "CB0798B1-CA64-4529-A5AC-7146F59643A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.158", + "versionEndExcluding": "4.14.316", + "matchCriteriaId": "5BCD50CB-C2BD-4613-A0B3-BE4E8A70606B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.88", + "versionEndExcluding": "4.19.284", + "matchCriteriaId": "878D0CAD-F0B9-48E6-AC29-67336F3607A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3.15", + "versionEndExcluding": "5.4", + "matchCriteriaId": "DEDD31E3-90F8-4A45-89A5-9B27A3B5FC07" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.1", + "versionEndExcluding": "5.4.244", + "matchCriteriaId": "0AFC823D-6913-4035-B927-27DB60AEE8F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.181", + "matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.113", + "matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.30", + "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.4", + "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*", + "matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", + "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*", + "matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/83996d317b1deddc85006376082e8886f55aa709", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9407454a9b18bbeff216e8ecde87ffb2171e9ccf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b22b514209ff8c4287abb853399890ab97e1b5ca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be85912c36ddca3e8b2eef1b5392cd8db6bdb730", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c1bc2870f14e526a01897e14c747a0a0ca125231", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d52a0cca591e899d4e5c8ab19e067b4c6b7d104f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e02d8d5b1602689b98d9b91550a11b9b57baedbe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f816b9829b19394d318e01953aa3b2721bca040d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53309.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53309.json index 678bb2c287d..d8018914288 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53309.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53309.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53309", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.720", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:46:35.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: Fix integer overflow in radeon_cs_parser_init\n\nThe type of size is unsigned, if size is 0x40000000, there will be an\ninteger overflow, size will be zero after size *= sizeof(uint32_t),\nwill cause uninitialized memory to be referenced later" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.324", + "matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.293", + "matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.255", + "matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.192", + "matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.123", + "matchCriteriaId": "372C0BAA-44F5-4829-A7B0-E4924B682DA4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.42", + "matchCriteriaId": "6E769E6A-7EEF-4FA8-BF41-6CA1CE537361" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.7", + "matchCriteriaId": "60A1A1ED-EA6C-42F6-80D3-3316DC7608C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/25e634d7f44eb13113139040e5366bebe48c882f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e1be420b86980c25a75325e90dfc3fc73126f61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0d7dbc6b7a61a56028118c00af2c8319d44a682", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfa9148bafb2d3292b65de1bac79dcca65be2643", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d05ba46134d07e889de7d23cf8503574a22ede09", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e6825b30d37fe89ceb87f926d33d4fad321a331e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f828b681d0cd566f86351c0b913e6cb6ed8c7b9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53310.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53310.json index b38d4f300a8..d5dcb93d273 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53310.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53310.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53310", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.847", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:46:56.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,104 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: axp288_fuel_gauge: Fix external_power_changed race\n\nfuel_gauge_external_power_changed() dereferences info->bat,\nwhich gets sets in axp288_fuel_gauge_probe() like this:\n\n info->bat = devm_power_supply_register(dev, &fuel_gauge_desc, &psy_cfg);\n\nAs soon as devm_power_supply_register() has called device_add()\nthe external_power_changed callback can get called. So there is a window\nwhere fuel_gauge_external_power_changed() may get called while\ninfo->bat has not been set yet leading to a NULL pointer dereference.\n\nFixing this is easy. The external_power_changed callback gets passed\nthe power_supply which will eventually get stored in info->bat,\nso fuel_gauge_external_power_changed() can simply directly use\nthe passed in psy argument which is always valid." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.1.31", + "matchCriteriaId": "96ED2287-2842-4A17-B79A-9F1F111B827C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.5", + "matchCriteriaId": "34DD94CA-4DA1-41C3-9A9B-92ACD7F4E240" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", + "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*", + "matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*", + "matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0456b912121e45b3ef54abe3135e5dcb541f956c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a636c6ba9ce898207f283271cb28511206ab739b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8319774d6f1567d6e7d03653174ab0c82c5c66d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53311.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53311.json index 49149ee6ace..de592fcb734 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53311.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53311.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53311", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:36.967", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:47:05.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,184 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput\n\nDuring unmount process of nilfs2, nothing holds nilfs_root structure after\nnilfs2 detaches its writer in nilfs_detach_log_writer(). Previously,\nnilfs_evict_inode() could cause use-after-free read for nilfs_root if\ninodes are left in \"garbage_list\" and released by nilfs_dispose_list at\nthe end of nilfs_detach_log_writer(), and this bug was fixed by commit\n9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root in\nnilfs_evict_inode()\").\n\nHowever, it turned out that there is another possibility of UAF in the\ncall path where mark_inode_dirty_sync() is called from iput():\n\nnilfs_detach_log_writer()\n nilfs_dispose_list()\n iput()\n mark_inode_dirty_sync()\n __mark_inode_dirty()\n nilfs_dirty_inode()\n __nilfs_mark_inode_dirty()\n nilfs_load_inode_block() --> causes UAF of nilfs_root struct\n\nThis can happen after commit 0ae45f63d4ef (\"vfs: add support for a\nlazytime mount option\"), which changed iput() to call\nmark_inode_dirty_sync() on its final reference if i_state has I_DIRTY_TIME\nflag and i_nlink is non-zero.\n\nThis issue appears after commit 28a65b49eb53 (\"nilfs2: do not write dirty\ndata after degenerating to read-only\") when using the syzbot reproducer,\nbut the issue has potentially existed before.\n\nFix this issue by adding a \"purging flag\" to the nilfs structure, setting\nthat flag while disposing the \"garbage_list\" and checking it in\n__nilfs_mark_inode_dirty().\n\nUnlike commit 9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root\nin nilfs_evict_inode()\"), this patch does not rely on ns_writer to\ndetermine whether to skip operations, so as not to break recovery on\nmount. The nilfs_salvage_orphan_logs routine dirties the buffer of\nsalvaged data before attaching the log writer, so changing\n__nilfs_mark_inode_dirty() to skip the operation when ns_writer is NULL\nwill cause recovery write to fail. The purpose of using the cleanup-only\nflag is to allow for narrowing of such conditions." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0", + "versionEndExcluding": "4.14.323", + "matchCriteriaId": "52A09F09-8B97-4E2D-B5B9-E3E7EB2F0241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.292", + "matchCriteriaId": "684F195A-516D-43E8-B1F2-9C808AD362DA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.254", + "matchCriteriaId": "25D01197-E40D-49C5-AA15-4955E10B7AE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.191", + "matchCriteriaId": "A7631AF2-4758-4770-9B7D-A68CACF660D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.127", + "matchCriteriaId": "945AF8F7-5328-4A14-B072-A5740192C9E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.46", + "matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.11", + "matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*", + "matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/11afd67f1b3c28eb216e50a3ca8dbcb69bb71793", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3645510cf926e6af2f4d44899370d7e5331c93bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/37207240872456fbab44a110bde6640445233963", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5828d5f5dc877dcfdd7b23102e978e2ecfd86d82", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7532ff6edbf5242376b24a95a2fefb59bb653e5a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3c3b4cbf9b8554120fb230e6516e980c6277487", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d2c539c216cce74837a9cf5804eb205939b82227", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8654743a0e6909dc634cbfad6db6816f10f3399", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53312.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53312.json index f8fd5dc0bcc..667da178e5c 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53312.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53312.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53312", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.117", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:47:12.323", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix net_dev_start_xmit trace event vs skb_transport_offset()\n\nAfter blamed commit, we must be more careful about using\nskb_transport_offset(), as reminded us by syzbot:\n\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 skb_transport_offset include/linux/skbuff.h:2977 [inline]\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nModules linked in:\nCPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 6.1.30-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023\nWorkqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet\nRIP: 0010:skb_transport_header include/linux/skbuff.h:2868 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:2977 [inline]\nRIP: 0010:perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nCode: 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 4e 04 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc e8 56 22 01 fd <0f> 0b e9 f6 fc ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 86 f9 ff\nRSP: 0018:ffffc900002bf700 EFLAGS: 00010293\nRAX: ffffffff8485d8ca RBX: 000000000000ffff RCX: ffff888100914280\nRDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff\nRBP: ffffc900002bf818 R08: ffffffff8485d5b6 R09: fffffbfff0f8fb5e\nR10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110217d8f67\nR13: ffff88810bec7b3a R14: dffffc0000000000 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f96cf6d52f0 CR3: 000000012224c000 CR4: 0000000000350ef0\nCall Trace:\n\n[] trace_net_dev_start_xmit include/trace/events/net.h:14 [inline]\n[] xmit_one net/core/dev.c:3643 [inline]\n[] dev_hard_start_xmit+0x705/0x980 net/core/dev.c:3660\n[] __dev_queue_xmit+0x16b2/0x3370 net/core/dev.c:4324\n[] dev_queue_xmit include/linux/netdevice.h:3030 [inline]\n[] batadv_send_skb_packet+0x3f3/0x680 net/batman-adv/send.c:108\n[] batadv_send_broadcast_skb+0x24/0x30 net/batman-adv/send.c:127\n[] batadv_iv_ogm_send_to_if net/batman-adv/bat_iv_ogm.c:393 [inline]\n[] batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:421 [inline]\n[] batadv_iv_send_outstanding_bat_ogm_packet+0x69a/0x840 net/batman-adv/bat_iv_ogm.c:1701\n[] process_one_work+0x8ac/0x1170 kernel/workqueue.c:2289\n[] worker_thread+0xaa8/0x12d0 kernel/workqueue.c:2436" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.1.39", + "matchCriteriaId": "84700E9E-E09F-4B40-8370-141BD7FF69FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.4", + "matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/58f9e88eb247263c74383b4ee8858abac15cdbe0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ced61418f46993d571385812bafed3a7d4ab6918", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f88fcb1d7d961b4b402d675109726f94db87571c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53313.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53313.json index 3150322e359..03c7fc12e53 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53313.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53313.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53313", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.233", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:47:30.267", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix wrong setting of max_corr_read_errors\n\nThere is no input check when echo md/max_read_errors and overflow might\noccur. Add check of input number." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.33", + "versionEndExcluding": "4.14.322", + "matchCriteriaId": "5ED9B08F-CA6D-4544-B95A-2B1CA26C9D8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.291", + "matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.251", + "matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.188", + "matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.39", + "matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.13", + "matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.4.4", + "matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/025fde32fb957a5c271711bc66841f817ff5f299", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/05d10428e8dffed0bac2502f34151729fc189cd3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/31c805a44b7569ca1017a4714385182d98bba212", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c76920e547d4b931bed758bad83fd658dd88b4e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/74050a3fdd4aecfd2cbf74d3c145812ab2744375", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aef6e98eb772594edd4399625e4e1bbe45971fa1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1d8f38310bce3282374983b229d94edbaf1e570", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e83cb411aa1c6c9617db9329897f4506ba9e9b9d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8b20a405428803bd9881881d8242c9d72c6b2b2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53314.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53314.json index ab3f7309e3e..d2fc744c0c8 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53314.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53314.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53314", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.360", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:24:11.990", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,159 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n\nDo not assing the Linux device to struct fb_info.dev. The call to\nregister_framebuffer() initializes the field to the fbdev device.\nDrivers should not override its value.\n\nFixes a bug where the driver incorrectly decreases the hardware\ndevice's reference counter and leaks the fbdev device.\n\nv2:\n\t* add Fixes tag (Dan)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.32", + "versionEndExcluding": "4.14.326", + "matchCriteriaId": "8CCD729D-2240-4059-B0B9-CD3195C6094C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.295", + "matchCriteriaId": "D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.257", + "matchCriteriaId": "834BD148-28EC-43A4-A4F5-458124A1E39F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.195", + "matchCriteriaId": "C385B650-53DB-4BFB-83D1-1D8FADF653EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.132", + "matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.54", + "matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.5.4", + "matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0517fc5a71333b315164736bbd32608894fbb872", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1c6ff2a7c593db851f23e31ace2baf557ea9d0ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/309c27162afea79b3c7f8747bb650faf6923b639", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4aade6c9100a3537788b6a9c7ac481037d19efdf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ffa40ff64aa43a9a28fcf209b48d86a3e0f4972", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f83c1b13f8154e0284448912756d0a351a1a602a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f90a0e5265b60cdd3c77990e8105f79aa2fac994", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ffdf2b020db717853167391a3a8d912e13428fa6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53315.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53315.json index c84145be795..14a55bb3a34 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53315.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53315.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53315", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.480", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:23:45.870", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,27 +11,117 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Fix SKB corruption in REO destination ring\n\nWhile running traffics for a long time, randomly an RX descriptor\nfilled with value \"0\" from REO destination ring is received.\nThis descriptor which is invalid causes the wrong SKB (SKB stored in\nthe IDR lookup with buffer id \"0\") to be fetched which in turn\ncauses SKB memory corruption issue and the same leads to crash\nafter some time.\n\nChanged the start id for idr allocation to \"1\" and the buffer id \"0\"\nis reserved for error validation. Introduced Sanity check to validate\nthe descriptor, before processing the SKB.\n\nCrash Signature :\n\nUnable to handle kernel paging request at virtual address 3f004900\nPC points to \"b15_dma_inv_range+0x30/0x50\"\nLR points to \"dma_cache_maint_page+0x8c/0x128\".\nThe Backtrace obtained is as follows:\n[<8031716c>] (b15_dma_inv_range) from [<80313a4c>] (dma_cache_maint_page+0x8c/0x128)\n[<80313a4c>] (dma_cache_maint_page) from [<80313b90>] (__dma_page_dev_to_cpu+0x28/0xcc)\n[<80313b90>] (__dma_page_dev_to_cpu) from [<7fb5dd68>] (ath11k_dp_process_rx+0x1e8/0x4a4 [ath11k])\n[<7fb5dd68>] (ath11k_dp_process_rx [ath11k]) from [<7fb53c20>] (ath11k_dp_service_srng+0xb0/0x2ac [ath11k])\n[<7fb53c20>] (ath11k_dp_service_srng [ath11k]) from [<7f67bba4>] (ath11k_pci_ext_grp_napi_poll+0x1c/0x78 [ath11k_pci])\n[<7f67bba4>] (ath11k_pci_ext_grp_napi_poll [ath11k_pci]) from [<807d5cf4>] (__napi_poll+0x28/0xb8)\n[<807d5cf4>] (__napi_poll) from [<807d5f28>] (net_rx_action+0xf0/0x280)\n[<807d5f28>] (net_rx_action) from [<80302148>] (__do_softirq+0xd0/0x280)\n[<80302148>] (__do_softirq) from [<80320408>] (irq_exit+0x74/0xd4)\n[<80320408>] (irq_exit) from [<803638a4>] (__handle_domain_irq+0x90/0xb4)\n[<803638a4>] (__handle_domain_irq) from [<805bedec>] (gic_handle_irq+0x58/0x90)\n[<805bedec>] (gic_handle_irq) from [<80301a78>] (__irq_svc+0x58/0x8c)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.10.181", + "matchCriteriaId": "F1F238F8-F08D-489D-9C86-1B74CBB71CFE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.113", + "matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.30", + "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.4", + "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/068fd06148fbf0af95bb08dc77cff34ee679fdbc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3d3f8fe01a01d94a17fe1ae0d2e894049a972717", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67459491f78146bcf7d93596e5b709d063dff5d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/866921dc06b94df91acfcf9359b57da943ed99b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9fff67d2d7ca6fa8066132003a3deef654c55b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53316.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53316.json index c01fd1efdc3..b88402bdcc4 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53316.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53316.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53316", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.600", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:23:37.097", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,31 +11,131 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dp: Free resources after unregistering them\n\nThe DP component's unbind operation walks through the submodules to\nunregister and clean things up. But if the unbind happens because the DP\ncontroller itself is being removed, all the memory for those submodules\nhas just been freed.\n\nChange the order of these operations to avoid the many use-after-free\nthat otherwise happens in this code path.\n\nPatchwork: https://patchwork.freedesktop.org/patch/542166/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10", + "versionEndExcluding": "5.10.188", + "matchCriteriaId": "2D01EB1B-F702-46D9-8474-32673E5A1006" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.39", + "matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.13", + "matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.4.4", + "matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3c3f3d35f5e05c468b048eb42a4f8c62c6655692", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e9f1a2367aea7d61f6781213e25313cd983b0d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5c3278db06e332fdc14f3f297499fb88ded264d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c67a55f7cc8d767d624235bf1bcd0947e56abe0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ca47d0dc00968358c136a1847cfed550cedfd1b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53317.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53317.json index ed1abddbce3..12190e47ee4 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53317.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53317.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53317", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.713", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:23:28.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,163 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix WARNING in mb_find_extent\n\nSyzbot found the following issue:\n\nEXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!\nEXT4-fs (loop0): orphan cleanup on readonly fs\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 5067 at fs/ext4/mballoc.c:1869 mb_find_extent+0x8a1/0xe30\nModules linked in:\nCPU: 1 PID: 5067 Comm: syz-executor307 Not tainted 6.2.0-rc1-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nRIP: 0010:mb_find_extent+0x8a1/0xe30 fs/ext4/mballoc.c:1869\nRSP: 0018:ffffc90003c9e098 EFLAGS: 00010293\nRAX: ffffffff82405731 RBX: 0000000000000041 RCX: ffff8880783457c0\nRDX: 0000000000000000 RSI: 0000000000000041 RDI: 0000000000000040\nRBP: 0000000000000040 R08: ffffffff82405723 R09: ffffed10053c9402\nR10: ffffed10053c9402 R11: 1ffff110053c9401 R12: 0000000000000000\nR13: ffffc90003c9e538 R14: dffffc0000000000 R15: ffffc90003c9e2cc\nFS: 0000555556665300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000056312f6796f8 CR3: 0000000022437000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n ext4_mb_complex_scan_group+0x353/0x1100 fs/ext4/mballoc.c:2307\n ext4_mb_regular_allocator+0x1533/0x3860 fs/ext4/mballoc.c:2735\n ext4_mb_new_blocks+0xddf/0x3db0 fs/ext4/mballoc.c:5605\n ext4_ext_map_blocks+0x1868/0x6880 fs/ext4/extents.c:4286\n ext4_map_blocks+0xa49/0x1cc0 fs/ext4/inode.c:651\n ext4_getblk+0x1b9/0x770 fs/ext4/inode.c:864\n ext4_bread+0x2a/0x170 fs/ext4/inode.c:920\n ext4_quota_write+0x225/0x570 fs/ext4/super.c:7105\n write_blk fs/quota/quota_tree.c:64 [inline]\n get_free_dqblk+0x34a/0x6d0 fs/quota/quota_tree.c:130\n do_insert_tree+0x26b/0x1aa0 fs/quota/quota_tree.c:340\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n dq_insert_tree fs/quota/quota_tree.c:401 [inline]\n qtree_write_dquot+0x3b6/0x530 fs/quota/quota_tree.c:420\n v2_write_dquot+0x11b/0x190 fs/quota/quota_v2.c:358\n dquot_acquire+0x348/0x670 fs/quota/dquot.c:444\n ext4_acquire_dquot+0x2dc/0x400 fs/ext4/super.c:6740\n dqget+0x999/0xdc0 fs/quota/dquot.c:914\n __dquot_initialize+0x3d0/0xcf0 fs/quota/dquot.c:1492\n ext4_process_orphan+0x57/0x2d0 fs/ext4/orphan.c:329\n ext4_orphan_cleanup+0xb60/0x1340 fs/ext4/orphan.c:474\n __ext4_fill_super fs/ext4/super.c:5516 [inline]\n ext4_fill_super+0x81cd/0x8700 fs/ext4/super.c:5644\n get_tree_bdev+0x400/0x620 fs/super.c:1282\n vfs_get_tree+0x88/0x270 fs/super.c:1489\n do_new_mount+0x289/0xad0 fs/namespace.c:3145\n do_mount fs/namespace.c:3488 [inline]\n __do_sys_mount fs/namespace.c:3697 [inline]\n __se_sys_mount+0x2d3/0x3c0 fs/namespace.c:3674\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nAdd some debug information:\nmb_find_extent: mb_find_extent block=41, order=0 needed=64 next=0 ex=0/41/1@3735929054 64 64 7\nblock_bitmap: ff 3f 0c 00 fc 01 00 00 d2 3d 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n\nAcctually, blocks per group is 64, but block bitmap indicate at least has\n128 blocks. Now, ext4_validate_block_bitmap() didn't check invalid block's\nbitmap if set.\nTo resolve above issue, add check like fsck \"Padding at end of block bitmap is\nnot set\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.19.283", + "matchCriteriaId": "4CD72EDE-728E-485C-B222-F269B229C33E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.243", + "matchCriteriaId": "E54ACEF5-C8C1-4266-85FC-7D513FFD1DEC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.180", + "matchCriteriaId": "78422AC3-CC89-479E-B4BC-62381D8F3564" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.112", + "matchCriteriaId": "8612AB29-948C-4D53-84D9-6CA2E4A8B015" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.29", + "matchCriteriaId": "D48F00B5-5471-4D1B-BE47-1DAB8122F35A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.16", + "matchCriteriaId": "F92F7C8E-A977-4255-B1B6-D1908D8B408F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.3.3", + "matchCriteriaId": "6D96A7FC-D812-4458-AEA8-3FF4023E6B75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", + "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1b90fbc7590124c57a2e590de7fd07eba26606f1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5d356d902e9d5b1aaaaf2326d365340fa8a90c1b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/775b00ba23f6f916fe2ac60c5ff7fd0fe4f28d0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d55e76e11592a1d18a179c7fd34ca1b52632beb3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dba62fa84a8eac44a53a2862de8a40e5bdfa0ae3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd45e536f47a82e0a405f9a4b6c7ceb367171ee9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e4d503c956a744cb59e509ca5f134cfad423c7a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa08a7b61dff8a4df11ff1e84abfc214b487caf7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53318.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53318.json index 3d6af364424..6bfc953156d 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53318.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53318.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53318", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.833", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:22:40.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrecordmcount: Fix memory leaks in the uwrite function\n\nCommon realloc mistake: 'file_append' nulled but not freed upon failure" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.316", + "matchCriteriaId": "A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.284", + "matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.244", + "matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.181", + "matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.113", + "matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.30", + "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.4", + "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/25c9b185f121812cbc215fdaa1192c6b9025b428", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2d9ca5f62f2ba160ff9c9be4adf401c46c04edef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ed95a6f6c646e8bb15c354536e0ab10e8f39c08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/444ec005404cead222ebce2561a9451c9ee5ad89", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/895130e63c93926f07caf5db286b97bd27b81de9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd39f68a309a947670379bf9a39b16c584f86ddb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa359d068574d29e7d2f0fdd0ebe4c6a12b5cfb9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff70ad9159fbb566b2c15724f44207e8deccd527", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53319.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53319.json index 13efff3e171..017b6272e08 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53319.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53319.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53319", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:37.947", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:22:28.760", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,85 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm\n\nCurrently there is no synchronisation between finalize_pkvm() and\nkvm_arm_init() initcalls. The finalize_pkvm() proceeds happily even if\nkvm_arm_init() fails resulting in the following warning on all the CPUs\nand eventually a HYP panic:\n\n | kvm [1]: IPA Size Limit: 48 bits\n | kvm [1]: Failed to init hyp memory protection\n | kvm [1]: error initializing Hyp mode: -22\n |\n | \n |\n | WARNING: CPU: 0 PID: 0 at arch/arm64/kvm/pkvm.c:226 _kvm_host_prot_finalize+0x30/0x50\n | Modules linked in:\n | CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | pstate: 634020c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n | pc : _kvm_host_prot_finalize+0x30/0x50\n | lr : __flush_smp_call_function_queue+0xd8/0x230\n |\n | Call trace:\n | _kvm_host_prot_finalize+0x3c/0x50\n | on_each_cpu_cond_mask+0x3c/0x6c\n | pkvm_drop_host_privileges+0x4c/0x78\n | finalize_pkvm+0x3c/0x5c\n | do_one_initcall+0xcc/0x240\n | do_initcall_level+0x8c/0xac\n | do_initcalls+0x54/0x94\n | do_basic_setup+0x1c/0x28\n | kernel_init_freeable+0x100/0x16c\n | kernel_init+0x20/0x1a0\n | ret_from_fork+0x10/0x20\n | Failed to finalize Hyp protection: -22\n | dtb=fvp-base-revc.dtb\n | kvm [95]: nVHE hyp BUG at: arch/arm64/kvm/hyp/nvhe/mem_protect.c:540!\n | kvm [95]: nVHE call trace:\n | kvm [95]: [] __kvm_nvhe_hyp_panic+0xac/0xf8\n | kvm [95]: [] __kvm_nvhe_handle_host_mem_abort+0x1a0/0x2ac\n | kvm [95]: [] __kvm_nvhe_handle_trap+0x4c/0x160\n | kvm [95]: [] __kvm_nvhe___skip_pauth_save+0x4/0x4\n | kvm [95]: ---[ end nVHE call trace ]---\n | kvm [95]: Hyp Offset: 0xfffe8db00ffa0000\n | Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000\n | CPU: 3 PID: 95 Comm: kworker/u16:2 Tainted: G W 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | Workqueue: rpciod rpc_async_schedule\n | Call trace:\n | dump_backtrace+0xec/0x108\n | show_stack+0x18/0x2c\n | dump_stack_lvl+0x50/0x68\n | dump_stack+0x18/0x24\n | panic+0x138/0x33c\n | nvhe_hyp_panic_handler+0x100/0x184\n | new_slab+0x23c/0x54c\n | ___slab_alloc+0x3e4/0x770\n | kmem_cache_alloc_node+0x1f0/0x278\n | __alloc_skb+0xdc/0x294\n | tcp_stream_alloc_skb+0x2c/0xf0\n | tcp_sendmsg_locked+0x3d0/0xda4\n | tcp_sendmsg+0x38/0x5c\n | inet_sendmsg+0x44/0x60\n | sock_sendmsg+0x1c/0x34\n | xprt_sock_sendmsg+0xdc/0x274\n | xs_tcp_send_request+0x1ac/0x28c\n | xprt_transmit+0xcc/0x300\n | call_transmit+0x78/0x90\n | __rpc_execute+0x114/0x3d8\n | rpc_async_schedule+0x28/0x48\n | process_one_work+0x1d8/0x314\n | worker_thread+0x248/0x474\n | kthread+0xfc/0x184\n | ret_from_fork+0x10/0x20\n | SMP: stopping secondary CPUs\n | Kernel Offset: 0x57c5cb460000 from 0xffff800080000000\n | PHYS_OFFSET: 0x80000000\n | CPU features: 0x00000000,1035b7a3,ccfe773f\n | Memory Limit: none\n | ---[ end Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000 ]---\n\nFix it by checking for the successfull initialisation of kvm_arm_init()\nin finalize_pkvm() before proceeding any futher." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.4.8", + "matchCriteriaId": "645579C2-235B-4FCC-A399-CECF5423170F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/91450dec0445f4d12f960ba68d8d05c3cb2ab5b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa729bc7c9c8c17a2481358c841ef8ca920485d3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53320.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53320.json index b269b1280c4..6421c6a3826 100644 --- a/CVE-2023/CVE-2023-533xx/CVE-2023-53320.json +++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53320.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53320", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T17:15:38.050", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:15:46.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()\n\nThe function mpi3mr_get_all_tgt_info() has four issues:\n\n1) It calculates valid entry length in alltgt_info assuming the header part\n of the struct mpi3mr_device_map_info would equal to sizeof(u32). The\n correct size is sizeof(u64).\n\n2) When it calculates the valid entry length kern_entrylen, it excludes one\n entry by subtracting 1 from num_devices.\n\n3) It copies num_device by calling memcpy(). Substitution is enough.\n\n4) It does not specify the calculated length to sg_copy_from_buffer().\n Instead, it specifies the payload length which is larger than the\n alltgt_info size. It causes \"BUG: KASAN: slab-out-of-bounds\".\n\nFix the issues by using the correct header size, removing the subtraction\nfrom num_devices, replacing the memcpy() with substitution and specifying\nthe correct length to sg_copy_from_buffer()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.1.16", + "matchCriteriaId": "A9E5492C-0786-4BD9-A043-DBAA6E28BFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.3", + "matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2f3d3fa5b8ed7d3b147478f42b00b468eeb1ecd2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ba997b22f2cd5d29aad8c39f6201f7608ed0c04", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb428a2005fc1260d18b989cc5199f281617f44d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-519xx/CVE-2024-51999.json b/CVE-2024/CVE-2024-519xx/CVE-2024-51999.json new file mode 100644 index 00000000000..ee70ede8d73 --- /dev/null +++ b/CVE-2024/CVE-2024-519xx/CVE-2024-51999.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2024-51999", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:49.100", + "lastModified": "2025-12-01T21:15:49.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Express.js minimalist web framework for node. Prior to 5.2.0 and 4.22.0, when using the extended query parser in express ('query parser': 'extended'), the request.query object inherits all object prototype properties, but these properties can be overwritten by query string parameter keys that match the property names. This vulnerability is fixed in 5.2.0 and 4.22.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.7, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-915" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/expressjs/express/commit/2f64f68c37c64ae333e41ff38032d21860f22255", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/expressjs/express/releases/tag/4.22.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/expressjs/express/releases/tag/v5.2.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json b/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json index fe41fa05888..fd142e04ce1 100644 --- a/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json +++ b/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11561", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-09T14:15:54.447", - "lastModified": "2025-11-27T12:15:46.180", + "lastModified": "2025-12-01T22:15:47.440", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -108,6 +108,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:21795", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22529", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-11561", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-121xx/CVE-2025-12183.json b/CVE-2025/CVE-2025-121xx/CVE-2025-12183.json index e3bbb07f590..709f79f82c7 100644 --- a/CVE-2025/CVE-2025-121xx/CVE-2025-12183.json +++ b/CVE-2025/CVE-2025-121xx/CVE-2025-12183.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12183", "sourceIdentifier": "103e4ec9-0a87-450b-af77-479448ddef11", "published": "2025-11-28T16:15:51.823", - "lastModified": "2025-12-01T15:39:33.110", + "lastModified": "2025-12-01T21:15:49.800", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -77,6 +77,10 @@ { "url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183", "source": "103e4ec9-0a87-450b-af77-479448ddef11" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/12/01/5", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-137xx/CVE-2025-13786.json b/CVE-2025/CVE-2025-137xx/CVE-2025-13786.json index 0b888230bcb..8973900e49c 100644 --- a/CVE-2025/CVE-2025-137xx/CVE-2025-13786.json +++ b/CVE-2025/CVE-2025-137xx/CVE-2025-13786.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13786", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-30T09:15:45.480", - "lastModified": "2025-12-01T15:39:33.110", + "lastModified": "2025-12-01T21:15:49.950", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,14 @@ { "url": "https://vuldb.com/?submit.689523", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md#3-proof-of-concept-poc", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-329xx/CVE-2025-32988.json b/CVE-2025/CVE-2025-329xx/CVE-2025-32988.json index 85b21d98a3b..f8d4deb619c 100644 --- a/CVE-2025/CVE-2025-329xx/CVE-2025-32988.json +++ b/CVE-2025/CVE-2025-329xx/CVE-2025-32988.json @@ -2,7 +2,7 @@ "id": "CVE-2025-32988", "sourceIdentifier": "secalert@redhat.com", "published": "2025-07-10T08:15:24.223", - "lastModified": "2025-11-06T23:15:36.797", + "lastModified": "2025-12-01T22:15:47.790", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -158,6 +158,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19088", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22529", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-32988", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-329xx/CVE-2025-32989.json b/CVE-2025/CVE-2025-329xx/CVE-2025-32989.json index 53daff34911..031b1647130 100644 --- a/CVE-2025/CVE-2025-329xx/CVE-2025-32989.json +++ b/CVE-2025/CVE-2025-329xx/CVE-2025-32989.json @@ -2,7 +2,7 @@ "id": "CVE-2025-32989", "sourceIdentifier": "secalert@redhat.com", "published": "2025-07-10T08:15:24.430", - "lastModified": "2025-11-06T23:15:36.993", + "lastModified": "2025-12-01T22:15:48.027", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -133,6 +133,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19088", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22529", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-32989", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-329xx/CVE-2025-32990.json b/CVE-2025/CVE-2025-329xx/CVE-2025-32990.json index 963a9a13724..dddbc0e38da 100644 --- a/CVE-2025/CVE-2025-329xx/CVE-2025-32990.json +++ b/CVE-2025/CVE-2025-329xx/CVE-2025-32990.json @@ -2,7 +2,7 @@ "id": "CVE-2025-32990", "sourceIdentifier": "secalert@redhat.com", "published": "2025-07-10T10:15:33.060", - "lastModified": "2025-11-06T23:15:37.137", + "lastModified": "2025-12-01T22:15:48.200", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -157,6 +157,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19088", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22529", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-32990", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39834.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39834.json index 19cb9597f5d..c990daf258d 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39834.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39834.json @@ -2,8 +2,8 @@ "id": "CVE-2025-39834", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T14:15:51.717", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T22:03:46.933", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,90 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow\n\nWhen an invalid stc_type is provided, the function allocates memory for\nshared_stc but jumps to unlock_and_out without freeing it, causing a\nmemory leak.\n\nFix by jumping to free_shared_stc label instead to ensure proper cleanup." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12", + "versionEndExcluding": "6.16.5", + "matchCriteriaId": "37954284-5844-43A0-988C-A8928FBC9ADF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*", + "matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*", + "matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*", + "matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/051fd8576a2e4e95d5870c5c9f8679c5b16882e4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a630f83592cdad1253523a1b760cfe78fef6cd9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-398xx/CVE-2025-39836.json b/CVE-2025/CVE-2025-398xx/CVE-2025-39836.json index 08a0649a64e..c9ffd75569e 100644 --- a/CVE-2025/CVE-2025-398xx/CVE-2025-39836.json +++ b/CVE-2025/CVE-2025-398xx/CVE-2025-39836.json @@ -2,8 +2,8 @@ "id": "CVE-2025-39836", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-16T14:15:51.983", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T21:59:35.697", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,104 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: stmm: Fix incorrect buffer allocation method\n\nThe communication buffer allocated by setup_mm_hdr() is later on passed\nto tee_shm_register_kernel_buf(). The latter expects those buffers to be\ncontiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause\nvarious corruptions or BUGs, specifically since commit 9aec2fb0fd5e\n(\"slab: allocate frozen pages\"), though it was broken before as well.\n\nFix this by using alloc_pages_exact() instead of kmalloc()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.12.45", + "matchCriteriaId": "B2466775-B7E8-4219-A095-F4111F872F29" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.16.5", + "matchCriteriaId": "EB781080-7001-4FA1-B388-517FFEFBC73E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*", + "matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*", + "matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*", + "matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/630c0e6064daf84f17aad1a7d9ca76b562e3fe47", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/77ff27ff0e4529a003c8a1c2492c111968c378d3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c5e81e672699e0c5557b2b755cc8f7a69aa92bff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-487xx/CVE-2025-48709.json b/CVE-2025/CVE-2025-487xx/CVE-2025-48709.json index ba9b173d6da..dcb7d34d407 100644 --- a/CVE-2025/CVE-2025-487xx/CVE-2025-48709.json +++ b/CVE-2025/CVE-2025-487xx/CVE-2025-48709.json @@ -1,14 +1,14 @@ { "id": "CVE-2025-48709", - "sourceIdentifier": "cve@mitre.org", + "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-08-07T20:15:28.117", - "lastModified": "2025-10-27T16:15:40.490", + "lastModified": "2025-12-01T22:15:48.363", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbu_connection_details.vbs with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations." + "value": "BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on, it runs 'DBUStatus.exe' frequently, which then calls 'dbu_connection_details.vbs' with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations. Fixed in PACTV.9.0.21.307." }, { "lang": "es", @@ -16,9 +16,53 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "source": "9119a7d8-5eab-497f-8521-727c672e3725", "type": "Secondary", "cvssData": { "version": "3.1", @@ -41,9 +85,13 @@ }, "weaknesses": [ { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "source": "9119a7d8-5eab-497f-8521-727c672e3725", "type": "Secondary", "description": [ + { + "lang": "en", + "value": "CWE-214" + }, { "lang": "en", "value": "CWE-532" @@ -52,13 +100,9 @@ } ], "references": [ - { - "url": "https://bmc.com", - "source": "cve@mitre.org" - }, { "url": "https://docs.bmc.com/xwiki/bin/view/Control-M-Orchestration/Control-M/ctm9021/Patches/Control-M-Server-PACTV-9-0-21-307/", - "source": "cve@mitre.org" + "source": "9119a7d8-5eab-497f-8521-727c672e3725" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48980.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48980.json index 9c95b5921b2..ba49631ae5b 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48980.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48980.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48980", "sourceIdentifier": "support@hackerone.com", "published": "2025-10-31T00:15:36.327", - "lastModified": "2025-11-04T15:41:56.843", + "lastModified": "2025-12-01T21:15:50.250", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-565" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3253725", diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48982.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48982.json index c0ff0cafba9..42dcf59f89f 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48982.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48982.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48982", "sourceIdentifier": "support@hackerone.com", "published": "2025-10-31T00:15:36.437", - "lastModified": "2025-11-13T14:47:08.707", - "vulnStatus": "Analyzed", + "lastModified": "2025-12-01T21:15:50.380", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -67,6 +67,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48983.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48983.json index 3223d57e80e..50fd923a8f0 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48983.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48983.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48983", "sourceIdentifier": "support@hackerone.com", "published": "2025-10-31T00:15:36.553", - "lastModified": "2025-11-11T02:07:03.383", - "vulnStatus": "Analyzed", + "lastModified": "2025-12-01T21:15:50.527", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -45,6 +45,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48985.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48985.json index a45202ba9e3..7301c86b528 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48985.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48985.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48985", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-07T01:15:36.567", - "lastModified": "2025-11-12T16:20:22.257", + "lastModified": "2025-12-01T21:15:50.673", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], "references": [ { "url": "https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed", diff --git a/CVE-2025/CVE-2025-507xx/CVE-2025-50736.json b/CVE-2025/CVE-2025-507xx/CVE-2025-50736.json index dbcfc1c1661..d212ef5f5e5 100644 --- a/CVE-2025/CVE-2025-507xx/CVE-2025-50736.json +++ b/CVE-2025/CVE-2025-507xx/CVE-2025-50736.json @@ -2,7 +2,7 @@ "id": "CVE-2025-50736", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-30T14:15:43.393", - "lastModified": "2025-11-04T16:16:00.453", + "lastModified": "2025-12-01T21:15:50.820", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], "references": [ { "url": "https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50736", diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52662.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52662.json index 8b516583041..587942df38a 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52662.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52662.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52662", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-07T01:15:36.803", - "lastModified": "2025-11-12T16:20:22.257", + "lastModified": "2025-12-01T21:15:51.000", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/nuxt/devtools/commit/7cadbbe9", diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52667.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52667.json index a49143e7058..25ab0b180ec 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52667.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52667.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52667", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:22.830", - "lastModified": "2025-11-21T15:13:13.800", + "lastModified": "2025-12-01T21:15:51.130", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3399809", diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55749.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55749.json new file mode 100644 index 00000000000..ae80ee69bcb --- /dev/null +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55749.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2025-55749", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:51.617", + "lastModified": "2025-12-01T21:15:51.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials. Fixed in 16.10.11, 17.4.4, and 17.7.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/xwiki/xwiki-platform/commit/42fb063749dd88cc78196f72d7318b7179285ebd", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/commit/99a04a0e2143583f5154a43e02174155da7e8e10", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-53gx-j3p6-2rw9", + "source": "security-advisories@github.com" + }, + { + "url": "https://jira.xwiki.org/browse/XWIKI-23438", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-580xx/CVE-2025-58044.json b/CVE-2025/CVE-2025-580xx/CVE-2025-58044.json new file mode 100644 index 00000000000..9794daafaec --- /dev/null +++ b/CVE-2025/CVE-2025-580xx/CVE-2025-58044.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-58044", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:51.807", + "lastModified": "2025-12-01T21:15:51.807", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/jumpserver/jumpserver/commit/36ae076cb021f16d2053a63651bc16d15a3ed53b", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/jumpserver/jumpserver/security/advisories/GHSA-h762-mj7p-jwjq", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63523.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63523.json index d3b77a2edfd..0cfc8f441dc 100644 --- a/CVE-2025/CVE-2025-635xx/CVE-2025-63523.json +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63523.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63523", "sourceIdentifier": "cve@mitre.org", "published": "2025-12-01T15:15:50.973", - "lastModified": "2025-12-01T15:39:33.110", + "lastModified": "2025-12-01T21:15:51.980", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as \"read-only.\" An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63523.md", diff --git a/CVE-2025/CVE-2025-63xx/CVE-2025-6395.json b/CVE-2025/CVE-2025-63xx/CVE-2025-6395.json index 16e3ece9503..5db92114cb1 100644 --- a/CVE-2025/CVE-2025-63xx/CVE-2025-6395.json +++ b/CVE-2025/CVE-2025-63xx/CVE-2025-6395.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6395", "sourceIdentifier": "secalert@redhat.com", "published": "2025-07-10T16:15:25.110", - "lastModified": "2025-11-07T00:15:55.290", + "lastModified": "2025-12-01T22:15:51.513", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -80,6 +80,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19088", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22529", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-6395", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-656xx/CVE-2025-65621.json b/CVE-2025/CVE-2025-656xx/CVE-2025-65621.json new file mode 100644 index 00000000000..4dc566b0c47 --- /dev/null +++ b/CVE-2025/CVE-2025-656xx/CVE-2025-65621.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-65621", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-01T21:15:52.193", + "lastModified": "2025-12-01T21:15:52.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator's session, enabling privilege escalation." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://snipeitapp.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65621", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-656xx/CVE-2025-65622.json b/CVE-2025/CVE-2025-656xx/CVE-2025-65622.json new file mode 100644 index 00000000000..29982dc94c9 --- /dev/null +++ b/CVE-2025/CVE-2025-656xx/CVE-2025-65622.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-65622", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-01T22:15:48.697", + "lastModified": "2025-12-01T22:15:48.697", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Snipe-IT before 8.3.4 allows stored XSS via the Locations \"Country\" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://snipeitapp.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65622", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-658xx/CVE-2025-65840.json b/CVE-2025/CVE-2025-658xx/CVE-2025-65840.json new file mode 100644 index 00000000000..5425f127e61 --- /dev/null +++ b/CVE-2025/CVE-2025-658xx/CVE-2025-65840.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-65840", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-01T21:15:52.320", + "lastModified": "2025-12-01T21:15:52.320", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/CSRF_1.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/sanluan/PublicCMS/issues/102", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66205.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66205.json new file mode 100644 index 00000000000..cb47aa7ed9c --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66205.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66205", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:52.443", + "lastModified": "2025-12-01T21:15:52.443", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/frappe/frappe/commit/984c641bff9539b6126a01146096f133db6a955b", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/frappe/frappe/security/advisories/GHSA-mp93-8vxr-hqq9", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66206.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66206.json new file mode 100644 index 00000000000..dfb0e9d3306 --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66206.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-66206", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:52.623", + "lastModified": "2025-12-01T21:15:52.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path traversal attacks, wherein some files from the server could be retrieved if the full path was known. Sites hosted on Frappe Cloud, and even other setups that are behind a reverse proxy like NGINX are unaffected. This would mainly affect someone directly using werkzeug/gunicorn. In those cases, either an upgrade or changing the setup to use a reverse proxy is recommended. This vulnerability is fixed in 15.86.0 and 14.99.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/frappe/frappe/security/advisories/GHSA-v4wg-gqfr-rpjm", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66252.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66252.json index 307da15ae60..935bb2a1663 100644 --- a/CVE-2025/CVE-2025-662xx/CVE-2025-66252.json +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66252.json @@ -2,7 +2,7 @@ "id": "CVE-2025-66252", "sourceIdentifier": "b7efe717-a805-47cf-8e9a-921fca0ce0ce", "published": "2025-11-26T01:16:08.273", - "lastModified": "2025-11-28T23:11:55.537", + "lastModified": "2025-12-01T22:15:48.860", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -73,6 +73,10 @@ { "url": "https://www.abdulmhsblog.com/posts/webfmvulns/", "source": "b7efe717-a805-47cf-8e9a-921fca0ce0ce" + }, + { + "url": "https://www.abdulmhsblog.com/posts/webfmvulns/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66294.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66294.json new file mode 100644 index 00000000000..baebb1c8430 --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66294.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-66294", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:52.843", + "lastModified": "2025-12-01T21:15:52.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by unauthenticated attackers. This vulnerability stems from weak regex validation in the cleanDangerousTwig method. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + }, + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-662m-56v4-3r8f", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66295.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66295.json new file mode 100644 index 00000000000..4c20384524b --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66295.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66295", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:53.000", + "lastModified": "2025-12-01T21:15:53.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new user through the Admin UI and supplies a username containing path traversal sequences (for example ..\\Nijat or ../Nijat), Grav writes the account YAML file to an unintended path outside user/accounts/. The written YAML can contain account fields such as email, fullname, twofa_secret, and hashed_password. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-h756-wh59-hhjv", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66296.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66296.json new file mode 100644 index 00000000000..ec5f3459d4c --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66296.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66296", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:53.157", + "lastModified": "2025-12-01T21:15:53.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav\u2019s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an existing administrator account, set a new password/email, and then log in as that administrator. This effectively allows privilege escalation from limited user-manager permissions to full administrator access. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-cjcp-qxvg-4rjm", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66297.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66297.json new file mode 100644 index 00000000000..1c80f6bf1e3 --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66297.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66297", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T21:15:53.327", + "lastModified": "2025-12-01T21:15:53.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66298.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66298.json new file mode 100644 index 00000000000..378ffc61974 --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66298.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66298", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.103", + "lastModified": "2025-12-01T22:15:49.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-8535-hvm8-2hmv", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-662xx/CVE-2025-66299.json b/CVE-2025/CVE-2025-662xx/CVE-2025-66299.json new file mode 100644 index 00000000000..68c8267c8a9 --- /dev/null +++ b/CVE-2025/CVE-2025-662xx/CVE-2025-66299.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-66299", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.290", + "lastModified": "2025-12-01T22:15:49.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox. Since the security sandbox does not fully protect the Twig object, it is possible to interact with it (e.g., call methods, read/write attributes) through maliciously crafted Twig template directives injected into a web page. This allows an authenticated editor to add arbitrary functions to the Twig attribute system.twig.safe_filters, effectively bypassing the Grav CMS sandbox. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + }, + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-gjc5-8cfh-653x", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66300.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66300.json new file mode 100644 index 00000000000..4ec8f5998c1 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66300.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66300", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.447", + "lastModified": "2025-12-01T22:15:49.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using \"Frontmatter\" form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66301.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66301.json new file mode 100644 index 00000000000..5dfde99df8e --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66301.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-66301", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.607", + "lastModified": "2025-12-01T22:15:49.607", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-v8x2-fjv7-8hjh", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66302.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66302.json new file mode 100644 index 00000000000..5801d4f08a8 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66302.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66302", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.750", + "lastModified": "2025-12-01T22:15:49.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of the user account running the application. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-j422-qmxp-hv94", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66303.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66303.json new file mode 100644 index 00000000000..07fbf718027 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66303.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66303", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:49.913", + "lastModified": "2025-12-01T22:15:49.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service (DoS) vulnerability has been identified in Grav related to the handling of scheduled_at parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduled_at parameter with a malicious input, such as a single quote, the application admin panel becomes non-functional, causing significant disruptions to administrative operations. The only way to recover from this issue is to manually access the host server and modify the backup.yaml file to correct the corrupted cron expression. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-x62q-p736-3997", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66304.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66304.json new file mode 100644 index 00000000000..6b6d63a4979 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66304.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-66304", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.080", + "lastModified": "2025-12-01T22:15:50.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, users with read access on the user account management section of the admin panel can view the password hashes of all users, including the admin user. This exposure can potentially lead to privilege escalation if an attacker can crack these password hashes. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + }, + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-gq3g-666w-7h85", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66305.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66305.json new file mode 100644 index 00000000000..1a39e8d3122 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66305.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66305", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.250", + "lastModified": "2025-12-01T22:15:50.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service (DoS) vulnerability was identified in the \"Languages\" submenu of the Grav admin configuration panel (/admin/config/system). Specifically, the Supported parameter fails to properly validate user input. If a malformed value is inserted\u2014such as a single forward slash (/) or an XSS test string\u2014it causes a fatal regular expression parsing error on the server. This leads to application-wide failure due to the use of the preg_match() function with an improperly constructed regular expression, resulting in an error. Once triggered, the site becomes completely unavailable to all users. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-248" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66306.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66306.json new file mode 100644 index 00000000000..74bfb49c600 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66306.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66306", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.413", + "lastModified": "2025-12-01T22:15:50.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, there is an IDOR (Insecure Direct Object Reference) vulnerability in the Grav CMS Admin Panel which allows low-privilege users to access sensitive information from other accounts. Although direct account takeover is not possible, admin email addresses and other metadata can be exposed, increasing the risk of phishing, credential stuffing, and social engineering. This vulnerability is fixed in 1.8.0-beta.27." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav/commit/b7e1958a6e807ac14919447b60e5204a2ea77f62", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-4cwq-j7jv-qmwg", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66307.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66307.json new file mode 100644 index 00000000000..d1dff8f42fc --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66307.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-66307", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.570", + "lastModified": "2025-12-01T22:15:50.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a user enumeration and email disclosure vulnerability exists in Grav. The \"Forgot Password\" functionality at /admin/forgot leaks information about valid usernames and their associated email addresses through distinct server responses. This allows an attacker to enumerate users and disclose sensitive email addresses, which can be leveraged for targeted attacks such as password spraying, phishing, or social engineering. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-204" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66308.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66308.json new file mode 100644 index 00000000000..b9e295c3b7f --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66308.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66308", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.743", + "lastModified": "2025-12-01T22:15:50.743", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/config/site endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[taxonomies] parameter. The injected payload is stored on the server and automatically executed in the browser of any user who accesses the affected site configuration, resulting in a persistent attack vector. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-gqxx-248x-g29f", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66309.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66309.json new file mode 100644 index 00000000000..fdcac71c71f --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66309.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66309", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:50.910", + "lastModified": "2025-12-01T22:15:50.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][content][items] parameter. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-65mj-f7p4-wggq", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66310.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66310.json new file mode 100644 index 00000000000..9732305ecda --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66310.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66310", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:51.067", + "lastModified": "2025-12-01T22:15:51.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][template] parameter. The script is saved within the page's frontmatter and executed automatically whenever the affected content is rendered in the administrative interface or frontend view. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-7g78-5g5g-mvfj", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66311.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66311.json new file mode 100644 index 00000000000..946ee16fbea --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66311.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66311", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:51.217", + "lastModified": "2025-12-01T22:15:51.217", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][metadata], data[header][taxonomy][category], and data[header][taxonomy][tag] parameters. These scripts are stored in the page frontmatter and executed automatically whenever the affected page is accessed or rendered in the administrative interface. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-mpjj-4688-3fxg", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66312.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66312.json new file mode 100644 index 00000000000..7231e713a9e --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66312.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-66312", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-12-01T22:15:51.367", + "lastModified": "2025-12-01T22:15:51.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/accounts/groups/Grupo endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[readableName] parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 1.11.0-beta.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/getgrav/grav/security/advisories/GHSA-rmw5-f87r-w988", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 70dedc63114..2c6cece4a2d 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-12-01T21:00:11.814072+00:00 +2025-12-01T23:00:11.583634+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-12-01T20:15:57.370000+00:00 +2025-12-01T22:15:51.513000+00:00 ``` ### Last Data Feed Release @@ -33,54 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -319745 +319772 ``` ### CVEs added in the last Commit -Recently added CVEs: `10` +Recently added CVEs: `27` -- [CVE-2025-11772](CVE-2025/CVE-2025-117xx/CVE-2025-11772.json) (`2025-12-01T19:15:49.130`) -- [CVE-2025-12756](CVE-2025/CVE-2025-127xx/CVE-2025-12756.json) (`2025-12-01T20:15:49.147`) -- [CVE-2025-34297](CVE-2025/CVE-2025-342xx/CVE-2025-34297.json) (`2025-12-01T19:15:50.420`) -- [CVE-2025-51682](CVE-2025/CVE-2025-516xx/CVE-2025-51682.json) (`2025-12-01T20:15:51.660`) -- [CVE-2025-51683](CVE-2025/CVE-2025-516xx/CVE-2025-51683.json) (`2025-12-01T20:15:51.783`) -- [CVE-2025-63317](CVE-2025/CVE-2025-633xx/CVE-2025-63317.json) (`2025-12-01T20:15:52.907`) -- [CVE-2025-63365](CVE-2025/CVE-2025-633xx/CVE-2025-63365.json) (`2025-12-01T19:15:51.373`) -- [CVE-2025-65407](CVE-2025/CVE-2025-654xx/CVE-2025-65407.json) (`2025-12-01T19:15:52.417`) -- [CVE-2025-65836](CVE-2025/CVE-2025-658xx/CVE-2025-65836.json) (`2025-12-01T20:15:57.103`) -- [CVE-2025-65838](CVE-2025/CVE-2025-658xx/CVE-2025-65838.json) (`2025-12-01T20:15:57.240`) +- [CVE-2025-58044](CVE-2025/CVE-2025-580xx/CVE-2025-58044.json) (`2025-12-01T21:15:51.807`) +- [CVE-2025-65621](CVE-2025/CVE-2025-656xx/CVE-2025-65621.json) (`2025-12-01T21:15:52.193`) +- [CVE-2025-65622](CVE-2025/CVE-2025-656xx/CVE-2025-65622.json) (`2025-12-01T22:15:48.697`) +- [CVE-2025-65840](CVE-2025/CVE-2025-658xx/CVE-2025-65840.json) (`2025-12-01T21:15:52.320`) +- [CVE-2025-66205](CVE-2025/CVE-2025-662xx/CVE-2025-66205.json) (`2025-12-01T21:15:52.443`) +- [CVE-2025-66206](CVE-2025/CVE-2025-662xx/CVE-2025-66206.json) (`2025-12-01T21:15:52.623`) +- [CVE-2025-66294](CVE-2025/CVE-2025-662xx/CVE-2025-66294.json) (`2025-12-01T21:15:52.843`) +- [CVE-2025-66295](CVE-2025/CVE-2025-662xx/CVE-2025-66295.json) (`2025-12-01T21:15:53.000`) +- [CVE-2025-66296](CVE-2025/CVE-2025-662xx/CVE-2025-66296.json) (`2025-12-01T21:15:53.157`) +- [CVE-2025-66297](CVE-2025/CVE-2025-662xx/CVE-2025-66297.json) (`2025-12-01T21:15:53.327`) +- [CVE-2025-66298](CVE-2025/CVE-2025-662xx/CVE-2025-66298.json) (`2025-12-01T22:15:49.103`) +- [CVE-2025-66299](CVE-2025/CVE-2025-662xx/CVE-2025-66299.json) (`2025-12-01T22:15:49.290`) +- [CVE-2025-66300](CVE-2025/CVE-2025-663xx/CVE-2025-66300.json) (`2025-12-01T22:15:49.447`) +- [CVE-2025-66301](CVE-2025/CVE-2025-663xx/CVE-2025-66301.json) (`2025-12-01T22:15:49.607`) +- [CVE-2025-66302](CVE-2025/CVE-2025-663xx/CVE-2025-66302.json) (`2025-12-01T22:15:49.750`) +- [CVE-2025-66303](CVE-2025/CVE-2025-663xx/CVE-2025-66303.json) (`2025-12-01T22:15:49.913`) +- [CVE-2025-66304](CVE-2025/CVE-2025-663xx/CVE-2025-66304.json) (`2025-12-01T22:15:50.080`) +- [CVE-2025-66305](CVE-2025/CVE-2025-663xx/CVE-2025-66305.json) (`2025-12-01T22:15:50.250`) +- [CVE-2025-66306](CVE-2025/CVE-2025-663xx/CVE-2025-66306.json) (`2025-12-01T22:15:50.413`) +- [CVE-2025-66307](CVE-2025/CVE-2025-663xx/CVE-2025-66307.json) (`2025-12-01T22:15:50.570`) +- [CVE-2025-66308](CVE-2025/CVE-2025-663xx/CVE-2025-66308.json) (`2025-12-01T22:15:50.743`) +- [CVE-2025-66309](CVE-2025/CVE-2025-663xx/CVE-2025-66309.json) (`2025-12-01T22:15:50.910`) +- [CVE-2025-66310](CVE-2025/CVE-2025-663xx/CVE-2025-66310.json) (`2025-12-01T22:15:51.067`) +- [CVE-2025-66311](CVE-2025/CVE-2025-663xx/CVE-2025-66311.json) (`2025-12-01T22:15:51.217`) +- [CVE-2025-66312](CVE-2025/CVE-2025-663xx/CVE-2025-66312.json) (`2025-12-01T22:15:51.367`) ### CVEs modified in the last Commit -Recently modified CVEs: `59` +Recently modified CVEs: `49` -- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-12-01T19:15:51.010`) -- [CVE-2025-62728](CVE-2025/CVE-2025-627xx/CVE-2025-62728.json) (`2025-12-01T19:15:51.180`) -- [CVE-2025-63095](CVE-2025/CVE-2025-630xx/CVE-2025-63095.json) (`2025-12-01T20:15:52.757`) -- [CVE-2025-63520](CVE-2025/CVE-2025-635xx/CVE-2025-63520.json) (`2025-12-01T20:15:53.247`) -- [CVE-2025-63522](CVE-2025/CVE-2025-635xx/CVE-2025-63522.json) (`2025-12-01T20:15:53.417`) -- [CVE-2025-63526](CVE-2025/CVE-2025-635xx/CVE-2025-63526.json) (`2025-12-01T20:15:53.647`) -- [CVE-2025-63527](CVE-2025/CVE-2025-635xx/CVE-2025-63527.json) (`2025-12-01T20:15:53.873`) -- [CVE-2025-63528](CVE-2025/CVE-2025-635xx/CVE-2025-63528.json) (`2025-12-01T20:15:54.057`) -- [CVE-2025-63529](CVE-2025/CVE-2025-635xx/CVE-2025-63529.json) (`2025-12-01T19:15:51.520`) -- [CVE-2025-63531](CVE-2025/CVE-2025-635xx/CVE-2025-63531.json) (`2025-12-01T19:15:51.730`) -- [CVE-2025-63532](CVE-2025/CVE-2025-635xx/CVE-2025-63532.json) (`2025-12-01T19:15:51.927`) -- [CVE-2025-63533](CVE-2025/CVE-2025-635xx/CVE-2025-63533.json) (`2025-12-01T19:15:52.080`) -- [CVE-2025-63709](CVE-2025/CVE-2025-637xx/CVE-2025-63709.json) (`2025-12-01T20:15:54.240`) -- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-12-01T20:15:54.430`) -- [CVE-2025-64030](CVE-2025/CVE-2025-640xx/CVE-2025-64030.json) (`2025-12-01T20:15:54.607`) -- [CVE-2025-64775](CVE-2025/CVE-2025-647xx/CVE-2025-64775.json) (`2025-12-01T19:15:52.240`) -- [CVE-2025-65112](CVE-2025/CVE-2025-651xx/CVE-2025-65112.json) (`2025-12-01T20:15:54.823`) -- [CVE-2025-65113](CVE-2025/CVE-2025-651xx/CVE-2025-65113.json) (`2025-12-01T20:15:54.943`) -- [CVE-2025-65276](CVE-2025/CVE-2025-652xx/CVE-2025-65276.json) (`2025-12-01T20:15:55.097`) -- [CVE-2025-65403](CVE-2025/CVE-2025-654xx/CVE-2025-65403.json) (`2025-12-01T20:15:55.257`) -- [CVE-2025-65404](CVE-2025/CVE-2025-654xx/CVE-2025-65404.json) (`2025-12-01T20:15:55.403`) -- [CVE-2025-65405](CVE-2025/CVE-2025-654xx/CVE-2025-65405.json) (`2025-12-01T20:15:55.560`) -- [CVE-2025-65406](CVE-2025/CVE-2025-654xx/CVE-2025-65406.json) (`2025-12-01T20:15:56.120`) -- [CVE-2025-65408](CVE-2025/CVE-2025-654xx/CVE-2025-65408.json) (`2025-12-01T20:15:56.923`) -- [CVE-2025-66219](CVE-2025/CVE-2025-662xx/CVE-2025-66219.json) (`2025-12-01T20:15:57.370`) +- [CVE-2023-53315](CVE-2023/CVE-2023-533xx/CVE-2023-53315.json) (`2025-12-01T21:23:45.870`) +- [CVE-2023-53316](CVE-2023/CVE-2023-533xx/CVE-2023-53316.json) (`2025-12-01T21:23:37.097`) +- [CVE-2023-53317](CVE-2023/CVE-2023-533xx/CVE-2023-53317.json) (`2025-12-01T21:23:28.940`) +- [CVE-2023-53318](CVE-2023/CVE-2023-533xx/CVE-2023-53318.json) (`2025-12-01T21:22:40.880`) +- [CVE-2023-53319](CVE-2023/CVE-2023-533xx/CVE-2023-53319.json) (`2025-12-01T21:22:28.760`) +- [CVE-2023-53320](CVE-2023/CVE-2023-533xx/CVE-2023-53320.json) (`2025-12-01T21:15:46.453`) +- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-12-01T22:15:47.440`) +- [CVE-2025-12183](CVE-2025/CVE-2025-121xx/CVE-2025-12183.json) (`2025-12-01T21:15:49.800`) +- [CVE-2025-13786](CVE-2025/CVE-2025-137xx/CVE-2025-13786.json) (`2025-12-01T21:15:49.950`) +- [CVE-2025-32988](CVE-2025/CVE-2025-329xx/CVE-2025-32988.json) (`2025-12-01T22:15:47.790`) +- [CVE-2025-32989](CVE-2025/CVE-2025-329xx/CVE-2025-32989.json) (`2025-12-01T22:15:48.027`) +- [CVE-2025-32990](CVE-2025/CVE-2025-329xx/CVE-2025-32990.json) (`2025-12-01T22:15:48.200`) +- [CVE-2025-39834](CVE-2025/CVE-2025-398xx/CVE-2025-39834.json) (`2025-12-01T22:03:46.933`) +- [CVE-2025-39836](CVE-2025/CVE-2025-398xx/CVE-2025-39836.json) (`2025-12-01T21:59:35.697`) +- [CVE-2025-48709](CVE-2025/CVE-2025-487xx/CVE-2025-48709.json) (`2025-12-01T22:15:48.363`) +- [CVE-2025-48980](CVE-2025/CVE-2025-489xx/CVE-2025-48980.json) (`2025-12-01T21:15:50.250`) +- [CVE-2025-48982](CVE-2025/CVE-2025-489xx/CVE-2025-48982.json) (`2025-12-01T21:15:50.380`) +- [CVE-2025-48983](CVE-2025/CVE-2025-489xx/CVE-2025-48983.json) (`2025-12-01T21:15:50.527`) +- [CVE-2025-48985](CVE-2025/CVE-2025-489xx/CVE-2025-48985.json) (`2025-12-01T21:15:50.673`) +- [CVE-2025-50736](CVE-2025/CVE-2025-507xx/CVE-2025-50736.json) (`2025-12-01T21:15:50.820`) +- [CVE-2025-52662](CVE-2025/CVE-2025-526xx/CVE-2025-52662.json) (`2025-12-01T21:15:51.000`) +- [CVE-2025-52667](CVE-2025/CVE-2025-526xx/CVE-2025-52667.json) (`2025-12-01T21:15:51.130`) +- [CVE-2025-63523](CVE-2025/CVE-2025-635xx/CVE-2025-63523.json) (`2025-12-01T21:15:51.980`) +- [CVE-2025-6395](CVE-2025/CVE-2025-63xx/CVE-2025-6395.json) (`2025-12-01T22:15:51.513`) +- [CVE-2025-66252](CVE-2025/CVE-2025-662xx/CVE-2025-66252.json) (`2025-12-01T22:15:48.860`) ## Download and Usage diff --git a/_state.csv b/_state.csv index cf0af4b898d..d476da741cd 100644 --- a/_state.csv +++ b/_state.csv @@ -215236,20 +215236,20 @@ CVE-2022-50335,0,0,7c93b926e8abd725d637622e669c4f4b960de3c5b87fed27f17bebc35deb9 CVE-2022-50336,0,0,ecd64ec35bc878139a797e0a70ed1612d8dfb99a41aecf4139d7fcd1ed0c1ef9,2025-09-15T15:22:27.090000 CVE-2022-50337,0,0,4d06b41d978b782ae1870a874c9ce6f1f9789fd8e0463d494a0e26b1b287d2af,2025-09-15T15:22:27.090000 CVE-2022-50338,0,0,445462c037bc90df3ff937184349fb37c7b519129fdf9573724de5b16bc6189b,2025-10-10T16:15:49.533000 -CVE-2022-50339,0,0,c7dc847160fad7f6ce85fe8eb3787a5b02e337738c012f6aaf9738e3e71bea52,2025-09-17T14:18:55.093000 -CVE-2022-50340,0,0,8ff83f59089284e1887030036df22c7f81f2b7ac6006ccce2cf4791eebf42415,2025-09-17T14:18:55.093000 -CVE-2022-50341,0,0,d8ad500dc1120e7e17085587b9186f25cc6f2b24c0dd8d4933349f52382ed006,2025-09-17T14:18:55.093000 -CVE-2022-50342,0,0,85e306716788bc396f6461362a84b846220aef2aae247263cf169687ae989aa8,2025-09-17T14:18:55.093000 -CVE-2022-50343,0,0,248c1bdc199314914c40f01f673b62a03d1c47134281c921bfe1104f4ab76225,2025-09-17T14:18:55.093000 -CVE-2022-50344,0,0,d3db5df67c4a9d9ebde3cb50b010de77af698085507fd81293d207e084e450d7,2025-09-17T14:18:55.093000 +CVE-2022-50339,0,1,a2644a5d60c1dbaf7087cd967ecfa675511828fedf7822068ec286c0d63e3cca,2025-12-01T22:00:43.643000 +CVE-2022-50340,0,1,f85bec820f37f0a107f965afa676f6f133d03760bebd5bcd1d9264bbf95b0195,2025-12-01T22:00:51.300000 +CVE-2022-50341,0,1,ef522f59b8bbc981d8cf2eecf39f86174326678ba3fa0d7c164d322cdad522d5,2025-12-01T22:03:08.070000 +CVE-2022-50342,0,1,0f218bd263990cda437c4ec97f85d66111f03c3557c63120e625a82a88a5ad35,2025-12-01T22:03:16.573000 +CVE-2022-50343,0,1,3c965efbaa8316620d25b1d9ff334dca9451e7ebb5b786dd4887623725423248,2025-12-01T22:03:21.887000 +CVE-2022-50344,0,1,e3e8f9c70647e71cbfdbba6379b0913d1fd94ac6da7d64bafb11d2fcc948c218,2025-12-01T22:03:27.743000 CVE-2022-50345,0,0,0ca9090c34f70eac057c159170f0601c5e6bcf48713aa4c61050decf361eba6c,2025-09-29T19:15:33.190000 -CVE-2022-50346,0,0,9a08ad54266f2a78367275124e8e8c4067a6194e6dbcf6a17f59b3c3baad364b,2025-09-17T14:18:55.093000 -CVE-2022-50347,0,0,e75c2e75380341e26ec559a9f7ab461cdf9f892b94eaad1d04c41d4696849298,2025-09-17T14:18:55.093000 -CVE-2022-50348,0,0,004e295db9a4dccfdb947f142c7f6ebc7e519cb5184fc4c9f870d01ced0fa067,2025-09-17T14:18:55.093000 -CVE-2022-50349,0,0,f3cde7d47dca61af4fa513e0e5f7a368a2f965d422b3a00a9e22957d95ecfee8,2025-09-17T14:18:55.093000 -CVE-2022-50350,0,0,5ae75be1a49d597eee5ee5749c61abee732091a45afa5c84bdbea6891e14b1b9,2025-09-17T14:18:55.093000 -CVE-2022-50351,0,0,967590694013b19226a246c0cc4afb8bf579d0f89e93dd0cf340eaa158b353e2,2025-09-17T14:18:55.093000 -CVE-2022-50352,0,0,c91dfd4973c7cd17b9925ffb02013b76f046dff86cc07c10155441f5444df222,2025-09-17T14:18:55.093000 +CVE-2022-50346,0,1,5425c3c711fa3985834c7194e60194036227a746bd30fd45a0a8d4130d8561e4,2025-12-01T21:58:19.057000 +CVE-2022-50347,0,1,1efafde0b61c5d3393d06682f8f9b19ba569c12e03af5f5e04f445f6dea05465,2025-12-01T21:58:23.473000 +CVE-2022-50348,0,1,8a898727589af12d3c6c38f1244efac818b737e65038600ceb1774726c820435,2025-12-01T21:58:30.987000 +CVE-2022-50349,0,1,e79ff0ea995b071167fd89b1cdf2ef1fcaddc5ee68c0b51f718c2b798c825971,2025-12-01T21:58:36.913000 +CVE-2022-50350,0,1,464b748636a1f2e13c759dc611dec97750b07cce2acc110068d20e60a929026c,2025-12-01T21:58:43.630000 +CVE-2022-50351,0,1,6c4a0fe85ff51690562937168c7c496e5cd072a0553891a18190340f6a7db13a,2025-12-01T21:58:48.517000 +CVE-2022-50352,0,1,4ed5e4dd9d0853e9e49bd95022c40965c5354735735f0352e23b4135c4a3e4e4,2025-12-01T21:58:54.167000 CVE-2022-50353,0,0,b0be5a7a87611fe9f6d51b40991a36d8ca88e6bacfde7da32d8c0ae1d4c8735b,2025-09-18T13:43:34.310000 CVE-2022-50354,0,0,5d3f93135d0b04ec34898ea157559c407dd649f66622f09f533c5c7e94ce45fb,2025-09-18T13:43:34.310000 CVE-2022-50355,0,0,b95e7ed4dc25273534a27aef29cc7dff14a0b22de369f5addca104e333599813,2025-09-18T13:43:34.310000 @@ -243708,25 +243708,25 @@ CVE-2023-53300,0,0,e2a694a166f78952b7a68e9f6e5bc4df999f24a074b44db96e24f0f10210c CVE-2023-53301,0,0,6412b42d2cf5147ea19ede7c3574f21a64cb04a59b54f6fb9d76cec87066477e,2025-09-16T12:49:16.060000 CVE-2023-53302,0,0,0ecc00caa6675fd71964ab2a19dbef727cfe7bd2594464107857639f7d8c9720,2025-09-16T12:49:16.060000 CVE-2023-53303,0,0,3c90ead4e94ede791a0f521c7772300756df88f0ca45be172ab26d59a11feb29,2025-09-16T12:49:16.060000 -CVE-2023-53304,0,0,8e7564a93b89e9a51acff2c81e8fb45ce501e0f626e1cf3803b1fa1e23515618,2025-09-17T14:18:55.093000 -CVE-2023-53305,0,0,6562068eeb5e67e371d23fc049f80279a92d18e5652d5cb922c4a74aa1bf5ce5,2025-09-17T14:18:55.093000 -CVE-2023-53306,0,0,6cbf44c20d9528014c5253219893a066d699a4a3a0c2c96c1cf1554e539a7bdc,2025-09-17T14:18:55.093000 -CVE-2023-53307,0,0,633006832246437c151030cee1c2131a6310d8f43adab7ebc6ee3b36f3816af4,2025-09-17T14:18:55.093000 -CVE-2023-53308,0,0,ef46bede7d6274208b5dad2f71c3fc4bbc4965ba220aa57e4ef7c8c25b2610f2,2025-09-17T14:18:55.093000 -CVE-2023-53309,0,0,647272e3bebaee42d5a2bc7a44d1dc2d03e0ec9e0e814c3ae8e0b264e036f87e,2025-09-17T14:18:55.093000 +CVE-2023-53304,0,1,a1d182138e6135fcd324f17c0fe0aee619791f654e56f0d4d8cbd6c8a46800c6,2025-12-01T21:58:59.480000 +CVE-2023-53305,0,1,437e89b0f2d300803336fd44db413c226a743b08a311555d6b79a6c1c6865ab3,2025-12-01T21:59:05.670000 +CVE-2023-53306,0,1,21823df9d4fa2740ea0ae7a62393125835d406cc6ae387d886c2f7803f8322be,2025-12-01T21:46:08.330000 +CVE-2023-53307,0,1,6f074118809139bc8b7bd6d76ac9d30ba11db559c9280a93ab0525e30a7388a9,2025-12-01T21:46:18.413000 +CVE-2023-53308,0,1,ee0a259fe8a2c741bcf535e212ac83d9a10a956ccdacef064138f4322ef076aa,2025-12-01T21:46:25.467000 +CVE-2023-53309,0,1,0b63a775e687daa547e837c16223f09d325b9fd62d78e7da2ecbf487f4f0acef,2025-12-01T21:46:35.660000 CVE-2023-5331,0,0,905019108665e93472a16e8702e015b2c86b26e5c458a698c25f3fb5c42b8549,2024-11-21T08:41:32.870000 -CVE-2023-53310,0,0,8d69fe39516a159afee9d452133b374f690f7ff4b2f1b63774df7131cfa2c277,2025-09-17T14:18:55.093000 -CVE-2023-53311,0,0,66761025ecb7eeb23d7cf7e375c59f39096c51b277b3cba53cfd78f116b94856,2025-09-17T14:18:55.093000 -CVE-2023-53312,0,0,06ed656b4905f358efa308b8c0bdfb4d5c50668d773b1fd63e018fab0266bc22,2025-09-17T14:18:55.093000 -CVE-2023-53313,0,0,b10b120ad221b0e9b101f21b23379590620506ee01de41b1d81e7a0584e22d25,2025-09-17T14:18:55.093000 -CVE-2023-53314,0,0,01ac44531a0b97f27873037382b61b3797a9e221728f05dcbff5f12df9a62a35,2025-09-17T14:18:55.093000 -CVE-2023-53315,0,0,86f532aaa2e287c8d232f7d48bead74e8085f2126ae4f01c7feb373e188b59b3,2025-09-17T14:18:55.093000 -CVE-2023-53316,0,0,6134bbb075a1dada51ef11ca52c28323b828cc3f64bb9efec7dc6ac0713163fb,2025-09-17T14:18:55.093000 -CVE-2023-53317,0,0,89156330e4aaaf33210f1a71025bcc10572f6d3ea19363dd1f944e411d99e5ef,2025-09-17T14:18:55.093000 -CVE-2023-53318,0,0,fe937fcb1fc3b16184e0abf3133b14c6697350ba98ea28c6441cf86bf1efa6be,2025-09-17T14:18:55.093000 -CVE-2023-53319,0,0,599716eac069a0d756b74365acde70f195d0a03cde9facd910bc1ce7a3d2cfb9,2025-09-17T14:18:55.093000 +CVE-2023-53310,0,1,1ad0757d223ff1d7de4f89655c9ff573662434bd598bcf81d6f62b58c5708e1f,2025-12-01T21:46:56.757000 +CVE-2023-53311,0,1,371977f7d818fb174ce96b9b99b78b9bbfb5134cf00e96ec51a58db5dc7c2fc0,2025-12-01T21:47:05.500000 +CVE-2023-53312,0,1,4c9c1ed18ff591954c22e1a0e34121b21aa493fc82c6473b8a8c4506693717a3,2025-12-01T21:47:12.323000 +CVE-2023-53313,0,1,c4cf2c8a08a5767fcfb555b7b4cad513fb6b19d20d2fad87b359eb4706769014,2025-12-01T21:47:30.267000 +CVE-2023-53314,0,1,6785f7126e99b99b0ba2f7619db9e1541bdef20ae2a464e9261a336f7a4bfdb7,2025-12-01T21:24:11.990000 +CVE-2023-53315,0,1,990308e62458c432f909956dd1463774e479f57316da00d7aeb8b0d1d04dd502,2025-12-01T21:23:45.870000 +CVE-2023-53316,0,1,157ac496c9f9079cd2ec1148334e33737c7a7bf2440fc08ed6c4ba378380d53e,2025-12-01T21:23:37.097000 +CVE-2023-53317,0,1,bfcf81605924a842e73425f8d10ae49e7d623de7e87c498799146f108c428d08,2025-12-01T21:23:28.940000 +CVE-2023-53318,0,1,1c5b90ba7281163681b079da139ad432503bc03eecb43b702402abac32a62b76,2025-12-01T21:22:40.880000 +CVE-2023-53319,0,1,209c3b3176737762e6367e042a2ad4894c39c4719d3a38aec30b91afb68dbd5b,2025-12-01T21:22:28.760000 CVE-2023-5332,0,0,5c0ddb4e9eeb8ba2013bd50dc9e8f6942b77c70e3f31e48601ef79977b1c561d,2024-11-21T08:41:33.020000 -CVE-2023-53320,0,0,31184b23cb6c3671ac147a30b2eb3133d7cc29e10f7296c7e2bd44087efef87d,2025-09-17T14:18:55.093000 +CVE-2023-53320,0,1,0d097682c4a8d0a66d950991ffad3b6d744431e87f6758832fc6978d7278bff7,2025-12-01T21:15:46.453000 CVE-2023-53321,0,0,88dc66cd45552e0ad6e07172438f384040eab24887dc557b8904e7dd1816939c,2025-09-17T14:18:55.093000 CVE-2023-53322,0,0,b556a52fef16501cd098ed8f84481908f87f02840f9d89731b785b079af638bd,2025-09-17T14:18:55.093000 CVE-2023-53323,0,0,93b9d7a29bdbec5155aa79f3bd84cfa33e3d6c63228b6c7e570fa6afcb221d79,2025-09-17T14:18:55.093000 @@ -266819,7 +266819,7 @@ CVE-2024-39133,0,0,80d57ff929af4443c9967278b5200d0e137c9d36fd0907d09dedd0a00c0e7 CVE-2024-39134,0,0,77b1670887f7f19fde2ebfef4910df3e6a5a10efb3081ca8aebf39e2a9942443,2025-07-10T12:56:12.247000 CVE-2024-3914,0,0,e1df0e281df16096f76c00858b773615a6f934260a9ac46ec96e612528588ee7,2024-12-19T19:03:05.733000 CVE-2024-39143,0,0,b9815aa22eaa7fbb94073c69cc26c5c96a5ad996cff75f08c127a4567140623e,2024-11-21T09:27:14.440000 -CVE-2024-39148,0,1,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000 +CVE-2024-39148,0,0,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000 CVE-2024-3915,0,0,f35436eabf78a67ac47670681f7c3fdac78cbdff20f4e8e4ee8d2aaf0fec6148,2024-11-21T09:30:41.487000 CVE-2024-39150,0,0,e546bf0ffe6f1310ec7c20b4e93e68865b230c0c3d923fa3a8c0422bc63c6b5d,2025-08-20T17:49:31.033000 CVE-2024-39152,0,0,0fd1d13d45fa07b57e918fb6ab1233243318239aba2106a0e70a3a44b557aeb7,2024-07-18T19:15:12.330000 @@ -276715,6 +276715,7 @@ CVE-2024-51995,0,0,1992d2322fc226b33a5684039bb4ec2b0294491b1347d873cbbc207dd7559 CVE-2024-51996,0,0,ff85801f2278caabbb88a673f5522aa23a97c2f9d7260bda4506e22cbaf33529,2024-11-15T14:00:09.720000 CVE-2024-51997,0,0,acce3d20366994a4b626635e9d1a5180796478ce8a1652c0c783857ab39acd0f,2024-11-12T13:56:54.483000 CVE-2024-51998,0,0,9839aa62f76a80c9973f2fb8d41eecba253f6b3142e87cdc34afb99ddaff8394,2024-11-08T19:01:03.880000 +CVE-2024-51999,1,1,bfeb2109a7d15d3a7d16c3d91b842f5c763e163e32b16aac0e151d96f8ce1323,2025-12-01T21:15:49.100000 CVE-2024-5200,0,0,52d40bdd237dbce394715b45d86724ac3deda79d4cdca7fd89942bea3f08b0a3,2025-11-13T21:15:48.233000 CVE-2024-52000,0,0,164c382f8c88982eb63ce07c2be596e0b502f12f5ca998748920dbcc2ce078fc,2025-01-07T16:52:48.723000 CVE-2024-52001,0,0,78f4b3f4ac098d84e7755b87917d54c89f68966e660cd2cf99fbfaea2ecc818e,2025-01-07T16:48:41.057000 @@ -277088,7 +277089,7 @@ CVE-2024-52535,0,0,bef515410181a811c26fc680524553d9ad7877ab91586d8a4ff019d636628 CVE-2024-52537,0,0,452ae911f4de5122c99d1e9bb0a1a51cc02727fc3434d173d3a4156ab777cd38,2025-02-04T16:13:09.543000 CVE-2024-52538,0,0,295d2e6b8a4aaa886e973854e976112e349de1c4d0c46424ea3efe146793220b,2025-08-04T19:15:30.007000 CVE-2024-5254,0,0,b08a56d01443c9abf44ee33ecfae9cdfa73a8d20318044fcd2f5caa1e9d31f2e,2024-11-21T09:47:17.063000 -CVE-2024-52541,0,1,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000 +CVE-2024-52541,0,0,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000 CVE-2024-52542,0,0,782d30ca63c890d96ad6bbe11bf7f4bbe0aeaf8efe12cef1c1148c420124d676,2025-02-04T15:56:24.143000 CVE-2024-52543,0,0,33519c6ddd0702e3ff651d02a1fcc974b38a1e8f86180d3c4f24bb697efb92b1,2025-01-29T20:26:09.100000 CVE-2024-52544,0,0,e71974852ab984c425352f8b8a135c763e1277389245cadadd85675938665e03,2025-09-05T09:15:31.400000 @@ -279317,7 +279318,7 @@ CVE-2024-56084,0,0,a773f0b27f606f7036d51b2acf244cec3d09f5e4101745dbe67bbc00feb59 CVE-2024-56085,0,0,bba9421fdb624ebe6b89b9f8300d02af17bc144bbd18788adbf415afd6d7bc33,2025-04-17T01:48:50.467000 CVE-2024-56086,0,0,338e8681b6da73ef2d425d533755238a5249dbff92eca4292b7b051dba69ffce,2025-04-17T01:50:13.210000 CVE-2024-56087,0,0,fa5b9d49e58cddd34d89b133d1ade77948d2396510c529bc1409ece170210a91,2025-04-17T01:50:51.800000 -CVE-2024-56089,0,1,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000 +CVE-2024-56089,0,0,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000 CVE-2024-5609,0,0,4c03a855f07c8ea18d8e7a70e1e2d3467f32254daea5abf62f130fb919fa93d1,2024-06-06T19:16:09.920000 CVE-2024-5610,0,0,c876fccd541dbbe5edac90b3257f7d2b3efde4d5bff83326921f06d03b7a383e,2025-01-08T23:15:09.653000 CVE-2024-5611,0,0,52c51c7a288f3c0ab122ffc809ef2624c3045fff37cac024f8608d70739aac41,2024-11-21T09:48:00.920000 @@ -286649,7 +286650,7 @@ CVE-2025-11128,0,0,bcfebada1a666cbf69243dcde7af147b2dc34fb1a812138c60550ed8740ab CVE-2025-11129,0,0,3fd77e483a6bbabc9c1af5b1ceea836e641a8aa08d8d0131bebc0c12f62e8eae,2025-11-12T16:19:59.103000 CVE-2025-1113,0,0,e5f8c788cf368398c9beeca18f9ddf681684f5123ecd1fcada0a1cd88526889e,2025-08-21T20:29:15.170000 CVE-2025-11130,0,0,e4fb16b8132c378b40de8c68972d189abf355a56419494e7964e70955aa3840f,2025-09-29T19:34:10.030000 -CVE-2025-11131,0,1,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000 +CVE-2025-11131,0,0,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000 CVE-2025-11132,0,0,24d069a308eafc30cafe0485a92b69f6672adefcd180657bfc8abebba88f675a,2025-12-01T15:39:33.110000 CVE-2025-11133,0,0,5009cd8f1ad05d46949329c493a9c59793603777409d7b812e319ea4d41eb31a,2025-12-01T15:39:33.110000 CVE-2025-11134,0,0,2029f9216d643e10ceb0c2c08f1276fcc04d82872d6d19b3d6748aa627636d9e,2025-09-29T19:34:10.030000 @@ -287035,7 +287036,7 @@ CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda22 CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000 CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000 CVE-2025-11560,0,0,41320c7bca653724aeefb1698dfcf2aadec5bc08db4bbad174499d8896fbeb69,2025-11-13T18:15:49.173000 -CVE-2025-11561,0,0,60be4025a817fdf295949cd46cbe7334878326d8a89518cf775bba6ae6ddd2ce,2025-11-27T12:15:46.180000 +CVE-2025-11561,0,1,1aeacd26bedd128f28a1d8d9c97023ecc5d91732a938846875d64824ea78c9da,2025-12-01T22:15:47.440000 CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000 CVE-2025-11565,0,0,44c855fafbee39febbaa989ebf207f4b697c93f30d053c844bb7f314672b7f75,2025-11-12T19:15:35.053000 CVE-2025-11566,0,0,167a7ef1a80923294a00731c1f5a2e1258720e60656847b02b5e635b35a75974,2025-11-12T16:19:12.850000 @@ -287168,7 +287169,7 @@ CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1 CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000 CVE-2025-11696,0,0,36550cf0ada55c8e38e560820cce1add2d8ce8c1aea2284620eff9d4225b433a,2025-11-12T16:19:34.210000 CVE-2025-11697,0,0,0ba8beba7725c00d0cf8084297945c43976b6d47fbb61f496e24fded8ef5a1b3,2025-11-12T16:19:34.210000 -CVE-2025-11699,0,1,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000 +CVE-2025-11699,0,0,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000 CVE-2025-1170,0,0,f7c4bc09181f11b6c73f7828607020c9f0e484c622ceb324f78d52675a120ce6,2025-03-03T16:37:36.117000 CVE-2025-11700,0,0,19cc4ede8773653a6ec2c7ea7d83729c71fb8d6f1a8589c5a9a5db2d85469151,2025-11-14T19:30:44.700000 CVE-2025-11701,0,0,7ad5d4304ec1eb74222638c60337f5c4ebd0e056bdc09bf379e5bc0bd73ddcdc,2025-10-16T15:28:59.610000 @@ -287229,7 +287230,7 @@ CVE-2025-11769,0,0,a679a256d9f80cbb1389cd7c7600b2160d12933c942b2e5b5a41181c02ae9 CVE-2025-1177,0,0,a9031c02ad15cd3b79dae0a4c247f1d863fa16483cc0621210d54f890eaefbe0,2025-02-20T15:58:50.097000 CVE-2025-11770,0,0,3eb022a62c0324ba035382005ef2e3a6e3e2f9459455a7e14932f4532ae6829c,2025-11-21T15:13:13.800000 CVE-2025-11771,0,0,3dbc58f384013a34fcc31cb3e81c99ff270de2e8526548045481512aee9182e9,2025-11-21T15:13:13.800000 -CVE-2025-11772,1,1,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000 +CVE-2025-11772,0,0,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000 CVE-2025-11773,0,0,1145bcd73afded945a94d06020411a77c28c6f0c6da628619fb6eec609ff33df,2025-11-21T15:13:13.800000 CVE-2025-11776,0,0,c77e09493779ca2a8622c03c44c090476ff7fedf67760c77c46b8df3053a8e48,2025-11-17T17:52:51.513000 CVE-2025-11777,0,0,17e530f57587bcf36b60effe46a9fe7c96547db6e1c99688ca684cfa0bc37ff8,2025-11-17T18:05:07.173000 @@ -287503,7 +287504,7 @@ CVE-2025-12101,0,0,694a033c3edc5cf7c26bb82a899caea6ef6671dfa0c3e2011384b598caf56 CVE-2025-12103,0,0,9cb868e56a5f8415fe29fac8a54f349f47a6c5ee1ab2822035f6eaf091069ed7,2025-11-12T17:15:36.007000 CVE-2025-12104,0,0,421627973ed8ce426d2efa1b9643012161e382c32a17d6a29addbb6be7235fb5,2025-11-07T20:05:44.410000 CVE-2025-12105,0,0,dc7d0fd951528726918a837ee4537454016ca91429ec1333d1b5957a78a953df,2025-10-27T13:20:33.350000 -CVE-2025-12106,0,1,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000 +CVE-2025-12106,0,0,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000 CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a178e7,2025-11-06T19:45:30.990000 CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000 CVE-2025-12110,0,0,8f17bdbc8d8059197a3ad63e1dfa5913bc635f41dbcdb27b22f83cc64212d9ee,2025-11-28T04:15:59.740000 @@ -287556,7 +287557,7 @@ CVE-2025-12176,0,0,51600658b76b8abed7d6a398e4c4cb5526eda72706d4808694322523753d8 CVE-2025-12177,0,0,a516ceb62e2212e2658270c753c65a8528d1292d4adb5d88e6ed3c1f6752e688,2025-11-12T16:19:59.103000 CVE-2025-12180,0,0,706ded67723279ae679ea8a333580d98de93133f559c2ae245f3cd4a4afbff28,2025-11-04T15:41:31.450000 CVE-2025-12182,0,0,04714423c38cafa185523dc6e162118ee4841c3fbc17fa16f369cb4b3a84e7f3,2025-11-18T14:06:55.963000 -CVE-2025-12183,0,0,be7bb0fa1b9d7505292810fe463fe3a03e0f9256ce91524bb0c7c20d9f977811,2025-12-01T15:39:33.110000 +CVE-2025-12183,0,1,367e2afa8a2b7673afc1cfdd5f058820877baae401c6ea6b4bb5d351370b35ee,2025-12-01T21:15:49.800000 CVE-2025-12184,0,0,be752abd2f1d114dc84a062fb352b4536431571405a4ab3177e8747475735a18,2025-11-04T15:40:45.533000 CVE-2025-12185,0,0,0c1f0a26d080e334a74a6c6b8deee641f8133460696c8d1238e911b5e7c6218b,2025-12-01T15:39:33.110000 CVE-2025-12187,0,0,3056c3ab8d89d2755db634d4cb95d2e7cae150f33cecf32d33886a5af85e72bb,2025-11-14T19:15:56.707000 @@ -288011,14 +288012,14 @@ CVE-2025-12751,0,0,9e6dedcefca617264af74e3f8b9f1202acfa2416645e6d3c2c6524757430d CVE-2025-12752,0,0,bc1fe114ab5ed09c761d7c5a92b6db91aca05986efdcc1e82cfce45392b31a48,2025-11-25T22:16:42.557000 CVE-2025-12753,0,0,dce5488b6a7e1342b5f0ee5bf5522a34d7f724ae148d764c7afd4a1dd45f1372,2025-11-12T16:19:34.210000 CVE-2025-12754,0,0,c80a4804ba616568e0704a3735004746ab5b310abd5ad2c2e74aaf0f477e6450,2025-11-12T16:19:34.210000 -CVE-2025-12756,1,1,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000 +CVE-2025-12756,0,0,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000 CVE-2025-12758,0,0,b025435981121766904eddf5fd85a5d25e7cee730f8ffdab23f44d04f0ab6520,2025-12-01T15:39:33.110000 CVE-2025-12759,0,0,1e4b0d0f56ea4176048a6d84d99ce33c188aac4441308cd04ac71d6e3535f776,2025-11-23T23:15:45.843000 CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000 CVE-2025-12760,0,0,a666c297bccf6721f0333387866caf56ff4a0772e51ff22a1223020f78ef1d77,2025-11-19T19:14:59.327000 CVE-2025-12761,0,0,c2d0e2f6b80f07425e45247ebb3e7c4a065a174d5542efad80c9ce6302fa38be,2025-11-19T19:14:59.327000 -CVE-2025-12762,0,1,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000 -CVE-2025-12763,0,1,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000 +CVE-2025-12762,0,0,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000 +CVE-2025-12763,0,0,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000 CVE-2025-12764,0,0,6d986726ffd81d1c808da0d6c07a6f5bf3345f639a5f139e01434f3732f41cfa,2025-11-19T21:19:33.810000 CVE-2025-12765,0,0,babbaf007153935150e7ca0b0f22c092fcddbb8a7b9735345ab84b334998a41f,2025-11-19T21:18:09.750000 CVE-2025-12766,0,0,1c2df7dd550d41dc4d18eccb534b3f0f66da11227cba6410f47d415ef6b8dcc3,2025-12-01T17:22:03.653000 @@ -288304,7 +288305,7 @@ CVE-2025-13210,0,0,4962badd6a94f63b55db5dd69152518462def29d748f4154f688f397b2a96 CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000 CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000 CVE-2025-13221,0,0,f11e0d2569a48d2fcac26bc250b2c712a99ed195f472f50be6a93a8ffd553a97,2025-11-18T14:06:55.963000 -CVE-2025-13223,0,1,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000 +CVE-2025-13223,0,0,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000 CVE-2025-13224,0,0,199be984c14458a980f221bda566b7c7977627dc2f72a4bc3c1a17760645dcec,2025-11-19T13:04:59.100000 CVE-2025-13225,0,0,45f62704526647b3500fb7084f4632a07186faae4900a87cffbdb5f4cd017c9a,2025-11-19T19:15:47.533000 CVE-2025-13226,0,0,568acad095c31f51f3a19f2821f40a46e0e960fe78399e405e65236cde6691ea,2025-11-19T13:04:51.433000 @@ -288430,7 +288431,7 @@ CVE-2025-13389,0,0,9cad26e55a5d23485fef4c2d9e093c0daa8542c618c2db32da617b45c6bf0 CVE-2025-1339,0,0,6860f8f36032bcedc9f18d921cb05e31dc82859a782caff2668b67d0b58904a7,2025-03-10T17:11:37.343000 CVE-2025-13395,0,0,8a83c10db023db91e3918ecab17835650f1b29de2171d664ec4aa75545f788f4,2025-11-19T19:14:59.327000 CVE-2025-13396,0,0,cdbb29c720acc849dc4a055fe6fe98de320a6c825d75c1c3145c6e8f97621cd1,2025-11-20T16:23:57.650000 -CVE-2025-13397,0,1,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000 +CVE-2025-13397,0,0,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000 CVE-2025-1340,0,0,b9875780a16a13744dbcd5d844e8ca36a7e2aa268ada35546ad50497001d4e5b,2025-03-10T17:14:20.723000 CVE-2025-13400,0,0,fe6813d8f32cb93e656589cf22f4b883ba80630fab349d971cbfffe4e3cd3b64,2025-11-20T17:08:03.573000 CVE-2025-13404,0,0,3106ac07f0d9c7689dda9e740a980c99530f0c00b6681d1537dd06bf02a80ba3,2025-11-25T22:16:16.690000 @@ -288571,11 +288572,11 @@ CVE-2025-13735,0,0,fbdc12440d4b645fa4a328734a96f5915261a0822b6db338ddfbfc4e9d1d2 CVE-2025-13737,0,0,06ed0d0bcaf1dec57d0679e220b48e09b47dfbd27d83fc23363e60a384c4e6d3,2025-12-01T15:39:33.110000 CVE-2025-1374,0,0,c63cfcac4cc7e61dba55405a222ef271dee63812916e3abadacbbeed1056c0bb,2025-10-23T20:06:00.793000 CVE-2025-13742,0,0,651e9c656e7488b9eb0b1b5c825c8da1ef1fcda990eddf39cbb4856d4b71250d,2025-12-01T15:39:33.110000 -CVE-2025-13757,0,1,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000 -CVE-2025-13758,0,1,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000 +CVE-2025-13757,0,0,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000 +CVE-2025-13758,0,0,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000 CVE-2025-1376,0,0,de4237f06ae76bb371bb37755604dd21a28e325c264f69c8440e79b38d9646a3,2025-11-04T20:21:18.260000 CVE-2025-13762,0,0,e4a9613b67d1e2508956ecb01c28f9782277d78d11fe449e34337920a125d445,2025-12-01T15:39:33.110000 -CVE-2025-13765,0,1,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000 +CVE-2025-13765,0,0,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000 CVE-2025-13768,0,0,a163ea22657ba17715998855bb30ef9bfa0d5adac1c1af6ac0293213577b77bd,2025-12-01T14:39:31.940000 CVE-2025-13769,0,0,297bea2dc34ad119dc2980daa6e5f81e5dd2c38cb285e425b7f8693c8edfd54d,2025-12-01T13:13:51.040000 CVE-2025-1377,0,0,cdf3c00849797fee9786ea08188d37668b21a456809fa64aaace8c05203cfaf9,2025-11-04T20:26:20.043000 @@ -288586,14 +288587,14 @@ CVE-2025-13782,0,0,633143ed5b774c88beabc099d543e2124efd2f569a0381fdff0ee06d6230d CVE-2025-13783,0,0,9e3fa079ee37ab52fc60bd87d5e1e1a80b89c5fa1ce7efec325fdcaccf7b074f,2025-12-01T15:39:33.110000 CVE-2025-13784,0,0,400b5424778aa984892876e01cb91cb42eb2668e77edbcee3b75ef4bfb76ca69,2025-12-01T15:39:33.110000 CVE-2025-13785,0,0,8f91a4cfde425cf28727747e3a8324f58919a55662a74d3e021a6fb4dfe16095,2025-12-01T15:39:33.110000 -CVE-2025-13786,0,0,7bc988f078e9b09747fa85e6529d9798348ebea2411115bc41aa708f8a1fadf9,2025-12-01T15:39:33.110000 +CVE-2025-13786,0,1,faefec8f82eace823af3eadfdd9e401c1532825e4b65225972b717f2138f6bdc,2025-12-01T21:15:49.950000 CVE-2025-13787,0,0,21b6a867d86792c53769e6eac82f07d87e652d15e541875aa9a8b91e33b02c2b,2025-12-01T15:39:33.110000 CVE-2025-13788,0,0,80c51aa429c3a336348e7489daccb9a7098889688d2bb77a8664aa3696634111,2025-12-01T15:39:33.110000 CVE-2025-13789,0,0,aa68242411fe5000c2ea58eea6dbb1eb40df4049de97ac6bf98e8da118da9faa,2025-12-01T15:39:33.110000 CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000 CVE-2025-13790,0,0,420efa5394e93c667c667dedd7b9563b492b63833c60c220c04de86852e3a2dd,2025-12-01T15:39:33.110000 CVE-2025-13791,0,0,e08c12980bc607bebba43166171191e321a125cbeedd99efdbbd2f6af7f05e5d,2025-12-01T15:39:33.110000 -CVE-2025-13792,0,1,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000 +CVE-2025-13792,0,0,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000 CVE-2025-13793,0,0,cee72f8cf2011358fcb17c0da768201ddc2b1d608827f8b279ec4e127b5e3ff0,2025-12-01T15:39:33.110000 CVE-2025-13795,0,0,997af5e0bec0000a9aa80bb7fa15a961c6515812519d9cb784cb425b0c07ab10,2025-12-01T15:39:33.110000 CVE-2025-13796,0,0,851a06944e44367a53781cedd5bb574eea06934997eb7084a4bc11f8c553d3e1,2025-12-01T15:39:33.110000 @@ -288622,8 +288623,8 @@ CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074 CVE-2025-13829,0,0,4f64fcd3ef610c312085803267e8f9cf95c0674c501918a12f46a5a7e6cbf0cb,2025-12-01T17:15:48.807000 CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000 CVE-2025-13835,0,0,639c6007deb0cac63cbe44fa6bb52543cff1e013603be33d3a41554407e3a5b9,2025-12-01T18:16:04 -CVE-2025-13836,0,1,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000 -CVE-2025-13837,0,1,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000 +CVE-2025-13836,0,0,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000 +CVE-2025-13837,0,0,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000 CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000 CVE-2025-1385,0,0,cd0488ff01f383d9bed7e9dfcd438a68752b6f1d05d46ab0fe46ec06da7cead8,2025-03-20T08:15:11.723000 CVE-2025-1386,0,0,1e2bc83eeb339828b23f6854fed3e26712eaf84d02859537da20d28063a18e14,2025-04-11T16:15:19.490000 @@ -295424,7 +295425,7 @@ CVE-2025-27204,0,0,915ee58270bed657aa3414a33920c2828a16919cebf1c439beba158fba489 CVE-2025-27205,0,0,f966fa29a96c9fd50b3bf62dee097dccb11f1346c8935ce19a945be5d4c76047,2025-08-05T15:59:53.160000 CVE-2025-27206,0,0,d294d50f3906c6fb3fe785cd1596aadcf69ed2db2162953cfc8dc1288ebf1c78,2025-06-23T19:25:38.097000 CVE-2025-27207,0,0,1c7dcef4ac4e484392f18d8488dffbf14e7319161e3db5ca63f06641870014a6,2025-07-11T16:42:26.887000 -CVE-2025-27208,0,1,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000 +CVE-2025-27208,0,0,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000 CVE-2025-27209,0,0,2ed4734330db6198f7eeccdcf43602bc5989a3c88bc5f2f9d0e33392e557679c,2025-11-04T22:16:08.007000 CVE-2025-2721,0,0,aa8959d6414ccd78b185fee276132fe2183524f73060666b030d6ef296f0e6b0,2025-04-22T13:15:42.990000 CVE-2025-27210,0,0,c435f52bee6497699eb0de44c88f27cb60e7ed7642a107b37268e6389ac4bc6b,2025-11-04T22:16:08.123000 @@ -296270,7 +296271,7 @@ CVE-2025-2875,0,0,0fc58b1873d97c82b44352a6a2dfe32000dd19d00f391df82ed79458e6e0bb CVE-2025-2876,0,0,34c79ebfe20c2fc13294537c33b0ff61b155c827ab3c12d5f8ab0c5b0bc4cade,2025-07-17T18:15:22.720000 CVE-2025-2877,0,0,84ec84d2bfb12624c83348efbdfe58ac8be43428be65066c732bbd9fdb6142cb,2025-04-07T16:15:25.720000 CVE-2025-2878,0,0,91ed70612b37527f5a64720333f3ec88a66eb4235ee494c58d3cdb31eafddc33,2025-03-28T18:11:40.180000 -CVE-2025-2879,0,1,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000 +CVE-2025-2879,0,0,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000 CVE-2025-2880,0,0,e389725818c992645d02e6070b5c39fb3800bf8237a4c9078a3291c23ae5430a,2025-05-02T13:52:51.693000 CVE-2025-2881,0,0,fdb559a0489fd102237eb30f41f019d2f5c2b3faa82f877e9abc8e7c02b82b2c,2025-04-15T18:39:43.697000 CVE-2025-2882,0,0,c97b3f3ea8d4bf1b525408e9c0aeb5839e6b1dab2a43ddecf7ef1915f34a41ad,2025-04-08T18:13:53.347000 @@ -299764,10 +299765,10 @@ CVE-2025-32984,0,0,8105d87a07c5c95a1a426ae174deda99d5a554c19d681b58930899a19e6a0 CVE-2025-32985,0,0,15098eb35dd96554c37930bd6550d414995a3f61b8322bd641d2b24b0e89c7ce,2025-05-27T16:57:03.517000 CVE-2025-32986,0,0,2131eb0c109893f204ec917def61d06bfff3cfebc0c3882e871b74792f8d9430,2025-05-27T16:56:44.530000 CVE-2025-32987,0,0,22fee82644638daf52e45d25879682a7b8e6315d4283004fcb29ee09fc3f6bc1,2025-04-15T18:39:27.967000 -CVE-2025-32988,0,0,c4b94285c0c011b479cd87db54225b654eb1f239d7da2a775ef1e13290e388f0,2025-11-06T23:15:36.797000 -CVE-2025-32989,0,0,44fc94eb8d69ea61abd434c881a29195641b5871999a534c7fa067af1465acc2,2025-11-06T23:15:36.993000 +CVE-2025-32988,0,1,7d280d4a9c155d9ba35794717309cc47a3972860e2c86caa2627c419ea605ee7,2025-12-01T22:15:47.790000 +CVE-2025-32989,0,1,a783d4fbd6243b0cb1c288ac63944ffb14a445bae60d8756875dabd681cea579,2025-12-01T22:15:48.027000 CVE-2025-3299,0,0,4bb68d1a77531b6cf0d60c8ebf8a47f27b8c946ab637bd433e4b42368b67a253,2025-04-08T16:48:45.137000 -CVE-2025-32990,0,0,6645099b34d1408a143681639c241a61a2f1ad0178e960a96432bd602227a2cd,2025-11-06T23:15:37.137000 +CVE-2025-32990,0,1,1ff121c2edc4a308ae27fd27459b92f6363cfbb4ea8c06bb4048a82e6422006c,2025-12-01T22:15:48.200000 CVE-2025-32992,0,0,e5bec7e3fca95a91fdf085a1367f7fe05ffcb743c4da97df3b58e4c770ff8cd0,2025-08-18T21:15:30.130000 CVE-2025-32993,0,0,efe10e43b700d805bab5f9cbf4da0d85804a68c5ec719e614ee799809a295233,2025-04-15T18:39:27.967000 CVE-2025-32996,0,0,44b03681b27714100d4188a860d77e764119a0a8b23389da352345dd35fd80ad,2025-10-21T14:43:20.087000 @@ -300252,7 +300253,7 @@ CVE-2025-3429,0,0,e111017acbfc3ad488b5577926e388fe8cea296485a5a387e88a0046c384d1 CVE-2025-34292,0,0,3f361b5a4f6bc0cfd7abe2b332d5aa343eab9382aa0b054f8136dcaa1ca5bf46,2025-10-30T15:05:50.613000 CVE-2025-34293,0,0,4fc900fd6217442a213ce5cdfa3d3646768f35c35d6fedd37bbd4b03720a4453,2025-10-27T13:20:15.637000 CVE-2025-34294,0,0,dfa0f81a66a7dba230cfc3d9417171e889ba13690a242d8eccede1a9e8e02e96,2025-10-30T15:05:32.197000 -CVE-2025-34297,1,1,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000 +CVE-2025-34297,0,0,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000 CVE-2025-34298,0,0,7794cda8b7a546bc2c75cad122bc0c18f88ef91ff907c81fd0fd1d02cb6d7468,2025-11-06T16:27:12.660000 CVE-2025-34299,0,0,e64967b428dd7916224ed796e4958560e643eef2969604f0a4d6f96dd463a5cc,2025-11-12T16:20:22.257000 CVE-2025-3430,0,0,a8dd209d2f3ffc999e493da170fd38f29e4ca6c65941e704b12a73f04051bb5e,2025-07-10T14:18:52.400000 @@ -301972,7 +301973,7 @@ CVE-2025-3864,0,0,444a554174f3a166bd8cf43652805e71b133026b842d6829548d5a78647f68 CVE-2025-38640,0,0,72ae58957a2e676235a4b1f4bc27057e142ddbe22b0ed6b29ffe395ea06d730a,2025-11-26T16:36:32.227000 CVE-2025-38641,0,0,d2d32dfdbdd1ea9942126c1d29c744e9fa9d35d6e818336c24f86145a68587bc,2025-11-26T16:37:03.980000 CVE-2025-38642,0,0,6458672a68fdffc56fdc614a317fb2b1d8ddd1bfc6fdcbc3395a523dd441038c,2025-11-26T16:38:47.103000 -CVE-2025-38643,0,1,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000 +CVE-2025-38643,0,0,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000 CVE-2025-38644,0,0,88f783f716df7ecacc61cd82108df8a73fea0e7a98e73d1ea802714ca1172b1d,2025-11-03T18:16:32.873000 CVE-2025-38645,0,0,5938c94c945ec43e2003923042d3937b680d8755a9da0a3f581ade96f6ac6ba8,2025-11-03T18:16:32.980000 CVE-2025-38646,0,0,ddf2369894f5ff9ef8f7d69b65bfa8d47476f90b0d18fb557e12a010319400b0,2025-11-26T16:42:46.323000 @@ -302611,9 +302612,9 @@ CVE-2025-39830,0,0,ffe943b0dbec618488d4717374a731b5ca359e082d0f7089f86c088675da3 CVE-2025-39831,0,0,8b82e557885e9f7a0e39f4f87a070d6aa09b026c43c9de5a54aaf8a55351093d,2025-09-17T14:18:55.093000 CVE-2025-39832,0,0,91373722795e1e8ae7aea4c639be3e4823e0b516b2b5228335a2333eb689154f,2025-09-17T14:18:55.093000 CVE-2025-39833,0,0,feac8baa878b5b4d83ac1abb10596ddc370b18b14a36547354d01212ae27e7eb,2025-09-17T14:18:55.093000 -CVE-2025-39834,0,0,455f9fe51780559d00358fafc49bf85e2c8fa49d5eb572db6140b9c77c927f97,2025-09-17T14:18:55.093000 +CVE-2025-39834,0,1,0f910e59f5ee47a7f87c358fe434001982550b40ddffb25f611f1bc1fe9526ba,2025-12-01T22:03:46.933000 CVE-2025-39835,0,0,63c0d3d47fda581dc11d378ea0bc5c43d45c6e4526251ff60a729ae99de73c4d,2025-11-03T18:16:49.293000 -CVE-2025-39836,0,0,ead37077839b6d4d8c6159a3f6cabc1da50384b75704cf01dee941f6956efc2e,2025-09-17T14:18:55.093000 +CVE-2025-39836,0,1,6cda1d39f84e3d5d01bd3183a9da8e603b7e2d62e46854a48d5183b752de4016,2025-12-01T21:59:35.697000 CVE-2025-39837,0,0,2f4bf1765df1fbfc8999adc3a1ae3b1021ff31d4f7efc38bd56982f7e4504dfc,2025-09-22T21:23:01.543000 CVE-2025-39838,0,0,538492d17fe0c78654b609bbafa513cd9c18323e0e46e40e054ae3b82bd46c20,2025-11-03T18:16:49.403000 CVE-2025-39839,0,0,0d2e0366a692fec697b67dc9bc2395bd52bade71b715f3d0fde3615a93b5b3f0,2025-11-03T18:16:49.507000 @@ -304155,7 +304156,7 @@ CVE-2025-43357,0,0,e7df40bad97e198cd8962fff4f23f3c4670d400a0cc9f4ae35d9331a66cdd CVE-2025-43358,0,0,23bd418b07c5c11fc29130251971d113c77668911900289fe6894037b710f0e8,2025-11-04T02:15:43.223000 CVE-2025-43359,0,0,1e38c08b23fe717bf38119c51640122068e421ebc9c1483d84e2d8163bd572de,2025-11-04T02:15:43.390000 CVE-2025-4336,0,0,e90be9fd0f0e50081b5081697499ebf47068955b362669f42164ef244e890187,2025-07-11T19:32:44.473000 -CVE-2025-43360,0,1,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000 +CVE-2025-43360,0,0,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000 CVE-2025-43361,0,0,42389cf848830a2b854dd7b4dab3f7852a072781ad3970a779cd9914a5a77c7b,2025-11-04T16:30:17.110000 CVE-2025-43362,0,0,c8bcb764c761d46222ba8fe72ac4eb95b638c759745bf614c6c9f6753a5b8319,2025-11-04T02:15:43.783000 CVE-2025-43364,0,0,5a05b555ffb156bc3012a304d9426844f63b73bb25b65426d4f78e2a9ef73b66,2025-11-04T18:48:00.353000 @@ -304211,8 +304212,8 @@ CVE-2025-43419,0,0,62e6863f342f6f96056dcdd65d320feeb44ecaac5cdbad231e125f387cccb CVE-2025-4342,0,0,910cb2a3ed27ed3fa67d71bb9bcb8375be73922349e890c48c75ddf2575d2d05,2025-05-13T20:25:14.167000 CVE-2025-43420,0,0,ff05007d34a6abd0c7f03da3dbdc2a549574d0458ce904d330040fd36275f278,2025-11-05T14:50:00.137000 CVE-2025-43421,0,0,531e0f88749117edd8e61f800e1564aa6b553596af41e87b523b10b17e22a0ed,2025-11-05T15:00:05.023000 -CVE-2025-43422,0,1,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000 -CVE-2025-43423,0,1,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000 +CVE-2025-43422,0,0,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000 +CVE-2025-43423,0,0,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000 CVE-2025-43424,0,0,b5141f9dd0e3527803ccb9b819c2d322d105eab122061b902f235482e88a9265,2025-11-05T15:15:36.513000 CVE-2025-43425,0,0,a4cf2045567ec74c3c9c84c2e49963bfed9ee9bcefce0b3d073ca938cc1de1c4,2025-11-05T14:50:22.293000 CVE-2025-43426,0,0,3d86a21e38696c1651d4ff3ffe30b173663e245f74678d21e2b3cdafe8466d8b,2025-11-05T15:00:13.510000 @@ -304220,9 +304221,9 @@ CVE-2025-43427,0,0,662601c48be5eeb5425fa272580250220eebd7cc20a68b4f34d034bc0bc34 CVE-2025-43429,0,0,0d9e25d8945dcc2dc9a43fd71bbc676a58a318cb4383b9bea7252b3c4572f4a4,2025-11-05T19:15:54.043000 CVE-2025-4343,0,0,923c0cef6ae5fa92856bfede6a2cee07988d425e984f25a366a7d1c75ef5d05f,2025-05-13T20:25:07.850000 CVE-2025-43430,0,0,5c9e69a500ca2b0da322efce72994b7855dbd14c4331cf906f4e81ff6d375555,2025-11-05T14:50:34.663000 -CVE-2025-43431,0,1,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000 +CVE-2025-43431,0,0,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000 CVE-2025-43432,0,0,cf40603c89fe31e5e8b64be015ae61c9f2522f5c9e69bdb802636055942f4872,2025-11-05T14:38:49.690000 -CVE-2025-43433,0,1,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000 +CVE-2025-43433,0,0,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000 CVE-2025-43434,0,0,aa8666695543e273d4d465469006e85b841e32969487dd60abcbef52b9695109,2025-11-05T19:15:54.893000 CVE-2025-43435,0,0,be14637997d04872d042c502f924fd1eab83a9a94b75a6e6fde725353eb851ae,2025-11-05T19:15:55.100000 CVE-2025-43436,0,0,8f9e4a39a8390087760746d3a4ca6f87a6e43958e23227fb98718057f10a693b,2025-11-04T19:05:45.737000 @@ -307248,7 +307249,7 @@ CVE-2025-48705,0,0,3b069502956cb6d5483858210e4d04c3f8625df0adda679c58e63091bbf50 CVE-2025-48706,0,0,3349ef920a170cd95999b04241686d934123b5e89f5df0438e336ebcc42ff437,2025-07-08T14:32:12.930000 CVE-2025-48707,0,0,e781fd2453735517746189035ba4bad9690e5b7c4978e63eb1bf36a42fe0f588,2025-10-14T19:43:56.150000 CVE-2025-48708,0,0,2f2ee7f6835a24101b8f2fad92720fa7e2d2cfee9343296271ef3f76df75e315,2025-06-20T17:13:54.913000 -CVE-2025-48709,0,0,3066088dfd43f5e6cba5fbc6373ee61a340815e1e67f3822b974dd271797c0c5,2025-10-27T16:15:40.490000 +CVE-2025-48709,0,1,44aa87f4fce2043c2e04f4e8b18e4d0ec7f4b2e601885427b5fca799fdcc9f6f,2025-12-01T22:15:48.363000 CVE-2025-4871,0,0,d9183a6ea5a2afa28642be53d20b661c6aa8059e9e6e695046b3eafadb08ebe3,2025-06-12T16:27:46.547000 CVE-2025-48710,0,0,f0402bb1ed6d8f6e40d35a516c63ba6d11524553c0fc1bb2ee868d959afc0447,2025-06-04T14:54:33.783000 CVE-2025-4872,0,0,4b7ea139f9585caeb8a40fd0035b9b3fc93b672209c7308e8ad73688646ffdc6,2025-06-12T16:27:20.143000 @@ -307458,12 +307459,12 @@ CVE-2025-48976,0,0,4d8a1819d637e6166101b801eaa25e6266b92f68bd80a362cedf1a2bb8c1c CVE-2025-48978,0,0,c8dca1a164c5a771ff8fc86700581a0a831318bcb504f858c82c2b7f2669bd4d,2025-08-22T18:09:17.710000 CVE-2025-48979,0,0,8cc67cff8b6a26bac1e3c9e584deb394783a7b871462ef6cae5df7254fdda330,2025-08-29T16:24:29.730000 CVE-2025-4898,0,0,088de021e18707e0dc4ec8499500601b39900fc456f0a7d4c0f7a0b50fbac254,2025-05-21T19:37:41.533000 -CVE-2025-48980,0,0,cfc9c82df391460a5b0dfba93742cbfd08021cba3a24443990e74a4bc5570477,2025-11-04T15:41:56.843000 +CVE-2025-48980,0,1,ca5fbc21c29e02d5fac8009d58def82ad46ef27ec2dc37014217cfd33fd0b4b6,2025-12-01T21:15:50.250000 CVE-2025-48981,0,0,5be2fc13748260c76be76145001536ae61607b4d9787a12735902d8a8de2cb0f,2025-10-08T19:38:09.863000 -CVE-2025-48982,0,0,fecc905a116bc4cd6e6bdd2bebd95539516075ea56b025b6bcf0607514fb78c1,2025-11-13T14:47:08.707000 -CVE-2025-48983,0,0,e4f0c6261174e13900bbc1426d176dffe4cf6ef240dea0e9994f5d8e002ed08c,2025-11-11T02:07:03.383000 +CVE-2025-48982,0,1,31be25a9f02f1bfb195a817124a290d608990a69e91b7d6460a94a52806fffc9,2025-12-01T21:15:50.380000 +CVE-2025-48983,0,1,7eb5f674887decf12aa11bdc66e3ca961d9a6749ac34af258ea8cc101ced68f7,2025-12-01T21:15:50.527000 CVE-2025-48984,0,0,4615a534e05deec6f9a4718b4ebf1f6c8be52138f0367c85fd6e7a4ec7a89c8a,2025-11-11T02:08:57.443000 -CVE-2025-48985,0,0,7537e95b5fa5cca849f052e15aa0ac61b2bfa7c42fe0f34ae0cdef3459dbd5fd,2025-11-12T16:20:22.257000 +CVE-2025-48985,0,1,d84a841f9d92c52c21bbeeabd9172b255bf65c06f0ba3ea32ec9dfd7b0ebed79,2025-12-01T21:15:50.673000 CVE-2025-48986,0,0,dfc979c17576cbd9d9c7402ae09116c1299ecd60b08063c41fe09a5a49f44d93,2025-11-25T18:57:29.873000 CVE-2025-48987,0,0,239192091f36c33ec6a9bdcdf307e7164d53d25495609a09c45da828cdbe71d9,2025-11-25T18:56:45.073000 CVE-2025-48988,0,0,b950ad497f92ccff1815f5da970ae7efbac48cca58a8625908e10e1ae29d920d,2025-11-03T20:19:07.890000 @@ -308645,7 +308646,7 @@ CVE-2025-50722,0,0,d6bcacbb1740597c0a941f7288bab7406d5aefb809a20248779e32451bce0 CVE-2025-5073,0,0,a1230535d583b5f466b5fe2615cca31afcba55333f600b324f190ec047a41d18,2025-06-05T20:13:49.707000 CVE-2025-50733,0,0,f821bb94d1001de4039d24c263726e694130cc538192f5709a6a9774af20b795,2025-08-26T14:15:38.110000 CVE-2025-50735,0,0,d68f8132adfe6e9a9f3af16cf39cfede1775cb165df543545c4baf2167c82619,2025-11-05T18:53:52.923000 -CVE-2025-50736,0,0,f84f002547ae1698344f6114a466c251719903765ce394da235f1ccad1df3e70,2025-11-04T16:16:00.453000 +CVE-2025-50736,0,1,0d37c8562487acb3e78617ed8b7f846c003076686ca19fe6c3eda738e7b3c518,2025-12-01T21:15:50.820000 CVE-2025-50738,0,0,bed0e0606dea2d270a63639d5c97b46375266cf3e08cc405aa6406622cbea9e7,2025-08-22T16:15:43.973000 CVE-2025-50739,0,0,e219787f244b3cf9059dc22a5ad144c42307e11d20456f395bad824de53e31ea,2025-11-04T16:16:00.617000 CVE-2025-5074,0,0,b32e6a163eb96eec8f69e51ca7a85c7da766b8b9d224e7b4f2f300a52a5b9bc3,2025-06-05T20:14:07.020000 @@ -308889,8 +308890,8 @@ CVE-2025-5167,0,0,d0507ecf0b5b21e24f107649f2515c6afbb660790e07751f18cd594dd93f34 CVE-2025-51671,0,0,e799dcb5c7f4e2c72e975ca6f751fefdaf18628907cc07caa283e469a95a7814,2025-07-01T15:53:21.097000 CVE-2025-51672,0,0,e9ac7fb0b8689d514c7731fd7b55a9a807b757912d941a99aaf4ad5aedffa427,2025-07-01T18:03:27.253000 CVE-2025-5168,0,0,74f02a822faaa8b5a46a78e41282b22e771403dfc5a44608e54bea89178ff6fe,2025-06-03T15:40:48.337000 -CVE-2025-51682,1,1,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000 -CVE-2025-51683,1,1,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000 +CVE-2025-51682,0,0,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000 +CVE-2025-51683,0,0,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000 CVE-2025-5169,0,0,478bfc131e88e29d02dd1ccd61a9e6c142c0208ac4743abe27cdac119eac9f7b,2025-06-03T15:41:01.973000 CVE-2025-51691,0,0,2a24a3eaa651e3e5b601a1abd027fcb755c20898339314610b9553186583b0fb,2025-08-13T20:15:30.700000 CVE-2025-5170,0,0,2d3c44ad97f24506915e1ae8aa2894c6137b30f378f725193e8dabaa89f599c6,2025-06-03T15:41:52.177000 @@ -309250,16 +309251,16 @@ CVE-2025-52655,0,0,0a3417f10e99f455113a8c82ee0982dedd7254527f8e71c9ef53b86c316b2 CVE-2025-52656,0,0,7d2866edd15a19d6e55dd9373522bdab479736e1c8528c549dcea246be31b833,2025-10-08T16:50:39.200000 CVE-2025-52658,0,0,e73966b0bc7bf6d5305b4e87e39250d15ac770e39ee0ad5c04eca6d4f64d1a7b,2025-10-10T15:16:04.233000 CVE-2025-5266,0,0,8a2ca669598a03f46dff8bb37dd9a638cdabbb10fe085013cc63a920d1c1f994,2025-11-03T20:19:16.240000 -CVE-2025-52662,0,0,13bcc4552f7de60d6cf943f71c382b8a38c9b40d4e3d3982f658bd2c622fba71,2025-11-12T16:20:22.257000 +CVE-2025-52662,0,1,a6665977862cc329ebffd8b6983bc46f6641a469c1cf01ccc16cb03a422b13c7,2025-12-01T21:15:51 CVE-2025-52663,0,0,89c70b1f284d5a929e459e22e646e0ae54f066a21de9f1960adeb90f3b16154c,2025-11-04T15:41:56.843000 -CVE-2025-52664,0,1,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000 +CVE-2025-52664,0,0,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000 CVE-2025-52665,0,0,a5b22c967c7804f42540105aa948eeadd5ad62886fc137a68b2d02413d7d18d3,2025-11-12T14:51:21.057000 CVE-2025-52666,0,0,7ab4726d0697eb34940e0b135269d8034c4df7ab4fa0f58868a7f44be70775b4,2025-11-21T15:13:13.800000 -CVE-2025-52667,0,0,398f6fd405e62f481c8b603b65b280c886c7bafa2f737d59e1ea823b6102d325,2025-11-21T15:13:13.800000 +CVE-2025-52667,0,1,7244e5dc4ececa3b5b47c916fa1c6000ee8b4319e581d01da0bbaca848e3e0e4,2025-12-01T21:15:51.130000 CVE-2025-52668,0,0,32b1d8def53b9bd7381fddab9a9c311fac16df6e6f67f17b06bfd4a8b5565ca9,2025-11-21T15:13:13.800000 CVE-2025-52669,0,0,928791c25a69858760e9cbeb8bcc71caf24fa8666dbd453ed5175528350d1c0d,2025-11-21T15:13:13.800000 CVE-2025-5267,0,0,e23087e179cf44134836de7a812203898ef64aba608e835a2c99df1f209d68b6,2025-11-03T20:19:16.420000 -CVE-2025-52670,0,1,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000 +CVE-2025-52670,0,0,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000 CVE-2025-52671,0,0,61e9d542ce061f46eade221aa20a05cded05024d037223bc36a0d7576e84dfbf,2025-11-21T15:13:13.800000 CVE-2025-5268,0,0,4fb0b611433478e9ed53bf2511f1d56960e851188c13f16758c88f8de9dc4515,2025-11-03T20:19:16.580000 CVE-2025-52687,0,0,557ddea57b56a7b1244ed82f9fa376bd958c5c08f84a9a0459f2b831b26b0483,2025-07-16T14:58:59.837000 @@ -310920,7 +310921,7 @@ CVE-2025-5452,0,0,0e03c28eb8c141e82fe45d8129b4ad74d2c08674693ab9035a9b621d688d6c CVE-2025-54520,0,0,edd9ee2cd20dd7e399aca89dd0be968134d588f4cd10885e1f75e0e2db03c0c9,2025-09-26T14:32:53.583000 CVE-2025-54525,0,0,a1ada4667a5f6ed06c64267db33ab9564a4d52ea9dd896e46bfad9899dfdb5e8,2025-09-24T00:37:15.620000 CVE-2025-54526,0,0,cf531368e951714c311568bc1673d34e619a1cd6d941cc3d86f20ff91f179d4a,2025-11-12T17:15:43.807000 -CVE-2025-54527,0,1,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000 +CVE-2025-54527,0,0,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000 CVE-2025-54528,0,0,374eec28724541b7dcd69d2e1fb24b23f752d8027f792298e528690c4e9ece28,2025-07-31T19:50:48.957000 CVE-2025-54529,0,0,b12713fd7fa3d2e47374229689fe67a388c255c104d141a1a48e6e16ba8af27f,2025-07-31T19:50:40.900000 CVE-2025-54530,0,0,ccaa0ece89b4752bb65ce8d5ac5caecd14370b0d2ae9a36ad37355b827e4efb6,2025-07-31T19:33:52.173000 @@ -311466,9 +311467,9 @@ CVE-2025-55118,0,0,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418 CVE-2025-5512,0,0,e298909e7d933eb5f783304ac70fd519fe6ced2380a8d0fd8cc914efcaaadd53,2025-10-03T01:14:16.500000 CVE-2025-55123,0,0,4984fb9150d448c08ba530fb65dc11c3731eedda0fb2848df325f4fdbdb0e97c,2025-11-21T15:13:13.800000 CVE-2025-55124,0,0,7abedd197a13cf5472452b0432f0949cf33c3886d077efccf60690b1d9d204ba,2025-11-26T16:56:10.200000 -CVE-2025-55126,0,1,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000 +CVE-2025-55126,0,0,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000 CVE-2025-55127,0,0,1b3e4227e0185aad2d93e5338145a40571fe8b2c3950ae640038a03e7612558c,2025-11-21T15:13:13.800000 -CVE-2025-55128,0,1,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000 +CVE-2025-55128,0,0,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000 CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000 CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000 CVE-2025-55134,0,0,b2c2e6641a08a1f90a382e7c16f9cbf1a484104a3e1d2676e21bb24dcd6efc00,2025-08-08T13:15:30.060000 @@ -311826,6 +311827,7 @@ CVE-2025-55745,0,0,77e8e7deb1f9ac7d7645c86bc9ea08d03deb7b1db642cac6e47a5ee5c536d CVE-2025-55746,0,0,822ae1c572f9c6cc338687fed05b8cfae84cc556af252bb06e5182d575d85dab,2025-08-22T18:09:17.710000 CVE-2025-55747,0,0,4af9e156321c6eb4a98f102326b9f1c173fba5fd125ab6b68182086c9591b0cc,2025-09-10T17:47:28.840000 CVE-2025-55748,0,0,70ed25c38b854033b335629a41cd8379fd34a23b732a303413cfcee8fb0c5492,2025-09-10T17:24:13.273000 +CVE-2025-55749,1,1,9b963a1a40af40a3c987ecfe84ba8c7fbeb29c6ec560c9cd70f6ef69a4ba1384,2025-12-01T21:15:51.617000 CVE-2025-5575,0,0,81a126dfb6ccad488366b77c36606cd2156f744efbd821f36b71a3dcd92de139,2025-06-05T14:07:21.913000 CVE-2025-55750,0,0,c7f71132a361ef7a2f532acf5ac74140aa021bcd0394f2b25fa15eb64da50a99,2025-08-29T16:24:29.730000 CVE-2025-55751,0,0,ef0af972860c9f59fb78952103082e0a696acedc5d99a1c6eea16c8506f9fef4,2025-08-22T18:09:17.710000 @@ -312278,7 +312280,7 @@ CVE-2025-5746,0,0,056ea6c0a98547dc03e9ea5b7d2db7b23a8dcd4896e6644f25db46e7fea0be CVE-2025-5747,0,0,9410a6fcc6f1e9cd8c246cf721bbe4bfba0a8b250e3ca3f56d775e4424b1302f,2025-08-14T15:38:22.347000 CVE-2025-5748,0,0,39caf40af2aacd2cfc2b42317035d749c59ae8998a36cf4447a3f1abeb4e337b,2025-08-14T15:38:09.270000 CVE-2025-57483,0,0,b1b9293bcf50896d7eefc9714143360bd18454866634eb4bb773bdd81159ce86,2025-09-29T19:34:10.030000 -CVE-2025-57489,0,1,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000 +CVE-2025-57489,0,0,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000 CVE-2025-5749,0,0,ec22dd262f8a415309c73a825e4820b4defb47a318a5d22ea127c3b49428b748,2025-08-14T15:37:47.553000 CVE-2025-5750,0,0,0522ae88229fa48e68298579539df2b624bebd2c022f860b5e3cd27b08cb071c,2025-08-14T15:25:38.723000 CVE-2025-5751,0,0,037bc71659035a991d898ba010a2da50f33841cec08f07740be35c7942ac3e72,2025-08-14T15:25:26.630000 @@ -312656,6 +312658,7 @@ CVE-2025-58040,0,0,a5dc67134c1b6c5c10f2668a5001f560d4a3f0f3a957460bf9473dcdf0e36 CVE-2025-58041,0,0,14f68ff57ab594895e8fadd59e0a7af6ba0e23268320f84dc1b078e97c7b18f1,2025-08-23T03:15:30.933000 CVE-2025-58042,0,0,afde999db2d6b13c0256ffacc3380d6dbac99243a0ef4f2cb69b8eb003ec053e,2025-08-23T03:15:31.010000 CVE-2025-58043,0,0,a72df0c240a9f75a24b5de63b2dcee140d8b5cdc570d6d7bab79e3a25360ef98,2025-08-23T03:15:31.090000 +CVE-2025-58044,1,1,850cd835ad4ab2401c0d32c8e294d087ff0e87f9d8b487f3d2186b4917c60d10,2025-12-01T21:15:51.807000 CVE-2025-58045,0,0,3ff2ebe42e7cfd7fd65d050503d1fb2114ff54ed41384e7bfd8911a991969ca5,2025-09-19T19:34:04.427000 CVE-2025-58046,0,0,8fe752c9e7f895d5deaf23ef1d25845f80e2a09bba18a5f148d144c822508408,2025-09-19T19:31:40.467000 CVE-2025-58047,0,0,717169482b04e15936de61dddc435e056119f8da63739e30bc5ef88872066d17,2025-11-04T22:16:32.057000 @@ -314481,7 +314484,7 @@ CVE-2025-60738,0,0,a2ac202c21e7d66bfb815d4ce97afa6915c1b03e8efaba35f9f2d4210272a CVE-2025-60739,0,0,27768e75d821653786d2f5d07f85d9171eac92618566d8c47e90b3027c5714f6,2025-11-25T22:16:16.690000 CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418ac5,2025-07-08T16:19:11.700000 CVE-2025-60749,0,0,cb6eff06b3c969716cbd50b62ca268ccadd09b2dc6ddbd4cbc884dd540525813,2025-11-04T15:41:31.450000 -CVE-2025-6075,0,1,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000 +CVE-2025-6075,0,0,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000 CVE-2025-60751,0,0,f5eaa48c625fdb0205a85b237f3c799027abfdf3ab10e1cb659e5821d12da741,2025-11-04T01:15:33.430000 CVE-2025-60753,0,0,15450117be9a1be5a41b632e18f78a54dbfc2477e1f5ae295ca657381ab0fd3d,2025-11-06T19:45:30.990000 CVE-2025-6076,0,0,635acddb1df949ec971c9f45189c86260de1f34e97e8435edd6c8e987048cb8b,2025-11-03T20:19:17.897000 @@ -314639,7 +314642,7 @@ CVE-2025-6121,0,0,ac34c215559700b52c27e4eb85187c0f90e04bada26cf85e1da5d5a006994f CVE-2025-6122,0,0,9512210d31f0e4aa9c3be187ffaab640323dcef8bc9e333d46732643321b9cbc,2025-06-24T20:14:31.217000 CVE-2025-61220,0,0,85e201a1d86d971cabbf95d7eb484d100fcd65a7addd6b92a92a6aca0a93dff5,2025-10-21T21:15:40.113000 CVE-2025-61224,0,0,af46fdc0b40d4101f480cce3253e4578300e39fa7a9e658db5f22eed46dba090,2025-10-08T19:38:32.610000 -CVE-2025-61228,0,1,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000 +CVE-2025-61228,0,0,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000 CVE-2025-61229,0,0,49b89dbe293bc5253fe1cb57bf73ded4ecfc9caf5bd1fdca76582d30ad0d4b82,2025-12-01T16:15:55.167000 CVE-2025-6123,0,0,01a17e91f4fa042185aa8c895b59d44590ceba8c7d0bf881122c15a612d738ad,2025-07-07T18:49:25.137000 CVE-2025-61234,0,0,a98fb6606bd295d125a356304af437f1a11a9292e2b607c522893d2fc923f777,2025-10-30T21:15:36.677000 @@ -315136,9 +315139,9 @@ CVE-2025-62220,0,0,13db24cb242ebeed0c1f4737a706504c9ba1a5992e04dbd74728bd9c8ea2a CVE-2025-62222,0,0,b32955abddda902773d9d62b850849311cb72f231f33ab235a1d71b83f6486a6,2025-11-14T15:47:58.830000 CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000 CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000 -CVE-2025-62229,0,1,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000 -CVE-2025-62230,0,1,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000 -CVE-2025-62231,0,1,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000 +CVE-2025-62229,0,0,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000 +CVE-2025-62230,0,0,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000 +CVE-2025-62231,0,0,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000 CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000 CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000 CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000 @@ -315473,7 +315476,7 @@ CVE-2025-62724,0,0,3da1fb4b0371355a092d683658ad02b19097fc2138e3f2ada56b9842cf245 CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000 CVE-2025-62726,0,0,46f9cb2b8e1946c29cd401e65c80606f5a7ef4fcd1a045f5bc576b237579244c,2025-11-04T15:41:56.843000 CVE-2025-62727,0,0,ee45c642db070ed29854f756bb902966037f607edbf636d4de7e5ef2bb4cbd54,2025-11-04T18:16:45.480000 -CVE-2025-62728,0,1,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000 +CVE-2025-62728,0,0,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000 CVE-2025-62729,0,0,b98bf878b65b862912754cc82d841d7c5113366584f8f3cd74af60ba98a4dbbb,2025-11-24T13:52:24.263000 CVE-2025-6273,0,0,7fbd43be0636c447274ca5dd224661b382933a1bb0936c93b976e34f99babf3b,2025-06-23T20:16:40.143000 CVE-2025-62730,0,0,c04bc08ffabb612ddf969d9689e1768016be4417a08056e1f52b595505ec6395,2025-11-24T13:53:07.567000 @@ -315671,7 +315674,7 @@ CVE-2025-6306,0,0,bead9ba68260c847671d090490ab869cefdc3095014bf5c641fccc2374f7f9 CVE-2025-6307,0,0,cdfa642aabb8c4cdf66783b40415b41a741bc33c428a1594c0a2ee18b9dbde7e,2025-06-26T21:18:41.737000 CVE-2025-6308,0,0,6d0dabc6e15511e6982b3f870c32ad733481d3f0e5cab616caf841904feb7a8d,2025-06-26T21:18:27.487000 CVE-2025-6309,0,0,61dd5cd93b2ec6200afa5c38e7a47ac97ababf226b518b0b020ae4f8c5d368ba,2025-06-26T21:18:20.710000 -CVE-2025-63095,0,1,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000 +CVE-2025-63095,0,0,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000 CVE-2025-6310,0,0,09efea7aa8eb7ea0695ad0b081248d9d4e4101041c7c67a88e7c220d9a16d6e2,2025-06-26T21:18:04.723000 CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b9317300,2025-07-11T15:50:37.860000 CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000 @@ -315733,7 +315736,7 @@ CVE-2025-63298,0,0,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1 CVE-2025-6330,0,0,533f8688fa05d700cc76636e59e86bc0eb723f7b595a46351852e77368267ff9,2025-06-26T18:48:43.913000 CVE-2025-63307,0,0,6c44c08904d782d4a70a5a7cb02de5fd71e2dcd2328f94f8308ce378d4706690,2025-11-06T20:15:50.693000 CVE-2025-6331,0,0,0a8994ea3249d7eae52872533d96e734a825872bdbb388afb306ca44b9867b0d,2025-06-26T18:46:13.133000 -CVE-2025-63317,1,1,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000 +CVE-2025-63317,0,0,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000 CVE-2025-6332,0,0,2135c39d96f5f5f51610426459e1766e7e77a827bb39a5d88eeb3366dd1bf430,2025-06-26T18:39:05.587000 CVE-2025-6333,0,0,26527bc36673d9e039362729b4406f5a98df04c44c68d06dd05f36e7caa8b426,2025-06-26T18:35:06.553000 CVE-2025-63334,0,0,b637f3ac0afd16683422fad3dcd9e95e62c39110ecf9a6395a24b8447b6421d6,2025-11-06T19:45:09.883000 @@ -315741,7 +315744,7 @@ CVE-2025-6334,0,0,2a215e04e3be6c866c04768dbe135e466fe601c1c77251573fae1bf844a3e7 CVE-2025-6335,0,0,5b8214517b4e2328705628c07c57cad7dcf339f56383ed25d7611a220d052c4c,2025-07-18T12:25:17.053000 CVE-2025-63353,0,0,10beafb26269421ec3662bcbd226b87b7850e4eb01d0d80e2226539e3aaba7e3,2025-11-13T16:15:53.553000 CVE-2025-6336,0,0,c2ae3339f7f556d7f8479109d39981c789e75e2a76c15e57531c64e864f48049,2025-06-26T18:28:59.800000 -CVE-2025-63365,1,1,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000 +CVE-2025-63365,0,0,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000 CVE-2025-6337,0,0,20ffa5ad97e2fb5de859648c4c2bd5cf249ca44b435fa5f7c3de6344b086ac2d,2025-08-01T22:18:15.433000 CVE-2025-63371,0,0,f85274d81a0dde49fb05c2c1bf8892732ecfd0ec16b0e7409ce0f050acb4b824,2025-11-21T15:13:59.083000 CVE-2025-6338,0,0,d5c800ed34d59ce85516e9843ed463eb9c8b7acbef325ec9a754b0076681afc3,2025-10-16T15:28:59.610000 @@ -315807,18 +315810,18 @@ CVE-2025-63512,0,0,fb9b2e6f20fa24a31c3b324b6541fb73d5a9e82d5076e7bd845d1b7452be4 CVE-2025-63513,0,0,77f0379ed940c32021762ed219df800f46c0c479772ae7fe91e8d4d3d0319688,2025-11-20T21:57:49.427000 CVE-2025-63514,0,0,a48a4fe98cc0afdd6ca735b421e2951c674c2395b539204fb8d3a74ba18fbb6f,2025-11-20T21:54:40.943000 CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000 -CVE-2025-63520,0,1,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000 -CVE-2025-63522,0,1,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000 -CVE-2025-63523,0,0,3167fb7ffb42abacf5b12f7a33f02b4edbca3b9a6ff93be4e08c620b311a4570,2025-12-01T15:39:33.110000 +CVE-2025-63520,0,0,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000 +CVE-2025-63522,0,0,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000 +CVE-2025-63523,0,1,4fd2b30e7855168929ec4ca95c9348cd5e3ee75333b34828342d661a4a99dc02,2025-12-01T21:15:51.980000 CVE-2025-63525,0,0,85fe0b3f8b392a9fa72a33e6259dd0cbce0091769080ee20fc238024536b9f7f,2025-12-01T15:39:33.110000 -CVE-2025-63526,0,1,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000 -CVE-2025-63527,0,1,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000 -CVE-2025-63528,0,1,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000 -CVE-2025-63529,0,1,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000 +CVE-2025-63526,0,0,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000 +CVE-2025-63527,0,0,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000 +CVE-2025-63528,0,0,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000 +CVE-2025-63529,0,0,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000 CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000 -CVE-2025-63531,0,1,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000 -CVE-2025-63532,0,1,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000 -CVE-2025-63533,0,1,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000 +CVE-2025-63531,0,0,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000 +CVE-2025-63532,0,0,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000 +CVE-2025-63533,0,0,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000 CVE-2025-63534,0,0,b9e6b405345279846a1bacfaeeece97782f83b85bf77250c3f3c63b1ce8c5ca9,2025-12-01T17:15:49.777000 CVE-2025-63535,0,0,b06846b5385742bb282c662314f5e2cf23bf52417c0b1a4250ca45df579ed9e0,2025-12-01T17:15:49.927000 CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000 @@ -315879,7 +315882,7 @@ CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc CVE-2025-63700,0,0,942943563001999f3bd48d097dc4b86630407b7258fe8c9de50992f96fff6e00,2025-11-21T15:13:13.800000 CVE-2025-63701,0,0,662ea7849c27be5b80c25e2e58f382b31e98a3c765f38948a74aa0fa7306e223,2025-11-18T14:06:55.963000 CVE-2025-63708,0,0,daf3ebd701919b695e0a83c8005a392854f3a79d50268da940d9cac92eda2fe6,2025-11-20T20:27:23.200000 -CVE-2025-63709,0,1,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000 +CVE-2025-63709,0,0,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000 CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000 CVE-2025-63710,0,0,dfc7d90b2d530bde90ae81c5e4ff726084913ff81e9fbb0730777dd7846d41c7,2025-11-17T18:18:39.677000 CVE-2025-63711,0,0,a0fcdb7a0d12a966f99d72cee69441f70249d14a1c2676daf4cf74dc39d5f04c,2025-11-17T18:16:51.357000 @@ -315920,7 +315923,7 @@ CVE-2025-63828,0,0,9f83ae1fae3a05b08418a2eab46883448f1a6b2213a1bb4f96f6991bd6555 CVE-2025-63829,0,0,26a17fec77482163105fa59f15f451ab242482540116aae576873c25a54afaf4,2025-11-19T19:14:59.327000 CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000 CVE-2025-63830,0,0,64bb7b74542849e475a50c70d15ab1b2e1a45c8ce9737df66a6fb312752a7b07,2025-11-19T13:20:11.367000 -CVE-2025-63834,0,1,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000 +CVE-2025-63834,0,0,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000 CVE-2025-63835,0,0,1137446835ae921038cd75e6ade7d3d1796207b3e1bef7c2167d975169b2c7a3,2025-11-18T17:16:13.363000 CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000 CVE-2025-63848,0,0,98188db2a3a2c26fc6f5e46e615c2c2f02b2c1a0d5f2c9b13ed9a8ecacd8325b,2025-11-21T15:13:13.800000 @@ -315950,7 +315953,7 @@ CVE-2025-6393,0,0,1a35217c3b800b18b49bcd9013075f8fa6cac52b24da4da242fbe596d982b2 CVE-2025-63932,0,0,8f00ddb7b81c8111efe059edc3d54cee94e1cf82fe418142e977a7939bfc787b,2025-11-21T15:13:59.083000 CVE-2025-63938,0,0,f59205b1e696fea95ca28433f191c9b156cc3be0c29755b4fd0768e633af691d,2025-12-01T15:39:53.100000 CVE-2025-6394,0,0,89f814907edd3ebe4d5f59011c66ab7c6d332856a0844d277aa889bcfc935525,2025-10-23T20:06:00.793000 -CVE-2025-6395,0,0,cb3c0c913443d3dc2f885a3f5cc382abf9dce52bfd5d3e81f83b6ebd90077743,2025-11-07T00:15:55.290000 +CVE-2025-6395,0,1,22c67856941aa04443d5061f189f011e19ded8861180ba260f6fb7c5887851e2,2025-12-01T22:15:51.513000 CVE-2025-63952,0,0,572cf6fa40caa117e18fddead39ae0b9d246db6d186fd69c2d3d4fb03d656e98,2025-11-25T22:16:16.690000 CVE-2025-63953,0,0,553928eaef8a5fc5474ce6a4e50b82b764063e943c8b2c29c4dfbdf94c79a76d,2025-11-25T22:16:16.690000 CVE-2025-63955,0,0,beb4b32987ba24f1e28ffd3bae48cdcc4e19e80aa8fe2b86279445dbe3b813c6,2025-11-20T17:27:58.507000 @@ -315964,7 +315967,7 @@ CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000 CVE-2025-64027,0,0,470afad40ddbedb17a5b049e25f07fea4418f8c394859528eb668b671557531a,2025-11-26T16:15:50.103000 CVE-2025-6403,0,0,007861183f6687f9c9a79ed265c27e5792ce1d4050de9b4571cc349ce6d48442,2025-07-02T18:56:36.940000 -CVE-2025-64030,0,1,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000 +CVE-2025-64030,0,0,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000 CVE-2025-6404,0,0,f0c24c4f38cddef26208faf5fffbe2ab0f5998ff0d6d820bde73ac92320b2d1d,2025-06-24T19:33:00.033000 CVE-2025-64046,0,0,2473d61fcd444f7107420add86bfb5a479b28afca70336dc60642cd4e6e6ba2c,2025-11-19T13:11:59.527000 CVE-2025-64047,0,0,2cf7bb40ae06e9b5d65d709020e8f3083f47448e40a9b3db194b3dd46afdace1,2025-11-25T22:16:16.690000 @@ -316392,7 +316395,7 @@ CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c3372331388 CVE-2025-64770,0,0,9f6d874024d46174136454b2b8784191b86d838279b0afddf1eb50435c5eceaf,2025-11-21T15:13:13.800000 CVE-2025-64772,0,0,14b5eb97d0aa66d077fbece2b7e27003f6618b775fb26192d8d1595810b97280,2025-12-01T15:39:33.110000 CVE-2025-64773,0,0,59049fa938a874236a592ec4986adf18874e19e9a9d1ab314c7036607af19763,2025-11-21T12:57:53.123000 -CVE-2025-64775,0,1,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000 +CVE-2025-64775,0,0,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000 CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000 CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000 CVE-2025-6480,0,0,93237f12d754008f7fd67ea5d034bb783649924c98eaa92f468d9844c78fedc5,2025-06-25T19:18:18.497000 @@ -316477,8 +316480,8 @@ CVE-2025-65108,0,0,8654395a049218b7bb70e1d0a3d7d6a2bfb0b8acfe9b255f9b034f0dbc08e CVE-2025-65109,0,0,3e2b7c0e2bcc97290a2ee779e8f2869ba045adc7612d41c8f9fb4f6dc8f7daf0,2025-11-25T22:16:42.557000 CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000 CVE-2025-65111,0,0,23a14c16207f851a4f2756b810c5b708df7743d12ffc02562da5fa7d2fc146d6,2025-11-25T22:16:42.557000 -CVE-2025-65112,0,1,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000 -CVE-2025-65113,0,1,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000 +CVE-2025-65112,0,0,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000 +CVE-2025-65113,0,0,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000 CVE-2025-6512,0,0,fafc14028fc8e6d0cf5d1c26ecddf3f178d4b119f094c564dc999ae28df07a2c,2025-06-23T20:16:21.633000 CVE-2025-6513,0,0,31aa7f858e5f0036c4b8df8555240c1143a48501c8ecdc51eff54ca1e5b97fde,2025-06-23T20:16:21.633000 CVE-2025-6514,0,0,2e857a137de569aae69fc5e8b5ee04b5a374d907c22caf5d111c51eef7f69cd9,2025-07-10T13:17:30.017000 @@ -316506,7 +316509,7 @@ CVE-2025-6524,0,0,a7275ea041ffa7e979afd064b5baf753a7b8d034996389a1d24dc2a4b9f0ab CVE-2025-6525,0,0,f9a4484f271973188d980443d7c340a5c21c022439185d3e11e100f20a1e0b89,2025-06-26T18:58:14.280000 CVE-2025-6526,0,0,38fb1bd29c1b6ed21d1635ed073af71be9b9e2f0ee3829828e30d24a8dc48b04,2025-11-14T15:02:28.340000 CVE-2025-6527,0,0,3081b8f89105c5a4934c421a3bf407c898825f874c4ac4d7085b5d837b965611,2025-11-14T14:46:49.813000 -CVE-2025-65276,0,1,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000 +CVE-2025-65276,0,0,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000 CVE-2025-65278,0,0,872bb38eaab169ac716b659fd9467b89845d82a56a5ea96b6203b5dd4e0e15d3,2025-12-01T15:39:33.110000 CVE-2025-6528,0,0,a84b58003f0fbfdab073bd26e1b4c7edb3a9507243de4187c76be61f732c25e1,2025-11-14T14:33:46.660000 CVE-2025-6529,0,0,ad88146ae23ea3ea8f25684a5176b38f126d14015cf0853a92015c69b0e16bef,2025-11-14T14:12:50.063000 @@ -316521,12 +316524,12 @@ CVE-2025-6537,0,0,6cc047e68af8cc140a533baef81117cae1d7e838b2f26be233dae033dab14e CVE-2025-6538,0,0,e09f0a97dfdb50a09d0300934010eb6d0f1d88eba5fa750c8cc98ba07c13c662,2025-07-07T18:33:37.610000 CVE-2025-6539,0,0,78ecc1fdd76d73ccd36c87a5455dc45373488fca38a0ae555e8c322dea869192,2025-07-25T15:29:19.837000 CVE-2025-6540,0,0,082438792186c440bf4ff42d97a1cb1ef2ee9a0b9d0da94f6ceb561b424c8589,2025-07-07T15:02:44.263000 -CVE-2025-65403,0,1,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000 -CVE-2025-65404,0,1,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000 -CVE-2025-65405,0,1,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000 -CVE-2025-65406,0,1,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000 -CVE-2025-65407,1,1,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000 -CVE-2025-65408,0,1,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000 +CVE-2025-65403,0,0,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000 +CVE-2025-65404,0,0,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000 +CVE-2025-65405,0,0,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000 +CVE-2025-65406,0,0,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000 +CVE-2025-65407,0,0,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000 +CVE-2025-65408,0,0,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000 CVE-2025-6541,0,0,8e813e74d5024d2c640fde6671e2bd22ecb1ab2a380d8bbd469e941f977ab580,2025-10-24T13:45:38.010000 CVE-2025-6542,0,0,855ea415849f7679b9c628fd68cbf55c441dac333e93193e039cd249d23ab7ae,2025-10-24T13:50:10.897000 CVE-2025-6543,0,0,7c17eb41d33e1ac44fdd08a7293ed23a397efa51eb2c1bfb61acf746a22684a8,2025-10-24T13:42:21.210000 @@ -316560,6 +316563,8 @@ CVE-2025-6559,0,0,9cb71ac3711fb3b86b569e9a51eb156c4586cc1e2e8b0bcfb406579e47f4c3 CVE-2025-6560,0,0,0fbeb242211a22ef947f1fcdbf6b0e2a9cc7c2add8384266780a00d3eb1ea522,2025-06-26T18:58:14.280000 CVE-2025-6561,0,0,7c1cc2e462ee3f4cfbfd909428f12d4b1c394ea55775d6a19975a5b62f69a18f,2025-06-26T18:57:43.670000 CVE-2025-6562,0,0,27f22edb2ae89e7e5ca0f08da1c6b89d3ea0e09ce8efc41223de0ab990d8069e,2025-06-26T18:57:43.670000 +CVE-2025-65621,1,1,6f7a550fbbee7de80495c146766eb3c129d8b5b719e16fedf643c77538c0caec,2025-12-01T21:15:52.193000 +CVE-2025-65622,1,1,975f8456d19f4d83caf345ee1d6e5ab3ff43494ed1e3958eb4da6011fc4d86ef,2025-12-01T22:15:48.697000 CVE-2025-6563,0,0,9898e80f0fc110857b3fce24e3b506c3d4f000fedbadc3dbe241b4411d081672,2025-07-03T15:13:53.147000 CVE-2025-65647,0,0,44aa01554dda7b1356446682f5e198619339fed49a7488d4025e8e43a6281ba3,2025-12-01T14:22:42.593000 CVE-2025-6565,0,0,edbd540d511b85519129c288260b1fc37f33ec2182d67f9f0be78d5a0f7f9423,2025-06-26T18:58:14.280000 @@ -316587,8 +316592,9 @@ CVE-2025-6580,0,0,14c9a21bff52d8562deb8a5ff102203adfe298df563381633ada51bbda9d23 CVE-2025-6581,0,0,9eb16713b89b10d47a3355e63f223e1d1babaf81dbe3bf267fcf583104bec561,2025-07-02T17:11:46.147000 CVE-2025-6582,0,0,06b49d50890d886846d052750b63a829a4a61d16f96e10b0780325588b187412,2025-07-02T17:04:36.247000 CVE-2025-6583,0,0,30d0558eb9467ec1d68b23c75a699e90fa70f2c3c0ad5646089f1aba65b21e55,2025-07-02T16:46:47.320000 -CVE-2025-65836,1,1,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000 -CVE-2025-65838,1,1,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000 +CVE-2025-65836,0,0,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000 +CVE-2025-65838,0,0,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000 +CVE-2025-65840,1,1,448accf4e2c2619b3910de4537b34283af9d323c3d3bc8432e94c9f25b2c949c,2025-12-01T21:15:52.320000 CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95ad,2025-07-22T13:05:40.573000 CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000 CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000 @@ -316713,10 +316719,12 @@ CVE-2025-66187,0,0,952662b39938f1c4fd582d536c74a2e1beb8f6c48bce3128e45c0d7a53bcb CVE-2025-6619,0,0,7d502e0f9c280ac237d264ea47e9d56f2c9f885e9391d98b4346ea7561f6a820,2025-06-27T18:19:19.447000 CVE-2025-6620,0,0,a58ab2b80e3779d32d4e3358d3d356ad6dfc021a674a6471533aa7b324e1ebbe,2025-06-27T18:11:26.180000 CVE-2025-66201,0,0,a8275dbdf292ebfbd1cde1dc9da04f81e4490594014f7399918003fe14c9a3f5,2025-12-01T15:39:33.110000 +CVE-2025-66205,1,1,d859be4f80e10760e52a3b77e8a5e3a26f37f998aaf1a2aaa10da20429bf25ca,2025-12-01T21:15:52.443000 +CVE-2025-66206,1,1,5e027b4e960fa535ee0e03fb0c2a4b1f0deb0ec18187fbd419f819871536c82b,2025-12-01T21:15:52.623000 CVE-2025-6621,0,0,31225189b3a0ed561d6ef4522df51388559053b3febb508a0b1393ddfa4112ad,2025-06-27T18:10:30.697000 CVE-2025-66216,0,0,10043334f406e37b8388a5bc981c4bcf96fce6ed5ad078ea3150c9a36e79060c,2025-12-01T15:39:33.110000 CVE-2025-66217,0,0,ae56e3dd192353327e26455db6f96f059511019cec01bb7242e26d03db58eb35,2025-12-01T15:39:33.110000 -CVE-2025-66219,0,1,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000 +CVE-2025-66219,0,0,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000 CVE-2025-66221,0,0,104e2e5ed755bd23c52091e4321c1eead6c1f9b604b09a0791716eee8369aa7f,2025-12-01T15:39:33.110000 CVE-2025-66223,0,0,342c34db92c35bd6bb381fb52f300468da2f0ba45182833f9a2354529c4da0f2,2025-12-01T15:39:33.110000 CVE-2025-66224,0,0,b69359b50a265bd901adcf2031b698abf62056c18d8a1e312f3d5ca9d4a48dfd,2025-12-01T15:39:33.110000 @@ -316733,7 +316741,7 @@ CVE-2025-6624,0,0,97dba7b444edfb1a26270ffbacc4a0765e856cfa4c9084bb10655088350330 CVE-2025-6625,0,0,6b5ce1ef015c31200b1841c65a67498f95b9314a4f4532397cc0be8fe969c50b,2025-08-18T20:16:28.750000 CVE-2025-66250,0,0,4641e8f45cb7750e5dd4870a8e9adbe3034be5afa8d32fff39f4a0b7573c878d,2025-11-28T23:11:55.537000 CVE-2025-66251,0,0,1e1d3127ebe85266a644a9ad6c37c08b62e4d6e878d1838a3dfd3048ec5200f0,2025-11-28T23:11:55.537000 -CVE-2025-66252,0,0,b43c337bec8c16b7290abf0216abfadd15142dbfbd1730c852eb01b740a518c7,2025-11-28T23:11:55.537000 +CVE-2025-66252,0,1,60b674f439e82b447297d397582246b382e561d19b7bb989d82881e549b40332,2025-12-01T22:15:48.860000 CVE-2025-66253,0,0,175a1c4228ae28196c32ba905ccb8910954f8e2f135d2f41bab2d88dac5080a5,2025-11-28T23:11:55.537000 CVE-2025-66254,0,0,b12368dae348e769f9ec032872915832fe719d345722b888f3b81389f173dfaf,2025-11-28T23:11:55.537000 CVE-2025-66255,0,0,e74e279c1bae06c83c290b4a5fe6620e5dd5517be3b684cca51aa662ca24d513,2025-11-28T23:11:55.537000 @@ -316754,7 +316762,26 @@ CVE-2025-6627,0,0,ac42708d70135c1e2f3d3c95b24cee76ad7c50967f5771ee2df2dd6c238666 CVE-2025-66289,0,0,6063359e463cb1b7b2b27669c30287ee26a9d8344b82e6f7afc2de770f57c0af,2025-12-01T15:39:33.110000 CVE-2025-66290,0,0,628f18d01710935f3d64e1c8fb933bfececc54c394f13b16d074c33ea36434ea,2025-12-01T15:39:33.110000 CVE-2025-66291,0,0,2d3c030f895c83ac65981544374b108a2eebc2c0310b1dbfbbb1a72dbfe14235,2025-12-01T15:39:33.110000 +CVE-2025-66294,1,1,fde177b4760647ee3e485b764ff4464e0d24af41982f7fe4d7b2ec9e8ea7c58c,2025-12-01T21:15:52.843000 +CVE-2025-66295,1,1,c128dcc9e5fdf392166b004c2b475ba2890b11cc8099833eeb62f8f93826ea18,2025-12-01T21:15:53 +CVE-2025-66296,1,1,0c81ebc5426dfd0b30668b206d393c6f12c415db189efc009eee92f83d3d12b3,2025-12-01T21:15:53.157000 +CVE-2025-66297,1,1,b91a67a09b947dd67fb4e1b93b457d2e00b5cadf6242e689d5816adab1fc5fc6,2025-12-01T21:15:53.327000 +CVE-2025-66298,1,1,d06cd34f0809f060831c811618efcd232bd3c00c4f758ca3985a6372f91d35ec,2025-12-01T22:15:49.103000 +CVE-2025-66299,1,1,8580646ed611a19aaf8ec6d3e0ce924b1961b3be8f3c48413b1b7c3d211a4fbd,2025-12-01T22:15:49.290000 +CVE-2025-66300,1,1,20b9bd6535de398bcd527d34a27d860425b0c99f25cafd82e3a237ef43b87d06,2025-12-01T22:15:49.447000 +CVE-2025-66301,1,1,93fb040835ef0abbab89b8d2001df5b0ea3b97e6db1af811cc6f56133120cac4,2025-12-01T22:15:49.607000 +CVE-2025-66302,1,1,84ee6c3122ba8610d6db4b5bc416e0edc0793cbd154001ad7a30018a6c64f32e,2025-12-01T22:15:49.750000 +CVE-2025-66303,1,1,40b0ce9aff7b1a576ea3904bf78b2b3c4fbb9fcfe5ecefdaead38f10ecf28ea4,2025-12-01T22:15:49.913000 +CVE-2025-66304,1,1,41d777bd4cc79f211bed09bff7cfb38e70397f2cb5767d895dbc0e9362a4ccde,2025-12-01T22:15:50.080000 +CVE-2025-66305,1,1,1f2f96d138069108b203792ee07ca3dcf57d2350afa0d4fbcd7d9d5029febecf,2025-12-01T22:15:50.250000 +CVE-2025-66306,1,1,ae0b6b18be314916f1c54a31ec90e732647f52a348b3b8bfc59f92216a8c3003,2025-12-01T22:15:50.413000 +CVE-2025-66307,1,1,76e825ea72125588b08f8b26d6634022f9921484003d4a8a49850026f74e0f0b,2025-12-01T22:15:50.570000 +CVE-2025-66308,1,1,1924844c3b44066cf4435627b1aeef2ebdeb8304fec8fa11633c5c860f07e0e4,2025-12-01T22:15:50.743000 +CVE-2025-66309,1,1,bf3885c97189b997573aab2ab599b5ca0c7f2722c9dfe4b9d49a939b50cd7ac0,2025-12-01T22:15:50.910000 CVE-2025-6631,0,0,86d2ee25bdf69ddf1aaf6049188589a2db446e1def446432dc1bb9a87223c0b5,2025-08-19T14:15:41.790000 +CVE-2025-66310,1,1,2625faea8f66ab53ea5be4758257d2f4b02d19ea52b632dda380d6cce30eb641,2025-12-01T22:15:51.067000 +CVE-2025-66311,1,1,0927a7afee5757093dc17c8c6edea050e702818126ed91cbffb400b0e9ccbb40,2025-12-01T22:15:51.217000 +CVE-2025-66312,1,1,6da2ce4745a4736ea462c5e4805c5fd7c41405ebd0215b28f948eb6e20eac4ff,2025-12-01T22:15:51.367000 CVE-2025-66314,0,0,699e0894bd19536cc5e756dbd81eb3fe8a4a1f39b0a4127e4530f9cf67fe6c1f,2025-12-01T15:39:33.110000 CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959eeb7,2025-11-13T19:41:50.260000 CVE-2025-6633,0,0,117eeffdf2f8f6e2fed9dd7c3a57930753c8f6f12ea2d2e4f36e69d3e6dfc33d,2025-11-13T20:04:14.093000