From a6d73900dd4bf249f01ba7df267aa0fb54279a51 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 22 Oct 2025 16:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-10-22T16:00:13.850775+00:00 --- CVE-2016/CVE-2016-150xx/CVE-2016-15048.json | 94 ++++ CVE-2022/CVE-2022-505xx/CVE-2022-50556.json | 37 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50557.json | 29 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50558.json | 29 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50559.json | 33 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50560.json | 37 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50561.json | 33 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50562.json | 37 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50563.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50564.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50565.json | 29 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50566.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50567.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50568.json | 45 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50569.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50570.json | 41 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50571.json | 25 + CVE-2022/CVE-2022-505xx/CVE-2022-50572.json | 41 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50573.json | 25 + CVE-2022/CVE-2022-505xx/CVE-2022-50574.json | 41 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50575.json | 45 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50576.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50577.json | 29 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50578.json | 49 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50579.json | 37 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50580.json | 37 ++ CVE-2022/CVE-2022-505xx/CVE-2022-50581.json | 53 +++ CVE-2022/CVE-2022-505xx/CVE-2022-50582.json | 37 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53691.json | 8 +- CVE-2023/CVE-2023-536xx/CVE-2023-53692.json | 45 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53693.json | 37 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53694.json | 29 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53695.json | 45 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53696.json | 33 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53697.json | 33 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53698.json | 33 ++ CVE-2023/CVE-2023-536xx/CVE-2023-53699.json | 33 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53700.json | 37 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53701.json | 21 + CVE-2023/CVE-2023-537xx/CVE-2023-53702.json | 29 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53703.json | 29 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53704.json | 41 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53705.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53706.json | 25 + CVE-2023/CVE-2023-537xx/CVE-2023-53707.json | 29 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53708.json | 33 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53709.json | 37 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53710.json | 29 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53711.json | 37 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53712.json | 33 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53713.json | 33 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53714.json | 29 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53715.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53716.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53717.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53718.json | 37 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53719.json | 45 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53720.json | 25 + CVE-2023/CVE-2023-537xx/CVE-2023-53721.json | 25 + CVE-2023/CVE-2023-537xx/CVE-2023-53722.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53723.json | 45 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53724.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53725.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53726.json | 41 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53727.json | 37 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53728.json | 49 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53729.json | 45 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53730.json | 41 ++ CVE-2023/CVE-2023-537xx/CVE-2023-53731.json | 53 +++ CVE-2023/CVE-2023-537xx/CVE-2023-53732.json | 33 ++ CVE-2024/CVE-2024-324xx/CVE-2024-32499.json | 6 +- CVE-2024/CVE-2024-582xx/CVE-2024-58274.json | 8 +- CVE-2025/CVE-2025-117xx/CVE-2025-11750.json | 60 +++ CVE-2025/CVE-2025-118xx/CVE-2025-11844.json | 64 +++ CVE-2025/CVE-2025-119xx/CVE-2025-11965.json | 78 ++++ CVE-2025/CVE-2025-119xx/CVE-2025-11966.json | 82 ++++ CVE-2025/CVE-2025-221xx/CVE-2025-22167.json | 14 +- CVE-2025/CVE-2025-233xx/CVE-2025-23355.json | 69 ++- CVE-2025/CVE-2025-257xx/CVE-2025-25732.json | 22 +- CVE-2025/CVE-2025-257xx/CVE-2025-25733.json | 20 +- CVE-2025/CVE-2025-257xx/CVE-2025-25734.json | 18 +- CVE-2025/CVE-2025-257xx/CVE-2025-25735.json | 18 +- CVE-2025/CVE-2025-257xx/CVE-2025-25736.json | 14 +- CVE-2025/CVE-2025-257xx/CVE-2025-25737.json | 22 +- CVE-2025/CVE-2025-309xx/CVE-2025-30944.json | 33 ++ CVE-2025/CVE-2025-316xx/CVE-2025-31634.json | 33 ++ CVE-2025/CVE-2025-322xx/CVE-2025-32283.json | 33 ++ CVE-2025/CVE-2025-326xx/CVE-2025-32657.json | 33 ++ CVE-2025/CVE-2025-350xx/CVE-2025-35052.json | 32 +- CVE-2025/CVE-2025-350xx/CVE-2025-35053.json | 57 ++- CVE-2025/CVE-2025-350xx/CVE-2025-35054.json | 52 ++- CVE-2025/CVE-2025-350xx/CVE-2025-35055.json | 37 +- CVE-2025/CVE-2025-350xx/CVE-2025-35056.json | 57 ++- CVE-2025/CVE-2025-350xx/CVE-2025-35057.json | 32 +- CVE-2025/CVE-2025-38xx/CVE-2025-3872.json | 61 ++- CVE-2025/CVE-2025-395xx/CVE-2025-39534.json | 33 ++ CVE-2025/CVE-2025-406xx/CVE-2025-40657.json | 49 +- CVE-2025/CVE-2025-46xx/CVE-2025-4646.json | 40 +- CVE-2025/CVE-2025-46xx/CVE-2025-4647.json | 81 +++- CVE-2025/CVE-2025-46xx/CVE-2025-4648.json | 81 +++- CVE-2025/CVE-2025-46xx/CVE-2025-4649.json | 50 +- CVE-2025/CVE-2025-46xx/CVE-2025-4650.json | 47 +- CVE-2025/CVE-2025-477xx/CVE-2025-47730.json | 62 ++- CVE-2025/CVE-2025-480xx/CVE-2025-48082.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48091.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48092.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48093.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48095.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48096.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48097.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48098.json | 33 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48099.json | 33 ++ CVE-2025/CVE-2025-481xx/CVE-2025-48106.json | 33 ++ CVE-2025/CVE-2025-483xx/CVE-2025-48338.json | 33 ++ CVE-2025/CVE-2025-489xx/CVE-2025-48925.json | 47 +- CVE-2025/CVE-2025-489xx/CVE-2025-48926.json | 47 +- CVE-2025/CVE-2025-489xx/CVE-2025-48929.json | 57 ++- CVE-2025/CVE-2025-489xx/CVE-2025-48930.json | 47 +- CVE-2025/CVE-2025-490xx/CVE-2025-49060.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49373.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49374.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49376.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49377.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49378.json | 33 ++ CVE-2025/CVE-2025-493xx/CVE-2025-49380.json | 33 ++ CVE-2025/CVE-2025-498xx/CVE-2025-49899.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49901.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49903.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49906.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49907.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49908.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49910.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49911.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49912.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49913.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49915.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49916.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49917.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49920.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49921.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49922.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49923.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49924.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49925.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49926.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49927.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49928.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49929.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49930.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49931.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49932.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49933.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49934.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49935.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49936.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49937.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49938.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49939.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49940.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49944.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49945.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49946.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49947.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49948.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49949.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49950.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49951.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49952.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49953.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49954.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49955.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49956.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49957.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49958.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49959.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49960.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49961.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49962.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49963.json | 33 ++ CVE-2025/CVE-2025-499xx/CVE-2025-49992.json | 33 ++ CVE-2025/CVE-2025-500xx/CVE-2025-50074.json | 16 +- CVE-2025/CVE-2025-500xx/CVE-2025-50075.json | 16 +- CVE-2025/CVE-2025-527xx/CVE-2025-52734.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52735.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52736.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52737.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52738.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52740.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52741.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52742.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52743.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52748.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52749.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52750.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52751.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52752.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52753.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52754.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52755.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52756.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52757.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52758.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52760.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52763.json | 33 ++ CVE-2025/CVE-2025-527xx/CVE-2025-52770.json | 33 ++ CVE-2025/CVE-2025-530xx/CVE-2025-53034.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53035.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53036.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53037.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53040.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53041.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53056.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53057.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53058.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53059.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53060.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53061.json | 16 +- CVE-2025/CVE-2025-530xx/CVE-2025-53062.json | 16 +- CVE-2025/CVE-2025-532xx/CVE-2025-53218.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53229.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53232.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53234.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53236.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53238.json | 33 ++ CVE-2025/CVE-2025-532xx/CVE-2025-53297.json | 33 ++ CVE-2025/CVE-2025-533xx/CVE-2025-53350.json | 33 ++ CVE-2025/CVE-2025-533xx/CVE-2025-53351.json | 33 ++ CVE-2025/CVE-2025-533xx/CVE-2025-53352.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53420.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53421.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53422.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53423.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53424.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53425.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53426.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53427.json | 33 ++ CVE-2025/CVE-2025-534xx/CVE-2025-53428.json | 33 ++ CVE-2025/CVE-2025-542xx/CVE-2025-54286.json | 83 +++- CVE-2025/CVE-2025-542xx/CVE-2025-54287.json | 76 ++- CVE-2025/CVE-2025-548xx/CVE-2025-54892.json | 67 ++- CVE-2025/CVE-2025-548xx/CVE-2025-54893.json | 67 ++- CVE-2025/CVE-2025-564xx/CVE-2025-56447.json | 72 +++ CVE-2025/CVE-2025-565xx/CVE-2025-56588.json | 32 +- CVE-2025/CVE-2025-567xx/CVE-2025-56799.json | 13 +- CVE-2025/CVE-2025-568xx/CVE-2025-56800.json | 13 +- CVE-2025/CVE-2025-568xx/CVE-2025-56801.json | 13 +- CVE-2025/CVE-2025-568xx/CVE-2025-56802.json | 13 +- CVE-2025/CVE-2025-575xx/CVE-2025-57521.json | 6 +- CVE-2025/CVE-2025-578xx/CVE-2025-57870.json | 56 +++ CVE-2025/CVE-2025-57xx/CVE-2025-5745.json | 35 +- CVE-2025/CVE-2025-582xx/CVE-2025-58277.json | 51 +- CVE-2025/CVE-2025-589xx/CVE-2025-58916.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58921.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58955.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58958.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58959.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58961.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58963.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58966.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58967.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58970.json | 33 ++ CVE-2025/CVE-2025-589xx/CVE-2025-58971.json | 33 ++ CVE-2025/CVE-2025-590xx/CVE-2025-59004.json | 33 ++ CVE-2025/CVE-2025-590xx/CVE-2025-59006.json | 33 ++ CVE-2025/CVE-2025-590xx/CVE-2025-59007.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59550.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59555.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59557.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59558.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59564.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59566.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59571.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59575.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59578.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59579.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59580.json | 33 ++ CVE-2025/CVE-2025-595xx/CVE-2025-59593.json | 33 ++ CVE-2025/CVE-2025-596xx/CVE-2025-59682.json | 74 ++- CVE-2025/CVE-2025-59xx/CVE-2025-5946.json | 47 +- CVE-2025/CVE-2025-600xx/CVE-2025-60039.json | 33 ++ CVE-2025/CVE-2025-600xx/CVE-2025-60041.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60131.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60132.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60134.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60135.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60151.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60168.json | 33 ++ CVE-2025/CVE-2025-601xx/CVE-2025-60176.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60206.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60208.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60209.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60210.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60211.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60212.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60213.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60214.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60215.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60216.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60217.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60220.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60221.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60222.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60224.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60225.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60226.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60227.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60228.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60232.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60234.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60238.json | 33 ++ CVE-2025/CVE-2025-602xx/CVE-2025-60246.json | 33 ++ CVE-2025/CVE-2025-603xx/CVE-2025-60331.json | 25 + CVE-2025/CVE-2025-603xx/CVE-2025-60332.json | 25 + CVE-2025/CVE-2025-604xx/CVE-2025-60427.json | 39 +- CVE-2025/CVE-2025-605xx/CVE-2025-60506.json | 43 +- CVE-2025/CVE-2025-607xx/CVE-2025-60772.json | 43 +- CVE-2025/CVE-2025-607xx/CVE-2025-60790.json | 43 +- CVE-2025/CVE-2025-610xx/CVE-2025-61035.json | 29 ++ CVE-2025/CVE-2025-617xx/CVE-2025-61757.json | 16 +- CVE-2025/CVE-2025-617xx/CVE-2025-61762.json | 16 +- CVE-2025/CVE-2025-617xx/CVE-2025-61763.json | 16 +- CVE-2025/CVE-2025-617xx/CVE-2025-61764.json | 16 +- CVE-2025/CVE-2025-617xx/CVE-2025-61765.json | 8 +- CVE-2025/CVE-2025-618xx/CVE-2025-61881.json | 16 +- CVE-2025/CVE-2025-618xx/CVE-2025-61885.json | 16 +- CVE-2025/CVE-2025-619xx/CVE-2025-61996.json | 57 ++- CVE-2025/CVE-2025-619xx/CVE-2025-61997.json | 57 ++- CVE-2025/CVE-2025-619xx/CVE-2025-61998.json | 57 ++- CVE-2025/CVE-2025-619xx/CVE-2025-61999.json | 57 ++- CVE-2025/CVE-2025-620xx/CVE-2025-62005.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62006.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62007.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62008.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62009.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62013.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62015.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62019.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62020.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62021.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62022.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62023.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62024.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62025.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62026.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62027.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62029.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62042.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62048.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62052.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62054.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62058.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62060.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62061.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62062.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62063.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62068.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62069.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62070.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62071.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62072.json | 33 ++ CVE-2025/CVE-2025-620xx/CVE-2025-62073.json | 33 ++ CVE-2025/CVE-2025-622xx/CVE-2025-62290.json | 16 +- CVE-2025/CVE-2025-624xx/CVE-2025-62475.json | 16 +- CVE-2025/CVE-2025-624xx/CVE-2025-62476.json | 16 +- CVE-2025/CVE-2025-624xx/CVE-2025-62477.json | 16 +- CVE-2025/CVE-2025-624xx/CVE-2025-62478.json | 16 +- CVE-2025/CVE-2025-625xx/CVE-2025-62525.json | 76 +++ CVE-2025/CVE-2025-625xx/CVE-2025-62526.json | 80 ++++ CVE-2025/CVE-2025-625xx/CVE-2025-62592.json | 16 +- CVE-2025/CVE-2025-625xx/CVE-2025-62598.json | 55 ++- CVE-2025/CVE-2025-626xx/CVE-2025-62604.json | 86 ++++ CVE-2025/CVE-2025-626xx/CVE-2025-62606.json | 60 +++ CVE-2025/CVE-2025-67xx/CVE-2025-6791.json | 47 +- CVE-2025/CVE-2025-84xx/CVE-2025-8428.json | 67 ++- CVE-2025/CVE-2025-84xx/CVE-2025-8429.json | 67 ++- CVE-2025/CVE-2025-84xx/CVE-2025-8430.json | 67 ++- CVE-2025/CVE-2025-84xx/CVE-2025-8459.json | 67 ++- CVE-2025/CVE-2025-88xx/CVE-2025-8848.json | 56 +++ README.md | 75 ++- _state.csv | 493 ++++++++++++++++---- 380 files changed, 13604 insertions(+), 424 deletions(-) create mode 100644 CVE-2016/CVE-2016-150xx/CVE-2016-15048.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50556.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50557.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50558.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50559.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50560.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50561.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50562.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50563.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50564.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50565.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50566.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50567.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50568.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50569.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50570.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50571.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50572.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50573.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50574.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50575.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50576.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50577.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50578.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50579.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50580.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50581.json create mode 100644 CVE-2022/CVE-2022-505xx/CVE-2022-50582.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53692.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53693.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53694.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53695.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53696.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53697.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53698.json create mode 100644 CVE-2023/CVE-2023-536xx/CVE-2023-53699.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53700.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53701.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53702.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53703.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53704.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53705.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53706.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53707.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53708.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53709.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53710.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53711.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53712.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53713.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53714.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53715.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53716.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53717.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53718.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53719.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53720.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53721.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53722.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53723.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53724.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53725.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53726.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53727.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53728.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53729.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53730.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53731.json create mode 100644 CVE-2023/CVE-2023-537xx/CVE-2023-53732.json create mode 100644 CVE-2025/CVE-2025-117xx/CVE-2025-11750.json create mode 100644 CVE-2025/CVE-2025-118xx/CVE-2025-11844.json create mode 100644 CVE-2025/CVE-2025-119xx/CVE-2025-11965.json create mode 100644 CVE-2025/CVE-2025-119xx/CVE-2025-11966.json create mode 100644 CVE-2025/CVE-2025-309xx/CVE-2025-30944.json create mode 100644 CVE-2025/CVE-2025-316xx/CVE-2025-31634.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32283.json create mode 100644 CVE-2025/CVE-2025-326xx/CVE-2025-32657.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39534.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48082.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48091.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48092.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48093.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48095.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48096.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48097.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48098.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48099.json create mode 100644 CVE-2025/CVE-2025-481xx/CVE-2025-48106.json create mode 100644 CVE-2025/CVE-2025-483xx/CVE-2025-48338.json create mode 100644 CVE-2025/CVE-2025-490xx/CVE-2025-49060.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49373.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49374.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49376.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49377.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49378.json create mode 100644 CVE-2025/CVE-2025-493xx/CVE-2025-49380.json create mode 100644 CVE-2025/CVE-2025-498xx/CVE-2025-49899.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49901.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49903.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49906.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49907.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49908.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49910.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49911.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49912.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49913.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49915.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49916.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49917.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49920.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49921.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49922.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49923.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49924.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49925.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49926.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49927.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49928.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49929.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49930.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49931.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49932.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49933.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49934.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49935.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49936.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49937.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49938.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49939.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49940.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49944.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49945.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49946.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49947.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49948.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49949.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49950.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49951.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49952.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49953.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49954.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49955.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49956.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49957.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49958.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49959.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49960.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49961.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49962.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49963.json create mode 100644 CVE-2025/CVE-2025-499xx/CVE-2025-49992.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52734.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52735.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52736.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52737.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52738.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52740.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52741.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52742.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52743.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52748.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52749.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52750.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52751.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52752.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52753.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52754.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52755.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52756.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52757.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52758.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52760.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52763.json create mode 100644 CVE-2025/CVE-2025-527xx/CVE-2025-52770.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53218.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53229.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53232.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53234.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53236.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53238.json create mode 100644 CVE-2025/CVE-2025-532xx/CVE-2025-53297.json create mode 100644 CVE-2025/CVE-2025-533xx/CVE-2025-53350.json create mode 100644 CVE-2025/CVE-2025-533xx/CVE-2025-53351.json create mode 100644 CVE-2025/CVE-2025-533xx/CVE-2025-53352.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53420.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53421.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53422.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53423.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53424.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53425.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53426.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53427.json create mode 100644 CVE-2025/CVE-2025-534xx/CVE-2025-53428.json create mode 100644 CVE-2025/CVE-2025-564xx/CVE-2025-56447.json create mode 100644 CVE-2025/CVE-2025-578xx/CVE-2025-57870.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58916.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58921.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58955.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58958.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58959.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58961.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58963.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58966.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58967.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58970.json create mode 100644 CVE-2025/CVE-2025-589xx/CVE-2025-58971.json create mode 100644 CVE-2025/CVE-2025-590xx/CVE-2025-59004.json create mode 100644 CVE-2025/CVE-2025-590xx/CVE-2025-59006.json create mode 100644 CVE-2025/CVE-2025-590xx/CVE-2025-59007.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59550.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59555.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59557.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59558.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59564.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59566.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59571.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59575.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59578.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59579.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59580.json create mode 100644 CVE-2025/CVE-2025-595xx/CVE-2025-59593.json create mode 100644 CVE-2025/CVE-2025-600xx/CVE-2025-60039.json create mode 100644 CVE-2025/CVE-2025-600xx/CVE-2025-60041.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60131.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60132.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60134.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60135.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60151.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60168.json create mode 100644 CVE-2025/CVE-2025-601xx/CVE-2025-60176.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60206.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60208.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60209.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60210.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60211.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60212.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60213.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60214.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60215.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60216.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60217.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60220.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60221.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60222.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60224.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60225.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60226.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60227.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60228.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60232.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60234.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60238.json create mode 100644 CVE-2025/CVE-2025-602xx/CVE-2025-60246.json create mode 100644 CVE-2025/CVE-2025-603xx/CVE-2025-60331.json create mode 100644 CVE-2025/CVE-2025-603xx/CVE-2025-60332.json create mode 100644 CVE-2025/CVE-2025-610xx/CVE-2025-61035.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62005.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62006.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62007.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62008.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62009.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62013.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62015.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62019.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62020.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62021.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62022.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62023.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62024.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62025.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62026.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62027.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62029.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62042.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62048.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62052.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62054.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62058.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62060.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62061.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62062.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62063.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62068.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62069.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62070.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62071.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62072.json create mode 100644 CVE-2025/CVE-2025-620xx/CVE-2025-62073.json create mode 100644 CVE-2025/CVE-2025-625xx/CVE-2025-62525.json create mode 100644 CVE-2025/CVE-2025-625xx/CVE-2025-62526.json create mode 100644 CVE-2025/CVE-2025-626xx/CVE-2025-62604.json create mode 100644 CVE-2025/CVE-2025-626xx/CVE-2025-62606.json create mode 100644 CVE-2025/CVE-2025-88xx/CVE-2025-8848.json diff --git a/CVE-2016/CVE-2016-150xx/CVE-2016-15048.json b/CVE-2016/CVE-2016-150xx/CVE-2016-15048.json new file mode 100644 index 00000000000..6e389f1f43d --- /dev/null +++ b/CVE-2016/CVE-2016-150xx/CVE-2016-15048.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2016-15048", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-22T15:15:30.923", + "lastModified": "2025-10-22T15:15:30.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "AMTT Hotel Broadband Operation System (HiBOS) contains an unauthenticated command injection vulnerability in the /manager/radius/server_ping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An attacker can insert shell metacharacters into the ip parameter to inject and execute arbitrary system commands as the web server user. The initial third-party disclosure in 2016 recommended contacting the vendor for remediation guidance. Additionally, this product may have been rebranded under a different name.\u00a0VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-14\u00a0at 04:45:53.510819 UTC." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/adysec/nuclei_poc/blob/49c283b2bbb244c071786a2b768fbdde1b91f38e/poc/remote_code_execution/hiboss-rce_2.yaml#L21", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://wooyun.laolisafe.com/bug_detail.php?wybug_id=wooyun-2016-0181444", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.amttgroup.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.cnvd.org.cn/flaw/show/CNVD-2021-37784", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/amtt-hibos-command-injection-rce-via-server-ping-php", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50556.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50556.json new file mode 100644 index 00000000000..0602bffdef5 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50556.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50556", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:39.673", + "lastModified": "2025-10-22T14:15:39.673", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: Fix potential null-ptr-deref due to drmm_mode_config_init()\n\ndrmm_mode_config_init() will call drm_mode_create_standard_properties()\nand won't check the ret value. When drm_mode_create_standard_properties()\nfailed due to alloc, property will be a NULL pointer and may causes the\nnull-ptr-deref. Fix the null-ptr-deref by adding the ret value check.\n\nFound null-ptr-deref while testing insert module bochs:\ngeneral protection fault, probably for non-canonical address\n 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]\nCPU: 3 PID: 249 Comm: modprobe Not tainted 6.1.0-rc1+ #364\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\nrel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014\nRIP: 0010:drm_object_attach_property+0x73/0x3c0 [drm]\nCall Trace:\n \n __drm_connector_init+0xb6c/0x1100 [drm]\n bochs_pci_probe.cold.11+0x4cb/0x7fe [bochs]\n pci_device_probe+0x17d/0x340\n really_probe+0x1db/0x5d0\n __driver_probe_device+0x1e7/0x250\n driver_probe_device+0x4a/0x120\n __driver_attach+0xcd/0x2c0\n bus_for_each_dev+0x11a/0x1b0\n bus_add_driver+0x3d7/0x500\n driver_register+0x18e/0x320\n do_one_initcall+0xc4/0x3e0\n do_init_module+0x1b4/0x630\n load_module+0x5dca/0x7230\n __do_sys_finit_module+0x100/0x170\n do_syscall_64+0x3f/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\nRIP: 0033:0x7ff65af9f839" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5ae70041a6d7de62a0cdb2bbcfe0c9cf753035d0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/834c23e4f798dcdc8af251b3c428ceef94741991", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/961620ad67611a7320a49f4b6f3c5e2906833a03", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b14147464251f66e38fa39f0aae9780466db8610", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d06e827a65a6bcd2e329045d891d0739cec1cf4a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50557.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50557.json new file mode 100644 index 00000000000..341bec60a8d --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50557.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2022-50557", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.403", + "lastModified": "2025-10-22T14:15:40.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions()\n\nThe thunderbay_add_functions() will free memory of thunderbay_funcs\nwhen everything is ok, but thunderbay_funcs will not be freed when\nthunderbay_add_functions() fails, then there will be a memory leak,\nso we need to add kfree() when thunderbay_add_functions() fails to\nfix it.\n\nIn addition, doing some cleaner works, moving kfree(funcs) from\nthunderbay_add_functions() to thunderbay_build_functions()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3650943bab29d03ef147290451237713ed1942cd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/83e1bcaf8cef26edaaf2a6098ef760f563683483", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/aae4846e8e49044cb51d0276bec2a3fc2d5cd8da", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50558.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50558.json new file mode 100644 index 00000000000..37f474d9a1a --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50558.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2022-50558", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.513", + "lastModified": "2025-10-22T14:15:40.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode\n\nCommit faa87ce9196d (\"regmap-irq: Introduce config registers for irq\ntypes\") added the num_config_regs, then commit 9edd4f5aee84 (\"regmap-irq:\nDeprecate type registers and virtual registers\") suggested to replace\nnum_type_reg with it. However, regmap_add_irq_chip_fwnode wasn't modified\nto use the new property. Later on, commit 255a03bb1bb3 (\"ASoC: wcd9335:\nConvert irq chip to config regs\") removed the old num_type_reg property\nfrom the WCD9335 driver's struct regmap_irq_chip, causing a null pointer\ndereference in regmap_irq_set_type when it tried to index d->type_buf as\nit was never allocated in regmap_add_irq_chip_fwnode:\n\n[ 39.199374] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n\n[ 39.200006] Call trace:\n[ 39.200014] regmap_irq_set_type+0x84/0x1c0\n[ 39.200026] __irq_set_trigger+0x60/0x1c0\n[ 39.200040] __setup_irq+0x2f4/0x78c\n[ 39.200051] request_threaded_irq+0xe8/0x1a0\n\nUse num_config_regs in regmap_add_irq_chip_fwnode instead of num_type_reg,\nand fall back to it if num_config_regs isn't defined to maintain backward\ncompatibility." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/57bb34330c0fc70bb4ab96399a3c1b80e73e9d49", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/84498d1fb35de6ab71bdfdb6270a464fb4a0951b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/961db32e52f4d34a9a95939a30393fd190397f84", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50559.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50559.json new file mode 100644 index 00000000000..499a531885f --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50559.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2022-50559", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.627", + "lastModified": "2025-10-22T14:15:40.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: imx: scu: fix memleak on platform_device_add() fails\n\nNo error handling is performed when platform_device_add()\nfails. Add error processing before return, and modified\nthe return value." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/05fe0b3d69b8e094db207648ab21cade56d71cd8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/43c589b7a187ef481b594317eaab8c8f269e4a68", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/855ae87a2073ebf1b395e020de54fdf9ce7d166f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9209e6bab75d4008d9f4248c66008f3ffd24c931", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50560.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50560.json new file mode 100644 index 00000000000..02a3b6212c8 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50560.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50560", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.737", + "lastModified": "2025-10-22T14:15:40.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: explicitly remove aggregate driver at module unload time\n\nBecause component_master_del wasn't being called when unloading the\nmeson_drm module, the aggregate device would linger forever in the global\naggregate_devices list. That means when unloading and reloading the\nmeson_dw_hdmi module, component_add would call into\ntry_to_bring_up_aggregate_device and find the unbound meson_drm aggregate\ndevice.\n\nThis would in turn dereference some of the aggregate_device's struct\nentries which point to memory automatically freed by the devres API when\nunbinding the aggregate device from meson_drv_unbind, and trigger an\nuse-after-free bug:\n\n[ +0.000014] =============================================================\n[ +0.000007] BUG: KASAN: use-after-free in find_components+0x468/0x500\n[ +0.000017] Read of size 8 at addr ffff000006731688 by task modprobe/2536\n[ +0.000018] CPU: 4 PID: 2536 Comm: modprobe Tainted: G C O 5.19.0-rc6-lrmbkasan+ #1\n[ +0.000010] Hardware name: Hardkernel ODROID-N2Plus (DT)\n[ +0.000008] Call trace:\n[ +0.000005] dump_backtrace+0x1ec/0x280\n[ +0.000011] show_stack+0x24/0x80\n[ +0.000007] dump_stack_lvl+0x98/0xd4\n[ +0.000010] print_address_description.constprop.0+0x80/0x520\n[ +0.000011] print_report+0x128/0x260\n[ +0.000007] kasan_report+0xb8/0xfc\n[ +0.000007] __asan_report_load8_noabort+0x3c/0x50\n[ +0.000009] find_components+0x468/0x500\n[ +0.000008] try_to_bring_up_aggregate_device+0x64/0x390\n[ +0.000009] __component_add+0x1dc/0x49c\n[ +0.000009] component_add+0x20/0x30\n[ +0.000008] meson_dw_hdmi_probe+0x28/0x34 [meson_dw_hdmi]\n[ +0.000013] platform_probe+0xd0/0x220\n[ +0.000008] really_probe+0x3ac/0xa80\n[ +0.000008] __driver_probe_device+0x1f8/0x400\n[ +0.000008] driver_probe_device+0x68/0x1b0\n[ +0.000008] __driver_attach+0x20c/0x480\n[ +0.000009] bus_for_each_dev+0x114/0x1b0\n[ +0.000007] driver_attach+0x48/0x64\n[ +0.000009] bus_add_driver+0x390/0x564\n[ +0.000007] driver_register+0x1a8/0x3e4\n[ +0.000009] __platform_driver_register+0x6c/0x94\n[ +0.000007] meson_dw_hdmi_platform_driver_init+0x30/0x1000 [meson_dw_hdmi]\n[ +0.000014] do_one_initcall+0xc4/0x2b0\n[ +0.000008] do_init_module+0x154/0x570\n[ +0.000010] load_module+0x1a78/0x1ea4\n[ +0.000008] __do_sys_init_module+0x184/0x1cc\n[ +0.000008] __arm64_sys_init_module+0x78/0xb0\n[ +0.000008] invoke_syscall+0x74/0x260\n[ +0.000008] el0_svc_common.constprop.0+0xcc/0x260\n[ +0.000009] do_el0_svc+0x50/0x70\n[ +0.000008] el0_svc+0x68/0x1a0\n[ +0.000009] el0t_64_sync_handler+0x11c/0x150\n[ +0.000009] el0t_64_sync+0x18c/0x190\n\n[ +0.000014] Allocated by task 902:\n[ +0.000007] kasan_save_stack+0x2c/0x5c\n[ +0.000009] __kasan_kmalloc+0x90/0xd0\n[ +0.000007] __kmalloc_node+0x240/0x580\n[ +0.000010] memcg_alloc_slab_cgroups+0xa4/0x1ac\n[ +0.000010] memcg_slab_post_alloc_hook+0xbc/0x4c0\n[ +0.000008] kmem_cache_alloc_node+0x1d0/0x490\n[ +0.000009] __alloc_skb+0x1d4/0x310\n[ +0.000010] alloc_skb_with_frags+0x8c/0x620\n[ +0.000008] sock_alloc_send_pskb+0x5ac/0x6d0\n[ +0.000010] unix_dgram_sendmsg+0x2e0/0x12f0\n[ +0.000010] sock_sendmsg+0xcc/0x110\n[ +0.000007] sock_write_iter+0x1d0/0x304\n[ +0.000008] new_sync_write+0x364/0x460\n[ +0.000007] vfs_write+0x420/0x5ac\n[ +0.000008] ksys_write+0x19c/0x1f0\n[ +0.000008] __arm64_sys_write+0x78/0xb0\n[ +0.000007] invoke_syscall+0x74/0x260\n[ +0.000008] el0_svc_common.constprop.0+0x1a8/0x260\n[ +0.000009] do_el0_svc+0x50/0x70\n[ +0.000007] el0_svc+0x68/0x1a0\n[ +0.000008] el0t_64_sync_handler+0x11c/0x150\n[ +0.000008] el0t_64_sync+0x18c/0x190\n\n[ +0.000013] Freed by task 2509:\n[ +0.000008] kasan_save_stack+0x2c/0x5c\n[ +0.000007] kasan_set_track+0x2c/0x40\n[ +0.000008] kasan_set_free_info+0x28/0x50\n[ +0.000008] ____kasan_slab_free+0x128/0x1d4\n[ +0.000008] __kasan_slab_free+0x18/0x24\n[ +0.000007] slab_free_freelist_hook+0x108/0x230\n[ +0.000010] \n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/587c7da877219e6185217bf64418e62e114dab1e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6ef20de2fe0ee1decedbfabb17782897ca27bfe5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8616f2a0589a80e08434212324250eb22f6a66ce", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a427a22839daacd36531a62c83d5c9cd6f20657", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f11aa996fc01888f870be0e79ba71526888c0d8a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50561.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50561.json new file mode 100644 index 00000000000..46a1a44d32d --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50561.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2022-50561", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.847", + "lastModified": "2025-10-22T14:15:40.847", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: fix memory leak in iio_device_register_eventset()\n\nWhen iio_device_register_sysfs_group() returns failed,\niio_device_register_eventset() needs to free attrs array.\n\nOtherwise, kmemleak would scan & report memory leak as below:\n\nunreferenced object 0xffff88810a1cc3c0 (size 32):\n comm \"100-i2c-vcnl302\", pid 728, jiffies 4295052307 (age 156.027s)\n backtrace:\n __kmalloc+0x46/0x1b0\n iio_device_register_eventset at drivers/iio/industrialio-event.c:541\n __iio_device_register at drivers/iio/industrialio-core.c:1959\n __devm_iio_device_register at drivers/iio/industrialio-core.c:2040" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5de3add7509c95685f1185683b817dd206c4b1f1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/86fdd15e10e404e70ecb2a3bff24d70356d42b36", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a154b1c139fbf6a49762159be81d425d41ceec87", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dc6afd6070f3a5b086c8c5cfa6ded63ae44494da", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50562.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50562.json new file mode 100644 index 00000000000..f9d1c5d0d6a --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50562.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50562", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:40.953", + "lastModified": "2025-10-22T14:15:40.953", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: acpi: Call acpi_put_table() to fix memory leak\n\nThe start and length of the event log area are obtained from\nTPM2 or TCPA table, so we call acpi_get_table() to get the\nACPI information, but the acpi_get_table() should be coupled with\nacpi_put_table() to release the ACPI memory, add the acpi_put_table()\nproperly to fix the memory leak.\n\nWhile we are at it, remove the redundant empty line at the\nend of the tpm_read_log_acpi()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/638cd298dfebce46919cbd6cf1884701215f506d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/694a3d66f493afd77c704c6de91d9be4d6e004e4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8740a12ca2e2959531ad253bac99ada338b33d80", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ddc48068ac85740d3d5f9f3b0b323e733a35b33", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf31e3f8077af539feaf4e9bbf82e8eb51e7e5a8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50563.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50563.json new file mode 100644 index 00000000000..c154b5deca9 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50563.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50563", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.067", + "lastModified": "2025-10-22T14:15:41.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: Fix UAF in run_timer_softirq()\n\nWhen dm_resume() and dm_destroy() are concurrent, it will\nlead to UAF, as follows:\n\n BUG: KASAN: use-after-free in __run_timers+0x173/0x710\n Write of size 8 at addr ffff88816d9490f0 by task swapper/0/0\n\n Call Trace:\n \n dump_stack_lvl+0x73/0x9f\n print_report.cold+0x132/0xaa2\n _raw_spin_lock_irqsave+0xcd/0x160\n __run_timers+0x173/0x710\n kasan_report+0xad/0x110\n __run_timers+0x173/0x710\n __asan_store8+0x9c/0x140\n __run_timers+0x173/0x710\n call_timer_fn+0x310/0x310\n pvclock_clocksource_read+0xfa/0x250\n kvm_clock_read+0x2c/0x70\n kvm_clock_get_cycles+0xd/0x20\n ktime_get+0x5c/0x110\n lapic_next_event+0x38/0x50\n clockevents_program_event+0xf1/0x1e0\n run_timer_softirq+0x49/0x90\n __do_softirq+0x16e/0x62c\n __irq_exit_rcu+0x1fa/0x270\n irq_exit_rcu+0x12/0x20\n sysvec_apic_timer_interrupt+0x8e/0xc0\n\nOne of the concurrency UAF can be shown as below:\n\n use free\ndo_resume |\n __find_device_hash_cell |\n dm_get |\n atomic_inc(&md->holders) |\n | dm_destroy\n | __dm_destroy\n | if (!dm_suspended_md(md))\n | atomic_read(&md->holders)\n | msleep(1)\n dm_resume |\n __dm_resume |\n dm_table_resume_targets |\n pool_resume |\n do_waker #add delay work |\n dm_put |\n atomic_dec(&md->holders) |\n | dm_table_destroy\n | pool_dtr\n | __pool_dec\n | __pool_destroy\n | destroy_workqueue\n | kfree(pool) # free pool\n time out\n__do_softirq\n run_timer_softirq # pool has already been freed\n\nThis can be easily reproduced using:\n 1. create thin-pool\n 2. dmsetup suspend pool\n 3. dmsetup resume pool\n 4. dmsetup remove_all # Concurrent with 3\n\nThe root cause of this UAF bug is that dm_resume() adds timer after\ndm_destroy() skips cancelling the timer because of suspend status.\nAfter timeout, it will call run_timer_softirq(), however pool has\nalready been freed. The concurrency UAF bug will happen.\n\nTherefore, cancelling timer again in __pool_destroy()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/34cd15d83b7206188d440b29b68084fcafde9395", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/34fe9c2251f19786a6689149a6212c6c0de1d63b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/550a4fac7ecfee5bac6a0dd772456ca62fb72f46", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7ae6aa649394e1e7f6dafb55ce0d578c0572a280", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7ee059d06a5d3c15465959e0472993e80fbe4e81", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/88430ebcbc0ec637b710b947738839848c20feff", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/94e231c9d6f2648d2f1f68e7f476e050ee0a6159", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d9971fa4d8bde63d49c743c1b32d12fbbd3a30bd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e8b8e0d2bbf7d1172c4f435621418e29ee408d46", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50564.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50564.json new file mode 100644 index 00000000000..2bcae62811c --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50564.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50564", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.193", + "lastModified": "2025-10-22T14:15:41.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/netiucv: Fix return type of netiucv_tx()\n\nWith clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG),\nindirect call targets are validated against the expected function\npointer prototype to make sure the call target is valid to help mitigate\nROP attacks. If they are not identical, there is a failure at run time,\nwhich manifests as either a kernel panic or thread getting killed. A\nproposed warning in clang aims to catch these at compile time, which\nreveals:\n\n drivers/s390/net/netiucv.c:1854:21: error: incompatible function pointer types initializing 'netdev_tx_t (*)(struct sk_buff *, struct net_device *)' (aka 'enum netdev_tx (*)(struct sk_buff *, struct net_device *)') with an expression of type 'int (struct sk_buff *, struct net_device *)' [-Werror,-Wincompatible-function-pointer-types-strict]\n .ndo_start_xmit = netiucv_tx,\n ^~~~~~~~~~\n\n->ndo_start_xmit() in 'struct net_device_ops' expects a return type of\n'netdev_tx_t', not 'int'. Adjust the return type of netiucv_tx() to\nmatch the prototype's to resolve the warning and potential CFI failure,\nshould s390 select ARCH_SUPPORTS_CFI_CLANG in the future.\n\nAdditionally, while in the area, remove a comment block that is no\nlonger relevant." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3ac0217ca9186c2f9af9a0113a331a42aa847894", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4bee3c75d5bf7c2b5dc0b520410eb40449e5da31", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85d392710275355425df8618ccbebbc336f5acc5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/88d86d18d7cf7e9137c95f9d212bb9fff8a1b4be", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d034fa43af92fc46a81d882f46d9cc3e4ffdbbcc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dfbf0122ea1b9b3e73fa22c8ff6bd888935c54fc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e7a849f740e3576e79cba403697e916f4c3a6f12", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/eccc88c0efe407e579291792ad07a7dedc0f63f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f13d870fce90f01cf930bfaffecc8185ae0be21c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50565.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50565.json new file mode 100644 index 00000000000..19e51bd995f --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50565.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2022-50565", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.313", + "lastModified": "2025-10-22T14:15:41.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx()\n\nurbs does not be freed in exception paths in __lf_x_usb_enable_rx().\nThat will trigger memory leak. To fix it, add kfree() for urbs within\n\"error\" label. Compile tested only." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/286464463a05cb4bad80b134e24f8ffaab20bee4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/895b3b06efc285c1245242e9638b9ae251dc13ec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fce7e46273649d9cdcd98d89551975a65f206a14", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50566.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50566.json new file mode 100644 index 00000000000..54907ee80b2 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50566.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50566", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.420", + "lastModified": "2025-10-22T14:15:41.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: Fix device name leak when register device failed in add_mtd_device()\n\nThere is a kmemleak when register device failed:\n unreferenced object 0xffff888101aab550 (size 8):\n comm \"insmod\", pid 3922, jiffies 4295277753 (age 925.408s)\n hex dump (first 8 bytes):\n 6d 74 64 30 00 88 ff ff mtd0....\n backtrace:\n [<00000000bde26724>] __kmalloc_node_track_caller+0x4e/0x150\n [<000000003c32b416>] kvasprintf+0xb0/0x130\n [<000000001f7a8f15>] kobject_set_name_vargs+0x2f/0xb0\n [<000000006e781163>] dev_set_name+0xab/0xe0\n [<00000000e30d0c78>] add_mtd_device+0x4bb/0x700\n [<00000000f3d34de7>] mtd_device_parse_register+0x2ac/0x3f0\n [<00000000c0d88488>] 0xffffffffa0238457\n [<00000000b40d0922>] 0xffffffffa02a008f\n [<0000000023d17b9d>] do_one_initcall+0x87/0x2a0\n [<00000000770f6ca6>] do_init_module+0xdf/0x320\n [<000000007b6768fe>] load_module+0x2f98/0x3330\n [<00000000346bed5a>] __do_sys_finit_module+0x113/0x1b0\n [<00000000674c2290>] do_syscall_64+0x35/0x80\n [<000000004c6a8d97>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nIf register device failed, should call put_device() to give up the\nreference." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1b172fb05d6315ecec082fd7544a3390e96f0d7e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2302e2dc42b1f84f951c725ce742fc21c5a1e151", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/330bc5533e8a8ed69cb951d5a8edce9bddb9db21", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/71212d73184845c944ef1b43f092e643e5bde003", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/895d68a39481a75c680aa421546931fb11942fa6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a75f45afa932bfb24a2603ebcea5efd2e7cdcfd6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bcabe1dc2a344adbb3382930a23e273ba9382277", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/db07fe76df01f40cb897d6e9066b84e46957beb3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fa0d32ab8407d7481450c664fd0de64f2dae9489", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50567.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50567.json new file mode 100644 index 00000000000..ae876d7d61b --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50567.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50567", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.533", + "lastModified": "2025-10-22T14:15:41.533", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: jfs: fix shift-out-of-bounds in dbAllocAG\n\nSyzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The\nunderlying bug is the missing check of bmp->db_agl2size. The field can\nbe greater than 64 and trigger the shift-out-of-bounds.\n\nFix this bug by adding a check of bmp->db_agl2size in dbMount since this\nfield is used in many following functions. The upper bound for this\nfield is L2MAXL2SIZE - L2MAXAG, thanks for the help of Dave Kleikamp.\nNote that, for maintenance, I reorganized error handling code of dbMount." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0536f76a2bca83d1a3740517ba22cc93a44b3099", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2c575c8905f7a8b32d5611b91856b69bac2a5bf1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3115313cf03113e87c87adee18ee49a20bbdb9ba", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/359616ce587e524107730504891afa4b1a8be58c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3e997e4ce8ae7ab89d72334120f6aee49c5bbdbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/67973caae78e21ee46a7281aaa8ca364eb9c444f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/898f706695682b9954f280d95e49fa86ffa55d08", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d3b486946a4e62c7ef6023f7d9c1d049051384ba", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/eea87acb6027be3dd4d3c57186bb22800d57fdda", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50568.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50568.json new file mode 100644 index 00000000000..c78451ed3fb --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50568.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2022-50568", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.657", + "lastModified": "2025-10-22T14:15:41.657", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_hid: fix f_hidg lifetime vs cdev\n\nThe embedded struct cdev does not have its lifetime correctly tied to\nthe enclosing struct f_hidg, so there is a use-after-free if /dev/hidgN\nis held open while the gadget is deleted.\n\nThis can readily be replicated with libusbgx's example programs (for\nconciseness - operating directly via configfs is equivalent):\n\n\tgadget-hid\n\texec 3<> /dev/hidg0\n\tgadget-vid-pid-remove\n\texec 3<&-\n\nPull the existing device up in to struct f_hidg and make use of the\ncdev_device_{add,del}() helpers. This changes the lifetime of the\ndevice object to match struct f_hidg, but note that it is still added\nand deleted at the same time." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1b6a53e447ec3d81623610c8c7ec5082b47dfdce", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1cd7f156f6389918f760687fbbf133c86da93162", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/89ff3dfac604614287ad5aad9370c3f984ea3f4b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9e08b7f5fa00e9d550851352bd0d1ba74ccffef2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9e4b85d815b14bd4db2deea2a54264a23de8b896", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c78c87c4e389b62f8892af7f59857447aa6d9797", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d3136b79705c2e3bba9c76adc5628af0215d798e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50569.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50569.json new file mode 100644 index 00000000000..ce83e0ce046 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50569.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50569", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.780", + "lastModified": "2025-10-22T14:15:41.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Update ipcomp_scratches with NULL when freed\n\nCurrently if ipcomp_alloc_scratches() fails to allocate memory\nipcomp_scratches holds obsolete address. So when we try to free the\npercpu scratches using ipcomp_free_scratches() it tries to vfree non\nexistent vm area. Described below:\n\nstatic void * __percpu *ipcomp_alloc_scratches(void)\n{\n ...\n scratches = alloc_percpu(void *);\n if (!scratches)\n return NULL;\nipcomp_scratches does not know about this allocation failure.\nTherefore holding the old obsolete address.\n ...\n}\n\nSo when we free,\n\nstatic void ipcomp_free_scratches(void)\n{\n ...\n scratches = ipcomp_scratches;\nAssigning obsolete address from ipcomp_scratches\n\n if (!scratches)\n return;\n\n for_each_possible_cpu(i)\n vfree(*per_cpu_ptr(scratches, i));\nTrying to free non existent page, causing warning: trying to vfree\nexistent vm area.\n ...\n}\n\nFix this breakage by updating ipcomp_scrtches with NULL when scratches\nis freed" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/03155680191ef0f004b1d6a5714c5b8cd271ab61", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/18373ed500f7cd53e24d9b0bd0f1c09d78dba87e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1e8abde895b3ac6a368cbdb372e8800c49e73a28", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2c19945ce8095d065df550e7fe350cd5cc40c6e6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a04d2fc700f717104bfb95b0f6694e448a4537f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a39f456d62810c0efb43cead22f98d95b53e4b1a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/be81c44242b20fc3bdcc73480ef8aaee56f5d0b6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/debca61df6bc2f65e020656c9c5b878d6b38d30f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f3bdba4440d82e0da2b1bfc35d3836c8a8e00677", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50570.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50570.json new file mode 100644 index 00000000000..8f98d453932 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50570.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2022-50570", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:41.910", + "lastModified": "2025-10-22T14:15:41.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/chrome: fix memory corruption in ioctl\n\nIf \"s_mem.bytes\" is larger than the buffer size it leads to memory\ncorruption." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0c2e18924504208644d18415667895a4ac54cf2a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/868fc93b615b9f6c2b0b1894536618fa6cd66acc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a07b45fd3c2dda24fad43639be5335a4595196a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e548f9503c4b3292a60a63fe77dccea62999a35a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f143f1d9a8e5c6c9db3de81ca270191226fcce36", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fd1d3b265784a2243fcaef06aebfb2f8ee733cec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50571.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50571.json new file mode 100644 index 00000000000..f81bfd2a676 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50571.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2022-50571", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.020", + "lastModified": "2025-10-22T14:15:42.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: call __btrfs_remove_free_space_cache_locked on cache load failure\n\nNow that lockdep is staying enabled through our entire CI runs I started\nseeing the following stack in generic/475\n\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 2171864 at fs/btrfs/discard.c:604 btrfs_discard_update_discardable+0x98/0xb0\nCPU: 1 PID: 2171864 Comm: kworker/u4:0 Not tainted 5.19.0-rc8+ #789\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-2.fc32 04/01/2014\nWorkqueue: btrfs-cache btrfs_work_helper\nRIP: 0010:btrfs_discard_update_discardable+0x98/0xb0\nRSP: 0018:ffffb857c2f7bad0 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff8c85c605c200 RCX: 0000000000000001\nRDX: 0000000000000000 RSI: ffffffff86807c5b RDI: ffffffff868a831e\nRBP: ffff8c85c4c54000 R08: 0000000000000000 R09: 0000000000000000\nR10: ffff8c85c66932f0 R11: 0000000000000001 R12: ffff8c85c3899010\nR13: ffff8c85d5be4f40 R14: ffff8c85c4c54000 R15: ffff8c86114bfa80\nFS: 0000000000000000(0000) GS:ffff8c863bd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f2e7f168160 CR3: 000000010289a004 CR4: 0000000000370ee0\nCall Trace:\n\n __btrfs_remove_free_space_cache+0x27/0x30\n load_free_space_cache+0xad2/0xaf0\n caching_thread+0x40b/0x650\n ? lock_release+0x137/0x2d0\n btrfs_work_helper+0xf2/0x3e0\n ? lock_is_held_type+0xe2/0x140\n process_one_work+0x271/0x590\n ? process_one_work+0x590/0x590\n worker_thread+0x52/0x3b0\n ? process_one_work+0x590/0x590\n kthread+0xf0/0x120\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x1f/0x30\n\nThis is the code\n\n ctl = block_group->free_space_ctl;\n discard_ctl = &block_group->fs_info->discard_ctl;\n\n lockdep_assert_held(&ctl->tree_lock);\n\nWe have a temporary free space ctl for loading the free space cache in\norder to avoid having allocations happening while we're loading the\ncache. When we hit an error we free it all up, however this also calls\nbtrfs_discard_update_discardable, which requires\nblock_group->free_space_ctl->tree_lock to be held. However this is our\ntemporary ctl so this lock isn't held. Fix this by calling\n__btrfs_remove_free_space_cache_locked instead so that we only clean up\nthe entries and do not mess with the discardable stats." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/819a61301275dcc573e3f520be3dc2c8531bee2d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a1ae2781dee9fc21ca82db682d37bea4bd074ad", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50572.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50572.json new file mode 100644 index 00000000000..fbf7cff568a --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50572.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2022-50572", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.123", + "lastModified": "2025-10-22T14:15:42.123", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()\n\nThe of_get_next_child() returns a node with refcount incremented, and\ndecrements the refcount of prev. So in the error path of the while loop,\nof_node_put() needs be called for cpu_ep." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/06c9d468c06806dab752eb8e72addbf3792c1023", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/49dad92af6892f46851af989ef3aa7cd7316c389", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4cc8431ec77a43ea106d8bde0860c61cfdda1cd0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85eb5c952b7fe2d2059beaa4a4dd26688b25547b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ab2d12c726f0fde0692fa5d81d8019b3dcd62d0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ed1376f771404917c2ec3ebc617431ec01146134", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50573.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50573.json new file mode 100644 index 00000000000..009c6c8e141 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50573.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2022-50573", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.233", + "lastModified": "2025-10-22T14:15:42.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks\n\nCoverity message: variable \"buf\" going out of scope leaks the storage.\n\nAddresses-Coverity-ID: 1527799 (\"Resource leaks\")" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8b25301af01566f4b5a301fc1ad7c5d2b1788d7f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ecff00802f60fa5d08c133d209ed984a455a41f8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50574.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50574.json new file mode 100644 index 00000000000..b8fa0ecb6c9 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50574.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2022-50574", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.333", + "lastModified": "2025-10-22T14:15:42.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/omap: dss: Fix refcount leak bugs\n\nIn dss_init_ports() and __dss_uninit_ports(), we should call\nof_node_put() for the reference returned by of_graph_get_port_by_id()\nin fail path or when it is not used anymore." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1f340e1c1c74d11c45a6e32663829b26acd4f47b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b42057e62120813ebe9274f508fa785b7cab33a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8f7c4114db841497e1148598e22548dd1f700b22", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9d7af9b1624dd70b67354972d7297429e6372091", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a5ce83e85d795ec98697039ecc518b21d5810adc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e55261beb86a15c190b2ff9090cb47bc06765353", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50575.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50575.json new file mode 100644 index 00000000000..ae1f1f201a9 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50575.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2022-50575", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.443", + "lastModified": "2025-10-22T14:15:42.443", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()\n\nAs 'kdata.num' is user-controlled data, if user tries to allocate\nmemory larger than(>=) MAX_ORDER, then kcalloc() will fail, it\ncreates a stack trace and messes up dmesg with a warning.\n\nCall trace:\n-> privcmd_ioctl\n--> privcmd_ioctl_mmap_resource\n\nAdd __GFP_NOWARN in order to avoid too large allocation warning.\nThis is detected by static analysis using smatch." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0bf874183b32eae2cc20e3c5be38ec3d33e7e564", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/46026bb057c35f5bb111bf95e00cd8366d2e34d4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4da411086f5ab32f811a89ef804980ec106ebb65", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4f983ee5e5de924d93a7bbb4e6f68f38c6256cd5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5d68ae32d132ea2af73bc223fd64c46f85302a8b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b997b2bb2c53b76a6db6c195930e9ab8e4b0c79", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e0c5f1058ed96f2b7487560c4c4cbd768d13d065", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50576.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50576.json new file mode 100644 index 00000000000..759adca93e4 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50576.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50576", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.560", + "lastModified": "2025-10-22T14:15:42.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: pch: Fix PCI device refcount leak in pch_request_dma()\n\nAs comment of pci_get_slot() says, it returns a pci_device with its\nrefcount increased. The caller must decrement the reference count by\ncalling pci_dev_put().\n\nSince 'dma_dev' is only used to filter the channel in filter(), we can\ncall pci_dev_put() before exiting from pch_request_dma(). Add the\nmissing pci_dev_put() for the normal and error path." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/07f4ca68b0f6bf84b6b391c14b59fd179fcde9c5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4f5d28865c665c9064de631a518f9bc8099d9ce4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/516614a371c26e3334625b4bca19a5362bf658d6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/56e5a7c5ee3f0dc8978b5df2b1a98a1b060c5e2a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6f7d82380fbeaed3a940efc33c23f0c4bbd0fc02", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8be3a7bf773700534a6e8f87f6ed2ed111254be5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/90ff030ca10b69feeebda1427550ebf9ed2ad868", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d165388227aa7e46a9751b90bae6337b5335cdbb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dfd15c5550b9190d5b0f9bcacb3e6436322f3854", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50577.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50577.json new file mode 100644 index 00000000000..b3b622aeae2 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50577.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2022-50577", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.677", + "lastModified": "2025-10-22T14:15:42.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: Fix memory leak in __ima_inode_hash()\n\nCommit f3cc6b25dcc5 (\"ima: always measure and audit files in policy\") lets\nmeasurement or audit happen even if the file digest cannot be calculated.\n\nAs a result, iint->ima_hash could have been allocated despite\nima_collect_measurement() returning an error.\n\nSince ima_hash belongs to a temporary inode metadata structure, declared\nat the beginning of __ima_inode_hash(), just add a kfree() call if\nima_collect_measurement() returns an error different from -ENOMEM (in that\ncase, ima_hash should not have been allocated)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8c1d6a050a0f16e0a9d32eaf53b965c77279c6f8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c4df8cb38f139ed9f4296868c0a6f15a26e8c491", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f375bcf69f58fd0744c9dfd1b6b891a27301d67b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50578.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50578.json new file mode 100644 index 00000000000..a9481bdc1c7 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50578.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2022-50578", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.803", + "lastModified": "2025-10-22T14:15:42.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclass: fix possible memory leak in __class_register()\n\nIf class_add_groups() returns error, the 'cp->subsys' need be\nunregister, and the 'cp' need be freed.\n\nWe can not call kset_unregister() here, because the 'cls' will\nbe freed in callback function class_release() and it's also\nfreed in caller's error path, it will cause double free.\n\nSo fix this by calling kobject_del() and kfree_const(name) to\ncleanup kobject. Besides, call kfree() to free the 'cp'.\n\nFault injection test can trigger this:\n\nunreferenced object 0xffff888102fa8190 (size 8):\n comm \"modprobe\", pid 502, jiffies 4294906074 (age 49.296s)\n hex dump (first 8 bytes):\n 70 6b 74 63 64 76 64 00 pktcdvd.\n backtrace:\n [<00000000e7c7703d>] __kmalloc_track_caller+0x1ae/0x320\n [<000000005e4d70bc>] kstrdup+0x3a/0x70\n [<00000000c2e5e85a>] kstrdup_const+0x68/0x80\n [<000000000049a8c7>] kvasprintf_const+0x10b/0x190\n [<0000000029123163>] kobject_set_name_vargs+0x56/0x150\n [<00000000747219c9>] kobject_set_name+0xab/0xe0\n [<0000000005f1ea4e>] __class_register+0x15c/0x49a\n\nunreferenced object 0xffff888037274000 (size 1024):\n comm \"modprobe\", pid 502, jiffies 4294906074 (age 49.296s)\n hex dump (first 32 bytes):\n 00 40 27 37 80 88 ff ff 00 40 27 37 80 88 ff ff .@'7.....@'7....\n 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N..........\n backtrace:\n [<00000000151f9600>] kmem_cache_alloc_trace+0x17c/0x2f0\n [<00000000ecf3dd95>] __class_register+0x86/0x49a" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/18a7200646958cf8e1b8a933de08122fc50676cd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3bb9c92c27624ad076419a70f2b1a30cd1f8bbbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3e0efc3f3f5e5c73996782f8db69963e501bb878", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/417ef049e3fd3b0d2593c1d5ffa3d0d5d0a018a7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4efa5443817c1b6de22d401aeca5b2481e835f8c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8c3e8a6bdb5253b97ad532570f8b5db5f7a06407", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/abaedb68a769e6bf36836b55a2f49b531c5f3f7b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e764ad5918a099ebeb909ccff83893a714e497e1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50579.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50579.json new file mode 100644 index 00000000000..98c9367bf43 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50579.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50579", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:42.927", + "lastModified": "2025-10-22T14:15:42.927", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ftrace: fix module PLTs with mcount\n\nLi Huafei reports that mcount-based ftrace with module PLTs was broken\nby commit:\n\n a6253579977e4c6f (\"arm64: ftrace: consistently handle PLTs.\")\n\nWhen a module PLTs are used and a module is loaded sufficiently far away\nfrom the kernel, we'll create PLTs for any branches which are\nout-of-range. These are separate from the special ftrace trampoline\nPLTs, which the module PLT code doesn't directly manipulate.\n\nWhen mcount is in use this is a problem, as each mcount callsite in a\nmodule will be initialized to point to a module PLT, but since commit\na6253579977e4c6f ftrace_make_nop() will assume that the callsite has\nbeen initialized to point to the special ftrace trampoline PLT, and\nftrace_find_callable_addr() rejects other cases.\n\nThis means that when ftrace tries to initialize a callsite via\nftrace_make_nop(), the call to ftrace_find_callable_addr() will find\nthat the `_mcount` stub is out-of-range and is not handled by the ftrace\nPLT, resulting in a splat:\n\n| ftrace_test: loading out-of-tree module taints kernel.\n| ftrace: no module PLT for _mcount\n| ------------[ ftrace bug ]------------\n| ftrace failed to modify\n| [] 0xffff800029180014\n| actual: 44:00:00:94\n| Initializing ftrace call sites\n| ftrace record flags: 2000000\n| (0)\n| expected tramp: ffff80000802eb3c\n| ------------[ cut here ]------------\n| WARNING: CPU: 3 PID: 157 at kernel/trace/ftrace.c:2120 ftrace_bug+0x94/0x270\n| Modules linked in:\n| CPU: 3 PID: 157 Comm: insmod Tainted: G O 6.0.0-rc6-00151-gcd722513a189-dirty #22\n| Hardware name: linux,dummy-virt (DT)\n| pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n| pc : ftrace_bug+0x94/0x270\n| lr : ftrace_bug+0x21c/0x270\n| sp : ffff80000b2bbaf0\n| x29: ffff80000b2bbaf0 x28: 0000000000000000 x27: ffff0000c4d38000\n| x26: 0000000000000001 x25: ffff800009d7e000 x24: ffff0000c4d86e00\n| x23: 0000000002000000 x22: ffff80000a62b000 x21: ffff8000098ebea8\n| x20: ffff0000c4d38000 x19: ffff80000aa24158 x18: ffffffffffffffff\n| x17: 0000000000000000 x16: 0a0d2d2d2d2d2d2d x15: ffff800009aa9118\n| x14: 0000000000000000 x13: 6333626532303830 x12: 3030303866666666\n| x11: 203a706d61727420 x10: 6465746365707865 x9 : 3362653230383030\n| x8 : c0000000ffffefff x7 : 0000000000017fe8 x6 : 000000000000bff4\n| x5 : 0000000000057fa8 x4 : 0000000000000000 x3 : 0000000000000001\n| x2 : ad2cb14bb5438900 x1 : 0000000000000000 x0 : 0000000000000022\n| Call trace:\n| ftrace_bug+0x94/0x270\n| ftrace_process_locs+0x308/0x430\n| ftrace_module_init+0x44/0x60\n| load_module+0x15b4/0x1ce8\n| __do_sys_init_module+0x1ec/0x238\n| __arm64_sys_init_module+0x24/0x30\n| invoke_syscall+0x54/0x118\n| el0_svc_common.constprop.4+0x84/0x100\n| do_el0_svc+0x3c/0xd0\n| el0_svc+0x1c/0x50\n| el0t_64_sync_handler+0x90/0xb8\n| el0t_64_sync+0x15c/0x160\n| ---[ end trace 0000000000000000 ]---\n| ---------test_init-----------\n\nFix this by reverting to the old behaviour of ignoring the old\ninstruction when initialising an mcount callsite in a module, which was\nthe behaviour prior to commit a6253579977e4c6f." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0f77b6b2ba70d7c9d69ef39694e283ded9f8b5f2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/657de36c72f57fa172a66b06f826b3f5bc56f42e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6c93b683cedaef745884cb9d554d02ed6266b897", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8cfb08575c6d4585f1ce0deeb189e5c824776b04", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/985432303cf7d4804fb2c2fdfbf0466a796d68c3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50580.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50580.json new file mode 100644 index 00000000000..5ce851af0af --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50580.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50580", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.037", + "lastModified": "2025-10-22T14:15:43.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-throttle: prevent overflow while calculating wait time\n\nThere is a problem found by code review in tg_with_in_bps_limit() that\n'bps_limit * jiffy_elapsed_rnd' might overflow. Fix the problem by\ncalling mul_u64_u64_div_u64() instead." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/19c010ae44f0ce52b5436080492a61a092ee0cf4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/70b2adb1d698fbc63d3b3848c452524dc15872c5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8d6bbaada2e0a65f9012ac4c2506460160e7237a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ca67b0563b39e79290c23e509319c178b9ca9104", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cc6f0855bf8d9b729df28ff443ced7350c380dbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50581.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50581.json new file mode 100644 index 00000000000..7c31e127e9c --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50581.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2022-50581", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.147", + "lastModified": "2025-10-22T14:15:43.147", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfs: fix OOB Read in __hfs_brec_find\n\nSyzbot reported a OOB read bug:\n\n==================================================================\nBUG: KASAN: slab-out-of-bounds in hfs_strcmp+0x117/0x190\nfs/hfs/string.c:84\nRead of size 1 at addr ffff88807eb62c4e by task kworker/u4:1/11\nCPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted\n6.1.0-rc6-syzkaller-00308-g644e9524388a #0\nWorkqueue: writeback wb_workfn (flush-7:0)\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106\n print_address_description+0x74/0x340 mm/kasan/report.c:284\n print_report+0x107/0x1f0 mm/kasan/report.c:395\n kasan_report+0xcd/0x100 mm/kasan/report.c:495\n hfs_strcmp+0x117/0x190 fs/hfs/string.c:84\n __hfs_brec_find+0x213/0x5c0 fs/hfs/bfind.c:75\n hfs_brec_find+0x276/0x520 fs/hfs/bfind.c:138\n hfs_write_inode+0x34c/0xb40 fs/hfs/inode.c:462\n write_inode fs/fs-writeback.c:1440 [inline]\n\nIf the input inode of hfs_write_inode() is incorrect:\nstruct inode\n struct hfs_inode_info\n struct hfs_cat_key\n struct hfs_name\n u8 len # len is greater than HFS_NAMELEN(31) which is the\nmaximum length of an HFS filename\n\nOOB read occurred:\nhfs_write_inode()\n hfs_brec_find()\n __hfs_brec_find()\n hfs_cat_keycmp()\n hfs_strcmp() # OOB read occurred due to len is too large\n\nFix this by adding a Check on len in hfs_write_inode() before calling\nhfs_brec_find()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2344f17c0a89c181ab1a9fef57fd8c3bddfd6e30", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/367296925c7625c3969d2a78d7a3e1dee161beb5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4fd3a11804c8877ff11fec59c5c53f1635331e3e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8c40f2dbae603ef0bd21e87c63f54ec59fd88256", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8d824e69d9f3fa3121b2dda25053bae71e2460d2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/90103ccb6e60aa4efe48993d23d6a528472f2233", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bfc9d8f27f89717431a6aecce42ae230b437433f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c886c10a6eddb99923b315f42bf63f448883ef9a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e9e692917c6e10a7066c7a6d092dcdc3d4e329f3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2022/CVE-2022-505xx/CVE-2022-50582.json b/CVE-2022/CVE-2022-505xx/CVE-2022-50582.json new file mode 100644 index 00000000000..43c1b3b31e8 --- /dev/null +++ b/CVE-2022/CVE-2022-505xx/CVE-2022-50582.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2022-50582", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.267", + "lastModified": "2025-10-22T14:15:43.267", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: core: Prevent integer underflow\n\nBy using a ratio of delay to poll_enabled_time that is not integer\ntime_remaining underflows and does not exit the loop as expected.\nAs delay could be derived from DT and poll_enabled_time is defined\nin the driver this can easily happen.\n\nUse a signed iterator to make sure that the loop exits once\nthe remaining time is negative." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8d8e16592022c9650df8aedfe6552ed478d7135b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9f2395316e4845466cb9b5b9b15a171a2c91913c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b051d9bf98bd9cea312b228e264eb6542a9beb67", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bfe602d9a349360e60e9051c9cafb9fef204524d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e33da263e9658bfe870ea7836fbbd72f246d7dbd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53691.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53691.json index c75437498b5..9dbe5df57dc 100644 --- a/CVE-2023/CVE-2023-536xx/CVE-2023-53691.json +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53691.json @@ -2,7 +2,7 @@ "id": "CVE-2023-53691", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T04:15:51.837", - "lastModified": "2025-10-22T04:15:51.837", + "lastModified": "2025-10-22T14:15:43.380", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "cve@mitre.org", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -51,6 +51,10 @@ { "url": "https://zhuanlan.zhihu.com/p/639514473", "source": "cve@mitre.org" + }, + { + "url": "https://zhuanlan.zhihu.com/p/639514473", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53692.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53692.json new file mode 100644 index 00000000000..fbc5a21580b --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53692.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2023-53692", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.670", + "lastModified": "2025-10-22T14:15:43.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix use-after-free read in ext4_find_extent for bigalloc + inline\n\nSyzbot found the following issue:\nloop0: detected capacity change from 0 to 2048\nEXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none.\n==================================================================\nBUG: KASAN: use-after-free in ext4_ext_binsearch_idx fs/ext4/extents.c:768 [inline]\nBUG: KASAN: use-after-free in ext4_find_extent+0x76e/0xd90 fs/ext4/extents.c:931\nRead of size 4 at addr ffff888073644750 by task syz-executor420/5067\n\nCPU: 0 PID: 5067 Comm: syz-executor420 Not tainted 6.2.0-rc1-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1b1/0x290 lib/dump_stack.c:106\n print_address_description+0x74/0x340 mm/kasan/report.c:306\n print_report+0x107/0x1f0 mm/kasan/report.c:417\n kasan_report+0xcd/0x100 mm/kasan/report.c:517\n ext4_ext_binsearch_idx fs/ext4/extents.c:768 [inline]\n ext4_find_extent+0x76e/0xd90 fs/ext4/extents.c:931\n ext4_clu_mapped+0x117/0x970 fs/ext4/extents.c:5809\n ext4_insert_delayed_block fs/ext4/inode.c:1696 [inline]\n ext4_da_map_blocks fs/ext4/inode.c:1806 [inline]\n ext4_da_get_block_prep+0x9e8/0x13c0 fs/ext4/inode.c:1870\n ext4_block_write_begin+0x6a8/0x2290 fs/ext4/inode.c:1098\n ext4_da_write_begin+0x539/0x760 fs/ext4/inode.c:3082\n generic_perform_write+0x2e4/0x5e0 mm/filemap.c:3772\n ext4_buffered_write_iter+0x122/0x3a0 fs/ext4/file.c:285\n ext4_file_write_iter+0x1d0/0x18f0\n call_write_iter include/linux/fs.h:2186 [inline]\n new_sync_write fs/read_write.c:491 [inline]\n vfs_write+0x7dc/0xc50 fs/read_write.c:584\n ksys_write+0x177/0x2a0 fs/read_write.c:637\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\nRIP: 0033:0x7f4b7a9737b9\nRSP: 002b:00007ffc5cac3668 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b7a9737b9\nRDX: 00000000175d9003 RSI: 0000000020000200 RDI: 0000000000000004\nRBP: 00007f4b7a933050 R08: 0000000000000000 R09: 0000000000000000\nR10: 000000000000079f R11: 0000000000000246 R12: 00007f4b7a9330e0\nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n \n\nAbove issue is happens when enable bigalloc and inline data feature. As\ncommit 131294c35ed6 fixed delayed allocation bug in ext4_clu_mapped for\nbigalloc + inline. But it only resolved issue when has inline data, if\ninline data has been converted to extent(ext4_da_convert_inline_data_to_extent)\nbefore writepages, there is no EXT4_STATE_MAY_INLINE_DATA flag. However\ni_data is still store inline data in this scene. Then will trigger UAF\nwhen find extent.\nTo resolve above issue, there is need to add judge \"ext4_has_inline_data(inode)\"\nin ext4_clu_mapped()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/11c87c8df2cae1d6be83c07e59fef0792de73482", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/14da044725a3ab10affa3566d29c15737c0e67a4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/40566def189c513be2c694681256d7486cc6e368", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/770b0613637f59f3091dda1ff0c23671a5326b9c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/835659598c67907b98cd2aa57bb951dfaf675c69", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/96d440bee177669dc0acedca0abd73bae6a9be8b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a34f6dcb78c654ab905642c1b4e7e5fbb4f0babe", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53693.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53693.json new file mode 100644 index 00000000000..e5426347b14 --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53693.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2023-53693", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.787", + "lastModified": "2025-10-22T14:15:43.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: Fix the memory leak in raw_gadget driver\n\nCurrently, increasing raw_dev->count happens before invoke the\nraw_queue_event(), if the raw_queue_event() return error, invoke\nraw_release() will not trigger the dev_free() to be called.\n\n[ 268.905865][ T5067] raw-gadget.0 gadget.0: failed to queue event\n[ 268.912053][ T5067] udc dummy_udc.0: failed to start USB Raw Gadget: -12\n[ 268.918885][ T5067] raw-gadget.0: probe of gadget.0 failed with error -12\n[ 268.925956][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy\n[ 268.934657][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16\n\nBUG: memory leak\n\n[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076\n[] kmalloc include/linux/slab.h:582 [inline]\n[] kzalloc include/linux/slab.h:703 [inline]\n[] dev_new drivers/usb/gadget/legacy/raw_gadget.c:191 [inline]\n[] raw_open+0x45/0x110 drivers/usb/gadget/legacy/raw_gadget.c:385\n[] misc_open+0x1a9/0x1f0 drivers/char/misc.c:165\n\n[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076\n[] kmalloc include/linux/slab.h:582 [inline]\n[] raw_ioctl_init+0xdf/0x410 drivers/usb/gadget/legacy/raw_gadget.c:460\n[] raw_ioctl+0x5f9/0x1120 drivers/usb/gadget/legacy/raw_gadget.c:1250\n[] vfs_ioctl fs/ioctl.c:51 [inline]\n\n[] kmalloc_trace+0x24/0x90 mm/slab_common.c:1076\n[] kmalloc include/linux/slab.h:582 [inline]\n[] kzalloc include/linux/slab.h:703 [inline]\n[] dummy_alloc_request+0x5a/0xe0 drivers/usb/gadget/udc/dummy_hcd.c:665\n[] usb_ep_alloc_request+0x22/0xd0 drivers/usb/gadget/udc/core.c:196\n[] gadget_bind+0x6d/0x370 drivers/usb/gadget/legacy/raw_gadget.c:292\n\nThis commit therefore invoke kref_get() under the condition that\nraw_queue_event() return success." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0f7a2b567197798da7bfa2252f4485c0ca6c6266", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/68e6287ac61dc22513cd39f02b9ac1fef28513e4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/83e30f2bf86ef7c38fbd476ed81a88522b620628", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9934e5d07c0dc294169a7d52f6309f35cd6d7755", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/de77000c1923d7942f9b4f08447c8feeae1c0f33", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53694.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53694.json new file mode 100644 index 00000000000..74d9ad15a26 --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53694.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53694", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:43.887", + "lastModified": "2025-10-22T14:15:43.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: ftrace: Fixup panic by disabling preemption\n\nIn RISCV, we must use an AUIPC + JALR pair to encode an immediate,\nforming a jump that jumps to an address over 4K. This may cause errors\nif we want to enable kernel preemption and remove dependency from\npatching code with stop_machine(). For example, if a task was switched\nout on auipc. And, if we changed the ftrace function before it was\nswitched back, then it would jump to an address that has updated 11:0\nbits mixing with previous XLEN:12 part.\n\np: patched area performed by dynamic ftrace\nftrace_prologue:\np| REG_S ra, -SZREG(sp)\np| auipc ra, 0x? ------------> preempted\n\t\t\t\t\t...\n\t\t\t\tchange ftrace function\n\t\t\t\t\t...\np| jalr -?(ra) <------------- switched back\np| REG_L ra, -SZREG(sp)\nfunc:\n\txxx\n\tret" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/20a7510e781084364691b4962de31de758194cc9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/84cfcf240f4a577733b1d98fcd2611a611612b03", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8547649981e6631328cd64f583667501ae385531", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53695.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53695.json new file mode 100644 index 00000000000..1b71f0cbd6e --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53695.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2023-53695", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.000", + "lastModified": "2025-10-22T14:15:44.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53696.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53696.json new file mode 100644 index 00000000000..86b2c196f88 --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53696.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53696", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.113", + "lastModified": "2025-10-22T14:15:44.113", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in qla2x00_probe_one()\n\nThere is a memory leak reported by kmemleak:\n\n unreferenced object 0xffffc900003f0000 (size 12288):\n comm \"modprobe\", pid 19117, jiffies 4299751452 (age 42490.264s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<00000000629261a8>] __vmalloc_node_range+0xe56/0x1110\n [<0000000001906886>] __vmalloc_node+0xbd/0x150\n [<000000005bb4dc34>] vmalloc+0x25/0x30\n [<00000000a2dc1194>] qla2x00_create_host+0x7a0/0xe30 [qla2xxx]\n [<0000000062b14b47>] qla2x00_probe_one+0x2eb8/0xd160 [qla2xxx]\n [<00000000641ccc04>] local_pci_probe+0xeb/0x1a0\n\nThe root cause is traced to an error-handling path in qla2x00_probe_one()\nwhen the adapter \"base_vha\" initialize failed. The fab_scan_rp \"scan.l\" is\nused to record the port information and it is allocated in\nqla2x00_create_host(). However, it is not released in the error handling\npath \"probe_failed\".\n\nFix this by freeing the memory of \"scan.l\" when an error occurs in the\nadapter initialization process." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/44374911ac63f769c442f56fdfadea673c5f4425", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/582e35e97318ccd9c81774bac08938291679525f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85ade4010e13ef152ea925c74d94253db92e5428", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ae73c4dd48f2c79d515d509a0cbe9efb0a197f44", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53697.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53697.json new file mode 100644 index 00000000000..68250cd40be --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53697.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53697", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.223", + "lastModified": "2025-10-22T14:15:44.223", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu()\n\nMemory pointed by 'nd_pmu->pmu.attr_groups' is allocated in function\n'register_nvdimm_pmu' and is lost after 'kfree(nd_pmu)' call in function\n'unregister_nvdimm_pmu'." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/16259c80542ee8945aaa39cfc6a1809bcdc08ffe", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4999f2ec5fde7c45e3ecafda5b78560cc1c7bdb5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/500a6ff9c2a81348fe0f04e2deb758145e8ab94e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85ae42c72142346645e63c33835da947dfa008b3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53698.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53698.json new file mode 100644 index 00000000000..e33638a8823 --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53698.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53698", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.330", + "lastModified": "2025-10-22T14:15:44.330", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix refcount underflow in error path\n\nFix a refcount underflow problem reported by syzbot that can happen\nwhen a system is running out of memory. If xp_alloc_tx_descs() fails,\nand it can only fail due to not having enough memory, then the error\npath is triggered. In this error path, the refcount of the pool is\ndecremented as it has incremented before. However, the reference to\nthe pool in the socket was not nulled. This means that when the socket\nis closed later, the socket teardown logic will think that there is a\npool attached to the socket and try to decrease the refcount again,\nleading to a refcount underflow.\n\nI chose this fix as it involved adding just a single line. Another\noption would have been to move xp_get_pool() and the assignment of\nxs->pool to after the if-statement and using xs_umem->pool instead of\nxs->pool in the whole if-statement resulting in somewhat simpler code,\nbut this would have led to much more churn in the code base perhaps\nmaking it harder to backport." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/15b453cf7348973217558235b9ece2ee5fea6777", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3e7722c31d4167eb7f3ffd35aba52cab69b79072", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/789fcd94c9cac133dd4d96e193188661aca9f6c3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/85c2c79a07302fe68a1ad5cc449458cc559e314d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-536xx/CVE-2023-53699.json b/CVE-2023/CVE-2023-536xx/CVE-2023-53699.json new file mode 100644 index 00000000000..c42638d28b3 --- /dev/null +++ b/CVE-2023/CVE-2023-536xx/CVE-2023-53699.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53699", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.437", + "lastModified": "2025-10-22T14:15:44.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: move memblock_allow_resize() after linear mapping is ready\n\nThe initial memblock metadata is accessed from kernel image mapping. The\nregions arrays need to \"reallocated\" from memblock and accessed through\nlinear mapping to cover more memblock regions. So the resizing should\nnot be allowed until linear mapping is ready. Note that there are\nmemblock allocations when building linear mapping.\n\nThis patch is similar to 24cc61d8cb5a (\"arm64: memblock: don't permit\nmemblock resizing until linear mapping is up\").\n\nIn following log, many memblock regions are reserved before\ncreate_linear_mapping_page_table(). And then it triggered reallocation\nof memblock.reserved.regions and memcpy the old array in kernel image\nmapping to the new array in linear mapping which caused a page fault.\n\n[ 0.000000] memblock_reserve: [0x00000000bf01f000-0x00000000bf01ffff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf021000-0x00000000bf021fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf023000-0x00000000bf023fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf025000-0x00000000bf025fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf027000-0x00000000bf027fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf029000-0x00000000bf029fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf02b000-0x00000000bf02bfff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf02d000-0x00000000bf02dfff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf02f000-0x00000000bf02ffff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] memblock_reserve: [0x00000000bf030000-0x00000000bf030fff] early_init_fdt_scan_reserved_mem+0x28c/0x2c6\n[ 0.000000] OF: reserved mem: 0x0000000080000000..0x000000008007ffff (512 KiB) map non-reusable mmode_resv0@80000000\n[ 0.000000] memblock_reserve: [0x00000000bf000000-0x00000000bf001fed] paging_init+0x19a/0x5ae\n[ 0.000000] memblock_phys_alloc_range: 4096 bytes align=0x1000 from=0x0000000000000000 max_addr=0x0000000000000000 alloc_pmd_fixmap+0x14/0x1c\n[ 0.000000] memblock_reserve: [0x000000017ffff000-0x000000017fffffff] memblock_alloc_range_nid+0xb8/0x128\n[ 0.000000] memblock: reserved is doubled to 256 at [0x000000017fffd000-0x000000017fffe7ff]\n[ 0.000000] Unable to handle kernel paging request at virtual address ff600000ffffd000\n[ 0.000000] Oops [#1]\n[ 0.000000] Modules linked in:\n[ 0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 6.4.0-rc1-00011-g99a670b2069c #66\n[ 0.000000] Hardware name: riscv-virtio,qemu (DT)\n[ 0.000000] epc : __memcpy+0x60/0xf8\n[ 0.000000] ra : memblock_double_array+0x192/0x248\n[ 0.000000] epc : ffffffff8081d214 ra : ffffffff80a3dfc0 sp : ffffffff81403bd0\n[ 0.000000] gp : ffffffff814fbb38 tp : ffffffff8140dac0 t0 : 0000000001600000\n[ 0.000000] t1 : 0000000000000000 t2 : 000000008f001000 s0 : ffffffff81403c60\n[ 0.000000] s1 : ffffffff80c0bc98 a0 : ff600000ffffd000 a1 : ffffffff80c0bcd8\n[ 0.000000] a2 : 0000000000000c00 a3 : ffffffff80c0c8d8 a4 : 0000000080000000\n[ 0.000000] a5 : 0000000000080000 a6 : 0000000000000000 a7 : 0000000080200000\n[ 0.000000] s2 : ff600000ffffd000 s3 : 0000000000002000 s4 : 0000000000000c00\n[ 0.000000] s5 : ffffffff80c0bc60 s6 : ffffffff80c0bcc8 s7 : 0000000000000000\n[ 0.000000] s8 : ffffffff814fd0a8 s9 : 000000017fffe7ff s10: 0000000000000000\n[ 0.000000] s11: 0000000000001000 t3 : 0000000000001000 t4 : 0000000000000000\n[ 0.000000] t5 : 000000008f003000 t6 : ff600000ffffd000\n[ 0.000000] status: 0000000200000100 badaddr: ff600000ffffd000 cause: 000000000000000f\n[ 0.000000] [] __kmalloc_node+0x44/0x1b0\n [<000000002f4912b7>] kvmalloc_node+0x34/0x180\n [<0000000057dc4cae>] v4l2_ctrl_new+0x325/0x10f0 [videodev]\n [<0000000026030272>] v4l2_ctrl_new_std+0x16f/0x210 [videodev]\n [<00000000f0d9ea2f>] max9286_probe+0x76e/0xbff [max9286]\n [<00000000ea8f6455>] i2c_device_probe+0x28d/0x680\n [<0000000087529af3>] really_probe+0x17c/0x3f0\n [<00000000b08be526>] __driver_probe_device+0xe3/0x170\n [<000000004382edea>] driver_probe_device+0x49/0x120\n [<000000007bde528a>] __device_attach_driver+0xf7/0x150\n [<000000009f9c6ab4>] bus_for_each_drv+0x114/0x180\n [<00000000c8aaf588>] __device_attach+0x1e5/0x2d0\n [<0000000041cc06b9>] bus_probe_device+0x126/0x140\n [<000000002309860d>] device_add+0x810/0x1130\n [<000000002827bf98>] i2c_new_client_device+0x359/0x4f0\n [<00000000593bdc85>] of_i2c_register_device+0xf1/0x110\n\nmax9286_v4l2_register() calls v4l2_ctrl_new_std(), but won't free the\ncreated v412_ctrl when fwnode_graph_get_endpoint_by_id() failed, which\ncauses the memleak. Call v4l2_ctrl_handler_free() to free the v412_ctrl." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/505ff3a0c5951684c3a43094ca4c1a74683d5681", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5897fe3ebe8252993579e1bee715ebfe5504e052", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5e31213fa017c20ccc989033a5f4a626473aa2ca", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/724039e013b34f46344abdbf8c74e6a65a828327", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8636c5fc7658c7c6299fb8b352d24ea4b9ba99e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53701.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53701.json new file mode 100644 index 00000000000..54dc572e077 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53701.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2023-53701", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.660", + "lastModified": "2025-10-22T14:15:44.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: deactivate anonymous set from preparation phase\n\n[ backport for 4.14 of c1592a89942e9678f7d9c8030efa777c0d57edab ]\n\nToggle deleted anonymous sets as inactive in the next generation, so\nusers cannot perform any update on it. Clear the generation bitmask\nin case the transaction is aborted.\n\nThe following KASAN splat shows a set element deletion for a bound\nanonymous set that has been already removed in the same transaction.\n\n[ 64.921510] ==================================================================\n[ 64.923123] BUG: KASAN: wild-memory-access in nf_tables_commit+0xa24/0x1490 [nf_tables]\n[ 64.924745] Write of size 8 at addr dead000000000122 by task test/890\n[ 64.927903] CPU: 3 PID: 890 Comm: test Not tainted 6.3.0+ #253\n[ 64.931120] Call Trace:\n[ 64.932699] \n[ 64.934292] dump_stack_lvl+0x33/0x50\n[ 64.935908] ? nf_tables_commit+0xa24/0x1490 [nf_tables]\n[ 64.937551] kasan_report+0xda/0x120\n[ 64.939186] ? nf_tables_commit+0xa24/0x1490 [nf_tables]\n[ 64.940814] nf_tables_commit+0xa24/0x1490 [nf_tables]\n[ 64.942452] ? __kasan_slab_alloc+0x2d/0x60\n[ 64.944070] ? nf_tables_setelem_notify+0x190/0x190 [nf_tables]\n[ 64.945710] ? kasan_set_track+0x21/0x30\n[ 64.947323] nfnetlink_rcv_batch+0x709/0xd90 [nfnetlink]\n[ 64.948898] ? nfnetlink_rcv_msg+0x480/0x480 [nfnetlink]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/86572872505023e3bb461b271c2f25fdaa3dfcd7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53702.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53702.json new file mode 100644 index 00000000000..95bda96c61f --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53702.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53702", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.760", + "lastModified": "2025-10-22T14:15:44.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: use vector instructions only if available for ChaCha20\n\nCommit 349d03ffd5f6 (\"crypto: s390 - add crypto library interface for\nChaCha20\") added a library interface to the s390 specific ChaCha20\nimplementation. However no check was added to verify if the required\nfacilities are installed before branching into the assembler code.\n\nIf compiled into the kernel, this will lead to the following crash,\nif vector instructions are not available:\n\ndata exception: 0007 ilc:3 [#1] SMP\nModules linked in:\nCPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc7+ #11\nHardware name: IBM 3931 A01 704 (KVM/Linux)\nKrnl PSW : 0704e00180000000 000000001857277a (chacha20_vx+0x32/0x818)\n R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3\nKrnl GPRS: 0000037f0000000a ffffffffffffff60 000000008184b000 0000000019f5c8e6\n 0000000000000109 0000037fffb13c58 0000037fffb13c78 0000000019bb1780\n 0000037fffb13c58 0000000019f5c8e6 000000008184b000 0000000000000109\n 00000000802d8000 0000000000000109 0000000018571ebc 0000037fffb13718\nKrnl Code: 000000001857276a: c07000b1f80b larl %r7,0000000019bb1780\n 0000000018572770: a708000a lhi %r0,10\n #0000000018572774: e78950000c36 vlm %v24,%v25,0(%r5),0\n >000000001857277a: e7a060000806 vl %v26,0(%r6),0\n 0000000018572780: e7bf70004c36 vlm %v27,%v31,0(%r7),4\n 0000000018572786: e70b00000456 vlr %v0,%v27\n 000000001857278c: e71800000456 vlr %v1,%v24\n 0000000018572792: e74b00000456 vlr %v4,%v27\nCall Trace:\n [<000000001857277a>] chacha20_vx+0x32/0x818\nLast Breaking-Event-Address:\n [<0000000018571eb6>] chacha20_crypt_s390.constprop.0+0x6e/0xd8\n---[ end trace 0000000000000000 ]---\nKernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b\n\nFix this by adding a missing MACHINE_HAS_VX check.\n\n[agordeev@linux.ibm.com: remove duplicates in commit message]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/25e8d30507aa2f251152df1af7809e85b5538f4a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8703dd6b238da0ec6c276e53836f8200983d3d9b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/debb7797bba0caffdbdadc3e7968bb2c414f50da", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53703.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53703.json new file mode 100644 index 00000000000..50b0c7b3edf --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53703.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53703", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.873", + "lastModified": "2025-10-22T14:15:44.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: amd_sfh: Fix for shift-out-of-bounds\n\nShift operation of 'exp' and 'shift' variables exceeds the maximum number\nof shift values in the u32 range leading to UBSAN shift-out-of-bounds.\n\n...\n[ 6.120512] UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50\n[ 6.120598] shift exponent 104 is too large for 64-bit type 'long unsigned int'\n[ 6.120659] CPU: 4 PID: 96 Comm: kworker/4:1 Not tainted 6.4.0amd_1-next-20230519-dirty #10\n[ 6.120665] Hardware name: AMD Birman-PHX/Birman-PHX, BIOS SFH_with_HPD_SEN.FD 04/05/2023\n[ 6.120667] Workqueue: events amd_sfh_work_buffer [amd_sfh]\n[ 6.120687] Call Trace:\n[ 6.120690] \n[ 6.120694] dump_stack_lvl+0x48/0x70\n[ 6.120704] dump_stack+0x10/0x20\n[ 6.120707] ubsan_epilogue+0x9/0x40\n[ 6.120716] __ubsan_handle_shift_out_of_bounds+0x10f/0x170\n[ 6.120720] ? psi_group_change+0x25f/0x4b0\n[ 6.120729] float_to_int.cold+0x18/0xba [amd_sfh]\n[ 6.120739] get_input_rep+0x57/0x340 [amd_sfh]\n[ 6.120748] ? __schedule+0xba7/0x1b60\n[ 6.120756] ? __pfx_get_input_rep+0x10/0x10 [amd_sfh]\n[ 6.120764] amd_sfh_work_buffer+0x91/0x180 [amd_sfh]\n[ 6.120772] process_one_work+0x229/0x430\n[ 6.120780] worker_thread+0x4a/0x3c0\n[ 6.120784] ? __pfx_worker_thread+0x10/0x10\n[ 6.120788] kthread+0xf7/0x130\n[ 6.120792] ? __pfx_kthread+0x10/0x10\n[ 6.120795] ret_from_fork+0x29/0x50\n[ 6.120804] \n...\n\nFix this by adding the condition to validate shift ranges." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1e50bc2c177d4b2953d77037ac46ea0702d6aa1f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5a45ed1ae34bb0e68944471f4bafb68e0a572791", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/87854366176403438d01f368b09de3ec2234e0f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53704.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53704.json new file mode 100644 index 00000000000..8c336e32fe0 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53704.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2023-53704", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:44.977", + "lastModified": "2025-10-22T14:15:44.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()\n\nReplace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc()\nwhich can automatically release the related memory when the device\nor driver is removed or unloaded to avoid potential memory leak.\n\nIn this case, iounmap(anatop_base) in line 427,433 are removed\nas manual release is not required.\n\nBesides, referring to clk-imx8mq.c, check the return code of\nof_clk_add_hw_provider, if it returns negtive, print error info\nand unregister hws, which makes the program more robust." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6317d0302655f7e854cd4f31e93b47d35cb058bb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/878b02d5f3b56cb090dbe2c70c89273be144087f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/92ce7629a11ae62292e1cfaa6132dab081fc80ee", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bcea444ab4c045864b55d67313833d606676602a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cb047c13bbf9018693ae31f03a5a26b212d02f13", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53705.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53705.json new file mode 100644 index 00000000000..63e7dcbf223 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53705.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53705", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.080", + "lastModified": "2025-10-22T14:15:45.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix out-of-bounds access in ipv6_find_tlv()\n\noptlen is fetched without checking whether there is more than one byte to parse.\nIt can lead to out-of-bounds access.\n\nFound by InfoTeCS on behalf of Linux Verification Center\n(linuxtesting.org) with SVACE." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/011f47c8b8389154f996f5f69da8efc3a3beefef", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/04bf69e3de435d793a203aacc4b774f8f9f2baeb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/59e656d0d4a84ea0ee9a39c6f69160a3effccc94", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/878ecb0897f4737a4c9401f3523fd49589025671", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/91dd8aab9c9f193210681b86b6b92840ffe74f0c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9b92e2d0eb696d7586ba832c8854653b59887da0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ae68c0f7edbc9a294094ce03a0aaf45aa489ce40", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e5f82688ae10f5f386952e65e941bb8868ee54dc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53706.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53706.json new file mode 100644 index 00000000000..6e4d63dffb1 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53706.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2023-53706", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.197", + "lastModified": "2025-10-22T14:15:45.197", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmemmap/devdax: fix kernel crash when probing devdax devices\n\ncommit 4917f55b4ef9 (\"mm/sparse-vmemmap: improve memory savings for\ncompound devmaps\") added support for using optimized vmmemap for devdax\ndevices. But how vmemmap mappings are created are architecture specific. \nFor example, powerpc with hash translation doesn't have vmemmap mappings\nin init_mm page table instead they are bolted table entries in the\nhardware page table\n\nvmemmap_populate_compound_pages() used by vmemmap optimization code is not\naware of these architecture-specific mapping. Hence allow architecture to\nopt for this feature. I selected architectures supporting\nHUGETLB_PAGE_OPTIMIZE_VMEMMAP option as also supporting this feature.\n\nThis patch fixes the below crash on ppc64.\n\nBUG: Unable to handle kernel data access on write at 0xc00c000100400038\nFaulting instruction address: 0xc000000001269d90\nOops: Kernel access of bad area, sig: 11 [#1]\nLE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries\nModules linked in:\nCPU: 7 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc5-150500.34-default+ #2 5c90a668b6bbd142599890245c2fb5de19d7d28a\nHardware name: IBM,9009-42G POWER9 (raw) 0x4e0202 0xf000005 of:IBM,FW950.40 (VL950_099) hv:phyp pSeries\nNIP: c000000001269d90 LR: c0000000004c57d4 CTR: 0000000000000000\nREGS: c000000003632c30 TRAP: 0300 Not tainted (6.3.0-rc5-150500.34-default+)\nMSR: 8000000000009033 CR: 24842228 XER: 00000000\nCFAR: c0000000004c57d0 DAR: c00c000100400038 DSISR: 42000000 IRQMASK: 0\n....\nNIP [c000000001269d90] __init_single_page.isra.74+0x14/0x4c\nLR [c0000000004c57d4] __init_zone_device_page+0x44/0xd0\nCall Trace:\n[c000000003632ed0] [c000000003632f60] 0xc000000003632f60 (unreliable)\n[c000000003632f10] [c0000000004c5ca0] memmap_init_zone_device+0x170/0x250\n[c000000003632fe0] [c0000000005575f8] memremap_pages+0x2c8/0x7f0\n[c0000000036330c0] [c000000000557b5c] devm_memremap_pages+0x3c/0xa0\n[c000000003633100] [c000000000d458a8] dev_dax_probe+0x108/0x3e0\n[c0000000036331a0] [c000000000d41430] dax_bus_probe+0xb0/0x140\n[c0000000036331d0] [c000000000cef27c] really_probe+0x19c/0x520\n[c000000003633260] [c000000000cef6b4] __driver_probe_device+0xb4/0x230\n[c0000000036332e0] [c000000000cef888] driver_probe_device+0x58/0x120\n[c000000003633320] [c000000000cefa6c] __device_attach_driver+0x11c/0x1e0\n[c0000000036333a0] [c000000000cebc58] bus_for_each_drv+0xa8/0x130\n[c000000003633400] [c000000000ceefcc] __device_attach+0x15c/0x250\n[c0000000036334a0] [c000000000ced458] bus_probe_device+0x108/0x110\n[c0000000036334f0] [c000000000ce92dc] device_add+0x7fc/0xa10\n[c0000000036335b0] [c000000000d447c8] devm_create_dev_dax+0x1d8/0x530\n[c000000003633640] [c000000000d46b60] __dax_pmem_probe+0x200/0x270\n[c0000000036337b0] [c000000000d46bf0] dax_pmem_probe+0x20/0x70\n[c0000000036337d0] [c000000000d2279c] nvdimm_bus_probe+0xac/0x2b0\n[c000000003633860] [c000000000cef27c] really_probe+0x19c/0x520\n[c0000000036338f0] [c000000000cef6b4] __driver_probe_device+0xb4/0x230\n[c000000003633970] [c000000000cef888] driver_probe_device+0x58/0x120\n[c0000000036339b0] [c000000000cefd08] __driver_attach+0x1d8/0x240\n[c000000003633a30] [c000000000cebb04] bus_for_each_dev+0xb4/0x130\n[c000000003633a90] [c000000000cee564] driver_attach+0x34/0x50\n[c000000003633ab0] [c000000000ced878] bus_add_driver+0x218/0x300\n[c000000003633b40] [c000000000cf1144] driver_register+0xa4/0x1b0\n[c000000003633bb0] [c000000000d21a0c] __nd_driver_register+0x5c/0x100\n[c000000003633c10] [c00000000206a2e8] dax_pmem_init+0x34/0x48\n[c000000003633c30] [c0000000000132d0] do_one_initcall+0x60/0x320\n[c000000003633d00] [c0000000020051b0] kernel_init_freeable+0x360/0x400\n[c000000003633de0] [c000000000013764] kernel_init+0x34/0x1d0\n[c000000003633e50] [c00000000000de14] ret_from_kernel_thread+0x5c/0x64" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/87a7ae75d7383afa998f57656d1d14e2a730cc47", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8f4603588acf5807aa1f1b4b1ea2b0365acd71f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53707.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53707.json new file mode 100644 index 00000000000..ef13f5ade1f --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53707.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53707", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.303", + "lastModified": "2025-10-22T14:15:45.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix integer overflow in amdgpu_cs_pass1\n\nThe type of size is unsigned int, if size is 0x40000000, there will\nbe an integer overflow, size will be zero after size *= sizeof(uint32_t),\nwill cause uninitialized memory to be referenced later." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/87c2213e85bd81e4a9a4d0880c256568794ae388", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9f55d300541cb5b435984d269087810581580b00", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c3deb091398e9e469d08dd1599b6d76fd6b29df8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53708.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53708.json new file mode 100644 index 00000000000..81da1c819f1 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53708.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53708", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.403", + "lastModified": "2025-10-22T14:15:45.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects\n\nIf a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE`\nobjects while evaluating the AMD LPS0 _DSM, there will be a memory\nleak. Explicitly guard against this." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1ea7e47807279369c82718efd2677ea25c6579e3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7b7964cd9db30bc84808a40d13a0633b4313f149", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/883cf0d4cf288313b71146ddebdf5d647b76c78b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9e8bbde9293151430884aed882a88eaa22298f72", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53709.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53709.json new file mode 100644 index 00000000000..7e5d8e6bf00 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53709.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2023-53709", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.510", + "lastModified": "2025-10-22T14:15:45.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Handle race between rb_move_tail and rb_check_pages\n\nIt seems a data race between ring_buffer writing and integrity check.\nThat is, RB_FLAG of head_page is been updating, while at same time\nRB_FLAG was cleared when doing integrity check rb_check_pages():\n\n rb_check_pages() rb_handle_head_page():\n -------- --------\n rb_head_page_deactivate()\n rb_head_page_set_normal()\n rb_head_page_activate()\n\nWe do intergrity test of the list to check if the list is corrupted and\nit is still worth doing it. So, let's refactor rb_check_pages() such that\nwe no longer clear and set flag during the list sanity checking.\n\n[1] and [2] are the test to reproduce and the crash report respectively.\n\n1:\n``` read_trace.sh\n while true;\n do\n # the \"trace\" file is closed after read\n head -1 /sys/kernel/tracing/trace > /dev/null\n done\n```\n``` repro.sh\n sysctl -w kernel.panic_on_warn=1\n # function tracer will writing enough data into ring_buffer\n echo function > /sys/kernel/tracing/current_tracer\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n ./read_trace.sh &\n```\n\n2:\n------------[ cut here ]------------\nWARNING: CPU: 9 PID: 62 at kernel/trace/ring_buffer.c:2653\nrb_move_tail+0x450/0x470\nModules linked in:\nCPU: 9 PID: 62 Comm: ksoftirqd/9 Tainted: G W 6.2.0-rc6+\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\nrel-1.15.0-0-g2dd4b9b3f840-prebuilt.qemu.org 04/01/2014\nRIP: 0010:rb_move_tail+0x450/0x470\nCode: ff ff 4c 89 c8 f0 4d 0f b1 02 48 89 c2 48 83 e2 fc 49 39 d0 75 24\n83 e0 03 83 f8 02 0f 84 e1 fb ff ff 48 8b 57 10 f0 ff 42 08 <0f> 0b 83\nf8 02 0f 84 ce fb ff ff e9 db\nRSP: 0018:ffffb5564089bd00 EFLAGS: 00000203\nRAX: 0000000000000000 RBX: ffff9db385a2bf81 RCX: ffffb5564089bd18\nRDX: ffff9db281110100 RSI: 0000000000000fe4 RDI: ffff9db380145400\nRBP: ffff9db385a2bf80 R08: ffff9db385a2bfc0 R09: ffff9db385a2bfc2\nR10: ffff9db385a6c000 R11: ffff9db385a2bf80 R12: 0000000000000000\nR13: 00000000000003e8 R14: ffff9db281110100 R15: ffffffffbb006108\nFS: 0000000000000000(0000) GS:ffff9db3bdcc0000(0000)\nknlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005602323024c8 CR3: 0000000022e0c000 CR4: 00000000000006e0\nCall Trace:\n \n ring_buffer_lock_reserve+0x136/0x360\n ? __do_softirq+0x287/0x2df\n ? __pfx_rcu_softirq_qs+0x10/0x10\n trace_function+0x21/0x110\n ? __pfx_rcu_softirq_qs+0x10/0x10\n ? __do_softirq+0x287/0x2df\n function_trace_call+0xf6/0x120\n 0xffffffffc038f097\n ? rcu_softirq_qs+0x5/0x140\n rcu_softirq_qs+0x5/0x140\n __do_softirq+0x287/0x2df\n run_ksoftirqd+0x2a/0x30\n smpboot_thread_fn+0x188/0x220\n ? __pfx_smpboot_thread_fn+0x10/0x10\n kthread+0xe7/0x110\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2c/0x50\n \n---[ end trace 0000000000000000 ]---\n\n[ crash report and test reproducer credit goes to Zheng Yejian]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/09b1bf25f7f7a8f2bf8cd4278bba9c3172db8013", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6e02a43acd0691791df79ce538f2dd497a6c9b76", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8843e06f67b14f71c044bf6267b2387784c7e198", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9674390ac540ed06768e3fbc2dba553929fbd736", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d41db100bc386b9433a3fc87026f5e8b453653e3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53710.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53710.json new file mode 100644 index 00000000000..00378ecdccf --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53710.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53710", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.613", + "lastModified": "2025-10-22T14:15:45.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix error code of return in mt7921_acpi_read\n\nKernel NULL pointer dereference when ACPI SAR table isn't implemented well.\nFix the error code of return to mark the ACPI SAR table as invalid.\n\n[ 5.077128] mt7921e 0000:06:00.0: sar cnt = 0\n[ 5.077381] BUG: kernel NULL pointer dereference, address:\n0000000000000004\n[ 5.077630] #PF: supervisor read access in kernel mode\n[ 5.077883] #PF: error_code(0x0000) - not-present page\n[ 5.078138] PGD 0 P4D 0\n[ 5.078398] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 5.079202] RIP: 0010:mt7921_init_acpi_sar+0x106/0x220\n[mt7921_common]\n...\n[ 5.080786] Call Trace:\n[ 5.080786] \n[ 5.080786] mt7921_register_device+0x37d/0x490 [mt7921_common]\n[ 5.080786] mt7921_pci_probe.part.0+0x2ee/0x310 [mt7921e]\n[ 5.080786] mt7921_pci_probe+0x52/0x70 [mt7921e]\n[ 5.080786] local_pci_probe+0x47/0x90\n[ 5.080786] pci_call_probe+0x55/0x190\n[ 5.080786] pci_device_probe+0x84/0x120" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2a9a5f88e0da71c8e4f30aacbda45b1a1af5469d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/59c2b0aec7a5aa350aa3edfb4363b19348c2269f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/888d89034f9eaeab9b5b75f13dbe35376c7dd471", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53711.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53711.json new file mode 100644 index 00000000000..0cbfc0163d8 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53711.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2023-53711", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.713", + "lastModified": "2025-10-22T14:15:45.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix a potential data corruption\n\nWe must ensure that the subrequests are joined back into the head before\nwe can retransmit a request. If the head was not on the commit lists,\nbecause the server wrote it synchronously, we still need to add it back\nto the retransmission list.\nAdd a call that mirrors the effect of nfs_cancel_remove_inode() for\nO_DIRECT." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0ec26716e45d615edfff46012e7dedcc0ac5f7ab", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4185605cd0f72ec8bf8b423aacd94cd5ee13bbcf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/88975a55969e11f26fe3846bf4fbf8e7dc8cbbd4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/da302f1d476a44245823a74546debb5d160bf5bd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dac14a1dbe20e003215dacb8a3a1a7e4ca4e0ad0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53712.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53712.json new file mode 100644 index 00000000000..fb70a75d0b4 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53712.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53712", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.817", + "lastModified": "2025-10-22T14:15:45.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9317/1: kexec: Make smp stop calls asynchronous\n\nIf a panic is triggered by a hrtimer interrupt all online cpus will be\nnotified and set offline. But as highlighted by commit 19dbdcb8039c\n(\"smp: Warn on function calls from softirq context\") this call should\nnot be made synchronous with disabled interrupts:\n\n softdog: Initiating panic\n Kernel panic - not syncing: Software Watchdog Timer expired\n WARNING: CPU: 1 PID: 0 at kernel/smp.c:753 smp_call_function_many_cond\n unwind_backtrace:\n show_stack\n dump_stack_lvl\n __warn\n warn_slowpath_fmt\n smp_call_function_many_cond\n smp_call_function\n crash_smp_send_stop.part.0\n machine_crash_shutdown\n __crash_kexec\n panic\n softdog_fire\n __hrtimer_run_queues\n hrtimer_interrupt\n\nMake the smp call for machine_crash_nonpanic_core() asynchronous." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/46870eea5496ff277e86187a49ac5a667cfe60c4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5590ba4560eefbd19a4ed07c7e7c8e4c51ffc628", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8922ba71c969d2a0c01a94372a71477d879470de", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ee378f45a70d09b51373ba495d30d99ef12219c1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53713.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53713.json new file mode 100644 index 00000000000..f47f7053564 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53713.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53713", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:45.930", + "lastModified": "2025-10-22T14:15:45.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: sme: Use STR P to clear FFR context field in streaming SVE mode\n\nThe FFR is a predicate register which can vary between 16 and 256 bits\nin size depending upon the configured vector length. When saving the\nSVE state in streaming SVE mode, the FFR register is inaccessible and\nso commit 9f5848665788 (\"arm64/sve: Make access to FFR optional\") simply\nclears the FFR field of the in-memory context structure. Unfortunately,\nit achieves this using an unconditional 8-byte store and so if the SME\nvector length is anything other than 64 bytes in size we will either\nfail to clear the entire field or, worse, we will corrupt memory\nimmediately following the structure. This has led to intermittent kfence\nsplats in CI [1] and can trigger kmalloc Redzone corruption messages\nwhen running the 'fp-stress' kselftest:\n\n | =============================================================================\n | BUG kmalloc-1k (Not tainted): kmalloc Redzone overwritten\n | -----------------------------------------------------------------------------\n |\n | 0xffff000809bf1e22-0xffff000809bf1e27 @offset=7714. First byte 0x0 instead of 0xcc\n | Allocated in do_sme_acc+0x9c/0x220 age=2613 cpu=1 pid=531\n | __kmalloc+0x8c/0xcc\n | do_sme_acc+0x9c/0x220\n | ...\n\nReplace the 8-byte store with a store of a predicate register which has\nbeen zero-initialised with PFALSE, ensuring that the entire field is\ncleared in memory.\n\n[1] https://lore.kernel.org/r/CA+G9fYtU7HsV0R0dp4XEH5xXHSJFw8KyDf5VQrLLfMxWfxQkag@mail.gmail.com" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1403a899153a12d93fd510e463fd6d0eafba4336", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8769a62faacbbb6cac5e35d9047ce445183d4e9f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/893b24181b4c4bf1fa2841b1ed192e5413a97cb1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/97669214944e80d3756657c21c4f286f3da6a423", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53714.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53714.json new file mode 100644 index 00000000000..a44f80a4fd4 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53714.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2023-53714", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.040", + "lastModified": "2025-10-22T14:15:46.040", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/stm: ltdc: fix late dereference check\n\nIn ltdc_crtc_set_crc_source(), struct drm_crtc was dereferenced in a\ncontainer_of() before the pointer check. This could cause a kernel panic.\n\nFix this smatch warning:\ndrivers/gpu/drm/stm/ltdc.c:1124 ltdc_crtc_set_crc_source() warn: variable dereferenced before check 'crtc' (see line 1119)" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/04fe3b82528232aa85a6c45464906d0727ef4f20", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/340dba127bbed51e8425cd8e097aacfadd175462", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/898a9e3f56db9860ab091d4bf41b6caa99aafc3d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53715.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53715.json new file mode 100644 index 00000000000..32d9f98f277 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53715.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53715", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.140", + "lastModified": "2025-10-22T14:15:46.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex\n\nApparently the hex passphrase mechanism does not work on newer\nchips/firmware (e.g. BCM4387). It seems there was a simple way of\npassing it in binary all along, so use that and avoid the hexification.\n\nOpenBSD has been doing it like this from the beginning, so this should\nwork on all chips.\n\nAlso clear the structure before setting the PMK. This was leaking\nuninitialized stack contents to the device." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/89b89e52153fda2733562776c7c9d9d3ebf8dd6d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e242c66f7ecfe8f5b6eb308f4ea464fd8589c866", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53716.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53716.json new file mode 100644 index 00000000000..537ea7b42c6 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53716.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53716", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.250", + "lastModified": "2025-10-22T14:15:46.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix skb leak in __skb_tstamp_tx()\n\nCommit 50749f2dd685 (\"tcp/udp: Fix memleaks of sk and zerocopy skbs with\nTX timestamp.\") added a call to skb_orphan_frags_rx() to fix leaks with\nzerocopy skbs. But it ended up adding a leak of its own. When\nskb_orphan_frags_rx() fails, the function just returns, leaking the skb\nit just cloned. Free it before returning.\n\nThis bug was discovered and resolved using Coverity Static Analysis\nSecurity Testing (SAST) by Synopsys, Inc." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/58766252f6b2c0487cda6976a53d2bb03ae28e2a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/779332447108545ef04682ea29af5f85c0202aee", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/82501f1ead557cbee1c2467654ec109a80334d22", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a02fb71d7192ff1a9a47c9d937624966c6e09af", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a594382ec6d0cc8cff5a8bc7e61b54e3858fb243", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cc18b4685910d5d9de8314bae9c55790701b1811", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e06841a2abf9c82735cee39e88b1d79464088840", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f4d928c00254cfc9dd0ee7076f4a59bceec675f4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53717.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53717.json new file mode 100644 index 00000000000..c16beb7e1b8 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53717.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53717", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.367", + "lastModified": "2025-10-22T14:15:46.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()\n\nFix a stack-out-of-bounds write that occurs in a WMI response callback\nfunction that is called after a timeout occurs in ath9k_wmi_cmd().\nThe callback writes to wmi->cmd_rsp_buf, a stack-allocated buffer that\ncould no longer be valid when a timeout occurs. Set wmi->last_seq_id to\n0 when a timeout occurred.\n\nFound by a modified version of syzkaller.\n\nBUG: KASAN: stack-out-of-bounds in ath9k_wmi_ctrl_rx\nWrite of size 4\nCall Trace:\n memcpy\n ath9k_wmi_ctrl_rx\n ath9k_htc_rx_msg\n ath9k_hif_usb_reg_in_cb\n __usb_hcd_giveback_urb\n usb_hcd_giveback_urb\n dummy_timer\n call_timer_fn\n run_timer_softirq\n __do_softirq\n irq_exit_rcu\n sysvec_apic_timer_interrupt" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1af7eacfad45149c54893a8a9df9e92ef89f0a90", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/554048a72d7ecfdd58cc1bfb56e0a1864e64e82c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/78b56b0a613a87b61290b95be497fdfe2fe58aa6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/89a33c3c847b19b19205cde1d924df2a6c70d8eb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a2f35b9830692f7a616f2f627f943bc748af13a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8f28513d9520184059530c01a9f928a1b3809d3f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ae4933b4f17de8e2b7ff6f91b17d3b0099a6d6bc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf6dc175a2b53098a69db1236d9d53982f4b1bc0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53718.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53718.json new file mode 100644 index 00000000000..dfd6417e10c --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53718.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2023-53718", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.483", + "lastModified": "2025-10-22T14:15:46.483", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Do not swap cpu_buffer during resize process\n\nWhen ring_buffer_swap_cpu was called during resize process,\nthe cpu buffer was swapped in the middle, resulting in incorrect state.\nContinuing to run in the wrong state will result in oops.\n\nThis issue can be easily reproduced using the following two scripts:\n/tmp # cat test1.sh\n//#! /bin/sh\nfor i in `seq 0 100000`\ndo\n echo 2000 > /sys/kernel/debug/tracing/buffer_size_kb\n sleep 0.5\n echo 5000 > /sys/kernel/debug/tracing/buffer_size_kb\n sleep 0.5\ndone\n/tmp # cat test2.sh\n//#! /bin/sh\nfor i in `seq 0 100000`\ndo\n echo irqsoff > /sys/kernel/debug/tracing/current_tracer\n sleep 1\n echo nop > /sys/kernel/debug/tracing/current_tracer\n sleep 1\ndone\n/tmp # ./test1.sh &\n/tmp # ./test2.sh &\n\nA typical oops log is as follows, sometimes with other different oops logs.\n\n[ 231.711293] WARNING: CPU: 0 PID: 9 at kernel/trace/ring_buffer.c:2026 rb_update_pages+0x378/0x3f8\n[ 231.713375] Modules linked in:\n[ 231.714735] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.5.0-rc1-00276-g20edcec23f92 #15\n[ 231.716750] Hardware name: linux,dummy-virt (DT)\n[ 231.718152] Workqueue: events update_pages_handler\n[ 231.719714] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 231.721171] pc : rb_update_pages+0x378/0x3f8\n[ 231.722212] lr : rb_update_pages+0x25c/0x3f8\n[ 231.723248] sp : ffff800082b9bd50\n[ 231.724169] x29: ffff800082b9bd50 x28: ffff8000825f7000 x27: 0000000000000000\n[ 231.726102] x26: 0000000000000001 x25: fffffffffffff010 x24: 0000000000000ff0\n[ 231.728122] x23: ffff0000c3a0b600 x22: ffff0000c3a0b5c0 x21: fffffffffffffe0a\n[ 231.730203] x20: ffff0000c3a0b600 x19: ffff0000c0102400 x18: 0000000000000000\n[ 231.732329] x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffffe7aa8510\n[ 231.734212] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000002\n[ 231.736291] x11: ffff8000826998a8 x10: ffff800082b9baf0 x9 : ffff800081137558\n[ 231.738195] x8 : fffffc00030e82c8 x7 : 0000000000000000 x6 : 0000000000000001\n[ 231.740192] x5 : ffff0000ffbafe00 x4 : 0000000000000000 x3 : 0000000000000000\n[ 231.742118] x2 : 00000000000006aa x1 : 0000000000000001 x0 : ffff0000c0007208\n[ 231.744196] Call trace:\n[ 231.744892] rb_update_pages+0x378/0x3f8\n[ 231.745893] update_pages_handler+0x1c/0x38\n[ 231.746893] process_one_work+0x1f0/0x468\n[ 231.747852] worker_thread+0x54/0x410\n[ 231.748737] kthread+0x124/0x138\n[ 231.749549] ret_from_fork+0x10/0x20\n[ 231.750434] ---[ end trace 0000000000000000 ]---\n[ 233.720486] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n[ 233.721696] Mem abort info:\n[ 233.721935] ESR = 0x0000000096000004\n[ 233.722283] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 233.722596] SET = 0, FnV = 0\n[ 233.722805] EA = 0, S1PTW = 0\n[ 233.723026] FSC = 0x04: level 0 translation fault\n[ 233.723458] Data abort info:\n[ 233.723734] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 233.724176] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 233.724589] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 233.725075] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000104943000\n[ 233.725592] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n[ 233.726231] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 233.726720] Modules linked in:\n[ 233.727007] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.5.0-rc1-00276-g20edcec23f92 #15\n[ 233.727777] Hardware name: linux,dummy-virt (DT)\n[ 233.728225] Workqueue: events update_pages_handler\n[ 233.728655] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 233.729054] pc : rb_update_pages+0x1a8/0x3f8\n[ 233.729334] lr : rb_update_pages+0x154/0x3f8\n[ 233.729592] sp : ffff800082b9bd50\n[ 233.729792] x29: ffff800082b9bd50 x28: ffff8000825f7000 x27: 00000000\n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/02e52d7daaa3f0f48819f198092cf4871065bbf7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/128c06a34cfe55212632533a706b050d54552741", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/49b830d75f03d5dd41146d10e4d3e2a8211c4b94", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/66a3b2a121386702663065d5c9e5a33c03d3f4a2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8a96c0288d0737ad77882024974c075345c72011", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53719.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53719.json new file mode 100644 index 00000000000..3bbe7252e6f --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53719.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2023-53719", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.590", + "lastModified": "2025-10-22T14:15:46.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: arc_uart: fix of_iomap leak in `arc_serial_probe`\n\nSmatch reports:\n\ndrivers/tty/serial/arc_uart.c:631 arc_serial_probe() warn:\n'port->membase' from of_iomap() not released on lines: 631.\n\nIn arc_serial_probe(), if uart_add_one_port() fails,\nport->membase is not released, which would cause a resource leak.\n\nTo fix this, I replace of_iomap with devm_platform_ioremap_resource." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/081790eee6b47389a0d895262086d64c6a38d6e5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/153017561d2804cfae87cc9aa377aa84dd906ae1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3f00df24a5021a6f02c1830a290acd4bceb22a2d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/40a462313ba4f337a2b419e7fb4a670f3dd95e14", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7525aa211758cc023a371e010d16ceaae1057807", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ab5fc55d7f65d58a3c3aeadf11bdf60267cd2bd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f76a18e53a66c0ef2938276110717b3805720cd9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53720.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53720.json new file mode 100644 index 00000000000..741a3c8044f --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53720.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2023-53720", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.700", + "lastModified": "2025-10-22T14:15:46.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Release the label when replacing existing ct entry\n\nCited commit doesn't release the label mapping when replacing existing ct\nentry which leads to following memleak report:\n\nunreferenced object 0xffff8881854cf280 (size 96):\n comm \"kworker/u48:74\", pid 23093, jiffies 4296664564 (age 175.944s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<000000002722d368>] __kmalloc+0x4b/0x1c0\n [<00000000cc44e18f>] mapping_add+0x6e8/0xc90 [mlx5_core]\n [<000000003ad942a7>] mlx5_get_label_mapping+0x66/0xe0 [mlx5_core]\n [<00000000266308ac>] mlx5_tc_ct_entry_create_mod_hdr+0x1c4/0xf50 [mlx5_core]\n [<000000009a768b4f>] mlx5_tc_ct_entry_add_rule+0x16f/0xaf0 [mlx5_core]\n [<00000000a178f3e5>] mlx5_tc_ct_block_flow_offload_add+0x10cb/0x1f90 [mlx5_core]\n [<000000007b46c496>] mlx5_tc_ct_block_flow_offload+0x14a/0x630 [mlx5_core]\n [<00000000a9a18ac5>] nf_flow_offload_tuple+0x1a3/0x390 [nf_flow_table]\n [<00000000d0881951>] flow_offload_work_handler+0x257/0xd30 [nf_flow_table]\n [<000000009e4935a4>] process_one_work+0x7c2/0x13e0\n [<00000000f5cd36a7>] worker_thread+0x59d/0xec0\n [<00000000baed1daf>] kthread+0x28f/0x330\n [<0000000063d282a4>] ret_from_fork+0x1f/0x30\n\nFix the issue by correctly releasing the label mapping." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3db903a71f1f4bbf30baae166a4a49f2e8aceb61", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ac04a28144cfa89b61be518268233742c23d88d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53721.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53721.json new file mode 100644 index 00000000000..ef93d1e7274 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53721.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2023-53721", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.803", + "lastModified": "2025-10-22T14:15:46.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()\n\nIn ath12k_mac_op_hw_scan(), the return value of kzalloc() is directly\nused in memcpy(), which may lead to a NULL pointer dereference on\nfailure of kzalloc().\n\nFix this bug by adding a check of arg.extraie.ptr.\n\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0-03427-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.15378.4" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5a263df398b581189fe632b4ab8440f3dd76c251", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ad314da54c6dd223a6b6cc85019160aa842f659", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53722.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53722.json new file mode 100644 index 00000000000..4e3f68139da --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53722.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53722", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:46.920", + "lastModified": "2025-10-22T14:15:46.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: raid1: fix potential OOB in raid1_remove_disk()\n\nIf rddev->raid_disk is greater than mddev->raid_disks, there will be\nan out-of-bounds in raid1_remove_disk(). We have already found\nsimilar reports as follows:\n\n1) commit d17f744e883b (\"md-raid10: fix KASAN warning\")\n2) commit 1ebc2cec0b7d (\"dm raid: fix KASAN warning in raid5_remove_disk\")\n\nFix this bug by checking whether the \"number\" variable is\nvalid." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/25a68f2286be56fb3a6f9fa0e269c04b5e6c6e24", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4bdb92eaf645e312975357adc3c4e9523b6e67f1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4f7d853b4590fc20e90dd50e346c02811a8c5b08", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4f96c0665f9f4cf70130c9757750dc43dc679c82", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7993cfc041481a3a9cd4a3858088fc846b8ccaf7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b0472b50bcf0f19a5119b00a53b63579c8e1e4d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/91fbd4e75cb573f44d2619a9dc2f9ba927040760", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/beedf40f73939f248c81802eda08a2a8148ea13e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53723.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53723.json new file mode 100644 index 00000000000..8a1cbe5b183 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53723.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2023-53723", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:47.480", + "lastModified": "2025-10-22T14:15:47.480", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend\n\nsdma_v4_0_ip is shared on a few asics, but in sdma_v4_0_hw_fini,\ndriver unconditionally disables ecc_irq which is only enabled on\nthose asics enabling sdma ecc. This will introduce a warning in\nsuspend cycle on those chips with sdma ip v4.0, while without\nsdma ecc. So this patch correct this.\n\n[ 7283.166354] RIP: 0010:amdgpu_irq_put+0x45/0x70 [amdgpu]\n[ 7283.167001] RSP: 0018:ffff9a5fc3967d08 EFLAGS: 00010246\n[ 7283.167019] RAX: ffff98d88afd3770 RBX: 0000000000000001 RCX: 0000000000000000\n[ 7283.167023] RDX: 0000000000000000 RSI: ffff98d89da30390 RDI: ffff98d89da20000\n[ 7283.167025] RBP: ffff98d89da20000 R08: 0000000000036838 R09: 0000000000000006\n[ 7283.167028] R10: ffffd5764243c008 R11: 0000000000000000 R12: ffff98d89da30390\n[ 7283.167030] R13: ffff98d89da38978 R14: ffffffff999ae15a R15: ffff98d880130105\n[ 7283.167032] FS: 0000000000000000(0000) GS:ffff98d996f00000(0000) knlGS:0000000000000000\n[ 7283.167036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 7283.167039] CR2: 00000000f7a9d178 CR3: 00000001c42ea000 CR4: 00000000003506e0\n[ 7283.167041] Call Trace:\n[ 7283.167046] \n[ 7283.167048] sdma_v4_0_hw_fini+0x38/0xa0 [amdgpu]\n[ 7283.167704] amdgpu_device_ip_suspend_phase2+0x101/0x1a0 [amdgpu]\n[ 7283.168296] amdgpu_device_suspend+0x103/0x180 [amdgpu]\n[ 7283.168875] amdgpu_pmops_freeze+0x21/0x60 [amdgpu]\n[ 7283.169464] pci_pm_freeze+0x54/0xc0" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2a179117a3b29e7136e4045c57090a05bb97f373", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3decf3a750a924362bf4e2680dd3b07242fe56e8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/71e1f44077db83e205db70a684c1f2c5d2247174", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/823787470e320f90372c3ef506769520026c571f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b229ada2669b74fdae06c83fbfda5a5a99fc253", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c1420276be7a98df0074584bb9c1709cbc1a9df5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c5123c193696bf97fdf259c825ebfac517b54e44", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53724.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53724.json new file mode 100644 index 00000000000..fe629adafe1 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53724.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53724", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:47.600", + "lastModified": "2025-10-22T14:15:47.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()\n\n`req` is allocated in pcf50633_adc_async_read(), but\nadc_enqueue_request() could fail to insert the `req` into queue.\nWe need to check the return value and free it in the case of failure." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3ee13bdf0d25ae8752ae6185b6d13bbb0d5a8e30", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/41cdf082ae006ea002135dfaf43b2897de3bded8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/588edb4fb1f1e6487a0f60a5f7b9a24d2d0c9f8e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/66616eed76dfa6f3e442907760325a023c6da7e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6a8a02dcfae13ab07dc7bed2b409cec7f3d32e92", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b450dcff23aa254844492831a8e2b508a9d522d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9cca3a4933ca365cc664d5eefb0f942374ea8b41", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a62a5e79202967176a9c1a04e477860779accd6c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53725.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53725.json new file mode 100644 index 00000000000..1efd76063d6 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53725.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53725", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:47.710", + "lastModified": "2025-10-22T14:15:47.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe\n\nSmatch reports:\ndrivers/clocksource/timer-cadence-ttc.c:529 ttc_timer_probe()\nwarn: 'timer_baseaddr' from of_iomap() not released on lines: 498,508,516.\n\ntimer_baseaddr may have the problem of not being released after use,\nI replaced it with the devm_of_iomap() function and added the clk_put()\nfunction to cleanup the \"clk_ce\" and \"clk_cs\"." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/289e2054eeb63c9e133960731c342eeffad218d3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/54cc10a0f4b01b522e9519014200f1b33bf7e4aa", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/67d7eebbc424935dec61fb352d1ccae5d16cf429", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8b5bf64c89c7100c921bd807ba39b2eb003061ab", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/919dd531ebb7514f205ae7aab87994337ebce1f6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/99744200f28b2cf5f50767447e51b4b4a977d145", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e0a9cc90ea44a50d76a84f9f9bf1703d31fe45e9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ebdff0986513a29be242aace0ef89b6c105b0bf0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53726.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53726.json new file mode 100644 index 00000000000..a880670f8f7 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53726.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2023-53726", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:47.837", + "lastModified": "2025-10-22T14:15:47.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: csum: Fix OoB access in IP checksum code for negative lengths\n\nAlthough commit c2c24edb1d9c (\"arm64: csum: Fix pathological zero-length\ncalls\") added an early return for zero-length input, syzkaller has\npopped up with an example of a _negative_ length which causes an\nundefined shift and an out-of-bounds read:\n\n | BUG: KASAN: slab-out-of-bounds in do_csum+0x44/0x254 arch/arm64/lib/csum.c:39\n | Read of size 4294966928 at addr ffff0000d7ac0170 by task syz-executor412/5975\n |\n | CPU: 0 PID: 5975 Comm: syz-executor412 Not tainted 6.4.0-rc4-syzkaller-g908f31f2a05b #0\n | Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023\n | Call trace:\n | dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:233\n | show_stack+0x2c/0x44 arch/arm64/kernel/stacktrace.c:240\n | __dump_stack lib/dump_stack.c:88 [inline]\n | dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106\n | print_address_description mm/kasan/report.c:351 [inline]\n | print_report+0x174/0x514 mm/kasan/report.c:462\n | kasan_report+0xd4/0x130 mm/kasan/report.c:572\n | kasan_check_range+0x264/0x2a4 mm/kasan/generic.c:187\n | __kasan_check_read+0x20/0x30 mm/kasan/shadow.c:31\n | do_csum+0x44/0x254 arch/arm64/lib/csum.c:39\n | csum_partial+0x30/0x58 lib/checksum.c:128\n | gso_make_checksum include/linux/skbuff.h:4928 [inline]\n | __udp_gso_segment+0xaf4/0x1bc4 net/ipv4/udp_offload.c:332\n | udp6_ufo_fragment+0x540/0xca0 net/ipv6/udp_offload.c:47\n | ipv6_gso_segment+0x5cc/0x1760 net/ipv6/ip6_offload.c:119\n | skb_mac_gso_segment+0x2b4/0x5b0 net/core/gro.c:141\n | __skb_gso_segment+0x250/0x3d0 net/core/dev.c:3401\n | skb_gso_segment include/linux/netdevice.h:4859 [inline]\n | validate_xmit_skb+0x364/0xdbc net/core/dev.c:3659\n | validate_xmit_skb_list+0x94/0x130 net/core/dev.c:3709\n | sch_direct_xmit+0xe8/0x548 net/sched/sch_generic.c:327\n | __dev_xmit_skb net/core/dev.c:3805 [inline]\n | __dev_queue_xmit+0x147c/0x3318 net/core/dev.c:4210\n | dev_queue_xmit include/linux/netdevice.h:3085 [inline]\n | packet_xmit+0x6c/0x318 net/packet/af_packet.c:276\n | packet_snd net/packet/af_packet.c:3081 [inline]\n | packet_sendmsg+0x376c/0x4c98 net/packet/af_packet.c:3113\n | sock_sendmsg_nosec net/socket.c:724 [inline]\n | sock_sendmsg net/socket.c:747 [inline]\n | __sys_sendto+0x3b4/0x538 net/socket.c:2144\n\nExtend the early return to reject negative lengths as well, aligning our\nimplementation with the generic code in lib/checksum.c" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5a85727239a23de1cc8d93985f1056308128f3e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8bd795fedb8450ecbef18eeadbd23ed8fc7630f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9a43563cfd6b9200ff2f76b3f9fcdcb217ceb523", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a5ad2f87d8e74e351d3f500ad9d5b3a5653e1c6f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ba0b46166b8e547024d02345a68b747841931ad2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fcdf904e866de0e3715835e50409fda3b2590527", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53727.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53727.json new file mode 100644 index 00000000000..a21cc54ce36 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53727.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2023-53727", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:47.977", + "lastModified": "2025-10-22T14:15:47.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fq_pie: avoid stalls in fq_pie_timer()\n\nWhen setting a high number of flows (limit being 65536),\nfq_pie_timer() is currently using too much time as syzbot reported.\n\nAdd logic to yield the cpu every 2048 flows (less than 150 usec\non debug kernels).\nIt should also help by not blocking qdisc fast paths for too long.\nWorst case (65536 flows) would need 31 jiffies for a complete scan.\n\nRelevant extract from syzbot report:\n\nrcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2663 jiffies s: 873 root: 0x1/.\nrcu: blocking rcu_node structures (internal RCU debug):\nSending NMI from CPU 1 to CPUs 0:\nNMI backtrace for cpu 0\nCPU: 0 PID: 5177 Comm: syz-executor273 Not tainted 6.5.0-syzkaller-00453-g727dbda16b83 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023\nRIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]\nRIP: 0010:write_comp_data+0x21/0x90 kernel/kcov.c:236\nCode: 2e 0f 1f 84 00 00 00 00 00 65 8b 05 01 b2 7d 7e 49 89 f1 89 c6 49 89 d2 81 e6 00 01 00 00 49 89 f8 65 48 8b 14 25 80 b9 03 00 00 01 ff 00 74 0e 85 f6 74 59 8b 82 04 16 00 00 85 c0 74 4f 8b\nRSP: 0018:ffffc90000007bb8 EFLAGS: 00000206\nRAX: 0000000000000101 RBX: ffffc9000dc0d140 RCX: ffffffff885893b0\nRDX: ffff88807c075940 RSI: 0000000000000100 RDI: 0000000000000001\nRBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000dc0d178\nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\nFS: 0000555555d54380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f6b442f6130 CR3: 000000006fe1c000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n \n \n pie_calculate_probability+0x480/0x850 net/sched/sch_pie.c:415\n fq_pie_timer+0x1da/0x4f0 net/sched/sch_fq_pie.c:387\n call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8c21ab1bae945686c602c5bfa4e3f3352c2452c5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/94d527c3759d76c29220758362f622954612bea7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/973a4c302d7f3804098ff9824d9f56926901f293", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e093000e7d13569c9cb07d7500acd5142c3c43cb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f39b49077abec4c9c3a4c2966532004851c51006", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53728.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53728.json new file mode 100644 index 00000000000..9e67689c2b7 --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53728.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2023-53728", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:48.083", + "lastModified": "2025-10-22T14:15:48.083", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-timers: Ensure timer ID search-loop limit is valid\n\nposix_timer_add() tries to allocate a posix timer ID by starting from the\ncached ID which was stored by the last successful allocation.\n\nThis is done in a loop searching the ID space for a free slot one by\none. The loop has to terminate when the search wrapped around to the\nstarting point.\n\nBut that's racy vs. establishing the starting point. That is read out\nlockless, which leads to the following problem:\n\nCPU0\t \t \t \t CPU1\nposix_timer_add()\n start = sig->posix_timer_id;\n lock(hash_lock);\n ...\t\t\t\t posix_timer_add()\n if (++sig->posix_timer_id < 0)\n \t\t\t start = sig->posix_timer_id;\n sig->posix_timer_id = 0;\n\nSo CPU1 can observe a negative start value, i.e. -1, and the loop break\nnever happens because the condition can never be true:\n\n if (sig->posix_timer_id == start)\n break;\n\nWhile this is unlikely to ever turn into an endless loop as the ID space is\nhuge (INT_MAX), the racy read of the start value caught the attention of\nKCSAN and Dmitry unearthed that incorrectness.\n\nRewrite it so that all id operations are under the hash lock." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/322377cc909defcca9451487484845e7e1d20d1b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/37175e25edf7cc0d5a2cd2c2a1cbe2dcbf4a1937", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6a0ac84501b4fec73a1a823c55cf13584c43f418", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ad6679a5bb97cdb3e14942729292b4bfcc0e223", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ce8849dd1e78dadcee0ec9acbd259d239b7069f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8dc52c200b889bc1cb34288fbf623d4ff381d2ae", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9ea26a8494a0a9337e7415eafd6f3ed940327dc5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ef535e0315afd098c4beb1da364847eca4b56a20", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53729.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53729.json new file mode 100644 index 00000000000..eb14d0d762b --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53729.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2023-53729", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:48.193", + "lastModified": "2025-10-22T14:15:48.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: qmi_encdec: Restrict string length in decode\n\nThe QMI TLV value for strings in a lot of qmi element info structures\naccount for null terminated strings with MAX_LEN + 1. If a string is\nactually MAX_LEN + 1 length, this will cause an out of bounds access\nwhen the NULL character is appended in decoding." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/22ee7c9c7f381be178b4457bc54530002e08e938", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2ccab9f82772ead618689d17dbc6950d6bd1e741", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/64c5e916fabe5ef7bef0210b8a59fa8941ee1b8e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6b58859e7c4ac357517a59f0801e8ce1b58a8ee2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8d207400fd6b79c92aeb2f33bb79f62dff904ea2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b2f39b813d1eed4a522428d1e6acd7dfe9b81579", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f6250ecb7fbb934b89539e7e2ba6c1d8555c0975", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53730.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53730.json new file mode 100644 index 00000000000..58eb816fccd --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53730.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2023-53730", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:48.310", + "lastModified": "2025-10-22T14:15:48.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost\n\nadjust_inuse_and_calc_cost() use spin_lock_irq() and IRQ will be enabled\nwhen unlock. DEADLOCK might happen if we have held other locks and disabled\nIRQ before invoking it.\n\nFix it by using spin_lock_irqsave() instead, which can keep IRQ state\nconsistent with before when unlock.\n\n ================================\n WARNING: inconsistent lock state\n 5.10.0-02758-g8e5f91fd772f #26 Not tainted\n --------------------------------\n inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage.\n kworker/2:3/388 [HC0[0]:SC0[0]:HE0:SE1] takes:\n ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: spin_lock_irq\n ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: bfq_bio_merge+0x141/0x390\n {IN-HARDIRQ-W} state was registered at:\n __lock_acquire+0x3d7/0x1070\n lock_acquire+0x197/0x4a0\n __raw_spin_lock_irqsave\n _raw_spin_lock_irqsave+0x3b/0x60\n bfq_idle_slice_timer_body\n bfq_idle_slice_timer+0x53/0x1d0\n __run_hrtimer+0x477/0xa70\n __hrtimer_run_queues+0x1c6/0x2d0\n hrtimer_interrupt+0x302/0x9e0\n local_apic_timer_interrupt\n __sysvec_apic_timer_interrupt+0xfd/0x420\n run_sysvec_on_irqstack_cond\n sysvec_apic_timer_interrupt+0x46/0xa0\n asm_sysvec_apic_timer_interrupt+0x12/0x20\n irq event stamp: 837522\n hardirqs last enabled at (837521): [] __raw_spin_unlock_irqrestore\n hardirqs last enabled at (837521): [] _raw_spin_unlock_irqrestore+0x3d/0x40\n hardirqs last disabled at (837522): [] __raw_spin_lock_irq\n hardirqs last disabled at (837522): [] _raw_spin_lock_irq+0x43/0x50\n softirqs last enabled at (835852): [] __do_softirq+0x558/0x8ec\n softirqs last disabled at (835845): [] asm_call_irq_on_stack+0xf/0x20\n\n other info that might help us debug this:\n Possible unsafe locking scenario:\n\n CPU0\n ----\n lock(&bfqd->lock);\n \n lock(&bfqd->lock);\n\n *** DEADLOCK ***\n\n 3 locks held by kworker/2:3/388:\n #0: ffff888107af0f38 ((wq_completion)kthrotld){+.+.}-{0:0}, at: process_one_work+0x742/0x13f0\n #1: ffff8881176bfdd8 ((work_completion)(&td->dispatch_work)){+.+.}-{0:0}, at: process_one_work+0x777/0x13f0\n #2: ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: spin_lock_irq\n #2: ffff888118c00c28 (&bfqd->lock){?.-.}-{2:2}, at: bfq_bio_merge+0x141/0x390\n\n stack backtrace:\n CPU: 2 PID: 388 Comm: kworker/2:3 Not tainted 5.10.0-02758-g8e5f91fd772f #26\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n Workqueue: kthrotld blk_throtl_dispatch_work_fn\n Call Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x107/0x167\n print_usage_bug\n valid_state\n mark_lock_irq.cold+0x32/0x3a\n mark_lock+0x693/0xbc0\n mark_held_locks+0x9e/0xe0\n __trace_hardirqs_on_caller\n lockdep_hardirqs_on_prepare.part.0+0x151/0x360\n trace_hardirqs_on+0x5b/0x180\n __raw_spin_unlock_irq\n _raw_spin_unlock_irq+0x24/0x40\n spin_unlock_irq\n adjust_inuse_and_calc_cost+0x4fb/0x970\n ioc_rqos_merge+0x277/0x740\n __rq_qos_merge+0x62/0xb0\n rq_qos_merge\n bio_attempt_back_merge+0x12c/0x4a0\n blk_mq_sched_try_merge+0x1b6/0x4d0\n bfq_bio_merge+0x24a/0x390\n __blk_mq_sched_bio_merge+0xa6/0x460\n blk_mq_sched_bio_merge\n blk_mq_submit_bio+0x2e7/0x1ee0\n __submit_bio_noacct_mq+0x175/0x3b0\n submit_bio_noacct+0x1fb/0x270\n blk_throtl_dispatch_work_fn+0x1ef/0x2b0\n process_one_work+0x83e/0x13f0\n process_scheduled_works\n worker_thread+0x7e3/0xd80\n kthread+0x353/0x470\n ret_from_fork+0x1f/0x30" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3376c4fe2db4aea2dc721a27a999c41fdb45b54f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8563b58a4360e648ce18f0e98a75a4be51667431", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8ceeb3fc86a83700bb1585c189006080a47e8506", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8d211554679d0b23702bd32ba04aeac0c1c4f660", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9279a1b74ad98039d5d44d26b9e7a9cfe655b6d3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/eb120c0aff5ceab9c9c46b87f302465bbf2bbaed", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53731.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53731.json new file mode 100644 index 00000000000..1dbf617e0da --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53731.json @@ -0,0 +1,53 @@ +{ + "id": "CVE-2023-53731", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:48.423", + "lastModified": "2025-10-22T14:15:48.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: fix potential deadlock in netlink_set_err()\n\nsyzbot reported a possible deadlock in netlink_set_err() [1]\n\nA similar issue was fixed in commit 1d482e666b8e (\"netlink: disable IRQs\nfor netlink_lock_table()\") in netlink_lock_table()\n\nThis patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()\nwhich were not covered by cited commit.\n\n[1]\n\nWARNING: possible irq lock inversion dependency detected\n6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted\n\nsyz-executor.2/23011 just changed the state of lock:\nffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612\nbut this lock was taken by another, SOFTIRQ-safe lock in the past:\n (&local->queue_stop_reason_lock){..-.}-{2:2}\n\nand interrupts could create inverse lock ordering between them.\n\nother info that might help us debug this:\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(nl_table_lock);\n local_irq_disable();\n lock(&local->queue_stop_reason_lock);\n lock(nl_table_lock);\n \n lock(&local->queue_stop_reason_lock);\n\n *** DEADLOCK ***" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459dd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-537xx/CVE-2023-53732.json b/CVE-2023/CVE-2023-537xx/CVE-2023-53732.json new file mode 100644 index 00000000000..de498e4a82c --- /dev/null +++ b/CVE-2023/CVE-2023-537xx/CVE-2023-53732.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2023-53732", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-10-22T14:15:48.547", + "lastModified": "2025-10-22T14:15:48.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix NULL dereference in ni_write_inode\n\nSyzbot reports a NULL dereference in ni_write_inode.\nWhen creating a new inode, if allocation fails in mi_init function\n(called in mi_format_new function), mi->mrec is set to NULL.\nIn the error path of this inode creation, mi->mrec is later\ndereferenced in ni_write_inode.\n\nAdd a NULL check to prevent NULL dereference." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8dae4f6341e335a09575be60b4fdf697c732a470", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b1135fbaf8ebef93df326761ac70ebcc3c2e3d63", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b3152afc0eb864f7c6ecad134a15b577ef7aec77", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d4b74482529516477cf7b12502538e51827c699f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-324xx/CVE-2024-32499.json b/CVE-2024/CVE-2024-324xx/CVE-2024-32499.json index e4bd373f40c..f71c7947166 100644 --- a/CVE-2024/CVE-2024-324xx/CVE-2024-32499.json +++ b/CVE-2024/CVE-2024-324xx/CVE-2024-32499.json @@ -2,7 +2,7 @@ "id": "CVE-2024-32499", "sourceIdentifier": "cve@mitre.org", "published": "2025-04-28T17:15:47.073", - "lastModified": "2025-05-10T01:03:36.457", + "lastModified": "2025-10-22T15:06:49.100", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -90,9 +90,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:newforma:project_center_server:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", "versionEndIncluding": "2023.3.0.32259", - "matchCriteriaId": "E0006AF7-CBDA-459F-B2E5-A1D6E6CB952E" + "matchCriteriaId": "1CAA26E8-D5AC-43B6-81C2-7A04A76053EA" } ] } diff --git a/CVE-2024/CVE-2024-582xx/CVE-2024-58274.json b/CVE-2024/CVE-2024-582xx/CVE-2024-58274.json index 6ef16144a1b..22abf1b9e8c 100644 --- a/CVE-2024/CVE-2024-582xx/CVE-2024-58274.json +++ b/CVE-2024/CVE-2024-582xx/CVE-2024-58274.json @@ -2,7 +2,7 @@ "id": "CVE-2024-58274", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T04:15:55.680", - "lastModified": "2025-10-22T04:15:55.680", + "lastModified": "2025-10-22T14:15:48.660", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "cve@mitre.org", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -59,6 +59,10 @@ { "url": "https://xz.aliyun.com/news/14639", "source": "cve@mitre.org" + }, + { + "url": "https://xz.aliyun.com/news/14639", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-117xx/CVE-2025-11750.json b/CVE-2025/CVE-2025-117xx/CVE-2025-11750.json new file mode 100644 index 00000000000..605e50f5015 --- /dev/null +++ b/CVE-2025/CVE-2025-117xx/CVE-2025-11750.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11750", + "sourceIdentifier": "security@huntr.dev", + "published": "2025-10-22T14:15:49.037", + "lastModified": "2025-10-22T14:15:49.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error messages for non-existent and existing accounts. Specifically, when a login or registration attempt is made with a non-existent username or email, the system responds with a message such as \"account not found.\" Conversely, when the username or email exists but the password is incorrect, a different error message is returned. This discrepancy allows an attacker to enumerate valid user accounts by analyzing the error responses, potentially facilitating targeted social engineering, brute force, or credential stuffing attacks." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@huntr.dev", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@huntr.dev", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-544" + } + ] + } + ], + "references": [ + { + "url": "https://huntr.com/bounties/e7359f9f-c004-4304-9de9-753622d370a1", + "source": "security@huntr.dev" + }, + { + "url": "https://huntr.com/bounties/e7359f9f-c004-4304-9de9-753622d370a1", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11844.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11844.json new file mode 100644 index 00000000000..b5ac87b2406 --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11844.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-11844", + "sourceIdentifier": "security@huntr.dev", + "published": "2025-10-22T14:15:49.457", + "lastModified": "2025-10-22T14:15:49.457", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@huntr.dev", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@huntr.dev", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-643" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/huggingface/smolagents/commit/f570ed5e17999d4cf7d5e79c2830fbaefab8a794", + "source": "security@huntr.dev" + }, + { + "url": "https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4", + "source": "security@huntr.dev" + }, + { + "url": "https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11965.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11965.json new file mode 100644 index 00000000000..c4625ab9de9 --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11965.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-11965", + "sourceIdentifier": "emo@eclipse.org", + "published": "2025-10-22T15:15:31.590", + "lastModified": "2025-10-22T15:15:31.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them (e.g. '.git/config')." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "emo@eclipse.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "emo@eclipse.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-552" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/304", + "source": "emo@eclipse.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11966.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11966.json new file mode 100644 index 00000000000..3fd59c926e2 --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11966.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-11966", + "sourceIdentifier": "emo@eclipse.org", + "published": "2025-10-22T15:15:31.730", + "lastModified": "2025-10-22T15:15:31.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when \"directory listing\" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "emo@eclipse.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.3, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "emo@eclipse.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/303", + "source": "emo@eclipse.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-221xx/CVE-2025-22167.json b/CVE-2025/CVE-2025-221xx/CVE-2025-22167.json index 02aec7c4ab1..27751966604 100644 --- a/CVE-2025/CVE-2025-221xx/CVE-2025-22167.json +++ b/CVE-2025/CVE-2025-221xx/CVE-2025-22167.json @@ -2,7 +2,7 @@ "id": "CVE-2025-22167", "sourceIdentifier": "security@atlassian.com", "published": "2025-10-22T01:16:08.753", - "lastModified": "2025-10-22T01:16:08.753", + "lastModified": "2025-10-22T14:15:49.967", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -57,6 +57,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], "references": [ { "url": "https://confluence.atlassian.com/pages/viewpage.action?pageId=1652920034", diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23355.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23355.json index 62593459576..7775bdfd3a0 100644 --- a/CVE-2025/CVE-2025-233xx/CVE-2025-23355.json +++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23355.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23355", "sourceIdentifier": "psirt@nvidia.com", "published": "2025-10-01T22:15:30.663", - "lastModified": "2025-10-02T19:11:46.753", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:50:29.027", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -47,18 +67,57 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nvidia:nsight_graphics:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025.3", + "matchCriteriaId": "5B99B8AA-3435-45C5-BEFE-45B3E93A254B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23355", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "US Government Resource" + ] }, { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5704", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-23355", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25732.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25732.json index 30bdd2e9900..cfc49ae7b01 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25732.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25732.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25732", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:42.080", - "lastModified": "2025-09-17T17:54:02.850", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:31.900", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,20 +22,20 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", - "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.8, "baseSeverity": "MEDIUM", - "attackVector": "NETWORK", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "LOW", - "integrityImpact": "LOW", - "availabilityImpact": "NONE" + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, - "impactScore": 2.5 + "exploitabilityScore": 0.9, + "impactScore": 5.9 } ] }, @@ -46,7 +46,7 @@ "description": [ { "lang": "en", - "value": "CWE-284" + "value": "CWE-922" } ] } diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json index 8b96b4937ba..c4fa7914da9 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25733", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:42.270", - "lastModified": "2025-09-18T15:31:39.373", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:32.110", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,20 +22,20 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", - "baseScore": 5.3, - "baseSeverity": "MEDIUM", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", - "integrityImpact": "NONE", + "integrityImpact": "LOW", "availabilityImpact": "NONE" }, - "exploitabilityScore": 3.9, - "impactScore": 1.4 + "exploitabilityScore": 0.9, + "impactScore": 2.5 } ] }, @@ -46,7 +46,7 @@ "description": [ { "lang": "en", - "value": "CWE-284" + "value": "CWE-1233" } ] } diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25734.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25734.json index 7e57765ec7f..4ac6c7af14f 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25734.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25734.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25734", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:42.453", - "lastModified": "2025-09-16T19:37:16.167", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:32.290", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,10 +22,10 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", @@ -34,7 +34,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 0.9, "impactScore": 5.9 } ] @@ -44,6 +44,10 @@ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [ + { + "lang": "en", + "value": "CWE-284" + }, { "lang": "en", "value": "CWE-1233" diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25735.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25735.json index 0b6cd350798..939880f718b 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25735.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25735.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25735", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:42.617", - "lastModified": "2025-09-16T19:33:52.560", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:32.477", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,19 +22,19 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", - "baseScore": 7.5, - "baseSeverity": "HIGH", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", "availabilityImpact": "NONE" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 0.9, "impactScore": 3.6 } ] diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25736.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25736.json index c3238b7d8e7..e09782757de 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25736.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25736.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25736", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:42.793", - "lastModified": "2025-09-16T19:27:50.197", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:32.663", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,10 +22,10 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", @@ -34,7 +34,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 0.9, "impactScore": 5.9 } ] diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25737.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25737.json index 3c27e832b7f..a80cf82a1cb 100644 --- a/CVE-2025/CVE-2025-257xx/CVE-2025-25737.json +++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25737.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25737", "sourceIdentifier": "cve@mitre.org", "published": "2025-08-26T15:15:43.107", - "lastModified": "2025-09-16T19:22:37.060", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-22T15:15:32.847", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -22,10 +22,10 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", @@ -34,7 +34,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 3.9, + "exploitabilityScore": 0.9, "impactScore": 5.9 } ] @@ -170,14 +170,6 @@ "tags": [ "Product" ] - }, - { - "url": "https://phrack.org/issues/72/16_md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "tags": [ - "Exploit", - "Third Party Advisory" - ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-309xx/CVE-2025-30944.json b/CVE-2025/CVE-2025-309xx/CVE-2025-30944.json new file mode 100644 index 00000000000..a8bb6083daa --- /dev/null +++ b/CVE-2025/CVE-2025-309xx/CVE-2025-30944.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-30944", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.033", + "lastModified": "2025-10-22T15:15:33.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/tablesome-premium/vulnerability/wordpress-tablesome-table-premium-1-1-23-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31634.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31634.json new file mode 100644 index 00000000000..6448c8d2a98 --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31634.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-31634", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.180", + "lastModified": "2025-10-22T15:15:33.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object Injection.This issue affects Insurance: from n/a through <= 3.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/insurance/vulnerability/wordpress-insurance-3-5-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32283.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32283.json new file mode 100644 index 00000000000..0098c821c4a --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32283.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-32283", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.307", + "lastModified": "2025-10-22T15:15:33.307", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through <= 3.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/solar/vulnerability/wordpress-solar-energy-3-5-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-326xx/CVE-2025-32657.json b/CVE-2025/CVE-2025-326xx/CVE-2025-32657.json new file mode 100644 index 00000000000..2de5b6a2ac2 --- /dev/null +++ b/CVE-2025/CVE-2025-326xx/CVE-2025-32657.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-32657", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.443", + "lastModified": "2025-10-22T15:15:33.443", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a through <= 2.1.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/testimonial-slider-showcase-pro/vulnerability/wordpress-testimonial-slider-and-showcase-pro-plugin-2-1-7-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35052.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35052.json index 612d64f56dd..245efa4e2d0 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35052.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35052.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35052", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.040", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:56:25.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2024.3", + "matchCriteriaId": "71630A80-6292-4C7B-A5C9-8C6877EE229E" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35052", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35053.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35053.json index a3b6a0a49ee..72c411bea76 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35053.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35053.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35053", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.203", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:19:32.160", + "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 2.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 } ] }, @@ -95,18 +115,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2024.3.", + "matchCriteriaId": "70F904CF-DA5A-46A9-BD34-4FF07076A2C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35053", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35062", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35054.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35054.json index 891c7a00d56..e90ea05908d 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35054.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35054.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35054", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.357", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:18:27.027", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.4 } ] }, @@ -99,14 +119,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2024.3", + "matchCriteriaId": "71630A80-6292-4C7B-A5C9-8C6877EE229E" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35054", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35055.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35055.json index bc2236bab52..1d5281d6786 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35055.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35055.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35055", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.517", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:17:05.643", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -95,18 +95,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2023.1", + "matchCriteriaId": "FCD3AAE4-4F00-480B-899E-D0389BC7DC4B" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35055", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35062", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35056.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35056.json index baacfacb0b5..f838690e641 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35056.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35056.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35056", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.670", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:16:36.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 1.4 } ] }, @@ -91,18 +111,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024.1", + "matchCriteriaId": "BBC6EAB6-B5A7-4557-8C51-AB1CB186EB3C" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35056", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35062", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35057.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35057.json index 1b19537d7ef..4bcdbfc4497 100644 --- a/CVE-2025/CVE-2025-350xx/CVE-2025-35057.json +++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35057.json @@ -2,8 +2,8 @@ "id": "CVE-2025-35057", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-09T21:15:36.827", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T15:12:44.357", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,14 +91,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024.3", + "matchCriteriaId": "EC2FF0A6-51C4-404B-9DC4-B056BC0DD65A" + } + ] + } + ] + } + ], "references": [ { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35057", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-38xx/CVE-2025-3872.json b/CVE-2025/CVE-2025-38xx/CVE-2025-3872.json index 83e1d604e8c..d777cd79350 100644 --- a/CVE-2025/CVE-2025-38xx/CVE-2025-3872.json +++ b/CVE-2025/CVE-2025-38xx/CVE-2025-3872.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3872", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-04-24T10:15:17.093", - "lastModified": "2025-04-29T13:52:47.470", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:10:02.373", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "22.10.0", + "versionEndExcluding": "22.10.28", + "matchCriteriaId": "B762A216-341C-4989-8E32-46087A42CB48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.04.0", + "versionEndExcluding": "23.04.25", + "matchCriteriaId": "92132FF0-1099-4F1B-B5E6-8FE0577770C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.20", + "matchCriteriaId": "F9BECCFC-C3C6-4A0D-B10A-29FC01486CD4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.10", + "matchCriteriaId": "BB5744F8-A08E-4775-A63C-594A301D3AAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.4", + "matchCriteriaId": "4F80239D-00CD-4A74-84B5-429897AC4B0A" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55571-centreon-web-high-severity-4496", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39534.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39534.json new file mode 100644 index 00000000000..17645957c0d --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39534.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-39534", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.580", + "lastModified": "2025-10-22T15:15:33.580", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Somonator Terms Dictionary terms-dictionary allows Reflected XSS.This issue affects Terms Dictionary: from n/a through <= 1.5.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/terms-dictionary/vulnerability/wordpress-terms-dictionary-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-406xx/CVE-2025-40657.json b/CVE-2025/CVE-2025-406xx/CVE-2025-40657.json index 10d58f4db76..d30dcc2bf76 100644 --- a/CVE-2025/CVE-2025-406xx/CVE-2025-40657.json +++ b/CVE-2025/CVE-2025-406xx/CVE-2025-40657.json @@ -2,8 +2,8 @@ "id": "CVE-2025-40657", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2025-06-10T10:15:28.043", - "lastModified": "2025-06-12T16:06:39.330", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T14:00:13.857", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,10 +95,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:acc:dm_corporative_cms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025.01", + "matchCriteriaId": "8424AC64-05AA-48EF-B312-CABE5A4437D0" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dm-corporative-cms-dmacroweb", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4646.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4646.json index 743b5951a15..5eab51c45c3 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4646.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4646.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4646", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-05-13T10:15:29.113", - "lastModified": "2025-10-08T10:15:37.677", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:13:47.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.10", + "matchCriteriaId": "BB5744F8-A08E-4775-A63C-594A301D3AAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.4", + "matchCriteriaId": "4F80239D-00CD-4A74-84B5-429897AC4B0A" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55572-centreon-web-high-severity-4460", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4647.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4647.json index 2874570d06a..dacdd9fc343 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4647.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4647.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4647", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-05-13T10:15:29.317", - "lastModified": "2025-05-13T19:35:18.080", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:13:18.460", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.7, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -51,14 +71,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "22.10.0", + "versionEndExcluding": "22.10.29", + "matchCriteriaId": "E8987E24-3449-4436-BBE0-BF3ECD4A79AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.04.0", + "versionEndExcluding": "23.04.27", + "matchCriteriaId": "1CA620D6-AB8C-494E-9008-F4372C234F3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.22", + "matchCriteriaId": "22F4DBC4-34EA-4B74-B049-B48C8A368438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.11", + "matchCriteriaId": "5F7169A7-4C43-440B-A7A1-BE6191FB676E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.5", + "matchCriteriaId": "58D9F6C2-9EDA-43B1-B18D-E6E6EDB17DDB" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55574-centreon-web-high-severity-4435", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4648.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4648.json index 940efb0f61e..acbc3120e69 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4648.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4648.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4648", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-05-13T10:15:29.503", - "lastModified": "2025-10-08T10:15:38.000", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:12:11.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.7, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 } ] }, @@ -51,14 +71,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "22.10.0", + "versionEndExcluding": "22.10.29", + "matchCriteriaId": "E8987E24-3449-4436-BBE0-BF3ECD4A79AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.04.0", + "versionEndExcluding": "23.04.27", + "matchCriteriaId": "1CA620D6-AB8C-494E-9008-F4372C234F3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.22", + "matchCriteriaId": "22F4DBC4-34EA-4B74-B049-B48C8A368438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.11", + "matchCriteriaId": "5F7169A7-4C43-440B-A7A1-BE6191FB676E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.5", + "matchCriteriaId": "58D9F6C2-9EDA-43B1-B18D-E6E6EDB17DDB" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55575-centreon-web-high-severity-4434", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4649.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4649.json index e00758b448c..ca4b07e6dab 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4649.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4649.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4649", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-05-13T12:15:18.047", - "lastModified": "2025-10-15T13:16:01.767", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:05:13.117", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.04.24", + "versionEndExcluding": "23.04.26", + "matchCriteriaId": "17B674A2-8707-4DD3-A342-61776297310B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.19", + "versionEndExcluding": "23.10.21", + "matchCriteriaId": "4E034ACD-1F07-4E7A-B6A5-9CAF3738C425" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:24.04.9:*:*:*:*:*:*:*", + "matchCriteriaId": "66FBABD9-B739-4080-9C4D-A4D83325D96D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:24.10.3:*:*:*:*:*:*:*", + "matchCriteriaId": "E204FCCB-1F12-4BD5-9176-0C3C7E122B34" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4650.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4650.json index d11069aa0bc..9f42bf27de5 100644 --- a/CVE-2025/CVE-2025-46xx/CVE-2025-4650.json +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4650.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4650", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-08-22T19:15:38.980", - "lastModified": "2025-08-25T20:24:45.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:05:53.193", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.26", + "matchCriteriaId": "C26D15FD-EFFC-48FE-BC84-A518F91148DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.16", + "matchCriteriaId": "19652073-5857-4F6A-85E0-A2B35E36AA25" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.9", + "matchCriteriaId": "F1E5A4E9-BADF-463F-9632-200EFFDC8F36" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-4650-centreon-web-all-versions-high-severity-4901", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-477xx/CVE-2025-47730.json b/CVE-2025/CVE-2025-477xx/CVE-2025-47730.json index 8590578aa27..99f6830b6b1 100644 --- a/CVE-2025/CVE-2025-477xx/CVE-2025-47730.json +++ b/CVE-2025/CVE-2025-477xx/CVE-2025-47730.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47730", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-08T14:15:27.073", - "lastModified": "2025-05-08T14:39:09.683", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T14:53:23.387", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -58,22 +78,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:smarsh:telemessage:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-05-05", + "matchCriteriaId": "44FADD39-A519-4B77-920B-5BE3A93D7D33" + } + ] + } + ] + } + ], "references": [ { "url": "https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] }, { "url": "https://github.com/micahflee/TM-SGNL-Android/blob/bd7ccbb8bc79193fc4c57cae7cc1051e6250fa89/app/src/tm/java/org/archiver/ArchiveConstants.kt#L45-L46", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://news.ycombinator.com/item?id=43909220", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://www.theregister.com/2025/05/05/telemessage_investigating/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48082.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48082.json new file mode 100644 index 00000000000..3c1d6ed4d20 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48082.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48082", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.707", + "lastModified": "2025-10-22T15:15:33.707", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner allows Privilege Escalation.This issue affects Progress Planner: from n/a through <= 1.8.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/progress-planner/vulnerability/wordpress-progress-planner-plugin-1-8-0-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48091.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48091.json new file mode 100644 index 00000000000..01a4a07f4cb --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48091.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48091", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.840", + "lastModified": "2025-10-22T15:15:33.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/anycomment/vulnerability/wordpress-anycomment-plugin-0-3-6-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48092.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48092.json new file mode 100644 index 00000000000..ce77519f43d --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48092.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48092", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:33.963", + "lastModified": "2025-10-22T15:15:33.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jurajpuchky Fix Multiple Redirects fix-multiple-redirects allows Reflected XSS.This issue affects Fix Multiple Redirects: from n/a through <= 1.2.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/fix-multiple-redirects/vulnerability/wordpress-fix-multiple-redirects-plugin-1-2-3-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48093.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48093.json new file mode 100644 index 00000000000..b8e87851767 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48093.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48093", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.090", + "lastModified": "2025-10-22T15:15:34.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Calvaweb Password only login password-only-login allows Reflected XSS.This issue affects Password only login: from n/a through <= 0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/password-only-login/vulnerability/wordpress-password-only-login-plugin-0-2-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48095.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48095.json new file mode 100644 index 00000000000..c524c570057 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48095.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48095", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.210", + "lastModified": "2025-10-22T15:15:34.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/survey-maker/vulnerability/wordpress-survey-maker-plugin-5-1-8-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48096.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48096.json new file mode 100644 index 00000000000..5ba13b8784f --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48096.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48096", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.333", + "lastModified": "2025-10-22T15:15:34.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom CSS: from n/a through <= 1.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/custom-css-editor/vulnerability/wordpress-custom-css-plugin-1-4-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48097.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48097.json new file mode 100644 index 00000000000..0ff43f638ef --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48097.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48097", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.467", + "lastModified": "2025-10-22T15:15:34.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards allows Reflected XSS.This issue affects WSAnalytics: from n/a through <= 1.1.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wsanalytics-google-analytics-and-dashboards/vulnerability/wordpress-wsanalytics-plugin-1-1-2-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48098.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48098.json new file mode 100644 index 00000000000..1de22181ae8 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48098.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48098", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.600", + "lastModified": "2025-10-22T15:15:34.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/survey-maker/vulnerability/wordpress-survey-maker-plugin-5-1-8-8-cross-site-scripting-xss-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48099.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48099.json new file mode 100644 index 00000000000..a9e92b842b4 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48099.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48099", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.733", + "lastModified": "2025-10-22T15:15:34.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Code Amp Search & Filter search-filter allows Cross Site Request Forgery.This issue affects Search & Filter: from n/a through <= 1.2.17." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/search-filter/vulnerability/wordpress-search-filter-plugin-1-2-17-cross-site-request-forgery-csrf-to-open-redirect-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48106.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48106.json new file mode 100644 index 00000000000..4c60b4f6fb8 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48106.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48106", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:34.880", + "lastModified": "2025-10-22T15:15:34.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora allows Using Malicious Files.This issue affects Clanora: from n/a through < 1.3.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/clanora/vulnerability/wordpress-clanora-theme-1-3-1-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48338.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48338.json new file mode 100644 index 00000000000..fc4660b63d7 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48338.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48338", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.023", + "lastModified": "2025-10-22T15:15:35.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows PHP Local File Inclusion.This issue affects WP Abstracts: from n/a through <= 2.7.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-abstracts-manuscripts-manager/vulnerability/wordpress-wp-abstracts-plugin-2-7-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48925.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48925.json index 15434aa598f..f2c4ec3768a 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48925.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48925.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48925", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-28T17:15:24.450", - "lastModified": "2025-07-01T20:15:25.550", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:14:34.800", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -58,10 +78,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:smarsh:telemessage:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-05-05", + "matchCriteriaId": "44FADD39-A519-4B77-920B-5BE3A93D7D33" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48926.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48926.json index ba66150a15a..b00cfdee02e 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48926.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48926.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48926", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-28T17:15:24.663", - "lastModified": "2025-07-01T20:15:25.750", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:02:13.237", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -58,10 +78,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:smarsh:telemessage:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-05-05", + "matchCriteriaId": "44FADD39-A519-4B77-920B-5BE3A93D7D33" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48929.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48929.json index 2bfc3023404..042da6a077a 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48929.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48929.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48929", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-28T17:15:25.233", - "lastModified": "2025-07-01T20:15:25.920", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:01:11.703", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -56,12 +76,43 @@ "value": "CWE-922" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-613" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:smarsh:telemessage:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-05-05", + "matchCriteriaId": "44FADD39-A519-4B77-920B-5BE3A93D7D33" + } + ] + } + ] } ], "references": [ { "url": "https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48930.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48930.json index eef22b63b6d..82868322632 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48930.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48930.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48930", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-28T17:15:25.553", - "lastModified": "2025-07-01T20:15:26.093", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T14:43:34.500", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 1.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 } ] }, @@ -58,10 +78,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:smarsh:telemessage:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-05-05", + "matchCriteriaId": "44FADD39-A519-4B77-920B-5BE3A93D7D33" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Press/Media Coverage" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-490xx/CVE-2025-49060.json b/CVE-2025/CVE-2025-490xx/CVE-2025-49060.json new file mode 100644 index 00000000000..e400292acbc --- /dev/null +++ b/CVE-2025/CVE-2025-490xx/CVE-2025-49060.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49060", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.160", + "lastModified": "2025-10-22T15:15:35.160", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia wastia allows Upload a Web Shell to a Web Server.This issue affects Wastia: from n/a through < 1.1.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/wastia/vulnerability/wordpress-wastia-theme-1-1-3-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49373.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49373.json new file mode 100644 index 00000000000..eee6d1b1c9d --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49373.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49373", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.297", + "lastModified": "2025-10-22T15:15:35.297", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Cross Site Request Forgery.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/evergreen-content-poster/vulnerability/wordpress-evergreen-content-poster-plugin-1-4-5-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49374.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49374.json new file mode 100644 index 00000000000..696c92a02ed --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49374.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49374", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.447", + "lastModified": "2025-10-22T15:15:35.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in captcha.eu Captcha.eu captcha-eu allows Server Side Request Forgery.This issue affects Captcha.eu: from n/a through <= 1.0.61." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/captcha-eu/vulnerability/wordpress-captcha-eu-plugin-1-0-61-server-side-request-forgery-ssrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49376.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49376.json new file mode 100644 index 00000000000..9f14f2198a1 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49376.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49376", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.597", + "lastModified": "2025-10-22T15:15:35.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects DELUCKS SEO: from n/a through <= 2.5.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/delucks-seo/vulnerability/wordpress-delucks-seo-plugin-2-5-9-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49377.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49377.json new file mode 100644 index 00000000000..aa4d6fbadda --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49377.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49377", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.720", + "lastModified": "2025-10-22T15:15:35.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Themefic Hydra Booking hydra-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hydra Booking: from n/a through <= 1.1.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hydra-booking/vulnerability/wordpress-hydra-booking-plugin-1-1-9-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49378.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49378.json new file mode 100644 index 00000000000..2805d298459 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49378.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49378", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.840", + "lastModified": "2025-10-22T15:15:35.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hydra-booking/vulnerability/wordpress-hydra-booking-plugin-1-1-10-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49380.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49380.json new file mode 100644 index 00000000000..6cec9f3b6d2 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49380.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49380", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:35.967", + "lastModified": "2025-10-22T15:15:35.967", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in wpinstinct WooCommerce Vehicle Parts Finder woo-vehicle-parts-finder allows Object Injection.This issue affects WooCommerce Vehicle Parts Finder: from n/a through <= 3.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woo-vehicle-parts-finder/vulnerability/wordpress-woocommerce-vehicle-parts-finder-plugin-3-7-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49899.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49899.json new file mode 100644 index 00000000000..19d473f4b38 --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49899.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49899", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.110", + "lastModified": "2025-10-22T15:15:36.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-whydonate/vulnerability/wordpress-whydonate-plugin-4-0-15-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49901.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49901.json new file mode 100644 index 00000000000..c5d5e957027 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49901.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49901", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.243", + "lastModified": "2025-10-22T15:15:36.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-14-8-1-broken-authentication-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49903.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49903.json new file mode 100644 index 00000000000..6ce02a0b259 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49903.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49903", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.377", + "lastModified": "2025-10-22T15:15:36.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through <= 2.3.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-11-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49906.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49906.json new file mode 100644 index 00000000000..4e68535dd75 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49906.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49906", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.503", + "lastModified": "2025-10-22T15:15:36.503", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through <= 2.9.5.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpcomplete/vulnerability/wordpress-wpcomplete-plugin-2-9-5-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49907.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49907.json new file mode 100644 index 00000000000..077b2d64b38 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49907.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49907", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.643", + "lastModified": "2025-10-22T15:15:36.643", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.3.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-3-3-9-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49908.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49908.json new file mode 100644 index 00000000000..d646ebb2f7f --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49908.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49908", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.777", + "lastModified": "2025-10-22T15:15:36.777", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Countdown Timer for WooCommerce wpc-countdown-timer allows Stored XSS.This issue affects WPC Countdown Timer for WooCommerce: from n/a through <= 3.1.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpc-countdown-timer/vulnerability/wordpress-wpc-countdown-timer-for-woocommerce-plugin-3-1-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49910.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49910.json new file mode 100644 index 00000000000..a35a7c437e8 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49910.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49910", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:36.913", + "lastModified": "2025-10-22T15:15:36.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: from n/a through <= 1.1.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpguppy-lite/vulnerability/wordpress-wpguppy-plugin-1-1-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49911.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49911.json new file mode 100644 index 00000000000..eb2001f4902 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49911.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49911", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.043", + "lastModified": "2025-10-22T15:15:37.043", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpinstinct WooCommerce Vehicle Parts Finder woo-vehicle-parts-finder allows Reflected XSS.This issue affects WooCommerce Vehicle Parts Finder: from n/a through <= 3.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woo-vehicle-parts-finder/vulnerability/wordpress-woocommerce-vehicle-parts-finder-plugin-3-7-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49912.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49912.json new file mode 100644 index 00000000000..9e0a3a6cf56 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49912.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49912", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.183", + "lastModified": "2025-10-22T15:15:37.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through <= 1.2.26." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/email-subscribe/vulnerability/wordpress-email-subscription-popup-plugin-1-2-26-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49913.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49913.json new file mode 100644 index 00000000000..9e334e0831c --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49913.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49913", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.317", + "lastModified": "2025-10-22T15:15:37.317", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/coschedule-by-todaymade/vulnerability/wordpress-coschedule-plugin-3-4-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49915.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49915.json new file mode 100644 index 00000000000..9b5e1bf6895 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49915.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49915", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.440", + "lastModified": "2025-10-22T15:15:37.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows SQL Injection.This issue affects SMS Alert Order Notifications: from n/a through <= 3.8.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-3-8-5-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49916.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49916.json new file mode 100644 index 00000000000..09b65828e3c --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49916.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49916", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.573", + "lastModified": "2025-10-22T15:15:37.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through <= 4.2.23." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/dc-woocommerce-multi-vendor/vulnerability/wordpress-multivendorx-plugin-4-2-23-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49917.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49917.json new file mode 100644 index 00000000000..fb964d2d7d8 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49917.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49917", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.693", + "lastModified": "2025-10-22T15:15:37.693", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Server Side Request Forgery.This issue affects Icegram Express Pro: from n/a through <= 5.9.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/email-subscribers-premium/vulnerability/wordpress-icegram-express-pro-plugin-5-9-5-server-side-request-forgery-ssrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49920.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49920.json new file mode 100644 index 00000000000..df54ae22c38 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49920.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49920", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.817", + "lastModified": "2025-10-22T15:15:37.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Web Accessibility By accessiBe: from n/a through <= 2.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/accessibe/vulnerability/wordpress-web-accessibility-by-accessibe-plugin-2-10-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49921.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49921.json new file mode 100644 index 00000000000..eba406059e3 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49921.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49921", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:37.943", + "lastModified": "2025-10-22T15:15:37.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CrocoBlock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through <= 3.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-reviews/vulnerability/wordpress-jetreviews-plugin-3-0-0-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49922.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49922.json new file mode 100644 index 00000000000..41ae0e4822e --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49922.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49922", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.073", + "lastModified": "2025-10-22T15:15:38.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPeMatico RSS Feed Fetcher: from n/a through <= 2.8.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpematico/vulnerability/wordpress-wpematico-rss-feed-fetcher-plugin-2-8-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49923.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49923.json new file mode 100644 index 00000000000..96d2e032008 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49923.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49923", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.193", + "lastModified": "2025-10-22T15:15:38.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-11-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49924.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49924.json new file mode 100644 index 00000000000..adfa9c16055 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49924.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49924", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.327", + "lastModified": "2025-10-22T15:15:38.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-4-2-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49925.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49925.json new file mode 100644 index 00000000000..374fd375b4a --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49925.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49925", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.460", + "lastModified": "2025-10-22T15:15:38.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wplms_plugin/vulnerability/wordpress-wplms-plugin-1-9-9-7-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49926.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49926.json new file mode 100644 index 00000000000..d80e172f623 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49926.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49926", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.583", + "lastModified": "2025-10-22T15:15:38.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through <= 3.25." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-25-arbitrary-code-execution-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49927.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49927.json new file mode 100644 index 00000000000..410a69ee40b --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49927.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49927", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.723", + "lastModified": "2025-10-22T15:15:38.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-plugin-2-1-20-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49928.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49928.json new file mode 100644 index 00000000000..9db405028a7 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49928.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49928", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.850", + "lastModified": "2025-10-22T15:15:38.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-plugin-2-1-20-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49929.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49929.json new file mode 100644 index 00000000000..a95bb933fe4 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49929.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49929", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:38.970", + "lastModified": "2025-10-22T15:15:38.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through <= 3.3.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/ultimate-blocks/vulnerability/wordpress-ultimate-blocks-plugin-3-3-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49930.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49930.json new file mode 100644 index 00000000000..8bfb7579d6e --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49930.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49930", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.103", + "lastModified": "2025-10-22T15:15:39.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-5-10-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49931.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49931.json new file mode 100644 index 00000000000..ca0a74c6f69 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49931.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49931", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.227", + "lastModified": "2025-10-22T15:15:39.227", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrocoBlock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through <= 3.5.10." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-5-10-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49932.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49932.json new file mode 100644 index 00000000000..7cce512a7f2 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49932.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49932", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.350", + "lastModified": "2025-10-22T15:15:39.350", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blog/vulnerability/wordpress-jetblog-plugin-2-4-4-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49933.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49933.json new file mode 100644 index 00000000000..f2e54cd53b3 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49933.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49933", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.477", + "lastModified": "2025-10-22T15:15:39.477", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through <= 2.4.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blog/vulnerability/wordpress-jetblog-plugin-2-4-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49934.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49934.json new file mode 100644 index 00000000000..7aefe96e754 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49934.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49934", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.617", + "lastModified": "2025-10-22T15:15:39.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through <= 1.3.18." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blocks/vulnerability/wordpress-jetblocks-for-elementor-plugin-1-3-18-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49935.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49935.json new file mode 100644 index 00000000000..cd758f3c1b0 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49935.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49935", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.750", + "lastModified": "2025-10-22T15:15:39.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through < 8.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/woodmart/vulnerability/wordpress-woodmart-theme-8-3-2-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49936.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49936.json new file mode 100644 index 00000000000..f03a2962980 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49936.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49936", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:39.883", + "lastModified": "2025-10-22T15:15:39.883", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through < 8.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/woodmart/vulnerability/wordpress-woodmart-theme-8-3-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49937.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49937.json new file mode 100644 index 00000000000..47633f6d884 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49937.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49937", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.023", + "lastModified": "2025-10-22T15:15:40.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smash Balloon Social Post Feed: from n/a through <= 4.3.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/custom-facebook-feed/vulnerability/wordpress-smash-balloon-social-post-feed-plugin-4-3-2-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49938.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49938.json new file mode 100644 index 00000000000..9d6495ceaef --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49938.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49938", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.157", + "lastModified": "2025-10-22T15:15:40.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-7-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49939.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49939.json new file mode 100644 index 00000000000..9d1baa3d54f --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49939.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49939", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.293", + "lastModified": "2025-10-22T15:15:40.293", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49940.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49940.json new file mode 100644 index 00000000000..78b4253b08b --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49940.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49940", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.420", + "lastModified": "2025-10-22T15:15:40.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows DOM-Based XSS.This issue affects Fusion Builder: from n/a through <= 3.13.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/fusion-builder/vulnerability/wordpress-fusion-builder-plugin-3-13-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49944.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49944.json new file mode 100644 index 00000000000..95e14329b1e --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49944.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49944", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.570", + "lastModified": "2025-10-22T15:15:40.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonatan Jumbert WPCode Content Ratio wpcode-content-ratio allows Reflected XSS.This issue affects WPCode Content Ratio: from n/a through <= 2.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpcode-content-ratio/vulnerability/wordpress-wpcode-content-ratio-plugin-2-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49945.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49945.json new file mode 100644 index 00000000000..f74d4fa592f --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49945.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49945", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.713", + "lastModified": "2025-10-22T15:15:40.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kylegetson Shortcode Generator shortcode-generator allows Reflected XSS.This issue affects Shortcode Generator: from n/a through <= 1.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/shortcode-generator/vulnerability/wordpress-shortcode-generator-plugin-1-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49946.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49946.json new file mode 100644 index 00000000000..9b2584facf1 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49946.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49946", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.840", + "lastModified": "2025-10-22T15:15:40.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through <= 1.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/auto-login-after-registration/vulnerability/wordpress-auto-login-after-registration-plugin-1-0-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49947.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49947.json new file mode 100644 index 00000000000..c413b28e7ba --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49947.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49947", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:40.963", + "lastModified": "2025-10-22T15:15:40.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected XSS.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields: from n/a through <= 3.2.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/extendons-registration-fields/vulnerability/wordpress-woocommerce-registration-fields-plugin-custom-signup-fields-plugin-3-2-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49948.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49948.json new file mode 100644 index 00000000000..e7e90aa1264 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49948.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49948", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.107", + "lastModified": "2025-10-22T15:15:41.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad Awais WP Super Edit wp-super-edit allows Reflected XSS.This issue affects WP Super Edit: from n/a through <= 2.5.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-super-edit/vulnerability/wordpress-wp-super-edit-plugin-2-5-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49949.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49949.json new file mode 100644 index 00000000000..e3e7eb0ce32 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49949.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49949", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.250", + "lastModified": "2025-10-22T15:15:41.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templazee: from n/a through <= 1.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/templazee/vulnerability/wordpress-templazee-plugin-1-0-2-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49950.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49950.json new file mode 100644 index 00000000000..2b2d5c4fe18 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49950.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49950", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.373", + "lastModified": "2025-10-22T15:15:41.373", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through <= 4.2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/billingo/vulnerability/wordpress-official-integration-for-billingo-plugin-4-2-5-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49951.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49951.json new file mode 100644 index 00000000000..492e207f198 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49951.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49951", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.497", + "lastModified": "2025-10-22T15:15:41.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcrunch gAppointments gAppointments allows Reflected XSS.This issue affects gAppointments: from n/a through <= 1.14.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/gAppointments/vulnerability/wordpress-gappointments-plugin-1-14-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49952.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49952.json new file mode 100644 index 00000000000..643799162cd --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49952.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49952", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.620", + "lastModified": "2025-10-22T15:15:41.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Houzez: from n/a through <= 4.1.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/houzez/vulnerability/wordpress-houzez-theme-4-1-1-insecure-direct-object-references-idor-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49953.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49953.json new file mode 100644 index 00000000000..8a8b78a395a --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49953.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49953", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.747", + "lastModified": "2025-10-22T15:15:41.747", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeinity ShareBang, Ultimate Social Share Buttons for WordPress sharebang allows Reflected XSS.This issue affects ShareBang, Ultimate Social Share Buttons for WordPress: from n/a through <= 1.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sharebang/vulnerability/wordpress-sharebang-ultimate-social-share-buttons-for-wordpress-plugin-1-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49954.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49954.json new file mode 100644 index 00000000000..f05bb7336d4 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49954.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49954", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:41.873", + "lastModified": "2025-10-22T15:15:41.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through <= 0.7.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-click-track/vulnerability/wordpress-wp-click-tracker-plugin-0-7-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49955.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49955.json new file mode 100644 index 00000000000..94e32a283be --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49955.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49955", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.013", + "lastModified": "2025-10-22T15:15:42.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rajan Vijayan WP Smart Flexslider wp-smart-flexslider allows Reflected XSS.This issue affects WP Smart Flexslider: from n/a through <= 2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-smart-flexslider/vulnerability/wordpress-wp-smart-flexslider-plugin-2-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49956.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49956.json new file mode 100644 index 00000000000..260a8ba0f53 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49956.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49956", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.140", + "lastModified": "2025-10-22T15:15:42.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through <= 2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/fade-slider/vulnerability/wordpress-fade-slider-plugin-2-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49957.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49957.json new file mode 100644 index 00000000000..9d4f05a33e5 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49957.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49957", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.270", + "lastModified": "2025-10-22T15:15:42.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status & Products: from n/a through <= 1.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/email-attachment-by-order-status-products/vulnerability/wordpress-email-attachment-by-order-status-products-plugin-1-0-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49958.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49958.json new file mode 100644 index 00000000000..8942d4c358f --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49958.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49958", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.410", + "lastModified": "2025-10-22T15:15:42.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robokassa Robokassa payment gateway for Woocommerce robokassa allows Reflected XSS.This issue affects Robokassa payment gateway for Woocommerce: from n/a through <= 1.8.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/robokassa/vulnerability/wordpress-robokassa-payment-gateway-for-woocommerce-plugin-1-7-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49959.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49959.json new file mode 100644 index 00000000000..c24055ca33b --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49959.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49959", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.567", + "lastModified": "2025-10-22T15:15:42.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Casier bbPress Move Topics bbp-move-topics allows Reflected XSS.This issue affects bbPress Move Topics: from n/a through <= 1.1.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/bbp-move-topics/vulnerability/wordpress-bbpress-move-topics-plugin-1-1-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49960.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49960.json new file mode 100644 index 00000000000..62b8d084454 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49960.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49960", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.720", + "lastModified": "2025-10-22T15:15:42.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leadbi LeadBI Plugin for WordPress leadbi allows Stored XSS.This issue affects LeadBI Plugin for WordPress: from n/a through <= 1.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/leadbi/vulnerability/wordpress-leadbi-plugin-for-wordpress-plugin-1-7-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49961.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49961.json new file mode 100644 index 00000000000..9f1dc7887b9 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49961.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49961", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:42.873", + "lastModified": "2025-10-22T15:15:42.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze Checkout: from n/a through <= 1.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/breeze-checkout/vulnerability/wordpress-breeze-checkout-plugin-1-4-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49962.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49962.json new file mode 100644 index 00000000000..48dff150cfa --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49962.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49962", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.027", + "lastModified": "2025-10-22T15:15:43.027", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in useStrict bbPress Notify bbpress-notify-nospam allows Reflected XSS.This issue affects bbPress Notify: from n/a through <= 2.19.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/bbpress-notify-nospam/vulnerability/wordpress-bbpress-notify-plugin-2-19-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49963.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49963.json new file mode 100644 index 00000000000..5cd5fabebf7 --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49963.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49963", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.157", + "lastModified": "2025-10-22T15:15:43.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in growniche Simple Stripe Checkout simple-stripe-checkout allows Reflected XSS.This issue affects Simple Stripe Checkout: from n/a through <= 1.1.28." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-stripe-checkout/vulnerability/wordpress-simple-stripe-checkout-plugin-1-1-28-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-499xx/CVE-2025-49992.json b/CVE-2025/CVE-2025-499xx/CVE-2025-49992.json new file mode 100644 index 00000000000..4f1947ed48d --- /dev/null +++ b/CVE-2025/CVE-2025-499xx/CVE-2025-49992.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-49992", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.280", + "lastModified": "2025-10-22T15:15:43.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress Export Import learnpress-import-export allows Reflected XSS.This issue affects LearnPress Export Import: from n/a through <= 4.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/learnpress-import-export/vulnerability/wordpress-learnpress-export-import-plugin-4-0-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-500xx/CVE-2025-50074.json b/CVE-2025/CVE-2025-500xx/CVE-2025-50074.json index 4a9aa786a30..67af05432cb 100644 --- a/CVE-2025/CVE-2025-500xx/CVE-2025-50074.json +++ b/CVE-2025/CVE-2025-500xx/CVE-2025-50074.json @@ -2,7 +2,7 @@ "id": "CVE-2025-50074", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.000", - "lastModified": "2025-10-21T20:20:40.000", + "lastModified": "2025-10-22T14:15:50.303", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-500xx/CVE-2025-50075.json b/CVE-2025/CVE-2025-500xx/CVE-2025-50075.json index 23a04e124e4..729dcaea8b4 100644 --- a/CVE-2025/CVE-2025-500xx/CVE-2025-50075.json +++ b/CVE-2025/CVE-2025-500xx/CVE-2025-50075.json @@ -2,7 +2,7 @@ "id": "CVE-2025-50075", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.173", - "lastModified": "2025-10-21T20:20:40.173", + "lastModified": "2025-10-22T14:15:50.437", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52734.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52734.json new file mode 100644 index 00000000000..6aee36f5dc4 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52734.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52734", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.410", + "lastModified": "2025-10-22T15:15:43.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ERA404 CropRefine croprefine allows Reflected XSS.This issue affects CropRefine: from n/a through <= 1.2.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/croprefine/vulnerability/wordpress-croprefine-plugin-1-2-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52735.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52735.json new file mode 100644 index 00000000000..6fcbcf565e8 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52735.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52735", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.563", + "lastModified": "2025-10-22T15:15:43.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through <= 2.21.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woo-thank-you-page-nextmove-lite/vulnerability/wordpress-nextmove-lite-plugin-2-20-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52736.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52736.json new file mode 100644 index 00000000000..1723234a90e --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52736.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52736", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.713", + "lastModified": "2025-10-22T15:15:43.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Finale Lite finale-woocommerce-sales-countdown-timer-discount allows Reflected XSS.This issue affects Finale Lite: from n/a through <= 2.20.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/finale-woocommerce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-plugin-2-20-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52737.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52737.json new file mode 100644 index 00000000000..ada44d88650 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52737.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52737", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.837", + "lastModified": "2025-10-22T15:15:43.837", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator allows Object Injection.This issue affects WP Store Locator: from n/a through <= 2.2.260." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-store-locator/vulnerability/wordpress-wp-store-locator-plugin-2-2-260-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52738.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52738.json new file mode 100644 index 00000000000..7602be67d0a --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52738.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52738", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:43.960", + "lastModified": "2025-10-22T15:15:43.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wikipedia Preview: from n/a through <= 1.15.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wikipedia-preview/vulnerability/wordpress-wikipedia-preview-plugin-1-15-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52740.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52740.json new file mode 100644 index 00000000000..91a6c03779f --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52740.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52740", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.087", + "lastModified": "2025-10-22T15:15:44.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows Object Injection.This issue affects Boldermail: from n/a through <= 2.4.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/boldermail/vulnerability/wordpress-boldermail-plugin-2-4-0-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52741.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52741.json new file mode 100644 index 00000000000..b2dd4ba986b --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52741.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52741", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.213", + "lastModified": "2025-10-22T15:15:44.213", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through <= 1.0.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/post-connector/vulnerability/wordpress-post-connector-plugin-1-0-11-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52742.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52742.json new file mode 100644 index 00000000000..79b00d9e992 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52742.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52742", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.340", + "lastModified": "2025-10-22T15:15:44.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through <= 1.4.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/pets/vulnerability/wordpress-pets-plugin-1-4-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52743.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52743.json new file mode 100644 index 00000000000..54ae1025bc1 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52743.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52743", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.467", + "lastModified": "2025-10-22T15:15:44.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through <= 1.4.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/oik-privacy-policy/vulnerability/wordpress-oik-privacy-policy-plugin-1-4-9-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52748.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52748.json new file mode 100644 index 00000000000..528fb17f714 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52748.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52748", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.593", + "lastModified": "2025-10-22T15:15:44.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through <= 2.5.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/directory-pro/vulnerability/wordpress-directory-pro-plugin-2-5-5-cross-site-scripting-xss-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52749.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52749.json new file mode 100644 index 00000000000..9d13f432f29 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52749.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52749", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.710", + "lastModified": "2025-10-22T15:15:44.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Activity Track Uji Countdown uji-countdown allows Reflected XSS.This issue affects Uji Countdown: from n/a through <= 2.3.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/uji-countdown/vulnerability/wordpress-uji-countdown-plugin-2-3-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52750.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52750.json new file mode 100644 index 00000000000..6365e9b7b3d --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52750.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52750", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.827", + "lastModified": "2025-10-22T15:15:44.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juergen Schulze Emu2 emu2-email-users-2 allows Reflected XSS.This issue affects Emu2: from n/a through <= 0.83b." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/emu2-email-users-2/vulnerability/wordpress-emu2-plugin-0-83b-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52751.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52751.json new file mode 100644 index 00000000000..6f2b4b64964 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52751.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52751", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:44.947", + "lastModified": "2025-10-22T15:15:44.947", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colome Slide Puzzle slide-puzzle allows Reflected XSS.This issue affects Slide Puzzle: from n/a through <= 1.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/slide-puzzle/vulnerability/wordpress-slide-puzzle-plugin-1-0-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52752.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52752.json new file mode 100644 index 00000000000..8b6d37952e4 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52752.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52752", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.070", + "lastModified": "2025-10-22T15:15:45.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through <= 2.1.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-9-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52753.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52753.json new file mode 100644 index 00000000000..47c708c0f1b --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52753.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52753", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.190", + "lastModified": "2025-10-22T15:15:45.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Reflected XSS.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.35." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52754.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52754.json new file mode 100644 index 00000000000..991b6ca5de2 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52754.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52754", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.313", + "lastModified": "2025-10-22T15:15:45.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in selloio Sello ChannelConnector sello-channelconnector allows Reflected XSS.This issue affects Sello ChannelConnector: from n/a through <= 1.6.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sello-channelconnector/vulnerability/wordpress-sello-channelconnector-plugin-1-6-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52755.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52755.json new file mode 100644 index 00000000000..ccb3899936d --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52755.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52755", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.440", + "lastModified": "2025-10-22T15:15:45.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Taylor Child Themes child-themes allows Reflected XSS.This issue affects Child Themes: from n/a through <= 1.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/child-themes/vulnerability/wordpress-child-themes-plugin-1-0-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52756.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52756.json new file mode 100644 index 00000000000..256d0a50ad0 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52756.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52756", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.563", + "lastModified": "2025-10-22T15:15:45.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Remote Code Inclusion.This issue affects WP Last Modified Info: from n/a through <= 1.9.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-last-modified-info/vulnerability/wordpress-wp-last-modified-info-plugin-1-9-2-remote-code-execution-rce-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52757.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52757.json new file mode 100644 index 00000000000..9f33bc11b5e --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52757.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52757", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.687", + "lastModified": "2025-10-22T15:15:45.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-arbitrary-content-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52758.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52758.json new file mode 100644 index 00000000000..914f1a7cadd --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52758.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52758", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.813", + "lastModified": "2025-10-22T15:15:45.813", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through <= 1.7.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/zippy/vulnerability/wordpress-zippy-plugin-1-7-0-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52760.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52760.json new file mode 100644 index 00000000000..adb54136e15 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52760.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52760", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:45.937", + "lastModified": "2025-10-22T15:15:45.937", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Globalis MultiSite Clone Duplicator multisite-clone-duplicator allows Reflected XSS.This issue affects MultiSite Clone Duplicator: from n/a through <= 1.5.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/multisite-clone-duplicator/vulnerability/wordpress-multisite-clone-duplicator-plugin-1-5-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52763.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52763.json new file mode 100644 index 00000000000..99ab52b9314 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52763.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52763", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:46.063", + "lastModified": "2025-10-22T15:15:46.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NickDuncan Nifty Backups nifty-backups allows Reflected XSS.This issue affects Nifty Backups: from n/a through <= 1.08." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/nifty-backups/vulnerability/wordpress-nifty-backups-plugin-1-08-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-527xx/CVE-2025-52770.json b/CVE-2025/CVE-2025-527xx/CVE-2025-52770.json new file mode 100644 index 00000000000..8415c5d6123 --- /dev/null +++ b/CVE-2025/CVE-2025-527xx/CVE-2025-52770.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-52770", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:46.197", + "lastModified": "2025-10-22T15:15:46.197", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through <= 2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hellofollowers/vulnerability/wordpress-hello-followers-plugin-2-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53034.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53034.json index ba40d4eb3bb..46a8d5a1a2e 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53034.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53034.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53034", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.487", - "lastModified": "2025-10-21T20:20:40.487", + "lastModified": "2025-10-22T15:15:46.327", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53035.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53035.json index 665f1165c65..f4f653b2fd7 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53035.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53035.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53035", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.650", - "lastModified": "2025-10-21T20:20:40.650", + "lastModified": "2025-10-22T15:15:46.453", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53036.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53036.json index 6999c63e872..c8d1d3efc56 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53036.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53036.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53036", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.803", - "lastModified": "2025-10-21T20:20:40.803", + "lastModified": "2025-10-22T15:15:46.580", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53037.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53037.json index 467b6d41195..c0718540a14 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53037.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53037.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53037", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:40.993", - "lastModified": "2025-10-21T20:20:40.993", + "lastModified": "2025-10-22T15:15:46.740", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53040.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53040.json index 8a158cf5d6f..6514eb0c3c8 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53040.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53040.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53040", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:41.140", - "lastModified": "2025-10-21T20:20:41.140", + "lastModified": "2025-10-22T15:15:46.877", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53041.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53041.json index 02295e6b532..3b223bc7626 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53041.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53041.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53041", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:41.273", - "lastModified": "2025-10-21T20:20:41.273", + "lastModified": "2025-10-22T15:15:47.057", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53056.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53056.json index 697cfa832ab..f506843d90d 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53056.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53056.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53056", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:44.783", - "lastModified": "2025-10-21T20:20:44.783", + "lastModified": "2025-10-22T14:15:50.567", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53057.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53057.json index 080db5fb8d0..60bdf5a2203 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53057.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53057.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53057", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:45.240", - "lastModified": "2025-10-21T20:20:45.240", + "lastModified": "2025-10-22T15:15:47.207", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53058.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53058.json index 8b8ee19142c..93f822b7441 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53058.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53058.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53058", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:45.487", - "lastModified": "2025-10-21T20:20:45.487", + "lastModified": "2025-10-22T15:15:47.347", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53059.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53059.json index e4c77a4e9cd..3a4c7b43d7a 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53059.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53059.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53059", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:45.663", - "lastModified": "2025-10-21T20:20:45.663", + "lastModified": "2025-10-22T15:15:47.477", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53060.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53060.json index 08b68319599..ade49fa31a4 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53060.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53060.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53060", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:45.800", - "lastModified": "2025-10-21T20:20:45.800", + "lastModified": "2025-10-22T15:15:47.603", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53061.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53061.json index b8d1ea4d89d..13b95c936e4 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53061.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53061.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53061", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:46.207", - "lastModified": "2025-10-21T20:20:46.207", + "lastModified": "2025-10-22T15:15:47.750", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-530xx/CVE-2025-53062.json b/CVE-2025/CVE-2025-530xx/CVE-2025-53062.json index 3d7da8abd91..b6298cffc38 100644 --- a/CVE-2025/CVE-2025-530xx/CVE-2025-53062.json +++ b/CVE-2025/CVE-2025-530xx/CVE-2025-53062.json @@ -2,7 +2,7 @@ "id": "CVE-2025-53062", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:46.377", - "lastModified": "2025-10-21T20:20:46.377", + "lastModified": "2025-10-22T15:15:47.887", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53218.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53218.json new file mode 100644 index 00000000000..68d7cffd10c --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53218.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53218", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.020", + "lastModified": "2025-10-22T15:15:48.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/appexperts/vulnerability/wordpress-appexperts-plugin-1-4-5-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53229.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53229.json new file mode 100644 index 00000000000..f68f3e6263e --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53229.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53229", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.157", + "lastModified": "2025-10-22T15:15:48.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav RockON DJ rockon allows Reflected XSS.This issue affects RockON DJ: from n/a through <= 3.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/rockon/vulnerability/wordpress-rockon-dj-theme-3-3-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53232.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53232.json new file mode 100644 index 00000000000..7e2d6a67006 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53232.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53232", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.277", + "lastModified": "2025-10-22T15:15:48.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gmail-smtp/vulnerability/wordpress-wp-gmail-smtp-plugin-1-0-7-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53234.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53234.json new file mode 100644 index 00000000000..a1fb7bf1fa8 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53234.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53234", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.397", + "lastModified": "2025-10-22T15:15:48.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through <= 4.14.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53236.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53236.json new file mode 100644 index 00000000000..40fd00b9a43 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53236.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53236", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.520", + "lastModified": "2025-10-22T15:15:48.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through <= 4.14.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53238.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53238.json new file mode 100644 index 00000000000..f8f0f3a41c5 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53238.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53238", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.663", + "lastModified": "2025-10-22T15:15:48.663", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Toast Mobile Menu toast-responsive-menu allows Stored XSS.This issue affects Toast Mobile Menu: from n/a through <= 1.0.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/toast-responsive-menu/vulnerability/wordpress-toast-mobile-menu-plugin-1-0-7-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53297.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53297.json new file mode 100644 index 00000000000..4f0eacdf75e --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53297.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53297", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.793", + "lastModified": "2025-10-22T15:15:48.793", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through <= 1.2.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wooenvato/vulnerability/wordpress-woocommerce-envato-affiliates-plugin-1-2-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53350.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53350.json new file mode 100644 index 00000000000..053a67f00ee --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53350.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53350", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:48.927", + "lastModified": "2025-10-22T15:15:48.927", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjunk Calendar Plus calendar-plus allows Reflected XSS.This issue affects Calendar Plus: from n/a through <= 1.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/calendar-plus/vulnerability/wordpress-calendar-plus-plugin-1-2-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53351.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53351.json new file mode 100644 index 00000000000..329eb6de1b1 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53351.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53351", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.057", + "lastModified": "2025-10-22T15:15:49.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fidelo Software GmbH Fidelo Snippet thebing-snippet allows Reflected XSS.This issue affects Fidelo Snippet: from n/a through <= 1.12." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/thebing-snippet/vulnerability/wordpress-fidelo-snippet-plugin-1-12-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53352.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53352.json new file mode 100644 index 00000000000..62340e05f73 --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53352.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53352", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.183", + "lastModified": "2025-10-22T15:15:49.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through <= 3.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/grid-plus/vulnerability/wordpress-grid-plus-plugin-3-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53420.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53420.json new file mode 100644 index 00000000000..6fa24ae4e81 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53420.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53420", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.310", + "lastModified": "2025-10-22T15:15:49.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wplms_plugin/vulnerability/wordpress-wplms-plugin-1-9-9-7-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53421.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53421.json new file mode 100644 index 00000000000..4c3b25ac20c --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53421.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53421", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.437", + "lastModified": "2025-10-22T15:15:49.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through <= 2.3.14." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/accordions/vulnerability/wordpress-accordion-plugin-2-3-14-broken-access-control-vulnerability-2", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53422.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53422.json new file mode 100644 index 00000000000..d8c2ee8148a --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53422.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53422", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.563", + "lastModified": "2025-10-22T15:15:49.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeWarriors WhatsApp Chat for WordPress and WooCommerce tw-whatsapp-chat-rotator allows Reflected XSS.This issue affects WhatsApp Chat for WordPress and WooCommerce: from n/a through <= 1.2.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/tw-whatsapp-chat-rotator/vulnerability/wordpress-whatsapp-chat-for-wordpress-and-woocommerce-plugin-1-2-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53423.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53423.json new file mode 100644 index 00000000000..73157d08dc0 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53423.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53423", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:49.700", + "lastModified": "2025-10-22T15:15:49.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Triss triss allows Reflected XSS.This issue affects Triss: from n/a through <= 2.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/triss/vulnerability/wordpress-triss-theme-2-6-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53424.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53424.json new file mode 100644 index 00000000000..934a406aaa4 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53424.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53424", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:50.727", + "lastModified": "2025-10-22T15:15:50.727", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through <= 5.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-orders-ei/vulnerability/wordpress-woocommerce-orders-customers-exporter-plugin-5-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53425.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53425.json new file mode 100644 index 00000000000..3cdbd9bad69 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53425.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53425", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:50.863", + "lastModified": "2025-10-22T15:15:50.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through <= 4.1.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/dokan-lite/vulnerability/wordpress-dokan-plugin-4-0-8-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53426.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53426.json new file mode 100644 index 00000000000..0ab9b0dca6d --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53426.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53426", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:50.993", + "lastModified": "2025-10-22T15:15:50.993", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through <= 0.8.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/likert-survey-master/vulnerability/wordpress-likert-survey-master-plugin-0-8-0-1-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53427.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53427.json new file mode 100644 index 00000000000..924e97c9073 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53427.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53427", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:51.143", + "lastModified": "2025-10-22T15:15:51.143", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chibueze Okechukwu SEO Pyramid seo-pyramid allows Reflected XSS.This issue affects SEO Pyramid: from n/a through <= 1.9.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/seo-pyramid/vulnerability/wordpress-seo-pyramid-plugin-1-9-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-534xx/CVE-2025-53428.json b/CVE-2025/CVE-2025-534xx/CVE-2025-53428.json new file mode 100644 index 00000000000..13f1a918351 --- /dev/null +++ b/CVE-2025/CVE-2025-534xx/CVE-2025-53428.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-53428", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:51.323", + "lastModified": "2025-10-22T15:15:51.323", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Registration: from n/a through <= 6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-registration/vulnerability/wordpress-simple-user-registration-plugin-6-4-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json index 75423ad0c28..b4ca45b11e5 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54286.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54286", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:38.427", - "lastModified": "2025-10-02T19:11:46.753", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:47:31.957", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,67 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.0", + "versionEndExcluding": "5.0.5", + "matchCriteriaId": "2AAD226D-C742-4760-9F7E-88F73AFA90DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.21.0", + "versionEndExcluding": "5.21.4", + "matchCriteriaId": "873DE516-61FD-46A3-8C62-C9665C4A8563" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.5", + "matchCriteriaId": "CCADB2F1-F122-4A17-88DD-F3FDD4ED796B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h", - "source": "security@ubuntu.com" + "source": "security@ubuntu.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json index b663491eb21..d2191eab915 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54287.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54287", "sourceIdentifier": "security@ubuntu.com", "published": "2025-10-02T10:15:38.707", - "lastModified": "2025-10-02T19:11:46.753", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:39:01.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,14 +91,60 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0.0", + "versionEndExcluding": "5.21.4", + "matchCriteriaId": "FE33A015-C527-4726-8CBE-6EC6420B8933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.5", + "matchCriteriaId": "CCADB2F1-F122-4A17-88DD-F3FDD4ED796B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6", - "source": "security@ubuntu.com" + "source": "security@ubuntu.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54892.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54892.json index d68cb83f6c5..7f224c858ea 100644 --- a/CVE-2025/CVE-2025-548xx/CVE-2025-54892.json +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54892.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54892", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T15:16:10.250", - "lastModified": "2025-10-15T14:15:51.073", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:08:08.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-54892-centreon-web-all-versions-medium-severity-5121", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54893.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54893.json index 83e918fcf67..d015d389edf 100644 --- a/CVE-2025/CVE-2025-548xx/CVE-2025-54893.json +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54893.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54893", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T16:15:39.507", - "lastModified": "2025-10-15T14:15:51.183", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:09:19.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-54893-centreon-web-all-versions-medium-severity-5120", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-564xx/CVE-2025-56447.json b/CVE-2025/CVE-2025-564xx/CVE-2025-56447.json new file mode 100644 index 00000000000..335c1d7cbeb --- /dev/null +++ b/CVE-2025/CVE-2025-564xx/CVE-2025-56447.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-56447", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-22T14:15:50.693", + "lastModified": "2025-10-22T15:15:51.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + }, + { + "lang": "en", + "value": "CWE-319" + } + ] + } + ], + "references": [ + { + "url": "http://rt.com", + "source": "cve@mitre.org" + }, + { + "url": "http://tm2.com", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/stSLAYER/b0be1f0fe95f56c08ef2bd69f40cd817", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/stSLAYER/ZeroDayVulnerabilities-/blob/main/RT-Systems/POC/README.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-565xx/CVE-2025-56588.json b/CVE-2025/CVE-2025-565xx/CVE-2025-56588.json index 0c6db8bdfd1..d084e0f4b29 100644 --- a/CVE-2025/CVE-2025-565xx/CVE-2025-56588.json +++ b/CVE-2025/CVE-2025-565xx/CVE-2025-56588.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56588", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-01T20:18:36.937", - "lastModified": "2025-10-02T19:11:46.753", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:56:31.857", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:21.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "290AF94C-057E-4D81-8979-1CFAA71BD074" + } + ] + } + ] + } + ], "references": [ { "url": "http://dolibarr.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Not Applicable" + ] }, { "url": "https://github.com/PhDg1410/Research", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json b/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json index d4e5cde6e9b..d340c840b1a 100644 --- a/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json +++ b/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json @@ -2,13 +2,20 @@ "id": "CVE-2025-56799", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.663", - "lastModified": "2025-10-21T21:15:37.960", + "lastModified": "2025-10-22T14:15:50.863", "vulnStatus": "Awaiting Analysis", - "cveTags": [], + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name." + "value": "Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json b/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json index f0ecb046900..2f914397102 100644 --- a/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json +++ b/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json @@ -2,13 +2,20 @@ "id": "CVE-2025-56800", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.780", - "lastModified": "2025-10-21T21:15:38.113", + "lastModified": "2025-10-22T14:15:51.080", "vulnStatus": "Awaiting Analysis", - "cveTags": [], + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements lock screen password logic entirely on the client side using JavaScript within an Electron resource file. Because the password is stored and returned via a modifiable JavaScript property(a.settingsManager.lockScreenPassword), an attacker can patch the return value to bypass authentication." + "value": "Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements lock screen password logic entirely on the client side using JavaScript within an Electron resource file. Because the password is stored and returned via a modifiable JavaScript property(a.settingsManager.lockScreenPassword), an attacker can patch the return value to bypass authentication. NOTE: this is disputed by the Supplier because the lock-screen bypass would only occur if the local user modified his own instance of the application." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json b/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json index 2946e3c5959..aa4313c1896 100644 --- a/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json +++ b/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json @@ -2,13 +2,20 @@ "id": "CVE-2025-56801", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.897", - "lastModified": "2025-10-21T21:15:38.267", + "lastModified": "2025-10-22T14:15:51.277", "vulnStatus": "Awaiting Analysis", - "cveTags": [], + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data." + "value": "The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-568xx/CVE-2025-56802.json b/CVE-2025/CVE-2025-568xx/CVE-2025-56802.json index 32d94e3f52a..292972a4cd3 100644 --- a/CVE-2025/CVE-2025-568xx/CVE-2025-56802.json +++ b/CVE-2025/CVE-2025-568xx/CVE-2025-56802.json @@ -2,13 +2,20 @@ "id": "CVE-2025-56802", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:23.007", - "lastModified": "2025-10-21T21:15:38.413", + "lastModified": "2025-10-22T14:15:51.480", "vulnStatus": "Awaiting Analysis", - "cveTags": [], + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56802." + "value": "The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-575xx/CVE-2025-57521.json b/CVE-2025/CVE-2025-575xx/CVE-2025-57521.json index 7a93fe08988..2e095c6c918 100644 --- a/CVE-2025/CVE-2025-575xx/CVE-2025-57521.json +++ b/CVE-2025/CVE-2025-575xx/CVE-2025-57521.json @@ -2,7 +2,7 @@ "id": "CVE-2025-57521", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T15:15:38.960", - "lastModified": "2025-10-21T21:15:38.737", + "lastModified": "2025-10-22T14:15:51.677", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -48,10 +48,6 @@ } ], "references": [ - { - "url": "http://bambu.com", - "source": "cve@mitre.org" - }, { "url": "https://github.com/bambulab/BambuStudio/issues/7405", "source": "cve@mitre.org" diff --git a/CVE-2025/CVE-2025-578xx/CVE-2025-57870.json b/CVE-2025/CVE-2025-578xx/CVE-2025-57870.json new file mode 100644 index 00000000000..4b8f0831ed2 --- /dev/null +++ b/CVE-2025/CVE-2025-578xx/CVE-2025-57870.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-57870", + "sourceIdentifier": "psirt@esri.com", + "published": "2025-10-22T15:15:51.830", + "lastModified": "2025-10-22T15:15:51.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands via a specific ArcGIS Feature Service operation. Successful exploitation can potentially result in unauthorized access, modification, or deletion of data from the underlying Enterprise Geodatabase." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@esri.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@esri.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/arcgis-server-feature-services-security-patch", + "source": "psirt@esri.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-57xx/CVE-2025-5745.json b/CVE-2025/CVE-2025-57xx/CVE-2025-5745.json index 56a7fba92bb..0237549d32c 100644 --- a/CVE-2025/CVE-2025-57xx/CVE-2025-5745.json +++ b/CVE-2025/CVE-2025-57xx/CVE-2025-5745.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5745", "sourceIdentifier": "3ff69d7a-14f2-4f67-a097-88dee7810d18", "published": "2025-06-05T20:15:27.377", - "lastModified": "2025-06-06T14:07:28.330", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T14:03:33.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.40", + "versionEndExcluding": "2.40-136", + "matchCriteriaId": "3DD32E7F-D237-4BDD-B35C-DFE624C3BEC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.41", + "versionEndExcluding": "2.41-57", + "matchCriteriaId": "18B69127-C2AF-40E7-A8F5-A8E7135736AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33060", - "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18" + "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18", + "tags": [ + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-582xx/CVE-2025-58277.json b/CVE-2025/CVE-2025-582xx/CVE-2025-58277.json index 990e7df37c0..695aa0e3382 100644 --- a/CVE-2025/CVE-2025-582xx/CVE-2025-58277.json +++ b/CVE-2025/CVE-2025-582xx/CVE-2025-58277.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58277", "sourceIdentifier": "psirt@huawei.com", "published": "2025-10-11T04:16:06.540", - "lastModified": "2025-10-14T19:36:59.730", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T14:18:48.477", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 0.4, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -47,10 +67,35 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730" + } + ] + } + ] + } + ], "references": [ { "url": "https://consumer.huawei.com/en/support/bulletin/2025/10/", - "source": "psirt@huawei.com" + "source": "psirt@huawei.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58916.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58916.json new file mode 100644 index 00000000000..67208bb322d --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58916.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58916", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.003", + "lastModified": "2025-10-22T15:15:52.003", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Munzir Author: Munzir myshouts-shoutbox allows Reflected XSS.This issue affects Author: Munzir: from n/a through <= 0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/myshouts-shoutbox/vulnerability/wordpress-author-munzir-plugin-0-9-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58921.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58921.json new file mode 100644 index 00000000000..aad5dc1c83d --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58921.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58921", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.153", + "lastModified": "2025-10-22T15:15:52.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Tactical Popup wp-tactical-popup allows Reflected XSS.This issue affects WP Tactical Popup: from n/a through <= 1.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-tactical-popup/vulnerability/wordpress-wp-tactical-popup-plugin-1-1-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58955.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58955.json new file mode 100644 index 00000000000..8e049803ec1 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58955.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58955", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.287", + "lastModified": "2025-10-22T15:15:52.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through < 2.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/karzo/vulnerability/wordpress-karzo-theme-2-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58958.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58958.json new file mode 100644 index 00000000000..95998be5059 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58958.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58958", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.413", + "lastModified": "2025-10-22T15:15:52.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through < 1.8.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/smilepure/vulnerability/wordpress-smilepure-theme-1-8-5-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58959.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58959.json new file mode 100644 index 00000000000..b6d587c3b99 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58959.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58959", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.543", + "lastModified": "2025-10-22T15:15:52.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through <= 6.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/taskbot/vulnerability/wordpress-taskbot-plugin-6-4-arbitrary-file-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58961.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58961.json new file mode 100644 index 00000000000..fc986567e90 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58961.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58961", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.690", + "lastModified": "2025-10-22T15:15:52.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through <= 2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/CF7-autoresponder-addon/vulnerability/wordpress-cf7-auto-responder-addon-plugin-2-4-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58963.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58963.json new file mode 100644 index 00000000000..3450d2f4398 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58963.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58963", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.830", + "lastModified": "2025-10-22T15:15:52.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/medcity/vulnerability/wordpress-medcity-theme-1-1-9-arbitrary-file-upload-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58966.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58966.json new file mode 100644 index 00000000000..ecc6b8d9809 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58966.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58966", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:52.960", + "lastModified": "2025-10-22T15:15:52.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through < 8.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/nex-forms-lite/vulnerability/wordpress-nex-forms-lite-plugin-8-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58967.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58967.json new file mode 100644 index 00000000000..ed4bc931065 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58967.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58967", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.090", + "lastModified": "2025-10-22T15:15:53.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through < 2.4.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/businext/vulnerability/wordpress-businext-theme-2-4-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58970.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58970.json new file mode 100644 index 00000000000..2c7a66d11e2 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58970.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58970", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.207", + "lastModified": "2025-10-22T15:15:53.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in AmentoTech Doctreat doctreat allows Code Injection.This issue affects Doctreat: from n/a through <= 1.6.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/doctreat/vulnerability/wordpress-doctreat-theme-1-6-7-content-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58971.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58971.json new file mode 100644 index 00000000000..61a233118b2 --- /dev/null +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58971.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58971", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.333", + "lastModified": "2025-10-22T15:15:53.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmentoTech Doctreat doctreat allows Reflected XSS.This issue affects Doctreat: from n/a through <= 1.6.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/doctreat/vulnerability/wordpress-doctreat-theme-1-6-7-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-590xx/CVE-2025-59004.json b/CVE-2025/CVE-2025-590xx/CVE-2025-59004.json new file mode 100644 index 00000000000..4599fbb59c9 --- /dev/null +++ b/CVE-2025/CVE-2025-590xx/CVE-2025-59004.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59004", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.460", + "lastModified": "2025-10-22T15:15:53.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pco_58 WC Return products wc-return-product allows Reflected XSS.This issue affects WC Return products: from n/a through <= 1.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wc-return-product/vulnerability/wordpress-wc-return-products-plugin-1-5-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-590xx/CVE-2025-59006.json b/CVE-2025/CVE-2025-590xx/CVE-2025-59006.json new file mode 100644 index 00000000000..e9823493c5f --- /dev/null +++ b/CVE-2025/CVE-2025-590xx/CVE-2025-59006.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59006", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.587", + "lastModified": "2025-10-22T15:15:53.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Easy Woocommerce Customizer easy-woocommerce-customizer allows Reflected XSS.This issue affects Easy Woocommerce Customizer: from n/a through <= 1.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/easy-woocommerce-customizer/vulnerability/wordpress-easy-woocommerce-customizer-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-590xx/CVE-2025-59007.json b/CVE-2025/CVE-2025-590xx/CVE-2025-59007.json new file mode 100644 index 00000000000..61e8595d23f --- /dev/null +++ b/CVE-2025/CVE-2025-590xx/CVE-2025-59007.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59007", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.730", + "lastModified": "2025-10-22T15:15:53.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For Elementor tf-woo-product-grid allows Object Injection.This issue affects TF Woo Product Grid Addon For Elementor: from n/a through <= 1.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/tf-woo-product-grid/vulnerability/wordpress-tf-woo-product-grid-addon-for-elementor-plugin-1-0-1-deserialization-of-untrusted-data-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59550.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59550.json new file mode 100644 index 00000000000..770f3e5fefa --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59550.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59550", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.850", + "lastModified": "2025-10-22T15:15:53.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Xcare xcare allows PHP Local File Inclusion.This issue affects Xcare: from n/a through < 6.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/xcare/vulnerability/wordpress-xcare-theme-6-5-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59555.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59555.json new file mode 100644 index 00000000000..ffb5fe1aac3 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59555.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59555", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:53.977", + "lastModified": "2025-10-22T15:15:53.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Medizin medizin allows PHP Local File Inclusion.This issue affects Medizin: from n/a through < 1.9.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/medizin/vulnerability/wordpress-medizin-theme-1-9-7-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59557.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59557.json new file mode 100644 index 00000000000..72d98993342 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59557.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59557", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:54.117", + "lastModified": "2025-10-22T15:15:54.117", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injection.This issue affects Learts Addons: from n/a through < 1.7.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/learts-addons/vulnerability/wordpress-learts-addons-plugin-1-7-5-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59558.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59558.json new file mode 100644 index 00000000000..43dce92a879 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59558.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59558", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:55.127", + "lastModified": "2025-10-22T15:15:55.127", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through < 2.1.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/billey/vulnerability/wordpress-billey-theme-2-1-6-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59564.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59564.json new file mode 100644 index 00000000000..db46050176a --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59564.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59564", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:55.297", + "lastModified": "2025-10-22T15:15:55.297", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP Local File Inclusion.This issue affects EduMall: from n/a through < 4.4.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/edumall/vulnerability/wordpress-edumall-theme-4-4-5-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59566.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59566.json new file mode 100644 index 00000000000..6492a06a655 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59566.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59566", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:55.447", + "lastModified": "2025-10-22T15:15:55.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows Path Traversal.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/workreap/vulnerability/wordpress-workreap-theme-s-plugin-plugin-3-3-5-arbitrary-file-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59571.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59571.json new file mode 100644 index 00000000000..afe0c2fbb66 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59571.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59571", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:55.690", + "lastModified": "2025-10-22T15:15:55.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through < 1.7.06." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/workscout-core/vulnerability/wordpress-workscout-core-plugin-1-7-06-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59575.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59575.json new file mode 100644 index 00000000000..036228258bb --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59575.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59575", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:55.833", + "lastModified": "2025-10-22T15:15:55.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: from n/a through <= 3.6.20." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-6-20-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59578.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59578.json new file mode 100644 index 00000000000..74fffe57628 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59578.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59578", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.040", + "lastModified": "2025-10-22T15:15:56.040", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through <= 4.5.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/shopmagic-for-woocommerce/vulnerability/wordpress-shopmagic-plugin-4-5-6-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59579.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59579.json new file mode 100644 index 00000000000..9d9ab3aeed0 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59579.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59579", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.167", + "lastModified": "2025-10-22T15:15:56.167", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in PressTigers Simple Job Board simple-job-board allows Retrieve Embedded Sensitive Data.This issue affects Simple Job Board: from n/a through <= 2.13.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-job-board/vulnerability/wordpress-simple-job-board-plugin-2-13-7-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59580.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59580.json new file mode 100644 index 00000000000..f1be5221db6 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59580.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59580", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.287", + "lastModified": "2025-10-22T15:15:56.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through < 2.1.7." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/goodlayers-core/vulnerability/wordpress-goodlayers-core-plugin-2-1-7-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59593.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59593.json new file mode 100644 index 00000000000..f4e7e6cd195 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59593.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-59593", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.407", + "lastModified": "2025-10-22T15:15:56.407", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through < 1.0.334." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/colibri-page-builder/vulnerability/wordpress-colibri-page-builder-plugin-1-0-334-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-596xx/CVE-2025-59682.json b/CVE-2025/CVE-2025-596xx/CVE-2025-59682.json index 3bd0ff08652..9894adff2ee 100644 --- a/CVE-2025/CVE-2025-596xx/CVE-2025-59682.json +++ b/CVE-2025/CVE-2025-596xx/CVE-2025-59682.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59682", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-01T19:15:37.007", - "lastModified": "2025-10-02T19:11:46.753", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-22T15:58:29.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -47,18 +67,62 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2.0", + "versionEndExcluding": "4.2.25", + "matchCriteriaId": "D7CEDFD0-947D-48ED-BAD7-624807F353A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.1", + "versionEndExcluding": "5.1.13", + "matchCriteriaId": "07302099-FD08-4383-8BE5-267182A37E4A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "5.2.7", + "matchCriteriaId": "13843918-439E-4481-89CF-2EDD8DFCF8EC" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.djangoproject.com/en/dev/releases/security/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://groups.google.com/g/django-announce", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://www.djangoproject.com/weblog/2025/oct/01/security-releases/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-59xx/CVE-2025-5946.json b/CVE-2025/CVE-2025-59xx/CVE-2025-5946.json index 12aa3d59c08..a28c425af4a 100644 --- a/CVE-2025/CVE-2025-59xx/CVE-2025-5946.json +++ b/CVE-2025/CVE-2025-59xx/CVE-2025-5946.json @@ -2,8 +2,8 @@ "id": "CVE-2025-5946", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T15:16:11.967", - "lastModified": "2025-10-14T19:36:29.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:08:29.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5946-centreon-web-all-versions-high-severity-5104", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-600xx/CVE-2025-60039.json b/CVE-2025/CVE-2025-600xx/CVE-2025-60039.json new file mode 100644 index 00000000000..6b6e82e5fcf --- /dev/null +++ b/CVE-2025/CVE-2025-600xx/CVE-2025-60039.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60039", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.533", + "lastModified": "2025-10-22T15:15:56.533", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/noisa/vulnerability/wordpress-noisa-theme-2-6-0-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-600xx/CVE-2025-60041.json b/CVE-2025/CVE-2025-600xx/CVE-2025-60041.json new file mode 100644 index 00000000000..3d08146a991 --- /dev/null +++ b/CVE-2025/CVE-2025-600xx/CVE-2025-60041.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60041", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.660", + "lastModified": "2025-10-22T15:15:56.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through <= 3.5.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/emails-catch-all/vulnerability/wordpress-emails-catch-all-plugin-3-5-3-broken-authentication-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60131.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60131.json new file mode 100644 index 00000000000..bd2e756bec1 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60131.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60131", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.770", + "lastModified": "2025-10-22T15:15:56.770", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through <= 1.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/werk-aan-de-muur/vulnerability/wordpress-werk-aan-de-muur-plugin-1-5-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60132.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60132.json new file mode 100644 index 00000000000..e0e9a13cfa9 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60132.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60132", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:56.897", + "lastModified": "2025-10-22T15:15:56.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in johnh10 Video Blogster Lite video-blogster-lite allows Stored XSS.This issue affects Video Blogster Lite: from n/a through <= 1.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/video-blogster-lite/vulnerability/wordpress-video-blogster-lite-plugin-1-2-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60134.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60134.json new file mode 100644 index 00000000000..e1ed32177ab --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60134.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60134", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.023", + "lastModified": "2025-10-22T15:15:57.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Media Categories wp-media-categories allows Cross Site Request Forgery.This issue affects WP Media Categories: from n/a through <= 2.1.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-media-categories/vulnerability/wordpress-wp-media-categories-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60135.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60135.json new file mode 100644 index 00000000000..1a365fa2774 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60135.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60135", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.173", + "lastModified": "2025-10-22T15:15:57.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NIKITAS GEORGOPOULOS WeShare Buttons e-mailit allows Stored XSS.This issue affects WeShare Buttons: from n/a through <= 13.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/e-mailit/vulnerability/wordpress-weshare-buttons-plugin-13-0-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60151.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60151.json new file mode 100644 index 00000000000..4d6c54a240b --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60151.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60151", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.313", + "lastModified": "2025-10-22T15:15:57.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through <= 1.2.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/gf-hubspot/vulnerability/wordpress-wp-gravity-forms-hubspot-plugin-1-2-5-open-redirection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60168.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60168.json new file mode 100644 index 00000000000..f58fa383a69 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60168.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60168", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.457", + "lastModified": "2025-10-22T15:15:57.457", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through <= 1.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/hotelrunner/vulnerability/wordpress-hotelrunner-booking-widget-plugin-1-6-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-601xx/CVE-2025-60176.json b/CVE-2025/CVE-2025-601xx/CVE-2025-60176.json new file mode 100644 index 00000000000..746c77cf175 --- /dev/null +++ b/CVE-2025/CVE-2025-601xx/CVE-2025-60176.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60176", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.583", + "lastModified": "2025-10-22T15:15:57.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tattersoftware WP Tesseract wp-tesseract allows Stored XSS.This issue affects WP Tesseract: from n/a through <= 1.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-tesseract/vulnerability/wordpress-wp-tesseract-plugin-1-0-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60206.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60206.json new file mode 100644 index 00000000000..2e27efc3892 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60206.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60206", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.720", + "lastModified": "2025-10-22T15:15:57.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through <= 7.8.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/alone/vulnerability/wordpress-alone-theme-7-8-3-remote-code-execution-rce-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60208.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60208.json new file mode 100644 index 00000000000..b58d8c146a3 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60208.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60208", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.843", + "lastModified": "2025-10-22T15:15:57.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Tusko Trush Advanced Custom Fields : CPT Options Pages acf-cpt-options-pages allows Object Injection.This issue affects Advanced Custom Fields : CPT Options Pages: from n/a through <= 2.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/acf-cpt-options-pages/vulnerability/wordpress-advanced-custom-fields-cpt-options-pages-plugin-2-0-9-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60209.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60209.json new file mode 100644 index 00000000000..431135f6f6a --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60209.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60209", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:57.983", + "lastModified": "2025-10-22T15:15:57.983", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60210.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60210.json new file mode 100644 index 00000000000..2c92c63f761 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60210.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60210", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.123", + "lastModified": "2025-10-22T15:15:58.123", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.This issue affects Everest Forms - Frontend Listing: from n/a through <= 1.0.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/everest-forms-frontend-listing/vulnerability/wordpress-everest-forms-frontend-listing-plugin-1-0-5-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60211.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60211.json new file mode 100644 index 00000000000..79011ab6fe9 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60211.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60211", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.250", + "lastModified": "2025-10-22T15:15:58.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields: from n/a through <= 3.2.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/extendons-registration-fields/vulnerability/wordpress-woocommerce-registration-fields-plugin-custom-signup-fields-plugin-3-2-3-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60212.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60212.json new file mode 100644 index 00000000000..303c9863b1a --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60212.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60212", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.370", + "lastModified": "2025-10-22T15:15:58.370", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/veda/vulnerability/wordpress-veda-theme-4-2-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60213.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60213.json new file mode 100644 index 00000000000..7be650c778e --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60213.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60213", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.487", + "lastModified": "2025-10-22T15:15:58.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/scape/vulnerability/wordpress-scape-theme-1-5-13-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60214.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60214.json new file mode 100644 index 00000000000..258976767e1 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60214.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60214", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.607", + "lastModified": "2025-10-22T15:15:58.607", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through <= 1.2.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/goldenblatt/vulnerability/wordpress-goldenblatt-theme-1-2-1-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60215.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60215.json new file mode 100644 index 00000000000..8d081db038e --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60215.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60215", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.720", + "lastModified": "2025-10-22T15:15:58.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection.This issue affects Kriya: from n/a through <= 3.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kriya/vulnerability/wordpress-kriya-theme-3-4-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60216.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60216.json new file mode 100644 index 00000000000..c6bee16e3d8 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60216.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60216", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.843", + "lastModified": "2025-10-22T15:15:58.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through <= 1.4.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/addison/vulnerability/wordpress-addison-theme-1-4-2-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60217.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60217.json new file mode 100644 index 00000000000..1f0c17f8b64 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60217.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60217", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:58.967", + "lastModified": "2025-10-22T15:15:58.967", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT Luxa Addons: from n/a through <= 1.2.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/pt-luxa-addons/vulnerability/wordpress-pt-luxa-addons-plugin-1-2-2-arbitrary-file-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60220.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60220.json new file mode 100644 index 00000000000..e3706a23edf --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60220.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60220", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.107", + "lastModified": "2025-10-22T15:15:59.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/couponxxl/vulnerability/wordpress-couponxxl-theme-3-0-0-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60221.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60221.json new file mode 100644 index 00000000000..a09db31fe17 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60221.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60221", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.257", + "lastModified": "2025-10-22T15:15:59.257", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/captivatesync-trade/vulnerability/wordpress-captivate-sync-plugin-3-0-3-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60222.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60222.json new file mode 100644 index 00000000000..3b4bfcbd5fc --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60222.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60222", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.377", + "lastModified": "2025-10-22T15:15:59.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60224.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60224.json new file mode 100644 index 00000000000..2d5a3c855fb --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60224.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60224", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.497", + "lastModified": "2025-10-22T15:15:59.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/subscribe-to-download/vulnerability/wordpress-subscribe-to-download-plugin-2-0-9-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60225.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60225.json new file mode 100644 index 00000000000..da746ceec90 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60225.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60225", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.620", + "lastModified": "2025-10-22T15:15:59.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/bugspatrol/vulnerability/wordpress-bugspatrol-theme-1-5-0-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60226.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60226.json new file mode 100644 index 00000000000..786862098fe --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60226.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60226", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.757", + "lastModified": "2025-10-22T15:15:59.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/whiterabbit/vulnerability/wordpress-white-rabbit-theme-1-5-2-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60227.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60227.json new file mode 100644 index 00000000000..939cb1aa621 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60227.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60227", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:15:59.877", + "lastModified": "2025-10-22T15:15:59.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress WP Pipes wp-pipes allows Path Traversal.This issue affects WP Pipes: from n/a through <= 1.4.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-pipes/vulnerability/wordpress-wp-pipes-plugin-1-4-3-arbitrary-file-deletion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60228.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60228.json new file mode 100644 index 00000000000..e9448736aac --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60228.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60228", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:00.003", + "lastModified": "2025-10-22T15:16:00.003", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through <= 2.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/kbase/vulnerability/wordpress-knowledge-base-theme-2-9-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60232.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60232.json new file mode 100644 index 00000000000..34c4007cc6a --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60232.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60232", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:00.130", + "lastModified": "2025-10-22T15:16:00.130", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through <= 8.0.5." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/knowledgebase-helpdesk-pro/vulnerability/wordpress-kbx-pro-ultimate-plugin-8-0-5-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60234.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60234.json new file mode 100644 index 00000000000..449f83542f3 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60234.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60234", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:00.260", + "lastModified": "2025-10-22T15:16:00.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through <= 2.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/single-property/vulnerability/wordpress-single-property-theme-2-8-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60238.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60238.json new file mode 100644 index 00000000000..a42ee0fa4d3 --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60238.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60238", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:00.377", + "lastModified": "2025-10-22T15:16:00.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue affects UNIVERSAM: from n/a through <= 8.72.34." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/universam-demo/vulnerability/wordpress-universam-plugin-8-72-14-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-602xx/CVE-2025-60246.json b/CVE-2025/CVE-2025-602xx/CVE-2025-60246.json new file mode 100644 index 00000000000..289c0a215fb --- /dev/null +++ b/CVE-2025/CVE-2025-602xx/CVE-2025-60246.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60246", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:00.497", + "lastModified": "2025-10-22T15:16:00.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weissmike Simple Finance Calculator simple-finance-calculator allows Reflected XSS.This issue affects Simple Finance Calculator: from n/a through <= 1.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-finance-calculator/vulnerability/wordpress-simple-finance-calculator-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60331.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60331.json new file mode 100644 index 00000000000..b14fe1eef20 --- /dev/null +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60331.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-60331", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-22T15:16:00.617", + "lastModified": "2025-10-22T15:16:00.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/DIR823G/FillMacCloneMac/FillMacCloneMac.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.dlink.com/en/security-bulletin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60332.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60332.json new file mode 100644 index 00000000000..19789be767b --- /dev/null +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60332.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-60332", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-22T15:16:00.733", + "lastModified": "2025-10-22T15:16:00.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/DIR823G/SetWLanRadioSetting.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.dlink.com/en/security-bulletin/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-604xx/CVE-2025-60427.json b/CVE-2025/CVE-2025-604xx/CVE-2025-60427.json index e11f2f5f988..d4583d1d344 100644 --- a/CVE-2025/CVE-2025-604xx/CVE-2025-60427.json +++ b/CVE-2025/CVE-2025-604xx/CVE-2025-60427.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60427", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T18:15:36.307", - "lastModified": "2025-10-21T19:31:25.450", + "lastModified": "2025-10-22T15:16:00.853", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "LibreTime 3.0.0-alpha.10 and possibly earlier is vulnerable to Broken Access Control, where a user with the DJ role can access analytics data via the Web UI and direct API calls. The backend does not verify role-based permissions for analytics endpoints, allowing unauthorized retrieval of station-wide metrics. This results in information disclosure to less privileged users." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://beafn28.gitbook.io/beafn28/cve/broken-access-control-in-libretime-analytics-endpoints-cve-2025-60427", diff --git a/CVE-2025/CVE-2025-605xx/CVE-2025-60506.json b/CVE-2025/CVE-2025-605xx/CVE-2025-60506.json index 7d1f844f5fd..aa94accaaa6 100644 --- a/CVE-2025/CVE-2025-605xx/CVE-2025-60506.json +++ b/CVE-2025/CVE-2025-605xx/CVE-2025-60506.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60506", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T17:15:40.177", - "lastModified": "2025-10-21T19:31:25.450", + "lastModified": "2025-10-22T15:16:01.020", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Moodle PDF Annotator plugin v1.5 release 9 allows stored cross-site scripting (XSS) via the Public Comments feature. An attacker with a low-privileged account (e.g., Student) can inject arbitrary JavaScript payloads into a comment. When any other user (Student, Teacher, or Admin) views the annotated PDF, the payload is executed in their browser, leading to session hijacking, credential theft, or other attacker-controlled actions." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/onurcangnc/moodle-xss-pdfannotator", @@ -24,6 +59,10 @@ { "url": "https://onurcangenc.com.tr/posts/cve-2025-60506-stored-cross-site-scripting-xss-in-moodle-pdf-annotator-plugin-v1-5-release-9/", "source": "cve@mitre.org" + }, + { + "url": "https://onurcangenc.com.tr/posts/cve-2025-60506-stored-cross-site-scripting-xss-in-moodle-pdf-annotator-plugin-v1-5-release-9/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60772.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60772.json index 27236bcd203..5a389301bd3 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60772.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60772.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60772", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T17:15:40.437", - "lastModified": "2025-10-21T19:31:25.450", + "lastModified": "2025-10-22T15:16:01.193", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker to escalate privileges and lock out the legitimate administrator via crafted HTTP requests." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] + } + ], "references": [ { "url": "https://github.com/navy-birds-MRS/vuln-reports/blob/main/vendors/netlink/CVE-2025-60772/advisory.md", @@ -20,6 +55,10 @@ { "url": "https://netlinkict.com/shop/gpon-ont/gpon-ont-hg322g/", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/navy-birds-MRS/vuln-reports/blob/main/vendors/netlink/CVE-2025-60772/advisory.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60790.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60790.json index c22f6f1bf46..d93798da021 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60790.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60790.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60790", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T18:15:36.630", - "lastModified": "2025-10-21T19:31:25.450", + "lastModified": "2025-10-22T15:16:01.357", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,11 +11,50 @@ "value": "ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://github.com/processwire/processwire-issues/issues/2120", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/processwire/processwire-issues/issues/2120", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-610xx/CVE-2025-61035.json b/CVE-2025/CVE-2025-610xx/CVE-2025-61035.json new file mode 100644 index 00000000000..20a6f40230c --- /dev/null +++ b/CVE-2025/CVE-2025-610xx/CVE-2025-61035.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-61035", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-22T14:15:51.873", + "lastModified": "2025-10-22T14:15:51.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink checks, allowing local attackers to overwrite arbitrary files. This can result in information disclosure and denial of service." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/nurisensoy/seffaflik", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/nurisensoy/seffaflik/issues/3", + "source": "cve@mitre.org" + }, + { + "url": "https://pypi.org/project/seffaflik/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61757.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61757.json index 474e7a673c2..f80bda9cb63 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61757.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61757.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61757", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:52.117", - "lastModified": "2025-10-21T20:20:52.117", + "lastModified": "2025-10-22T15:16:01.527", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61762.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61762.json index 3c4e906cd80..a8760f7ff07 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61762.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61762.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61762", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:52.757", - "lastModified": "2025-10-21T20:20:52.757", + "lastModified": "2025-10-22T15:16:01.660", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61763.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61763.json index 89316580c0b..91e8f375263 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61763.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61763.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61763", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:52.883", - "lastModified": "2025-10-21T20:20:52.883", + "lastModified": "2025-10-22T15:16:01.790", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61764.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61764.json index 399679cb1d7..fa1ab635a55 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61764.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61764.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61764", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:53.027", - "lastModified": "2025-10-21T20:20:53.027", + "lastModified": "2025-10-22T15:16:01.910", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61765.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61765.json index c8637186ced..967d8d0ca60 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61765.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61765.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61765", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-06T16:15:35.400", - "lastModified": "2025-10-08T19:38:32.610", + "lastModified": "2025-10-22T14:15:52.040", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -55,6 +55,10 @@ { "url": "https://github.com/miguelgrinberg/python-socketio/security/advisories/GHSA-g8c6-8fjj-2r4m", "source": "security-advisories@github.com" + }, + { + "url": "https://www.bluerock.io/post/cve-2025-61765-bluerock-discovers-critical-rce-in-socket-io-ecosystem", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61881.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61881.json index 523016e5c87..c98b7deb4c5 100644 --- a/CVE-2025/CVE-2025-618xx/CVE-2025-61881.json +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61881.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61881", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:53.170", - "lastModified": "2025-10-21T20:20:53.170", + "lastModified": "2025-10-22T15:16:02.030", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61885.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61885.json index 83d54cb57dd..ba85eed0bae 100644 --- a/CVE-2025/CVE-2025-618xx/CVE-2025-61885.json +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61885.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61885", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:53.523", - "lastModified": "2025-10-21T20:20:53.523", + "lastModified": "2025-10-22T15:16:02.153", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61996.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61996.json index 5fba5afff15..49122123a99 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61996.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61996.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61996", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-08T00:15:33.890", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:45:18.763", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -91,18 +111,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:opexustech:foiaxpress:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.13.3.0", + "matchCriteriaId": "7077A02D-D6F5-4E4E-B6A4-E2D8AFBF8EAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.3.0.pdf", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Release Notes" + ] }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-280-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-61996", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61997.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61997.json index 1b7aa914480..763be6d6368 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61997.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61997.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61997", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-08T00:15:34.070", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:45:25.083", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -91,18 +111,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:opexustech:foiaxpress:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.13.3.0", + "matchCriteriaId": "7077A02D-D6F5-4E4E-B6A4-E2D8AFBF8EAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.3.0.pdf", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Release Notes" + ] }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-280-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-61997", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61998.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61998.json index 64666c329a8..1cdb7059f1e 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61998.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61998.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61998", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-08T00:15:34.220", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:45:10.300", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -91,18 +111,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:opexustech:foiaxpress:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.13.3.0", + "matchCriteriaId": "7077A02D-D6F5-4E4E-B6A4-E2D8AFBF8EAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.3.0.pdf", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Release Notes" + ] }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-280-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-61998", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61999.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61999.json index 6142137de68..c946c7c0243 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61999.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61999.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61999", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "published": "2025-10-08T00:15:34.373", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:45:32.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -91,18 +111,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:opexustech:foiaxpress:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.13.3.0", + "matchCriteriaId": "7077A02D-D6F5-4E4E-B6A4-E2D8AFBF8EAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.3.0.pdf", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Release Notes" + ] }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-280-01.json", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-61999", - "source": "9119a7d8-5eab-497f-8521-727c672e3725" + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62005.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62005.json new file mode 100644 index 00000000000..5fd0d115d52 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62005.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62005", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.287", + "lastModified": "2025-10-22T15:16:02.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Cross Site Request Forgery.This issue affects SUMO Memberships for WooCommerce: from n/a through < 7.8.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-8-0-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62006.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62006.json new file mode 100644 index 00000000000..7ad74b6060b --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62006.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62006", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.407", + "lastModified": "2025-10-22T15:16:02.407", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through <= 7.0.1." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-sms/vulnerability/wordpress-wp-sms-plugin-7-0-1-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62007.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62007.json new file mode 100644 index 00000000000..78667ac7753 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62007.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62007", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.530", + "lastModified": "2025-10-22T15:16:02.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through <= 1.0.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/voice-feedback/vulnerability/wordpress-voice-feedback-plugin-1-0-3-privilege-escalation-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62008.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62008.json new file mode 100644 index 00000000000..bfa8ab68be9 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62008.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62008", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.650", + "lastModified": "2025-10-22T15:16:02.650", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/product-table-for-woocommerce/vulnerability/wordpress-product-table-for-woocommerce-plugin-1-2-4-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62009.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62009.json new file mode 100644 index 00000000000..5b687d64e62 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62009.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62009", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.780", + "lastModified": "2025-10-22T15:16:02.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of \"UKR Solution\") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through <= 2.0.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/upc-ean-barcode-generator/vulnerability/wordpress-upc-ean-gtin-code-generator-plugin-2-0-2-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62013.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62013.json new file mode 100644 index 00000000000..13046b0e76f --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62013.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62013", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:02.910", + "lastModified": "2025-10-22T15:16:02.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through <= 4.0.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/uichemy/vulnerability/wordpress-uichemy-plugin-4-0-0-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62015.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62015.json new file mode 100644 index 00000000000..7c444befadd --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62015.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62015", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.040", + "lastModified": "2025-10-22T15:16:03.040", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.6.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/advanced-coupons-for-woocommerce-free/vulnerability/wordpress-advanced-coupons-for-woocommerce-coupons-plugin-4-6-8-sql-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62019.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62019.json new file mode 100644 index 00000000000..43343c2f7de --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62019.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62019", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.163", + "lastModified": "2025-10-22T15:16:03.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through <= 3.4.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/recipe-card-blocks-by-wpzoom/vulnerability/wordpress-recipe-card-blocks-for-gutenberg-elementor-plugin-3-4-8-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62020.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62020.json new file mode 100644 index 00000000000..b6c57ada4f7 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62020.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62020", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.300", + "lastModified": "2025-10-22T15:16:03.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD Infomaniak: from n/a through <= 1.5.11." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/vod-infomaniak/vulnerability/wordpress-vod-infomaniak-plugin-1-5-11-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62021.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62021.json new file mode 100644 index 00000000000..dbe09a719ac --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62021.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62021", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.423", + "lastModified": "2025-10-22T15:16:03.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Acknowledgify: from n/a through <= 1.1.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/acknowledgify/vulnerability/wordpress-acknowledgify-plugin-1-1-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62022.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62022.json new file mode 100644 index 00000000000..2579d1db264 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62022.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62022", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.547", + "lastModified": "2025-10-22T15:16:03.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPress: from n/a through <= 14.3.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/buddypress/vulnerability/wordpress-buddypress-plugin-14-3-4-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62023.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62023.json new file mode 100644 index 00000000000..6bbff8cfa22 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62023.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62023", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.667", + "lastModified": "2025-10-22T15:16:03.667", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Cristi\u00e1n L\u00e1vaque s2Member s2member.This issue affects s2Member: from n/a through <= 250905." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/s2member/vulnerability/wordpress-s2member-plugin-250905-remote-code-execution-rce-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62024.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62024.json new file mode 100644 index 00000000000..ea8c07e35c8 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62024.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62024", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.797", + "lastModified": "2025-10-22T15:16:03.797", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar.This issue affects Pie Calendar: from n/a through <= 1.2.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/pie-calendar/vulnerability/wordpress-pie-calendar-plugin-1-2-9-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62025.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62025.json new file mode 100644 index 00000000000..4b04f19b632 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62025.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62025", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:03.913", + "lastModified": "2025-10-22T15:16:03.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-3-0-8-php-object-injection-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62026.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62026.json new file mode 100644 index 00000000000..d008d180fe6 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62026.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62026", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.037", + "lastModified": "2025-10-22T15:16:04.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/a through <= 3.2.13.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62027.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62027.json new file mode 100644 index 00000000000..3142d1e6509 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62027.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62027", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.160", + "lastModified": "2025-10-22T15:16:04.160", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through <= 5.26.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/event-tickets/vulnerability/wordpress-event-tickets-plugin-5-26-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62029.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62029.json new file mode 100644 index 00000000000..f511215f736 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62029.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62029", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.287", + "lastModified": "2025-10-22T15:16:04.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themesion Grevo grevo.This issue affects Grevo: from n/a through <= 2.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Theme/grevo/vulnerability/wordpress-grevo-theme-2-4-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62042.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62042.json new file mode 100644 index 00000000000..150092d85c1 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62042.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62042", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.410", + "lastModified": "2025-10-22T15:16:04.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/event-post/vulnerability/wordpress-event-post-plugin-5-10-3-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62048.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62048.json new file mode 100644 index 00000000000..21c49393deb --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62048.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62048", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.533", + "lastModified": "2025-10-22T15:16:04.533", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/smartcrawl-seo/vulnerability/wordpress-smartcrawl-plugin-3-14-3-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62052.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62052.json new file mode 100644 index 00000000000..fea5585fd39 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62052.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62052", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.667", + "lastModified": "2025-10-22T15:16:04.667", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through <= 1.6.43." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/one-page-express-companion/vulnerability/wordpress-one-page-express-companion-plugin-1-6-43-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62054.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62054.json new file mode 100644 index 00000000000..c7e97cdb515 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62054.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62054", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.790", + "lastModified": "2025-10-22T15:16:04.790", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through <= 4.1.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-1-8-local-file-inclusion-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62058.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62058.json new file mode 100644 index 00000000000..d588d86858f --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62058.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62058", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:04.930", + "lastModified": "2025-10-22T15:16:04.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-2-0-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62060.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62060.json new file mode 100644 index 00000000000..f73c025f8c9 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62060.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62060", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.080", + "lastModified": "2025-10-22T15:16:05.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through <= 1.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/tabs-pro/vulnerability/wordpress-tab-ultimate-plugin-1-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62061.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62061.json new file mode 100644 index 00000000000..d1af1e8d5ea --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62061.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62061", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.213", + "lastModified": "2025-10-22T15:16:05.213", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Product Catalog Simple: from n/a through <= 1.8.4." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/post-type-x/vulnerability/wordpress-product-catalog-simple-plugin-1-8-4-cross-site-request-forgery-csrf-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62062.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62062.json new file mode 100644 index 00000000000..7add773da1e --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62062.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62062", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.343", + "lastModified": "2025-10-22T15:16:05.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Retrieve Embedded Sensitive Data.This issue affects Easy Post Submission: from n/a through <= 1.7.0." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-1-7-0-sensitive-data-exposure-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62063.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62063.json new file mode 100644 index 00000000000..cd4954fba29 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62063.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62063", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.467", + "lastModified": "2025-10-22T15:16:05.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.2." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-travel-blocks/vulnerability/wordpress-wp-travel-gutenberg-blocks-plugin-3-9-2-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62068.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62068.json new file mode 100644 index 00000000000..bdeaa58b3c0 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62068.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62068", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.590", + "lastModified": "2025-10-22T15:16:05.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpress-e2pdf-plugin-1-28-09-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62069.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62069.json new file mode 100644 index 00000000000..7218bea5569 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62069.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62069", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.720", + "lastModified": "2025-10-22T15:16:05.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through <= 1.3.3.8." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-3-3-8-cross-site-scripting-xss-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62070.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62070.json new file mode 100644 index 00000000000..7f1ad0aa7db --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62070.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62070", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.853", + "lastModified": "2025-10-22T15:16:05.853", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WPXPO WowRevenue revenue.This issue affects WowRevenue: from n/a through <= 1.2.13." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/revenue/vulnerability/wordpress-wowrevenue-plugin-1-2-13-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62071.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62071.json new file mode 100644 index 00000000000..18345a3a2dd --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62071.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62071", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:05.977", + "lastModified": "2025-10-22T15:16:05.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget.This issue affects Social proof testimonials and reviews by Repuso: from n/a through <= 5.29." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/social-testimonials-and-reviews-widget/vulnerability/wordpress-social-proof-testimonials-and-reviews-by-repuso-plugin-5-29-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62072.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62072.json new file mode 100644 index 00000000000..e356e9bbba4 --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62072.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62072", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:06.100", + "lastModified": "2025-10-22T15:16:06.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through <= 3.2.33." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/front-end-only-users/vulnerability/wordpress-front-end-users-plugin-3-2-33-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-620xx/CVE-2025-62073.json b/CVE-2025/CVE-2025-620xx/CVE-2025-62073.json new file mode 100644 index 00000000000..f1429c3e56a --- /dev/null +++ b/CVE-2025/CVE-2025-620xx/CVE-2025-62073.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-62073", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-10-22T15:16:06.223", + "lastModified": "2025-10-22T15:16:06.223", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Sovlix MeetingHub meetinghub.This issue affects MeetingHub: from n/a through <= 1.23.9." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/meetinghub/vulnerability/wordpress-meetinghub-plugin-1-23-9-broken-access-control-vulnerability", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62290.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62290.json index 80b4956f076..1529f9a5f93 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62290.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62290.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62290", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:54.003", - "lastModified": "2025-10-21T20:20:54.003", + "lastModified": "2025-10-22T15:16:06.357", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62475.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62475.json index f510cd1db77..0483f1655b0 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62475.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62475.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62475", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:54.123", - "lastModified": "2025-10-21T20:20:54.123", + "lastModified": "2025-10-22T15:16:06.480", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62476.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62476.json index c975c45ad13..84e4d7ee954 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62476.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62476.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62476", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:54.243", - "lastModified": "2025-10-21T20:20:54.243", + "lastModified": "2025-10-22T15:16:06.613", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62477.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62477.json index ee4dc9d0f8d..75165c94908 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62477.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62477.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62477", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:54.363", - "lastModified": "2025-10-21T20:20:54.363", + "lastModified": "2025-10-22T15:16:06.777", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62478.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62478.json index e3bd5d2b6a8..f4871683990 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62478.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62478.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62478", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:54.483", - "lastModified": "2025-10-21T20:20:54.483", + "lastModified": "2025-10-22T15:16:06.897", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62525.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62525.json new file mode 100644 index 00000000000..8a98dbe89c3 --- /dev/null +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62525.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-62525", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-22T15:16:07.017", + "lastModified": "2025-10-22T15:16:07.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting xrx200, danube and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected. ATM mode is also not affected. Most VDSL lines use PTM mode and most ADSL lines use ATM mode. OpenWrt is normally running as a single user system, but some services are sandboxed. This vulnerability could allow attackers to escape a ujail sandbox or other contains. This is fixed in OpenWrt 24.10.4. There are no workarounds." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", + "baseScore": 7.9, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 5.3 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-125" + }, + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132e", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/openwrt/commit/e001b31163a77683ee741d169f794cfa50926f37", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/openwrt/security/advisories/GHSA-h427-frpr-7cqr", + "source": "security-advisories@github.com" + }, + { + "url": "https://openwrt.org/advisory/2025-10-22-2", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62526.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62526.json new file mode 100644 index 00000000000..f9853b21956 --- /dev/null +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62526.json @@ -0,0 +1,80 @@ +{ + "id": "CVE-2025-62526", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-22T15:16:07.177", + "lastModified": "2025-10-22T15:16:07.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", + "baseScore": 7.9, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 5.3 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/openwrt/openwrt/commit/4b907e69ea58fc0ba35fd1755dc4ba22262af3a4", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/openwrt/commit/a7901969932a175cded3c93bdeb65f32ed3705e6", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/openwrt/security/advisories/GHSA-cp32-65v4-cp73", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/ubus/commit/60e04048a0e2f3e33651c19e62861b41be4c290f", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/ubus/commit/aa4a7ee1d3417bc11207ad0a78d579ece7fe0c13", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/openwrt/ubus/commit/d31effb4277bd557f5ccf16d909422718c1e49d0", + "source": "security-advisories@github.com" + }, + { + "url": "https://openwrt.org/advisory/2025-10-22-1", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62592.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62592.json index 86198e12d37..8e314d2d5f9 100644 --- a/CVE-2025/CVE-2025-625xx/CVE-2025-62592.json +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62592.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62592", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-21T20:20:55.617", - "lastModified": "2025-10-21T20:20:55.617", + "lastModified": "2025-10-22T14:15:52.217", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/cpuoct2025.html", diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62598.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62598.json index e98910c91d5..374e1e12227 100644 --- a/CVE-2025/CVE-2025-625xx/CVE-2025-62598.json +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62598.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62598", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-21T17:15:41.053", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:19:55.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,14 +91,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.5.1", + "matchCriteriaId": "0380F435-A37D-48F3-87E5-A2648574EDC0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.5.1", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jmm7-rr7w-f223", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-626xx/CVE-2025-62604.json b/CVE-2025/CVE-2025-626xx/CVE-2025-62604.json new file mode 100644 index 00000000000..f0714fb0e8e --- /dev/null +++ b/CVE-2025/CVE-2025-626xx/CVE-2025-62604.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-62604", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-22T15:16:07.343", + "lastModified": "2025-10-22T15:16:07.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/metersphere/metersphere/commit/b984fe74e84711ff326b0a348807c31fadf134af", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/metersphere/metersphere/releases/tag/v2.10.25-lts", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/metersphere/metersphere/security/advisories/GHSA-vj5x-7374-rf96", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-626xx/CVE-2025-62606.json b/CVE-2025/CVE-2025-626xx/CVE-2025-62606.json new file mode 100644 index 00000000000..585a8de530e --- /dev/null +++ b/CVE-2025/CVE-2025-626xx/CVE-2025-62606.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62606", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-22T15:16:07.493", + "lastModified": "2025-10-22T15:16:07.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/My-Little-Forum/mylittleforum/releases/tag/20251021.1", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-67xx/CVE-2025-6791.json b/CVE-2025/CVE-2025-67xx/CVE-2025-6791.json index 8d95edaf5f6..2bd87bb112a 100644 --- a/CVE-2025/CVE-2025-67xx/CVE-2025-6791.json +++ b/CVE-2025/CVE-2025-67xx/CVE-2025-6791.json @@ -2,8 +2,8 @@ "id": "CVE-2025-6791", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-08-22T19:15:40.537", - "lastModified": "2025-09-16T20:15:37.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:06:29.580", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.26", + "matchCriteriaId": "C26D15FD-EFFC-48FE-BC84-A518F91148DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.16", + "matchCriteriaId": "19652073-5857-4F6A-85E0-A2B35E36AA25" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.9", + "matchCriteriaId": "F1E5A4E9-BADF-463F-9632-200EFFDC8F36" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-6791-centreon-web-all-versions-high-severity-4900", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8428.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8428.json index 531779bea8f..94565b2dec9 100644 --- a/CVE-2025/CVE-2025-84xx/CVE-2025-8428.json +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8428.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8428", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T15:16:14.147", - "lastModified": "2025-10-14T19:36:29.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:08:48.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8428-centreon-web-all-versions-medium-severity-5103", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8429.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8429.json index 2ff25652e72..32f93b067df 100644 --- a/CVE-2025/CVE-2025-84xx/CVE-2025-8429.json +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8429.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8429", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T16:15:42.657", - "lastModified": "2025-10-15T14:15:59.433", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:02:24.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8429-centreon-web-all-versions-medium-severity-5119", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8430.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8430.json index 3fca1a73c9e..3a424322fe1 100644 --- a/CVE-2025/CVE-2025-84xx/CVE-2025-8430.json +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8430.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8430", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T17:16:14.403", - "lastModified": "2025-10-15T14:15:59.937", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:10:20.427", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8430-centreon-web-all-versions-medium-severity-5118", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8459.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8459.json index 784063b98b0..d0e3df0f950 100644 --- a/CVE-2025/CVE-2025-84xx/CVE-2025-8459.json +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8459.json @@ -2,8 +2,8 @@ "id": "CVE-2025-8459", "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", "published": "2025-10-14T18:15:37.490", - "lastModified": "2025-10-15T14:16:00.080", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-22T14:09:29.607", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -47,14 +67,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.10.0", + "versionEndExcluding": "23.10.28", + "matchCriteriaId": "52CE7EB8-492F-4469-9E01-8C63144D785F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.04.0", + "versionEndExcluding": "24.04.18", + "matchCriteriaId": "7C3C1C61-F2EB-4900-9BB7-C80A6C538E5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*", + "versionStartIncluding": "24.10.0", + "versionEndExcluding": "24.10.13", + "matchCriteriaId": "09800EB4-10FC-4667-9FC8-88D9A8BB2751" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/centreon/centreon/releases", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Release Notes" + ] }, { "url": "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8459-centreon-web-all-versions-high-severity-5117", - "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7" + "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-88xx/CVE-2025-8848.json b/CVE-2025/CVE-2025-88xx/CVE-2025-8848.json new file mode 100644 index 00000000000..f4eb9c81cee --- /dev/null +++ b/CVE-2025/CVE-2025-88xx/CVE-2025-8848.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-8848", + "sourceIdentifier": "security@huntr.dev", + "published": "2025-10-22T14:15:52.393", + "lastModified": "2025-10-22T14:15:52.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When a logged-in user sends an HTTP GET request with a crafted Accept-Language header, arbitrary HTML can be injected into the tag of the response. This can lead to potential security risks such as cross-site scripting (XSS) attacks." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@huntr.dev", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@huntr.dev", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://huntr.com/bounties/a05ebc1f-882a-4adc-b178-d3cefa4b730e", + "source": "security@huntr.dev" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index fd08c6f5156..1641eec5040 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-22T14:00:13.638813+00:00 +2025-10-22T16:00:13.850775+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-22T13:56:16.287000+00:00 +2025-10-22T15:58:29.237000+00:00 ``` ### Last Data Feed Release @@ -33,34 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -314971 +315264 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `293` -- [CVE-2025-11086](CVE-2025/CVE-2025-110xx/CVE-2025-11086.json) (`2025-10-22T12:15:33.427`) -- [CVE-2025-11411](CVE-2025/CVE-2025-114xx/CVE-2025-11411.json) (`2025-10-22T13:15:29.210`) +- [CVE-2025-62024](CVE-2025/CVE-2025-620xx/CVE-2025-62024.json) (`2025-10-22T15:16:03.797`) +- [CVE-2025-62025](CVE-2025/CVE-2025-620xx/CVE-2025-62025.json) (`2025-10-22T15:16:03.913`) +- [CVE-2025-62026](CVE-2025/CVE-2025-620xx/CVE-2025-62026.json) (`2025-10-22T15:16:04.037`) +- [CVE-2025-62027](CVE-2025/CVE-2025-620xx/CVE-2025-62027.json) (`2025-10-22T15:16:04.160`) +- [CVE-2025-62029](CVE-2025/CVE-2025-620xx/CVE-2025-62029.json) (`2025-10-22T15:16:04.287`) +- [CVE-2025-62042](CVE-2025/CVE-2025-620xx/CVE-2025-62042.json) (`2025-10-22T15:16:04.410`) +- [CVE-2025-62048](CVE-2025/CVE-2025-620xx/CVE-2025-62048.json) (`2025-10-22T15:16:04.533`) +- [CVE-2025-62052](CVE-2025/CVE-2025-620xx/CVE-2025-62052.json) (`2025-10-22T15:16:04.667`) +- [CVE-2025-62054](CVE-2025/CVE-2025-620xx/CVE-2025-62054.json) (`2025-10-22T15:16:04.790`) +- [CVE-2025-62058](CVE-2025/CVE-2025-620xx/CVE-2025-62058.json) (`2025-10-22T15:16:04.930`) +- [CVE-2025-62060](CVE-2025/CVE-2025-620xx/CVE-2025-62060.json) (`2025-10-22T15:16:05.080`) +- [CVE-2025-62061](CVE-2025/CVE-2025-620xx/CVE-2025-62061.json) (`2025-10-22T15:16:05.213`) +- [CVE-2025-62062](CVE-2025/CVE-2025-620xx/CVE-2025-62062.json) (`2025-10-22T15:16:05.343`) +- [CVE-2025-62063](CVE-2025/CVE-2025-620xx/CVE-2025-62063.json) (`2025-10-22T15:16:05.467`) +- [CVE-2025-62068](CVE-2025/CVE-2025-620xx/CVE-2025-62068.json) (`2025-10-22T15:16:05.590`) +- [CVE-2025-62069](CVE-2025/CVE-2025-620xx/CVE-2025-62069.json) (`2025-10-22T15:16:05.720`) +- [CVE-2025-62070](CVE-2025/CVE-2025-620xx/CVE-2025-62070.json) (`2025-10-22T15:16:05.853`) +- [CVE-2025-62071](CVE-2025/CVE-2025-620xx/CVE-2025-62071.json) (`2025-10-22T15:16:05.977`) +- [CVE-2025-62072](CVE-2025/CVE-2025-620xx/CVE-2025-62072.json) (`2025-10-22T15:16:06.100`) +- [CVE-2025-62073](CVE-2025/CVE-2025-620xx/CVE-2025-62073.json) (`2025-10-22T15:16:06.223`) +- [CVE-2025-62525](CVE-2025/CVE-2025-625xx/CVE-2025-62525.json) (`2025-10-22T15:16:07.017`) +- [CVE-2025-62526](CVE-2025/CVE-2025-625xx/CVE-2025-62526.json) (`2025-10-22T15:16:07.177`) +- [CVE-2025-62604](CVE-2025/CVE-2025-626xx/CVE-2025-62604.json) (`2025-10-22T15:16:07.343`) +- [CVE-2025-62606](CVE-2025/CVE-2025-626xx/CVE-2025-62606.json) (`2025-10-22T15:16:07.493`) +- [CVE-2025-8848](CVE-2025/CVE-2025-88xx/CVE-2025-8848.json) (`2025-10-22T14:15:52.393`) ### CVEs modified in the last Commit -Recently modified CVEs: `13` +Recently modified CVEs: `85` -- [CVE-2024-27889](CVE-2024/CVE-2024-278xx/CVE-2024-27889.json) (`2025-10-22T13:49:56.060`) -- [CVE-2025-10020](CVE-2025/CVE-2025-100xx/CVE-2025-10020.json) (`2025-10-22T12:15:32.397`) -- [CVE-2025-22831](CVE-2025/CVE-2025-228xx/CVE-2025-22831.json) (`2025-10-22T13:41:37.080`) -- [CVE-2025-22832](CVE-2025/CVE-2025-228xx/CVE-2025-22832.json) (`2025-10-22T13:42:02.660`) -- [CVE-2025-22833](CVE-2025/CVE-2025-228xx/CVE-2025-22833.json) (`2025-10-22T13:44:31.173`) -- [CVE-2025-33044](CVE-2025/CVE-2025-330xx/CVE-2025-33044.json) (`2025-10-22T13:45:20.287`) -- [CVE-2025-40658](CVE-2025/CVE-2025-406xx/CVE-2025-40658.json) (`2025-10-22T13:56:16.287`) -- [CVE-2025-40659](CVE-2025/CVE-2025-406xx/CVE-2025-40659.json) (`2025-10-22T13:53:46.343`) -- [CVE-2025-40660](CVE-2025/CVE-2025-406xx/CVE-2025-40660.json) (`2025-10-22T13:53:05.590`) -- [CVE-2025-40661](CVE-2025/CVE-2025-406xx/CVE-2025-40661.json) (`2025-10-22T13:43:56.973`) -- [CVE-2025-40662](CVE-2025/CVE-2025-406xx/CVE-2025-40662.json) (`2025-10-22T13:33:48.703`) -- [CVE-2025-4231](CVE-2025/CVE-2025-42xx/CVE-2025-4231.json) (`2025-10-22T12:57:48.007`) -- [CVE-2025-6021](CVE-2025/CVE-2025-60xx/CVE-2025-6021.json) (`2025-10-22T13:08:44.160`) +- [CVE-2025-60772](CVE-2025/CVE-2025-607xx/CVE-2025-60772.json) (`2025-10-22T15:16:01.193`) +- [CVE-2025-60790](CVE-2025/CVE-2025-607xx/CVE-2025-60790.json) (`2025-10-22T15:16:01.357`) +- [CVE-2025-61757](CVE-2025/CVE-2025-617xx/CVE-2025-61757.json) (`2025-10-22T15:16:01.527`) +- [CVE-2025-61762](CVE-2025/CVE-2025-617xx/CVE-2025-61762.json) (`2025-10-22T15:16:01.660`) +- [CVE-2025-61763](CVE-2025/CVE-2025-617xx/CVE-2025-61763.json) (`2025-10-22T15:16:01.790`) +- [CVE-2025-61764](CVE-2025/CVE-2025-617xx/CVE-2025-61764.json) (`2025-10-22T15:16:01.910`) +- [CVE-2025-61765](CVE-2025/CVE-2025-617xx/CVE-2025-61765.json) (`2025-10-22T14:15:52.040`) +- [CVE-2025-61881](CVE-2025/CVE-2025-618xx/CVE-2025-61881.json) (`2025-10-22T15:16:02.030`) +- [CVE-2025-61885](CVE-2025/CVE-2025-618xx/CVE-2025-61885.json) (`2025-10-22T15:16:02.153`) +- [CVE-2025-61996](CVE-2025/CVE-2025-619xx/CVE-2025-61996.json) (`2025-10-22T14:45:18.763`) +- [CVE-2025-61997](CVE-2025/CVE-2025-619xx/CVE-2025-61997.json) (`2025-10-22T14:45:25.083`) +- [CVE-2025-61998](CVE-2025/CVE-2025-619xx/CVE-2025-61998.json) (`2025-10-22T14:45:10.300`) +- [CVE-2025-61999](CVE-2025/CVE-2025-619xx/CVE-2025-61999.json) (`2025-10-22T14:45:32.930`) +- [CVE-2025-62290](CVE-2025/CVE-2025-622xx/CVE-2025-62290.json) (`2025-10-22T15:16:06.357`) +- [CVE-2025-62475](CVE-2025/CVE-2025-624xx/CVE-2025-62475.json) (`2025-10-22T15:16:06.480`) +- [CVE-2025-62476](CVE-2025/CVE-2025-624xx/CVE-2025-62476.json) (`2025-10-22T15:16:06.613`) +- [CVE-2025-62477](CVE-2025/CVE-2025-624xx/CVE-2025-62477.json) (`2025-10-22T15:16:06.777`) +- [CVE-2025-62478](CVE-2025/CVE-2025-624xx/CVE-2025-62478.json) (`2025-10-22T15:16:06.897`) +- [CVE-2025-62592](CVE-2025/CVE-2025-625xx/CVE-2025-62592.json) (`2025-10-22T14:15:52.217`) +- [CVE-2025-62598](CVE-2025/CVE-2025-625xx/CVE-2025-62598.json) (`2025-10-22T14:19:55.570`) +- [CVE-2025-6791](CVE-2025/CVE-2025-67xx/CVE-2025-6791.json) (`2025-10-22T14:06:29.580`) +- [CVE-2025-8428](CVE-2025/CVE-2025-84xx/CVE-2025-8428.json) (`2025-10-22T14:08:48.743`) +- [CVE-2025-8429](CVE-2025/CVE-2025-84xx/CVE-2025-8429.json) (`2025-10-22T14:02:24.350`) +- [CVE-2025-8430](CVE-2025/CVE-2025-84xx/CVE-2025-8430.json) (`2025-10-22T14:10:20.427`) +- [CVE-2025-8459](CVE-2025/CVE-2025-84xx/CVE-2025-8459.json) (`2025-10-22T14:09:29.607`) ## Download and Usage diff --git a/_state.csv b/_state.csv index b27227ccd89..154224ca4db 100644 --- a/_state.csv +++ b/_state.csv @@ -85110,6 +85110,7 @@ CVE-2016-15044,0,0,d87c1aacc5e51ecb2939e3e241ba652fc22324f4df0861d7514968de3db25 CVE-2016-15045,0,0,52509256361bfd36ff6c2649b4115c18fe4d6c5229c9d22b7de65184a9bfff54,2025-07-25T15:29:44.523000 CVE-2016-15046,0,0,9c4f7ad122c6fe7ac786073c9a81edde445c4eca3b3756bd24e5d99a685ada6f,2025-07-30T16:15:24.987000 CVE-2016-15047,0,0,0358521a0fff0d5210166d81c4d87ee45f78c7bbf4ccccbbc83b6e75a629802f,2025-10-14T19:37:28.107000 +CVE-2016-15048,1,1,2fc70e14d62901582f5335526836df1338c1cfeeea4f1b5c7fdd9cbbd76a28e8,2025-10-22T15:15:30.923000 CVE-2016-1505,0,0,a78d4f4b7b935401dc8997b39de87702499467bb350ff6ddc0188f933a2544fa,2025-04-12T10:46:40.837000 CVE-2016-1513,0,0,06136b6111d450b6f9a09af32cd105798eeb2e0357d398298aa697c3a3f64994,2025-04-12T10:46:40.837000 CVE-2016-1514,0,0,b7fef097b48e8e79c45cbf0778b00b6a0da537c685d5ef916a10faf8cfdae6e7,2023-11-07T02:29:56.923000 @@ -215369,6 +215370,33 @@ CVE-2022-50552,0,0,0990f269a29ca36abfdd09349f5d3e874274f89bf7459cd358794ba078e56 CVE-2022-50553,0,0,030cd58eb0e570998c849b5ddb248f5189fbf8974ce1060af22e73d6601633c2,2025-10-08T19:38:32.610000 CVE-2022-50554,0,0,eef01af73852cb4a274bb0c6d4a66b8621408c880b92f365f6fadd36ce161def,2025-10-08T19:38:32.610000 CVE-2022-50555,0,0,a8002e4270169d8b77445359ea629db10972b63b948d82bec523ef539c9c1b24,2025-10-08T19:38:32.610000 +CVE-2022-50556,1,1,e004578dc7423c2b47244ca707edb8f5c3d67ef9eb97afd8b04d6cc31aea2778,2025-10-22T14:15:39.673000 +CVE-2022-50557,1,1,8bdb1512158bab85d9a2335937caa8218164feee8cb647b286ae4e8c06aeff9a,2025-10-22T14:15:40.403000 +CVE-2022-50558,1,1,464831996d1a0b3e64ec6d62aa3e10df46ea5a1f8524407a66b647b11c878245,2025-10-22T14:15:40.513000 +CVE-2022-50559,1,1,69c41c29b94ed04be21032b6c0fa75227d08b2e1d30361479e5936c0b81df9ff,2025-10-22T14:15:40.627000 +CVE-2022-50560,1,1,6de87007408d9bc56617246bfb7a3a28d388d8d6c13419e5626ea3f7fbc08b0e,2025-10-22T14:15:40.737000 +CVE-2022-50561,1,1,501eadc9d588a6ff3d4e9b9d641ab07cf415983aec2c3429f564653377080db9,2025-10-22T14:15:40.847000 +CVE-2022-50562,1,1,65f6c9cb90445ba6c74f294ca21c99c0526b6fe29012d5f9f03047df0379dbea,2025-10-22T14:15:40.953000 +CVE-2022-50563,1,1,2d07b32a9dfc14fdb9927344523e0e336f79c4699798d8166d80ea307f0581a3,2025-10-22T14:15:41.067000 +CVE-2022-50564,1,1,f28c79941aebdce397d239f013e6e6753857af0e6835265d1ab80ba67ae55f00,2025-10-22T14:15:41.193000 +CVE-2022-50565,1,1,50eb66c8b374bcaad75bee47cd3365b0522e999d038518af254d588c4d4a1e1f,2025-10-22T14:15:41.313000 +CVE-2022-50566,1,1,716e50c0f8e024c743e970d5ea3e4c4b40c2125b0f8f533ebac33fe0c15d3221,2025-10-22T14:15:41.420000 +CVE-2022-50567,1,1,f30c9ee73836967d5d581f28773ef9e52207ef40309bd9b9ce1d29200246b456,2025-10-22T14:15:41.533000 +CVE-2022-50568,1,1,1f4b8ce263e7d0187959e0fa925760c30d2f66201039ce63972eb2f3ee269b54,2025-10-22T14:15:41.657000 +CVE-2022-50569,1,1,f87ae4f6ad4cf997bcbd65c2aaea7d8f8e6935a644bbb3c0eff1d527560430f9,2025-10-22T14:15:41.780000 +CVE-2022-50570,1,1,72c853900540bfbfc2f61910a14d555b4bca2e93873c01a4c1e744f6ab5705c2,2025-10-22T14:15:41.910000 +CVE-2022-50571,1,1,e0f5c6372d7f77cf9cefd955788b0266b2f4c9512a40e67b4a767e3ffc2146f7,2025-10-22T14:15:42.020000 +CVE-2022-50572,1,1,fc0989273abdd702bba0c72c2eed9ed701b783dad4a7525d75b08259c13a8e37,2025-10-22T14:15:42.123000 +CVE-2022-50573,1,1,214f5aa1215ba49452c727de67983faeaa835b043c9e5f6da4bc333b5b9add71,2025-10-22T14:15:42.233000 +CVE-2022-50574,1,1,d535a81ba206a98768b10e2a53c5a1d58005ffad58650b5f1da4a133e9a73f20,2025-10-22T14:15:42.333000 +CVE-2022-50575,1,1,67dcce56df334a8a7c121aafa4ae4dd08299bc7cd05d6e2ce16e2ae4aaff23c6,2025-10-22T14:15:42.443000 +CVE-2022-50576,1,1,213734e215cb54762eda498887a560befee19904ba0cc441f8f4b10c5cf630c2,2025-10-22T14:15:42.560000 +CVE-2022-50577,1,1,427c5e9e2b04138bd67f48937df2787b5c9f5efd810fe0d1f8fd4338710d0f58,2025-10-22T14:15:42.677000 +CVE-2022-50578,1,1,14f677ec25adf9c1294d67cae868b06fe3bcadb191e80db6f6ee6c381c351115,2025-10-22T14:15:42.803000 +CVE-2022-50579,1,1,3a2ebcbc1185b818abfc910bbabc1bf5fe0ce267d15d82e3867549d1991e93ae,2025-10-22T14:15:42.927000 +CVE-2022-50580,1,1,a2fbae3b98c219ae25b21916f76c476e88160aa29691f8988fb007c8544b35fc,2025-10-22T14:15:43.037000 +CVE-2022-50581,1,1,7f0e31d306a9b542a9d4f4daea8885f262063399f5b421113b60480e87c0efb7,2025-10-22T14:15:43.147000 +CVE-2022-50582,1,1,26ce44ff93eadb47980a74e1654e28cb2c3538a6e688d4199de0f85d56d5f07c,2025-10-22T14:15:43.267000 CVE-2023-0001,0,0,2dfbf6dbe59b530ec18f5af443ba14cd4d2a5b201d3a1ffcc25574a8da444091,2024-11-21T07:36:22.050000 CVE-2023-0002,0,0,d4360529168fea353efb6226181fd2ab0e85944e3049df689718cf07491ef7ac,2024-11-21T07:36:22.187000 CVE-2023-0003,0,0,e9130921c34a8d1b2e06e89be0ccfee8f78c6c04b42ac1af0311d8e1a3808a43,2025-02-13T17:15:52.570000 @@ -244000,11 +244028,52 @@ CVE-2023-53685,0,0,82caa6b34ac23a3555179b6b043f7768a61ce439aba1ce206dbedc6f8f16f CVE-2023-53686,0,0,85c53e668d0fd84e1449bced26914390872934915ac39ee1447725c6a36ee49a,2025-10-08T19:38:09.863000 CVE-2023-53687,0,0,7ca7e15d78a9aa87874f125632433e623191255e24aa7a2e41a5faa8181c9f55,2025-10-08T19:38:09.863000 CVE-2023-5369,0,0,5a960713aa432daa1bd0a1a7b2d376ea65013f18f28eb756b92658f2b4d3bc7f,2024-11-21T08:41:37.637000 -CVE-2023-53691,0,0,b0538bd607edb2f1198e739030f54f468bf0bec86d4d66ce077915a91b9b86e3,2025-10-22T04:15:51.837000 +CVE-2023-53691,0,1,d04669193e6e6af143f9d73672a8b6bdd024a02bee98b9af5d08e0ad64574345,2025-10-22T14:15:43.380000 +CVE-2023-53692,1,1,5ff20832bd173f6acfd16665a56744a9f3a1747ebe32c6392cf817b2627a4569,2025-10-22T14:15:43.670000 +CVE-2023-53693,1,1,23304cfbf4bc67d4bb236fafc2fe7d15a7003f8606b12b7fb4ede63ad215c7b8,2025-10-22T14:15:43.787000 +CVE-2023-53694,1,1,c042bc4408dbde085518e6aad6fdad21540e209abaf0a7e11858e048281197fb,2025-10-22T14:15:43.887000 +CVE-2023-53695,1,1,d5860b3c9a71f4584f885726b8fabc2df8bd1737d1d93abf3834de8f695f1143,2025-10-22T14:15:44 +CVE-2023-53696,1,1,2001385fd1acf4272bf78901704b97bb591172ce729221b8f1e0e980ebe75a33,2025-10-22T14:15:44.113000 +CVE-2023-53697,1,1,bfa9ce4edba629da4a6f1e9a2adbd305a8c530df1ff186d3dd4de4bd6e5d467c,2025-10-22T14:15:44.223000 +CVE-2023-53698,1,1,119059db665d71b6e3d9709a8f6797859cd258475ced2364cc5b27367884839d,2025-10-22T14:15:44.330000 +CVE-2023-53699,1,1,872b69b679840037940162202a676b18ac4f39ed0e4c51eed10901286fee66c1,2025-10-22T14:15:44.437000 CVE-2023-5370,0,0,824bde48a5aece2e4ee76bb0ae65d0c294423f66034c34ce7ba99025ea8be1da,2024-11-21T08:41:37.753000 +CVE-2023-53700,1,1,90a65cf4980612173abd39e1e19d1eb4c2b86366c63e82fa4175014592cfd097,2025-10-22T14:15:44.547000 +CVE-2023-53701,1,1,4c99e370fc6e1810fef8d8bcb4fe8a22c812cd69aeede9154bbaad588be728bf,2025-10-22T14:15:44.660000 +CVE-2023-53702,1,1,7e69a7293251fc3aca62b85c0b88a010f66d7c6820cdc6815f836fe13a4428ce,2025-10-22T14:15:44.760000 +CVE-2023-53703,1,1,7054acec9c316fb047b6960730c5e71ace6e06cf829de8205dbc31bec64f7959,2025-10-22T14:15:44.873000 +CVE-2023-53704,1,1,accdde395aacad1ff69797ed09fa7aa3758f2fb4dfbf9c4ac0b10f5e5dd64e0f,2025-10-22T14:15:44.977000 +CVE-2023-53705,1,1,0d43bcb93a5e18809c3ca430e68161c367452b8dc6622babcfa8a4dae08b239a,2025-10-22T14:15:45.080000 +CVE-2023-53706,1,1,89c5eeebb047fe2b99324e16db927094ff24bec0a3791f5c7a7d89c9dfcaa39c,2025-10-22T14:15:45.197000 +CVE-2023-53707,1,1,8aa7c3ce06f0a711a0bad186befa6079707d4e9e13f853efa2a45549e4682d1f,2025-10-22T14:15:45.303000 +CVE-2023-53708,1,1,fe6d75bdb3fea6631ed58461f0620bed5a92f5a72262bd660e6f3c04a2aba972,2025-10-22T14:15:45.403000 +CVE-2023-53709,1,1,d0e230d59b2988ac21c836a487af2fbacb6f0ebda369bc24f8a0814565484ecb,2025-10-22T14:15:45.510000 CVE-2023-5371,0,0,64ebca3e66cd0923c31998e99b104c6805bb212ffa90878f37fc66cf1db1233b,2024-11-21T08:41:37.880000 +CVE-2023-53710,1,1,62da3a0be67f0e13862084e871e7d3861d31f61bf8cd3c97f50bf5931c060609,2025-10-22T14:15:45.613000 +CVE-2023-53711,1,1,f8e8ce9aa21612a749ad4bdaa88d3f325f2abd8040cb36b5242eb5a81c9bf12d,2025-10-22T14:15:45.713000 +CVE-2023-53712,1,1,6b3b4d9db7f66d4316fdcbde3a7c563d23db8e5b1e2b48c75d0f9503747be17a,2025-10-22T14:15:45.817000 +CVE-2023-53713,1,1,120abed24506cea52b3b4312289f379b10057d97ed2c0c5dca78944dd203c259,2025-10-22T14:15:45.930000 +CVE-2023-53714,1,1,e91861b4f43eb9a11b29e65eb6738365ecd9f23d0dcd41b6148589235a9a6072,2025-10-22T14:15:46.040000 +CVE-2023-53715,1,1,10fb82bf70ea60552b7cf88c15f908660b66a605bd080d9d871e16011e0a6f96,2025-10-22T14:15:46.140000 +CVE-2023-53716,1,1,a3e3910bcc1333063882d30758311b11c085635982937061c9d77fd8e5d5c5e2,2025-10-22T14:15:46.250000 +CVE-2023-53717,1,1,2d17f369f8cf5c12c6768c5a51627e249e758d56d3f524ab16bf3f56d56a89f4,2025-10-22T14:15:46.367000 +CVE-2023-53718,1,1,df26f1654ea863f499d12420d57625a7b6c51fdfe44c2e133922c985cac3e191,2025-10-22T14:15:46.483000 +CVE-2023-53719,1,1,3f0b2bff648c70b5edcbef57997c84d44fa40f2f4581d266f28849b720ab9cb5,2025-10-22T14:15:46.590000 CVE-2023-5372,0,0,2f34bf8a54448302daadb18bb91964552953931fb6f123bda6fce8d1cdf357b9,2024-11-21T08:41:38.017000 +CVE-2023-53720,1,1,83bd4463f3675d9d15d5f1267e86ec3e725cc9fa747456eb4c57fc2e394677f9,2025-10-22T14:15:46.700000 +CVE-2023-53721,1,1,8ab04382e536035dc72a89440beb4cb811b03f118db7dc1eb96a5d7bee1e55a8,2025-10-22T14:15:46.803000 +CVE-2023-53722,1,1,ef19305de399cdaa32c12d0e273e5fb97a4d42fb41ccfcda970da8fb520788db,2025-10-22T14:15:46.920000 +CVE-2023-53723,1,1,1baf8d25b1593fa216b102c9f562d9d36408909700a3fd3e4e668b18a5baa0cd,2025-10-22T14:15:47.480000 +CVE-2023-53724,1,1,1f1f5e3c3bec2afb185bb48970406c65fd4ce9f54437c23c3c05d1609a93ec70,2025-10-22T14:15:47.600000 +CVE-2023-53725,1,1,c423cc7bc6f24a0369c3bf2dfaac268c9675aff119c7b8b074620b7fc764a6bf,2025-10-22T14:15:47.710000 +CVE-2023-53726,1,1,8887f6ec7fe4a8d818cc061110da3f59e19d8d60f8b99c77b141d4a713ac35f9,2025-10-22T14:15:47.837000 +CVE-2023-53727,1,1,aa38be630ea386238d61a1fc8bb8b00f5d656dfa877539bf57ea6ad2f36e273f,2025-10-22T14:15:47.977000 +CVE-2023-53728,1,1,073c025da3ffcee023e763dd2c8c533e46be2186a72765dae3f77d8654d6903e,2025-10-22T14:15:48.083000 +CVE-2023-53729,1,1,5292219fae2511a7a648ef7dc471383cddc91da4b65852a68dbbab2d17c937a3,2025-10-22T14:15:48.193000 CVE-2023-5373,0,0,44d95ed617703438ad6b88e325be7a0597df436fa5bc5e06f6f6f647118d6992,2024-11-21T08:41:38.150000 +CVE-2023-53730,1,1,ca776832b2bb4e70c0055a2feea2bc51d187698e8a79331d5f8cba006efdaa37,2025-10-22T14:15:48.310000 +CVE-2023-53731,1,1,038f99de342283249e144904a7d1dbc9aae6e4d8a10b2dd4fb06a81a79863033,2025-10-22T14:15:48.423000 +CVE-2023-53732,1,1,b01c2887abbbdcd47517a73facf7b29c8aa12e1ded25c062b219413d55b9fb32,2025-10-22T14:15:48.547000 CVE-2023-5374,0,0,e967846aedd932623405ad25c081da57f4ae223861100fbfc7c392f48f45c043,2024-11-21T08:41:38.307000 CVE-2023-5375,0,0,00b09fc77d81d6cbc9af2263843a9dfc650ac53776a22c67a488610f78163a01,2024-11-21T08:41:38.473000 CVE-2023-5376,0,0,e53cfc9a8d7e72e060e762407f1ca5210c789cbdd759be3ca4ad0eaacc04ee2e,2025-10-08T10:15:34.333000 @@ -257768,7 +257837,7 @@ CVE-2024-27885,0,0,972c6f3bab3533adb12226e1a206dc83543c3d88ff981e5bc148aafdf7e49 CVE-2024-27886,0,0,3c715f8c52f1864ddda85ca53b2b16f09102ef3c94476f9d4abb350858861418,2024-12-10T14:54:49.967000 CVE-2024-27887,0,0,27c7d91a187938663d4a01d4c87033037d24e5ace0c9df0921f49ee73def6186,2024-11-21T09:05:21.357000 CVE-2024-27888,0,0,cd0431e20853cd52fac0840f748f121c2c1ffdab2233c1cee21b2fe50a5a00fd,2024-12-10T14:51:04.667000 -CVE-2024-27889,0,1,6981ea91acf26e29131465f607fe9017808b0e26eab756bb225f3a412653e27e,2025-10-22T13:49:56.060000 +CVE-2024-27889,0,0,6981ea91acf26e29131465f607fe9017808b0e26eab756bb225f3a412653e27e,2025-10-22T13:49:56.060000 CVE-2024-2789,0,0,b1690b1b83fedf5140ce93f0eda4241364d6c80c52f2ee1616fa1c36870eb1b9,2025-01-07T18:14:48.107000 CVE-2024-27894,0,0,c170d416ac00386db100292ed0531aa6807f8b95ed4c93c03ab3f5564555fdc1,2025-01-19T03:09:08.147000 CVE-2024-27895,0,0,adf1bb4919c50701bfaf933fc7876be8507e4fd0f0c0c43638547762a50d9fd7,2025-03-28T20:15:21.543000 @@ -261170,7 +261239,7 @@ CVE-2024-32491,0,0,0cc18d2cba15a8594b5f8f06241be7148d1d68c8ad6694906e0663806946b CVE-2024-32492,0,0,828b72af06155d2a432236139d987dceac6812b02509e224b34f87d633398b88,2025-09-02T21:19:51.753000 CVE-2024-32493,0,0,247b685d8f4f122d52e66b0a5beb502fe4c6b3d9ab8762c58092136031d728b0,2025-09-02T21:19:37.193000 CVE-2024-32498,0,0,12014c3a46713798e5d0b7b8c3fe9fcee81b33dbeaf510a37c2294d20a280ae2,2024-11-21T09:15:02.123000 -CVE-2024-32499,0,0,c3ce63866620745f9211b68008786ecef5a49b783c45db7c384c411d8dd9e6c1,2025-05-10T01:03:36.457000 +CVE-2024-32499,0,1,0eb3bd841e52626029ed9ba3975e817fa179d7bc0aeb6b26e746e562255a4303,2025-10-22T15:06:49.100000 CVE-2024-3250,0,0,431049a90a308ef79f7c72da4d20eab85967d6a3c499f9bde1fc38facb5e1e9d,2025-08-26T17:17:50.287000 CVE-2024-32501,0,0,98be2641221601abb08a2bfa6c000097264cea72bc686c39f09de60ba4fec9ee,2025-05-09T14:10:56.243000 CVE-2024-32502,0,0,081db0b286357383a3d89482d895790af91487cd45bae4860bc071d3a38e04a8,2025-07-01T15:00:19.483000 @@ -280506,7 +280575,7 @@ CVE-2024-58265,0,0,b7552704c428833261c15869783f6004e5cb103c70c3b30e74e648f485560 CVE-2024-58266,0,0,4f761f2a88fa77c373ceebfdd5314c674a2acbd7b13253200bca69419616a435,2025-08-07T15:18:56.680000 CVE-2024-58267,0,0,11fb5730599d5d307851725ee1026f75a8bb9b288218666e4c902bb58e8a640c,2025-10-02T19:11:46.753000 CVE-2024-5827,0,0,d83af7fe62780bf2edbbd2aba17ac7e2a79e5ee41ca69db7d52abbfcd5f3d7bd,2025-10-15T13:15:48.180000 -CVE-2024-58274,0,0,4143cb4ee24be0b04156c08728c594eaaead3665e5ade48f9c4a9952835e5946,2025-10-22T04:15:55.680000 +CVE-2024-58274,0,1,aaf9abf459f009457b6fb13e6ac818874e8d7b433790d0546f44a0d53bd21677,2025-10-22T14:15:48.660000 CVE-2024-5828,0,0,73069a2f9dbd005f637a8c432d288f4c861c4d147da919c5c71f3de2432e48cd,2025-01-08T21:25:28.967000 CVE-2024-5829,0,0,f09f0239641fdb754784b919d6546725e07ed84be2384ba5f9478a520ddd6f78,2024-11-21T09:48:24.870000 CVE-2024-5830,0,0,58fa656705847e8888d4baa011f2237c51ab84c7204f0c65ec2147b17109a82d,2024-11-21T09:48:25.010000 @@ -285324,7 +285393,7 @@ CVE-2025-10014,0,0,dee4ff7dabde8c388280df2f71dc0bc013f4bff7efec4ea21c57289d41de3 CVE-2025-10015,0,0,392c4a844597a79d1b5604f77185eab5e96fc6af578c17ec9526926fa3ef514f,2025-09-16T12:49:16.060000 CVE-2025-10016,0,0,3332d29c8e415a6d909cc672ac752c15c8cb6ea094e446d57313cb0cd3f784dd,2025-09-16T12:49:16.060000 CVE-2025-1002,0,0,8a0ce274a6014852624cd98f4510a2359e65674ca94a8883697c40c60509bb23,2025-03-03T17:24:28.480000 -CVE-2025-10020,0,1,ce227f77ffe20874512abf21c0b56dd035f5023eab3aeeb6ea53733b3b7db771,2025-10-22T12:15:32.397000 +CVE-2025-10020,0,0,ce227f77ffe20874512abf21c0b56dd035f5023eab3aeeb6ea53733b3b7db771,2025-10-22T12:15:32.397000 CVE-2025-10025,0,0,6f59950a251f3f2fd3713c5c6a613a4253b09d251a1b358c7e9be9415ed721db,2025-09-10T16:47:06.400000 CVE-2025-10026,0,0,b40fe94db183bd28dd8a2466bced22dc7b61ab098543b73973dc12dab6e07145,2025-09-10T16:45:15.147000 CVE-2025-10027,0,0,720938cc85bbeb5a1e8751ea30a6bd677cebaeb1d6e16d0a7f6b1b0e1f5059a2,2025-09-10T15:56:17.327000 @@ -286199,7 +286268,7 @@ CVE-2025-11080,0,0,b8167a6ecb72930a7147713e4abb8de1cbc272e7960812ab3985688a45821 CVE-2025-11081,0,0,d3a1e7a8473ea60331e3eb8868d36aab96c8239ef8124cf3bb20621ad3dbe154,2025-10-03T16:51:07.390000 CVE-2025-11082,0,0,be2186e27aea220e396b1dd0737d1a3643a8c96d16465fff7fd1c26e38142fd4,2025-10-03T16:52:34.527000 CVE-2025-11083,0,0,7293f729c5cfec6c31a86940239378a867eefbb659ce4ac13bb8f098e4d9b0f2,2025-10-03T16:52:47.010000 -CVE-2025-11086,1,1,27c8f602d767f7277a9c1cd8e8648bfd0845cf713224905b9ca84dd22364cdec,2025-10-22T12:15:33.427000 +CVE-2025-11086,0,0,27c8f602d767f7277a9c1cd8e8648bfd0845cf713224905b9ca84dd22364cdec,2025-10-22T12:15:33.427000 CVE-2025-11088,0,0,eac71d445bef3913ba7039c67527dee273b63ee39d0b9298430d237ed61a60d1,2025-10-03T15:00:40.577000 CVE-2025-11089,0,0,863619c69a95223a4dea473a0858c887b57108ff6bad5dee22028e96e7cf0ace,2025-10-07T18:23:53.097000 CVE-2025-11090,0,0,2f38928aa12e609cf5d87566c2ce2be38a32e2a2a5780810cb3bae7a033ea1d4,2025-10-03T14:44:49.397000 @@ -286431,7 +286500,7 @@ CVE-2025-11407,0,0,f594ab877588fb3965c551a987815a5dabe4aa22e81a07665914d72b4818e CVE-2025-11408,0,0,420241598b24715c4cf826fb3ad938ff2b51adf7a0502ef93b8da2397a7866ef,2025-10-08T19:38:09.863000 CVE-2025-11409,0,0,7acda80d09b0f0e387fa4f4fe6962ee98f08f8b0b783414c036c5d7e0a52d29d,2025-10-09T16:23:28.043000 CVE-2025-11410,0,0,544ce946f7f3d076ad86ea0b62a4569a55c096ae851c0c5a466608860e6ae86a,2025-10-09T16:24:25.223000 -CVE-2025-11411,1,1,bcd22cf25a03f90c28de11401f5c79159aa5f9fa694e411077492105ebec1c13,2025-10-22T13:15:29.210000 +CVE-2025-11411,0,0,bcd22cf25a03f90c28de11401f5c79159aa5f9fa694e411077492105ebec1c13,2025-10-22T13:15:29.210000 CVE-2025-11412,0,0,723261bf6329babb0452f1de3b0b6123e177135fb93ad77fd85244a06a012129,2025-10-14T15:09:07.050000 CVE-2025-11413,0,0,7b7fa89d7b20021aee2d155e0da49c7cfc1740886f2aa670b24b4c993bf4dc6c,2025-10-14T15:24:49.567000 CVE-2025-11414,0,0,94cd3177569fa748b107abf147079f5f522885069fd3215668c73ecf75bea4fe,2025-10-14T15:25:00.127000 @@ -286691,6 +286760,7 @@ CVE-2025-11741,0,0,e8146a0ce2e3133d24dba8af4cbc547d2bc9f823ed269e35be16779250a54 CVE-2025-11742,0,0,a278f85bdaf17c1a69b049b58010b05d4c84ece95ba8c02798d0a8134ae6ec3e,2025-10-21T19:31:25.450000 CVE-2025-11746,0,0,a4ad3da1c5c2ab0b1acd9b2095a5bd254e97c064605783c32b73cf2e331bc296,2025-10-16T15:29:11.563000 CVE-2025-1175,0,0,e4e505608345f018f25d9a8f47aadfc991d7592689b77a43eab3f49ae131ee56,2025-02-10T13:15:26.593000 +CVE-2025-11750,1,1,ef266f17fc6313c29fb9ce5ef76aa69d1ffc73636d60971959cbedbb0c1d650b,2025-10-22T14:15:49.037000 CVE-2025-11757,0,0,a39e3724a2acd53ebd7b29e06d16eb8c46a7a7a751c3cb32874032ba913da6cd,2025-10-21T19:31:25.450000 CVE-2025-1176,0,0,7211655ba673c7f07e260b973e03bf185afc4c6c1eb2b470fbc3c1078b6ea002,2025-04-11T22:15:29.513000 CVE-2025-1177,0,0,a9031c02ad15cd3b79dae0a4c247f1d863fa16483cc0621210d54f890eaefbe0,2025-02-20T15:58:50.097000 @@ -286720,6 +286790,7 @@ CVE-2025-11839,0,0,ad4b8719e351a5ce8bc2749259770445e89d05746d1a5cee752daa3a53126 CVE-2025-1184,0,0,a996a5b9ca4ebbb1f9fd11deb6506d3c2c653dcfd94d785d81330dbd28bab754,2025-10-17T15:19:28.883000 CVE-2025-11840,0,0,27a4ee82c5cc6cc961e314d8ac10141f8a37c406b3e861278390d58d579471a1,2025-10-21T19:31:50.020000 CVE-2025-11842,0,0,c63d517e0e6e60fc772989f21f587cdfc26fb57871cc509b480d397f537eec78,2025-10-21T19:31:50.020000 +CVE-2025-11844,1,1,1e5ef926872d549c43544059e034259de44dafcbd9a87c4e7fc27f51ad5be26f,2025-10-22T14:15:49.457000 CVE-2025-11849,0,0,62335af44694956e00c35729e9d89d32447d7c4bbd55a6ba99df8ab4eb2c25cd,2025-10-21T19:31:50.020000 CVE-2025-1185,0,0,52da1c5206831c8c9aed8f4ecec63514a6308fc7c01cd76d8a4b1c8cd50d7c4b,2025-10-17T15:18:25.190000 CVE-2025-11851,0,0,4737f27a781967129bb47e21d8d909afef641e6dcd33ef25c0703a7d349979ec,2025-10-21T19:31:50.020000 @@ -286779,6 +286850,8 @@ CVE-2025-11949,0,0,3c91bf274a24891c01e515d79a8851d1263137b155508c36ada0c04f9c4e8 CVE-2025-1195,0,0,80f030388af8fea7825bd1907b4fe21f17857f909b5920854f4ff3175ca4ca32,2025-02-20T20:37:54.487000 CVE-2025-11952,0,0,993087435c22bcedaf334105881f0b955f82f0929263b6223fe402a04a760e51,2025-10-22T09:15:36.217000 CVE-2025-1196,0,0,dd006c25814afd256aa97758b279860261417526a6b19678795b25893f289a48,2025-02-20T20:38:49.990000 +CVE-2025-11965,1,1,b2982969aec5d480f5ebca280d8efed6d51e6a2946cd9359de9e030af4ea625e,2025-10-22T15:15:31.590000 +CVE-2025-11966,1,1,47a807bfe6010014bfa8925a7654db59e01a9e6589e045b26fe76aa06741c45b,2025-10-22T15:15:31.730000 CVE-2025-1197,0,0,de43e5b6692d1b9b0eebd9c927bc4fff429b39277d83cf06754f96cad74186b0,2025-02-24T16:15:20.820000 CVE-2025-11979,0,0,9642b1a8afcffc4606674792f7aa0b7b7ce070d4ec9d99c0d148cfad9a62eabb,2025-10-21T19:31:25.450000 CVE-2025-1198,0,0,e25a71be0358dea86a15bfce077af266274efb8869baa5de76d22da5d493dc80,2025-08-06T18:50:00.933000 @@ -289348,7 +289421,7 @@ CVE-2025-22157,0,0,e9b4b6961959e8ff3841a8505a31dc3c8bf1798f27fd9862f6e082ba0b832 CVE-2025-2216,0,0,867b349e0271335326c8c5fc707e904de245f9f385499b80982946b0548b60ea,2025-03-25T17:24:09.643000 CVE-2025-22165,0,0,45710a48b6da859a11c9f39ff6e29e55627f13c200d7041cee24ab5c6bc475e3,2025-07-30T13:05:24.430000 CVE-2025-22166,0,0,5210c4b4d256d5a8b0b4854cfdff0d9eb5def7afd43000b9fcc8ec0b4211508c,2025-10-21T19:31:25.450000 -CVE-2025-22167,0,0,e9feb8dc2a0a885204630468c3b6483236aecee519d84046722f85f1e0764c20,2025-10-22T01:16:08.753000 +CVE-2025-22167,0,1,a1a6f24369fa1533baadb1fe9ea0b891db447a28dfc03a99dacf2b8080c7b819,2025-10-22T14:15:49.967000 CVE-2025-2217,0,0,e15432070f1397c36cc9f6d2b60f563299d4aa944bfdbe7d3691b178bf7fb2a6,2025-03-25T17:22:56.167000 CVE-2025-2218,0,0,d2e889f2da37474575317aa64f34c8da40d4260fe9e8346d79ec8bd705e3b18e,2025-03-25T17:21:14.350000 CVE-2025-2219,0,0,30d38a1628b5b3aad2d82ab25191f037a1dcda252f50241cc821372668408436,2025-03-25T17:19:48.137000 @@ -289985,9 +290058,9 @@ CVE-2025-22827,0,0,3baed988c384781b752e63a63aac2d02b4618a6f769d736ff71142b8ba1a8 CVE-2025-22828,0,0,39a5b744d6ff5c4f03f42f17e0533fcee6d93dac275e60dd6fdcc63387201f7c,2025-07-01T19:20:38.217000 CVE-2025-22829,0,0,5d2323355591036af8275268590702e55752554ece8f91178fecfcf085e83902,2025-06-25T19:38:05.817000 CVE-2025-22830,0,0,5860b52d06fdccdef61b50d900a5230446b1e628f3ff453e75a0f659fc6e1256,2025-10-02T14:11:07.867000 -CVE-2025-22831,0,1,c77316e6f299a2143bce6426ed0bb42c1fa99da7c81743224f9f6a239a50d904,2025-10-22T13:41:37.080000 -CVE-2025-22832,0,1,2c1de9556032fa1fe2730312ebf201f3213e8c80124ba3fd82539e8d69754222,2025-10-22T13:42:02.660000 -CVE-2025-22833,0,1,022d9b4e60eb56430baa0abc8a26375b95ff2200f58a3bf3db68d39ec3f11847,2025-10-22T13:44:31.173000 +CVE-2025-22831,0,0,c77316e6f299a2143bce6426ed0bb42c1fa99da7c81743224f9f6a239a50d904,2025-10-22T13:41:37.080000 +CVE-2025-22832,0,0,2c1de9556032fa1fe2730312ebf201f3213e8c80124ba3fd82539e8d69754222,2025-10-22T13:42:02.660000 +CVE-2025-22833,0,0,022d9b4e60eb56430baa0abc8a26375b95ff2200f58a3bf3db68d39ec3f11847,2025-10-22T13:44:31.173000 CVE-2025-22834,0,0,b8f825f4f32ede650c5d8a2ab85d56de557a6d004ff2654e2412ea74ee6762dc,2025-10-02T14:13:43.570000 CVE-2025-22835,0,0,5a3dcbb0db6caed0d293b2385a1d98cd90d73989d0608fc471dc171b2ccb9358,2025-03-06T18:08:28.420000 CVE-2025-22836,0,0,0397d23cc82817a9951afcf58397383ecfaf4e47dd2392f2243fc3e5fb2ebd42,2025-08-13T17:34:12.350000 @@ -290451,7 +290524,7 @@ CVE-2025-23349,0,0,009afe7ba705996e437d57ae5552cf871b5896a917b1c30109622597df36e CVE-2025-2335,0,0,833479a18c8a0594376e23428e7b5d0c44e7fee9fa697872f4bc27a1568d612e,2025-03-16T03:15:37.907000 CVE-2025-23353,0,0,4333467a418d531bf1c36a16cf65e2f44122354bc3e9f463473f1928af99b740,2025-10-10T18:21:55.320000 CVE-2025-23354,0,0,848bbbcc7baa98e63f59ba3a8e815fc5140bb5d718587da095009cbc5f560524,2025-10-10T18:24:20.567000 -CVE-2025-23355,0,0,8979f674f82aab856d5a05d4842dca0c8f1ff10fc97807f36251092e7c9fc6bd,2025-10-02T19:11:46.753000 +CVE-2025-23355,0,1,17d99aac4fbee41f78cc630b412d47c73f000a315217c5d59de966a79a8bde09,2025-10-22T15:50:29.027000 CVE-2025-23356,0,0,fa8c0c786149fcca4bad7d91fe9d51842ab92bad081d783154edbe5c681d5f9a,2025-10-14T19:35:56.913000 CVE-2025-23359,0,0,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000 CVE-2025-2336,0,0,e04e263f577ee94994be76c7f45e2a366ef0c6a3a1e415c7a4e9e5f507e17810,2025-06-05T20:12:23.777000 @@ -292558,12 +292631,12 @@ CVE-2025-25728,0,0,8bf984e1467b4d8142842e319e1c0a79db3cce3b3976d2a54ebea90ce191a CVE-2025-25729,0,0,37dccbd23e8b05f5aabcfb584977649888f3f534d26d5e574ce2d7e88687c4b1,2025-02-28T16:15:39.707000 CVE-2025-2573,0,0,9533157eb5528ef7f577a7b77f9eee7a7a2ab78fc05533cbaab118aab8be28b5,2025-03-27T16:45:46.410000 CVE-2025-25730,0,0,2d4e8c99634c9753085f1bf0f3dc2ae2d2ae9a31f8634761394f303c2de1e717,2025-02-28T20:15:46.803000 -CVE-2025-25732,0,0,7b3de96a21e14100c02cb1944a98a2734c5ed67ceebd83a2a6f0b015ee0efa77,2025-09-17T17:54:02.850000 -CVE-2025-25733,0,0,2d7ca8b3c789f8dd34649097435823282f60962d2fd85dcaf541b4acefe4fb7a,2025-09-18T15:31:39.373000 -CVE-2025-25734,0,0,f0c4436a150414dcd89e466245b52961a102d714a6fcb66cd40154085090f182,2025-09-16T19:37:16.167000 -CVE-2025-25735,0,0,57397efe1a583d0640779e408d8f2740a75e3aaa866704cd6a665b8fea3a388d,2025-09-16T19:33:52.560000 -CVE-2025-25736,0,0,3398b2764104bf6d2bd29f41d5ba00c22ba565a697e53b0452a73b52f8835a8f,2025-09-16T19:27:50.197000 -CVE-2025-25737,0,0,da2fc0384058c4077239c29a168f7f78d94283f8b2105042b06dca22841176f9,2025-09-16T19:22:37.060000 +CVE-2025-25732,0,1,cfb8dc9d8fc5d36b01bf70f72ee92ca460c683d4730b46dd2377f49b793b544c,2025-10-22T15:15:31.900000 +CVE-2025-25733,0,1,bfe1f4ad1661a6f8ef7528c88d5742a7fbea4f0aa75a38bb83547a3d3287ca86,2025-10-22T15:15:32.110000 +CVE-2025-25734,0,1,2e13fef340d9d635371322fdc1be41dda2cdf83ce653364b9cd8cbadc150e4cf,2025-10-22T15:15:32.290000 +CVE-2025-25735,0,1,432830f1e2cf4f3cd3f7de26dd262ca2aee2ac46783cee2547cd007274eb4220,2025-10-22T15:15:32.477000 +CVE-2025-25736,0,1,b9dff5d01b022e77254c09e8f690d022a99ab13510f6c8840ec524e487d78bca,2025-10-22T15:15:32.663000 +CVE-2025-25737,0,1,a6c434594a6394ea7813cbea1128d25effb9365e73d00db655b7b09f1bc67ce0,2025-10-22T15:15:32.847000 CVE-2025-2574,0,0,3831d9f6d2c6e64a3f6f424e624ed870cec868933425e1c23ad5e1c9a5469e70,2025-10-06T23:15:33.957000 CVE-2025-25740,0,0,828db612c79270ec87dd7bd6aeff65dcb38eec84fcf0619fcd386af4bdbd1dbf,2025-05-02T17:53:59.500000 CVE-2025-25741,0,0,dcf65f87864f77031e84c94e39c320820bb5688fbb215535dbe0a1bb87055fc8,2025-05-02T17:54:01 @@ -295994,6 +296067,7 @@ CVE-2025-30940,0,0,42cc8020b187c2f949cd6ca6d60c91abf4e2645d02b7d6662331d5fba5cd1 CVE-2025-30941,0,0,1c2966e356bddf3fcb845bb906443c5988ec06a31097f9dedb5132243f5cfd10,2025-06-06T14:06:58.193000 CVE-2025-30942,0,0,dde98355d7ce6340be6dc8c110c67875471abfc9f14a5688f6740ac71c8ecf81,2025-06-06T14:06:58.193000 CVE-2025-30943,0,0,7a3e5d44ce9ff25c324e0ef225cce0c149f1bf7e75e66014f1c06d249dd3129b,2025-07-08T16:18:53.607000 +CVE-2025-30944,1,1,c2ff2eb7c1945f54a97b080a3c41159331b1166c120594c0219bdf3d05410fb3,2025-10-22T15:15:33.033000 CVE-2025-30945,0,0,ebf61fa52f5c4ae178ace28182f9812657771e01a723955d70da59b3eae4def5,2025-06-06T14:06:58.193000 CVE-2025-30946,0,0,2d6503706b8d5d9272b6eacd8d3449f9294370663691a3eb20d6635679bda2c5,2025-06-06T14:06:58.193000 CVE-2025-30947,0,0,4b7658923d1bf549cb6214315f82164f8390baa1ce30b2c47ded4545f3f0c16b,2025-07-08T16:18:53.607000 @@ -296642,6 +296716,7 @@ CVE-2025-31630,0,0,88a0a623ea5a0b2042bb8e3f6acee38a0d07b7a906c52f601cee31c2a2928 CVE-2025-31631,0,0,a5b9042c958fc93cd2e505e5035b289a87c2c8751b816e209ee262befee35de4,2025-05-23T15:54:42.643000 CVE-2025-31632,0,0,681b150562daa062b510f4bb34a8c6b65fee5d484d4ac4f0fb81469c44ecf3ec,2025-05-23T15:54:42.643000 CVE-2025-31633,0,0,062186da49525f6fb8d18b557f38feaf8d2bcb267cc6064e1c70ec87bbb1caac,2025-05-23T15:54:42.643000 +CVE-2025-31634,1,1,5aefc389ea2ab5586e6ef48fd2bfc64bffe920447f674c54ee4cb625fcb6088f,2025-10-22T15:15:33.180000 CVE-2025-31635,0,0,9e6a64d8848beecdc4a52c17134fb1a534c97772b7e8c8f584ea467983e811da,2025-06-12T16:06:47.857000 CVE-2025-31636,0,0,17b303fd661590f8fac9bca790c6567e8580a3d8f4f3962c792851a7e42031d8,2025-05-23T15:54:42.643000 CVE-2025-31637,0,0,53e73c8f6cb038aecf663b53032f054870910773ffd0f86a605179ee5e450bd6,2025-05-19T13:35:50.497000 @@ -297224,6 +297299,7 @@ CVE-2025-3228,0,0,1105b6b65e5beb93c1d1364d657c02d418564bf3d5e4ecf880e9d5d6165bdd CVE-2025-32280,0,0,51a846a5a42c043aab0e6fac915214336a31c77ee73a0ba45d8879819031b4bd,2025-04-09T16:24:47.373000 CVE-2025-32281,0,0,4e20111bb98613c549deb41ae88197a2cdb1de05ece054d260b974988fda3df0,2025-06-30T18:38:48.477000 CVE-2025-32282,0,0,4c53220555eedeae13ce6f318e3c3f0db70bd45e8d4e3f3e7970ecccd4879e13,2025-04-11T15:39:52.920000 +CVE-2025-32283,1,1,0696f86cba5637947ee7a8cc06fc7391c5446a52d9b6e2c8ce3f7df29f8f8cf1,2025-10-22T15:15:33.307000 CVE-2025-32284,0,0,c6c409bf78de0be6dacf6f02b11afe1875b860843882ef4088c29e36571e2681,2025-05-23T15:54:42.643000 CVE-2025-32285,0,0,a4220f34e85774d9d813e1f3540215c861be5c9d5d52c32a399fabdc3e2e16c8,2025-05-23T15:54:42.643000 CVE-2025-32286,0,0,2879556ae201f433727d563625bb801ddc40cd7b010a1259ca66a8bee709234e,2025-05-23T15:54:42.643000 @@ -297576,6 +297652,7 @@ CVE-2025-32653,0,0,8e9afae170e56467510d6954a3c6f011348ffe7e2785fcb0e2913338c23e8 CVE-2025-32654,0,0,112b25e433b99a7584fad0c05ac3ddf191218f57c077c655570df70d13ef099b,2025-04-11T15:39:52.920000 CVE-2025-32655,0,0,3a639aa1a644587884178b3f457d1c4106f34df364a07304bd3af26323210c36,2025-04-17T20:21:05.203000 CVE-2025-32656,0,0,f78d451c9cc8ba03e960f053f1149961135101a940f08c9977cabd6ee6246bb5,2025-04-11T15:39:52.920000 +CVE-2025-32657,1,1,51e7237885920893af1785fdc334c9cb649e3c8d1ab28289e868bf432c3291d6,2025-10-22T15:15:33.443000 CVE-2025-32658,0,0,19989db8a58be009021928f7f3cd28539bd88e766d6fa7071f0ad19d8a320407,2025-04-17T20:21:05.203000 CVE-2025-32659,0,0,66310045ef3f9234d128da05ad843397fa2e56b3874a7141374ea700ac6b90be,2025-04-09T20:02:41.860000 CVE-2025-3266,0,0,77c78eb8f47a9a61939417e17b151b3720931921249b16deda3f44cd85f101af,2025-04-07T18:18:56.247000 @@ -297924,7 +298001,7 @@ CVE-2025-33039,0,0,8d49601303553fc6b1987f308ad90cfa00da954426cfabc241cdc32af3aa5 CVE-2025-3304,0,0,cd001e23659b91ac09e62e7f84c563c50c19190543e934899e672b5c50fb7073,2025-05-28T21:10:23.573000 CVE-2025-33040,0,0,dd3981d986390e1d02570ac18d63769b6eefdb89837c63ed85474db3ee2905a2,2025-10-07T15:00:12.290000 CVE-2025-33043,0,0,2811362a166af33b4167a5bdab3138e5b8934656e0127d89cb8a05808193f012,2025-10-02T14:23:44.580000 -CVE-2025-33044,0,1,893d42204cccccf7e63f51832867e588b8250de991aee39b4b2ba90f4e405d9b,2025-10-22T13:45:20.287000 +CVE-2025-33044,0,0,893d42204cccccf7e63f51832867e588b8250de991aee39b4b2ba90f4e405d9b,2025-10-22T13:45:20.287000 CVE-2025-33045,0,0,c2b9d815253fc95a6e412d71121105b17d15029004b6f9c35930173aca916633,2025-10-02T14:12:42.347000 CVE-2025-3305,0,0,caed50d99616da9f2a70f5ff8ff690cbc48b6002cca415c3290f8e367603d490,2025-04-08T16:46:55.203000 CVE-2025-33050,0,0,07069748d987c9cf309d3fef73bdc9c2f3fb7e40f9cd47b631470a115579c21b,2025-07-10T16:16:47.560000 @@ -298411,12 +298488,12 @@ CVE-2025-35041,0,0,01d285a536cf1207ca57249ee1895647366da86608d9af0af9065b504be51 CVE-2025-35042,0,0,7aaa787fcd8a05ed204f1d759034c0338c286b71ebf5cd94de9686086b257e60,2025-09-22T21:22:33.590000 CVE-2025-35050,0,0,46aa71d9af41063221d63ea5ce2148de2875d1f73bc38653e868d12d741fdacd,2025-10-14T19:37:28.107000 CVE-2025-35051,0,0,69c8ae23f05d5f304434c5838cbfa4985eda3e74115be3c2ecfd2c191f61b07c,2025-10-14T19:37:28.107000 -CVE-2025-35052,0,0,edc183f55ac69f54e45b3c388183b8275ea53065dcacf6ffd296e52928523519,2025-10-14T19:37:28.107000 -CVE-2025-35053,0,0,994a34ef0b242fc538b7ee07c3adec26f551c181ffdf085fb1e7a3f15d435ebe,2025-10-14T19:37:28.107000 -CVE-2025-35054,0,0,3d6bd635e418c1fa87e71a1d915ab3e8483579dfb402bada0ffa41a379bbb4d0,2025-10-14T19:37:28.107000 -CVE-2025-35055,0,0,704ba94178011f05584b54c17143277b8e79052330399d123c26c37636305896,2025-10-14T19:37:28.107000 -CVE-2025-35056,0,0,0f30acb1306d3051e1577de0609e2be1ba920372305912ff2ba46ff16f61d6e4,2025-10-14T19:37:28.107000 -CVE-2025-35057,0,0,488ee7f39b2e121fcdda887b2ff32742235dc07c66b719478f16b4613f34a737,2025-10-14T19:37:28.107000 +CVE-2025-35052,0,1,ed72765946e57655a044cf95b23a4b72b2ef01e420a3670a874939bb176dbb04,2025-10-22T15:56:25.910000 +CVE-2025-35053,0,1,b08cdc06806aba839f0da12c19d28666e98e191245e1a443e3ef35027151ac10,2025-10-22T15:19:32.160000 +CVE-2025-35054,0,1,8fea729880f5e23914960d0cd722351522cf778619fdf5bbb9e850d037843667,2025-10-22T15:18:27.027000 +CVE-2025-35055,0,1,49018fecb9269b70453246886f8b1e1157201dd921867e4ec4a3a0a93bd81ac0,2025-10-22T15:17:05.643000 +CVE-2025-35056,0,1,e1a180a5a1338144f37a9cd6b8ba2cb6209770fb8c8a9a64e0077244769abc3c,2025-10-22T15:16:36.560000 +CVE-2025-35057,0,1,122b2e2cd7734a72cdf72d8ccf3f932cda4b45b2782d5a35a6abf75ae6bf82ab,2025-10-22T15:12:44.357000 CVE-2025-35058,0,0,30905e3440db93f3739470b1bf8252131ebd8dadc0edf08680c7b61e046dfa8a,2025-10-21T16:37:48.457000 CVE-2025-35059,0,0,7dcd9b8ab7501775491f0cb48e4e7d7fcb83f49828a1ddbe4202c620da4a8554,2025-10-21T16:41:23.263000 CVE-2025-3506,0,0,ffac8f3ba9271548ec6bfdeb141eeb20bc96e782a27226d5b94d79dd653dd5a9,2025-08-25T14:51:47.760000 @@ -299991,7 +300068,7 @@ CVE-2025-38716,0,0,12fb59595f8b559e20cbbdd8f5572638e8fd2b1dafbe04940c518fb91f1bb CVE-2025-38717,0,0,4fb635045436f36ce8d03db27720372a99700e7c41397efa2ba3b5218186ccb7,2025-09-05T17:47:24.833000 CVE-2025-38718,0,0,9c64c20292a65b18cb7e93e49f35b73be11afa8a87ea411c698e98800cb0dc12,2025-09-05T17:47:24.833000 CVE-2025-38719,0,0,e06371d66c2cd68b6bb7d0d1dcdb9eee5e19cbde9fa7f03b84eb65992a385c95,2025-09-05T17:47:24.833000 -CVE-2025-3872,0,0,26604960001ce7e7efc01090e0c7f3ace8c54075c9f64bec667f2f9d611a1cbd,2025-04-29T13:52:47.470000 +CVE-2025-3872,0,1,9dd9ed762fec8f4c0f37ceaf44349a65acf1029387dff94d4c763abff4a37931,2025-10-22T14:10:02.373000 CVE-2025-38720,0,0,a069b33c220d19819e9a6d6c5f9af0bc1dfeb3a95e93264185110e0141518ec7,2025-09-05T17:47:24.833000 CVE-2025-38721,0,0,81a1293006c4ec2c8ad086d0310a18c2e03354bb4774aee2d0d329d31ce5f8a4,2025-09-05T17:47:24.833000 CVE-2025-38722,0,0,8442ec0f46271d1d47346adb4348d2251ac3853df9beccf91307fd47ed9a5252,2025-09-05T17:47:24.833000 @@ -300281,6 +300358,7 @@ CVE-2025-39530,0,0,04cd4efd0982bc2e3b3a3fdf151be77700254449378583fee75d72392e767 CVE-2025-39531,0,0,ff1b3efe015a3987f44dddec7757fb08524f162b253adf68dd482dc34a954500,2025-04-16T13:25:37.340000 CVE-2025-39532,0,0,c6a1aa250e41f609065af7ae7d78ed7ce37833beb178fb16dc9d01c8b07d0228,2025-04-17T20:21:05.203000 CVE-2025-39533,0,0,00e9840fa3e721ed8659351609375801316fb69ce2b1599aede6965245df00e3,2025-04-17T20:21:05.203000 +CVE-2025-39534,1,1,8772fa16a35439ce476bb36d3454e3a220c2b8e3e341eaa8d7f183db080a1d88,2025-10-22T15:15:33.580000 CVE-2025-39535,0,0,51a8ea640c30c3212f3acbc8c60211505a3d6be753d78e2a8fe398418000d425,2025-04-17T20:21:05.203000 CVE-2025-39536,0,0,897d26092656cd742f3a194933c2860c983e3b42f7470a49c75af9583369df26,2025-05-23T15:54:42.643000 CVE-2025-39537,0,0,21fa63134497786ca5c96e2ddc67b969296395e775f499d38201ad3191fbd2ca,2025-05-19T13:35:50.497000 @@ -300876,13 +300954,13 @@ CVE-2025-40653,0,0,952d6149fd41bb3446d99ef1d9980a07fed39db01b9836f114bc421cd1040 CVE-2025-40654,0,0,0de5cf23feaa5377162724c73f57968710485f846898ee7eb6cb2e15ca4cf8c8,2025-06-12T16:06:39.330000 CVE-2025-40655,0,0,dd1384d98002f650daa28fdcaccc83c2d4faa397ab7ac917b163b73210948d22,2025-06-12T16:06:39.330000 CVE-2025-40656,0,0,678d1f712f6cea6586ff10e7e20155b457744747121796c5fcafbcb29ff4d2fc,2025-06-12T16:06:39.330000 -CVE-2025-40657,0,0,034a211dd6795bf49ed64f5aa8eeea94595af529b24b86bade488851d9dc4db6,2025-06-12T16:06:39.330000 -CVE-2025-40658,0,1,fe5bea20373a886ae9422ad7c60caf3263c802ed2baeecd58efa75ca7dddd48c,2025-10-22T13:56:16.287000 -CVE-2025-40659,0,1,e582ef6fbae8b34a420acc00b1dc7c1846f52ba048109ff925c6303549b24423,2025-10-22T13:53:46.343000 +CVE-2025-40657,0,1,f3b232612391127409a9a87374c9ea1b87760a19746f3ec537c5290fd16be741,2025-10-22T14:00:13.857000 +CVE-2025-40658,0,0,fe5bea20373a886ae9422ad7c60caf3263c802ed2baeecd58efa75ca7dddd48c,2025-10-22T13:56:16.287000 +CVE-2025-40659,0,0,e582ef6fbae8b34a420acc00b1dc7c1846f52ba048109ff925c6303549b24423,2025-10-22T13:53:46.343000 CVE-2025-4066,0,0,6b866ef67faa41ec2689ec4b83aa9ca62c69a8051911732f639e5179e5df1a9e,2025-05-12T19:35:25.097000 -CVE-2025-40660,0,1,144803f5858a2a248b78a2b3d3cde5d850bf56a3ef505667fbe3eb807d64b3fd,2025-10-22T13:53:05.590000 -CVE-2025-40661,0,1,fd71b2a0daf4c74abc6c88eb6b5ba296bdb6973c0b86b5862925f3a5f3f1f429,2025-10-22T13:43:56.973000 -CVE-2025-40662,0,1,41eb3c14d543f7bb0e3a1c498bcdf47f8a547fcdb063a22585e5809b0f4fcc09,2025-10-22T13:33:48.703000 +CVE-2025-40660,0,0,144803f5858a2a248b78a2b3d3cde5d850bf56a3ef505667fbe3eb807d64b3fd,2025-10-22T13:53:05.590000 +CVE-2025-40661,0,0,fd71b2a0daf4c74abc6c88eb6b5ba296bdb6973c0b86b5862925f3a5f3f1f429,2025-10-22T13:43:56.973000 +CVE-2025-40662,0,0,41eb3c14d543f7bb0e3a1c498bcdf47f8a547fcdb063a22585e5809b0f4fcc09,2025-10-22T13:33:48.703000 CVE-2025-40663,0,0,4aa8c64bc18f7e33ebb6be208f9cd3156bb0660dc9a760545e0a74283cf88190,2025-05-28T15:01:30.720000 CVE-2025-40664,0,0,3a67ab5bc20ea4cce83b11b6da9418390cb4a4cbe77dc024b12c257cdcbe6725,2025-10-10T20:17:42.567000 CVE-2025-40665,0,0,f95a423eb835b07541d10dcc4302b922be33d420b22daf9f225b17c8eb5fba22,2025-10-10T20:14:57.310000 @@ -301401,7 +301479,7 @@ CVE-2025-4227,0,0,105b1ca71279e59ed88dc1dfe5842363a5f3015c5289c484dc2e88f2b0bb63 CVE-2025-4228,0,0,90c02a591037aa40f9ece4eb659ecae52c5a691b8f4e48310cb273be7c3aa6f3,2025-06-16T12:32:18.840000 CVE-2025-4229,0,0,3bd92ad8c64429307b7c6c36e06712a2c67022ff6d91c7998dc375c0c4c1388a,2025-06-16T12:32:18.840000 CVE-2025-4230,0,0,330f57a6b301dc0a43ed84235888c62032b00c01ef28ec1510f32bcba6cabfec,2025-06-16T12:32:18.840000 -CVE-2025-4231,0,1,4a78d0f1cf90b49fdbd702bc675d819a4d88ee4004b5ac97498d7f49ecccb633,2025-10-22T12:57:48.007000 +CVE-2025-4231,0,0,4a78d0f1cf90b49fdbd702bc675d819a4d88ee4004b5ac97498d7f49ecccb633,2025-10-22T12:57:48.007000 CVE-2025-4232,0,0,d05f6b8ac2e7b8c48b08379a8ee1e5ddacf612f94637a3e1bffb02b1a14e94de,2025-06-27T16:47:32.383000 CVE-2025-4233,0,0,261f5ee076c2b7aa87ec5405182d9289e244da6be5aae3a4af764564fe747d4e,2025-06-16T12:32:18.840000 CVE-2025-4234,0,0,a1d58c76a7518e228c78cc686a44c2943363531b2d350904b58571f01cd95eed,2025-09-15T15:21:42.937000 @@ -302907,7 +302985,7 @@ CVE-2025-46456,0,0,15498fa3fef45dc45b151b140dc9e4340de7a5c1dd773e8c90ddc92556c7a CVE-2025-46457,0,0,be2221e00bf98238046f9f16a2f3ce46bacc036d2b7a1dfa17ec2383a0f9a838,2025-04-29T13:52:28.490000 CVE-2025-46458,0,0,1b6ec4050c701f08659f70f0826fe4d5c7a325129090cbac842b693fa75373e0,2025-05-23T15:54:42.643000 CVE-2025-46459,0,0,51d9a9edf666b2694e08c658deb0effce8bd638d0a62f74a0c6e36fe00bcd54e,2025-04-29T13:52:28.490000 -CVE-2025-4646,0,0,99090a1f197bacb114369cc2cbb6ff8b063b8e0b369a1a637173339ea64b2faf,2025-10-08T10:15:37.677000 +CVE-2025-4646,0,1,93dda301c8bd4dbb671ec9a15d7388290bc9852b226c06c0f8191afa00a7cb51,2025-10-22T14:13:47.513000 CVE-2025-46460,0,0,0ad7a9f026df5e2b2525d0235d3b12de1bb75eb2a6a794e8cf5df06fca161ecb,2025-05-23T15:54:42.643000 CVE-2025-46461,0,0,c8786d7e2ebb5f6dce69ba2cb075d83eb648dedfaeb514ea03c1f471890197b7,2025-04-29T13:52:28.490000 CVE-2025-46462,0,0,fe5581f64e8efae0b96d6adda1b97fe0f4d0468de91c94f77dcc9221d1cfb465,2025-04-29T13:52:28.490000 @@ -302918,7 +302996,7 @@ CVE-2025-46466,0,0,4098a2abcd3c1786fbce4efdb0eb03192fc0893524e4362c9258df737fba2 CVE-2025-46467,0,0,c3a20dac240db4c202e3602614549da33fb34d2c2d2dc9a435c812422bb327a5,2025-04-29T13:52:28.490000 CVE-2025-46468,0,0,c386382235c520962df24bca0ed987b64f83ab40877038602cb792f3503be197,2025-05-23T15:54:42.643000 CVE-2025-46469,0,0,83bcacfef7179d072ad274e21ed910d60e0427ce9e9ca33002ac69dd224cdc57,2025-04-29T13:52:28.490000 -CVE-2025-4647,0,0,9183e8e38fdde3287394ba6e432e8cf607fe5065b34a1104c6cd66843111482e,2025-05-13T19:35:18.080000 +CVE-2025-4647,0,1,a7db2eb85d367bef7e4634cea57c01d3f9021b8511ecee0a23fe4ee7f0f5e697,2025-10-22T14:13:18.460000 CVE-2025-46470,0,0,c9e086904314dfa013a68f25197ee8f2dbf6940122191cc5cb04f56e49d243d8,2025-04-29T13:52:28.490000 CVE-2025-46471,0,0,3fbf37c7740b83855edc59c044dcfc3b74e9cab9feeae55522baf1b78681f8b1,2025-04-29T13:52:28.490000 CVE-2025-46472,0,0,7e2f47ebe85666eb29a58908e8a75d677e7bbb1a954a46322e86b37bc24b16eb,2025-04-29T13:52:28.490000 @@ -302929,7 +303007,7 @@ CVE-2025-46476,0,0,a59f599c15e80bffdd5bb4ba81a7cf2374badb82ff1f0bc91c4b3e81801d0 CVE-2025-46477,0,0,be9329fd65be58972d97b8edef12997ac92fc216b8ce5c2be9cf2024a0d940d9,2025-04-29T13:52:28.490000 CVE-2025-46478,0,0,416c737624425fa577dba1bd90ca3e113526cb08e026669efc5917ceaa5c7b74,2025-04-29T13:52:28.490000 CVE-2025-46479,0,0,144496229be3892e71635f64a740eb54c232a5681197ca3e5934aeaae7647440,2025-04-29T13:52:28.490000 -CVE-2025-4648,0,0,92b71906ca78d9a2e26ffa29a3ec36a523811fa61edd84ae4cbbcd467ec23998,2025-10-08T10:15:38 +CVE-2025-4648,0,1,9a137ef2091a4637a2c7024bb4553f7616afb7a2b7c359619bf5bb11da1f6b6d,2025-10-22T14:12:11.843000 CVE-2025-46480,0,0,ccc721dcf7f06e171932824bc386076c00a53e258a68679364532d8d3d92dfcb,2025-04-29T13:52:28.490000 CVE-2025-46481,0,0,ead37ddba2a6eae93fcbc3ca421955253f1e3c3cf822a4ca825dbc902b0e81de,2025-04-29T13:52:28.490000 CVE-2025-46482,0,0,3915bc88238b436c9e5a6695e61e0371ef118917b20907f327137a5b7934f4c1,2025-04-29T13:52:28.490000 @@ -302940,7 +303018,7 @@ CVE-2025-46486,0,0,03f305fda59eca03f27ba9744e3a65baecc6aab878348f8fb99525026ae40 CVE-2025-46487,0,0,7907e621bdb5f70b96d305564d68d97781237f516dd06acad8c01a055e3b2fd1,2025-05-23T15:54:42.643000 CVE-2025-46488,0,0,8f7f3f11a283df8400ad9bb314ed77a249cd6712f0e8c0f800b8823fb2267286,2025-05-23T15:54:42.643000 CVE-2025-46489,0,0,4047d90eba66bbf4f8ac70bf703f1492aa05cbcde55ff73ae631c913b0fb63c9,2025-04-29T13:52:28.490000 -CVE-2025-4649,0,0,003550e79be44bc022986c179d4df24150f2476c00f86542e0fc1d6f80c92500,2025-10-15T13:16:01.767000 +CVE-2025-4649,0,1,e99673facc9e33bb3f032366856b1540734c37c58fb00d24a4ba94463f35cbfb,2025-10-22T14:05:13.117000 CVE-2025-46490,0,0,2f13edaa0a484401152c859ee535fe95a1e8f98af06af8992b7518b75b5d46c3,2025-05-23T15:54:42.643000 CVE-2025-46491,0,0,f38c5dea18b20fbcef6c016900413ce3ba4d4b3132901d55664c2e927d148b83,2025-04-29T13:52:28.490000 CVE-2025-46492,0,0,0b388afa779af2bc975923238ed0779b39ceb96cb7c627b90c0bf45b7312448e,2025-04-29T13:52:28.490000 @@ -302950,7 +303028,7 @@ CVE-2025-46496,0,0,c1ca2c12ad79e7956cafdb330fd7d396df431c9c708e1326a685ba7f45484 CVE-2025-46497,0,0,01f72c5fb3baa29d52f0778f0278db8eb6e9b30fa7fdf9e4a1ae3a5ba4794958,2025-04-29T13:52:28.490000 CVE-2025-46498,0,0,13bb535d0a154c456dbdfa9aebf162cbffde3635c7879c3aef19e01253338509,2025-04-29T13:52:28.490000 CVE-2025-46499,0,0,3d35f89318ae1b0fd32f6c7bd0fad4615e1bb2bf08bbddcecb15f3da844787ee,2025-04-29T13:52:28.490000 -CVE-2025-4650,0,0,26860dc1129b843805b9daf1c2889503f0e53de1ff7715cf5898f8156da4bc9f,2025-08-25T20:24:45.327000 +CVE-2025-4650,0,1,efbd862038bebab3d15b5ca2fbd01104d8d8e50fb9a2ebae21590446a6ca6c5b,2025-10-22T14:05:53.193000 CVE-2025-46500,0,0,9703b0c7834cddd60b0c448711471aefb2c1d6a56218ad2a2fc048d8bc32dba2,2025-07-16T14:58:59.837000 CVE-2025-46501,0,0,9ab0ea673effaa4919839e141aa1bffc5737298a68181f62b2eda19a87793cf4,2025-04-29T13:52:28.490000 CVE-2025-46502,0,0,7c4250513788e43a9e80754159cc483a0ed63bf4ad8bf85cb635366d3fbe275f,2025-04-29T13:52:28.490000 @@ -303961,7 +304039,7 @@ CVE-2025-47727,0,0,b513b30b2c3be5f52680c8583fd6f738c9ea52bb478e5107a51aae6bd84bd CVE-2025-47728,0,0,f2b738350db8445dd25a71fdecafeafab48dcb925a7bb6ae90416dd8ad77709f,2025-07-11T17:52:28.613000 CVE-2025-47729,0,0,676e52442a19bb224b16f4cd673de7b76958abc61a984dcd513a350e1508877a,2025-10-21T23:17:03.763000 CVE-2025-4773,0,0,f64a68d0e35e414617bee17967e5c3c9909f1d1c34fed1a1c8d53f16a98c123a,2025-05-21T14:34:08.967000 -CVE-2025-47730,0,0,fb4fe629154c1890ae82dd01ed7a4dcfe2dff303258154f34d398a1b86b65304,2025-05-08T14:39:09.683000 +CVE-2025-47730,0,1,6e4bc4b74fc742affea97e9dbafa037b0a9df0dac79112a0e8e7741ee7c1c716,2025-10-22T14:53:23.387000 CVE-2025-47732,0,0,1dbc6a0cbcb6492c6b335caee3a252c21fa591bd0f36b7b915e4dfa6c055b3c9,2025-05-21T14:46:28.843000 CVE-2025-47733,0,0,8ca49357b50ecb80722b97ab3f7e121e8dcb83e490a4a143991ae1fbc243a2e4,2025-05-21T14:43:14.013000 CVE-2025-47735,0,0,2f52e7c2d058d86629cac68f734c0774cf880fe4e8f98eedcaeede1d23aa6eff,2025-05-12T17:32:52.810000 @@ -304235,8 +304313,17 @@ CVE-2025-48079,0,0,6a9c124abc87a320bc8b30f57c16bd051b25830658cd2d770da8f936d77bf CVE-2025-4808,0,0,754834e2a19df62069bc2414c3d233aae38d368529ec96cc4bed4babf3116dd2,2025-05-21T20:59:50.423000 CVE-2025-48080,0,0,3ac40a2ee2ffbe53ef86e322d55a6c979dec23087ec5d5ea5075b108588d8314,2025-05-19T13:35:50.497000 CVE-2025-48081,0,0,d598843cce99fb3ba59feef62b8c03461488076cb1fe3ce111b0e97d03039932,2025-08-29T16:24:09.860000 +CVE-2025-48082,1,1,8a02565302efbebc0b3d81011cf6ea453530d4e706b27cb3932ff43de5c7b0ad,2025-10-22T15:15:33.707000 CVE-2025-48087,0,0,5e76862a7a8913d6d5622a0610ff7a597d6bb8c548e9d4fd3fb582a97db2ce17,2025-10-21T19:31:50.020000 CVE-2025-4809,0,0,e3f6cc20f5a1533fd1b852392735aed9d9901924729604ad889c6054553c7632,2025-05-24T01:11:08.893000 +CVE-2025-48091,1,1,4e5199314c29ea4758b3aa91385c21b32dd55c2ed328c785da01fefb0ea0ab9b,2025-10-22T15:15:33.840000 +CVE-2025-48092,1,1,1d9a4ca97d59d02600f969d01d645c083d0a9f4bb197978d07576cc977c297c1,2025-10-22T15:15:33.963000 +CVE-2025-48093,1,1,af2496efcbdfaf8ba6728e6f5a5f7c5fb30bc0c2d05183a5e8602a93a83ab7e8,2025-10-22T15:15:34.090000 +CVE-2025-48095,1,1,305c8eec996b179080e5d7c762f259d2b1fed49b7afa616bfc59a728d4481ce8,2025-10-22T15:15:34.210000 +CVE-2025-48096,1,1,d51844374adf0a0ad1a1f25fe590a549e3fe663c2afd09c345912b1e84e7e36a,2025-10-22T15:15:34.333000 +CVE-2025-48097,1,1,782ccef8ef72ec60c9a84f197cadb2613863de051711c6fe6e10847a2f4dafb0,2025-10-22T15:15:34.467000 +CVE-2025-48098,1,1,105a611b4b008a6d3ccbaa6569c1d90687a7f67807c150aa6de1cdf9cfd255ae,2025-10-22T15:15:34.600000 +CVE-2025-48099,1,1,43141c73bac7803ffadcf73e557661bffd45e007c9002a5253e9a125e835869f,2025-10-22T15:15:34.733000 CVE-2025-4810,0,0,270051aac468f4554d569120b6bb36c00d35de9491f4fec83a0d57158b5a4129,2025-05-24T01:12:25.480000 CVE-2025-48100,0,0,97fe0f6af99d0eb749e4e15446f172fee3d56ec2ac056d692fec1fc3ab6de354,2025-08-29T16:24:09.860000 CVE-2025-48101,0,0,49252f3649f8d5dd544aa1b2d17b6f6e5e51c47fb2f5f3b149757d88243700f8,2025-09-11T17:14:36.413000 @@ -304244,6 +304331,7 @@ CVE-2025-48102,0,0,0dc5d73393c65e40dde3ca33f80a5e5914a5fd0ca828060918c1822c55c1a CVE-2025-48103,0,0,d6f6d8b7270b547ce41f250042b63d597404fe347f3b2daa29d782bdea5f7b8b,2025-09-05T17:47:10.303000 CVE-2025-48104,0,0,af72f13cdf2d83982cb99ac12d66a81d8034a376d5f0ffaa68e9b8c23c8e47f7,2025-09-05T17:47:10.303000 CVE-2025-48105,0,0,84ce2658ddcdd9dd18627e7c2048f06a06290373488751b03fbb694a91d62bd7,2025-09-05T17:47:10.303000 +CVE-2025-48106,1,1,5bc3f727ec747da1fcb459c1240fb6bb7b5486cedab1d50714b9abeb58caa4fb,2025-10-22T15:15:34.880000 CVE-2025-48107,0,0,272426388c7843f12ba756b992108dae90acc2dc88d630382ac14d026c4f4a6c,2025-09-26T14:32:19.853000 CVE-2025-48108,0,0,b3ad8c2ba13c585a33d82a19484fb2433fa622d02fa900d1035f6ed77aacb8ac,2025-08-26T13:41:58.950000 CVE-2025-48109,0,0,256c05f1483b9f086c59c6e9344e05303d8cafae7cdc6dcc08c1730398958590,2025-08-29T16:24:09.860000 @@ -304452,6 +304540,7 @@ CVE-2025-48334,0,0,65fc2027acba858836e737fb0f1df3a72d4113a56a3d69faba9cd52176926 CVE-2025-48335,0,0,87f81215624ab7fa933489f1136327ae141577518dc9a399bc9c4199ad6f2bc5,2025-06-06T14:06:58.193000 CVE-2025-48336,0,0,cde5f5f8ee74c92259e7bd148625c213e9829c471551e9e911ca67e0b81ffb00,2025-05-30T16:31:03.107000 CVE-2025-48337,0,0,91388d536db93ef9c634d9f837e1435a77af3da2858246d9c4fd6a2b6a779401,2025-06-06T14:06:58.193000 +CVE-2025-48338,1,1,96ed39b1938c622f7b80cbd813e3c044996cda81144ec791d744328bfba6ad4e,2025-10-22T15:15:35.023000 CVE-2025-48339,0,0,ad82d30fd2f62689a8354ed82a433a656d13c91216d70d2bcb3fcddce1448ae9,2025-07-16T14:58:59.837000 CVE-2025-4834,0,0,9c2a9c83d18d527500130276f129f08da541559198002eb377c3cf8f2b02f9db,2025-05-23T15:50:33.980000 CVE-2025-48340,0,0,58c293148545386ce8f1cd7a061fb39909214f7e42aa54bb702d5191ccbf264e,2025-05-21T20:25:16.407000 @@ -304811,13 +304900,13 @@ CVE-2025-48921,0,0,7b64133922728cbb1f2470f966c734274d6b9fff928f0d065feafccbd46b3 CVE-2025-48922,0,0,2063c42c1ee187a270f3a33941ef9a384103661013ac1a43be16c061a6d85382,2025-07-09T17:37:28.910000 CVE-2025-48923,0,0,385e943d3e3d0bc7ed2ad154b8da7304317f435ffb5c84a614bcf85cf91bf527,2025-07-09T18:57:24.337000 CVE-2025-48924,0,0,9c5ec41271874f232f25062e110e44717078e2f137dfb54fca6100e3ba418464,2025-07-28T13:45:38.647000 -CVE-2025-48925,0,0,1078d56976848d50cad1b6e3d7649144a0fff722026458d6324403161c8b6acd,2025-07-01T20:15:25.550000 -CVE-2025-48926,0,0,e5dd7ea7b49bd837b87dab41c51352a3cae4e712d11c266600f9119d58fb4ede,2025-07-01T20:15:25.750000 +CVE-2025-48925,0,1,3dfa73a67f623ce2a772688054cea01c16d9515b46cb89a9d1e914243596e8b4,2025-10-22T15:14:34.800000 +CVE-2025-48926,0,1,cc9e59a7095112e648fd36f8cc34ee7060f857e78705e1d34fe02c20ef329360,2025-10-22T15:02:13.237000 CVE-2025-48927,0,0,d3197348980f6f175292d0c40de57f3a878292fb754f1be3bde3e0f06a29dfab,2025-10-21T23:17:04.920000 CVE-2025-48928,0,0,24d4c04ce63dea3ca2c46c7ca736c44e07b334fff9fe895f93dbda684168fa6b,2025-10-21T23:17:05.100000 -CVE-2025-48929,0,0,d2ee59252af74969e11d0e8d56a0b2c9abb029abb8a1f1f32dc0db3ab73d8f98,2025-07-01T20:15:25.920000 +CVE-2025-48929,0,1,221b31860e0e2522dc8c54e1f8cfa19ed1db97c06e349b9486ea2ab65f82621b,2025-10-22T15:01:11.703000 CVE-2025-4893,0,0,54e02495de93e4ef21accf662f0317f964edb50845ae420a97b2a4554162eaf5,2025-05-19T14:15:24.647000 -CVE-2025-48930,0,0,913f9d3ec56ff9d78a378336f5ce5de1dfc477a7dd050aa5cb46a34a1238fe9e,2025-07-01T20:15:26.093000 +CVE-2025-48930,0,1,422999beab6c04bc60a068f867d48baa0c45bd6dcb90100c82986b2bcb10c106,2025-10-22T14:43:34.500000 CVE-2025-48931,0,0,08b198521190ea3322c14d654b4771ae465075604f7145cb71c78236fe9abfbd,2025-10-03T14:32:57.287000 CVE-2025-48934,0,0,4fafc0050e3fb1f659346c0c5ef3df224c02b5f87051e4159e62b917c3a9071f,2025-07-02T13:43:10.557000 CVE-2025-48935,0,0,ec5adb238e8b174d884cb3b3a92e9f531a747bcf07c8f8e4c86751e080e4e7aa,2025-07-02T13:17:12.510000 @@ -304917,6 +305006,7 @@ CVE-2025-49057,0,0,675ac3908786b3c799cdc4709437289e576dc2c8bb1cc3b7cd1355453d106 CVE-2025-49058,0,0,3e495bfff86320a9719f03e2d2382bd9e85930cf9460620c9d4e472bf1ff9874,2025-08-14T13:11:53.633000 CVE-2025-49059,0,0,8338f256264ed581fbc3c1e3a0674d343706809df99ffbb5ab2b744b10e4bc43,2025-08-14T13:11:53.633000 CVE-2025-4906,0,0,9067f7b753e109ce29b812a4f41ca825ba7ff1d4ba914b271b4c49b49a105e4d,2025-05-21T17:33:25.100000 +CVE-2025-49060,1,1,de4272d0a490747749b6c4c73cd4ae560ffba9d94ac500b4cf8e8c3e6bdd7c14,2025-10-22T15:15:35.160000 CVE-2025-49061,0,0,04e8dc4958352064841735a23bef9094dc47f7822541ddf141466d889fead755,2025-08-14T13:11:53.633000 CVE-2025-49062,0,0,7a86bac01c9613f1b368d7b28fce5166671eb07c86a48d3d737f7c45b3b006ca,2025-08-14T13:11:53.633000 CVE-2025-49063,0,0,e7fae7e8cd02757f7c2ddafc97adda7c54280921559c6e9148b95dae4f1929a8,2025-08-14T13:11:53.633000 @@ -305158,7 +305248,13 @@ CVE-2025-4934,0,0,661cbc97b2adf4ec313661a8210ecceab635f3c4c1dd76317d718414fbabce CVE-2025-4935,0,0,92cb90814ea6fb6d6ceddf06a94155e30e3eafd607e5ccb1da311d381c9aeaee,2025-05-28T12:29:38.047000 CVE-2025-4936,0,0,fd9d880b7441ec1437d5f670ce3c73dd4d729c4bf41ee475585bff130ceae1f2,2025-06-05T19:39:27.940000 CVE-2025-4937,0,0,b11676149af0c28f312982d79c8f35a9ba810703d80c77681d063c82de8ef130,2025-06-05T19:42:48.337000 +CVE-2025-49373,1,1,360503df3ca2540b7aca4ffaccd0c6e35dee2f3f6a30f38b01f3d383a92f7395,2025-10-22T15:15:35.297000 +CVE-2025-49374,1,1,dcaf101b163df4b1ff0bd6ff5245b8d5587cbce92910026c7d84912d9d8ab702,2025-10-22T15:15:35.447000 +CVE-2025-49376,1,1,0ccfd652f1310096ec7823072b2d869d90c823c5698d16c2a0081b91ce5b3bdc,2025-10-22T15:15:35.597000 +CVE-2025-49377,1,1,a32ce8214e631bbe74392a436a69c54546a1ab4fec1c667b45882fd8960b1242,2025-10-22T15:15:35.720000 +CVE-2025-49378,1,1,0e3da268f6079952e6b670f55b572220c90e30cb0df14e324bab3d1f4d154ff4,2025-10-22T15:15:35.840000 CVE-2025-4938,0,0,9bfbb8aefdfbb754eacbb83a30a05c557a118de2c85e31be873a9e69bcb3eeca,2025-05-28T01:33:36.677000 +CVE-2025-49380,1,1,977e9b0a647ee34413a9fa8cdb9e77ed4336ca789454be74b60004b7428aff2c,2025-10-22T15:15:35.967000 CVE-2025-49381,0,0,84e2a6b91742476a96022004ff5a0ed354f2b37e707c1e4e5b1dabf386371df5,2025-08-20T14:39:07.860000 CVE-2025-49382,0,0,ba711fba3cf03833b256388968f1cd2292d8fb714919845dc6365d3d4838805f,2025-08-20T14:39:07.860000 CVE-2025-49383,0,0,f026006408fc938ce1d39c10dbd609a5257db677d62635bf813b3e04c3ca55d4,2025-08-29T16:24:29.730000 @@ -305592,11 +305688,65 @@ CVE-2025-49895,0,0,1ca763490e74c3c586c45931a6058c6027a5938ba234083d2bea200cbb6bb CVE-2025-49896,0,0,3b7202b92dca6278641819aea45ee2c81c873ac7894f856743ffc31b9926f25b,2025-08-20T14:39:07.860000 CVE-2025-49897,0,0,06013f0afb38d7d869641b4019efaa098a3b290ebb5afe81fd5b1b0d51c4afa0,2025-08-18T20:16:28.750000 CVE-2025-49898,0,0,0d59e72852f7060dc53c1f10bed2707a81314e0790eaafcc6c875011dc356269,2025-08-18T20:16:28.750000 +CVE-2025-49899,1,1,84aa03fb23ff5a2da62d32c86fbeae6c2f24f8903bd9dc20df54ad505a94d67d,2025-10-22T15:15:36.110000 CVE-2025-4990,0,0,11128ad236ff0bbb6407ba12ca704aae39e79d15ca91d8e93c05e36bda39beb6,2025-05-30T16:31:03.107000 +CVE-2025-49901,1,1,9298fafe3ffaf43be3e4491e17e31b41c27a8e93b44338beafde5cb924eb6578,2025-10-22T15:15:36.243000 +CVE-2025-49903,1,1,f340296fce6ad797c2b6db72be86830d7dfca72a0d8c9a5f810a0db4416eac09,2025-10-22T15:15:36.377000 +CVE-2025-49906,1,1,3a0f3b72ee91e25da7d433927399185b8e1ddf7a2de21daf092d15d872ed1e59,2025-10-22T15:15:36.503000 +CVE-2025-49907,1,1,80ae72c2c1da4a8da1a1fc7e8b8b31cc4a9ccd6887d000f5c6e14aa526cbda80,2025-10-22T15:15:36.643000 +CVE-2025-49908,1,1,13ba10453ff87d00aa5227608c06cf307d393189997d472da44fc783159a305a,2025-10-22T15:15:36.777000 CVE-2025-4991,0,0,67056c54ed0af796c00b82147df15690931ae5839b2ce0ae3dfbe8c6af0dc82c,2025-05-30T16:31:03.107000 +CVE-2025-49910,1,1,dbdeccb69640219b6996e8b97274b4bb74abe615c84a134e3ee0e9d1e681bb74,2025-10-22T15:15:36.913000 +CVE-2025-49911,1,1,3f644240f485c839f881a23794e313684aafa2f780db101389d24f0a6981058c,2025-10-22T15:15:37.043000 +CVE-2025-49912,1,1,d61a0b9e5886ca411fc4073b76f95fdb31cac980534c95f9a79c8b71f8e3daae,2025-10-22T15:15:37.183000 +CVE-2025-49913,1,1,5cc5d9fe0cb195de684f60862951dba136266f847a259601eea2107f3e3293d8,2025-10-22T15:15:37.317000 +CVE-2025-49915,1,1,d52278d19d6ae9e662f4eda884689b4e4ae056b0b9ddc7479729e9c9479be3a5,2025-10-22T15:15:37.440000 +CVE-2025-49916,1,1,c1f3f82c201f4d7d61f400efd7f267243600045c082c595186dad62ae47eac65,2025-10-22T15:15:37.573000 +CVE-2025-49917,1,1,6e801a19b211a13dc190aba35414705000308179151bf4e70468a531ec85c79d,2025-10-22T15:15:37.693000 CVE-2025-4992,0,0,1082d6f32cdc55d2f0bee5c68a2d5eed24aa7fd6cfec642561c01b1514f010a8,2025-05-30T16:31:03.107000 +CVE-2025-49920,1,1,edf785194fed6156837d70cb3f16133353d0c791adbd8aa3ca3bb43710d6ddea,2025-10-22T15:15:37.817000 +CVE-2025-49921,1,1,1211cd84405e6daf95d168e979d77a74650b31c64998d91544b98601bc8ed81e,2025-10-22T15:15:37.943000 +CVE-2025-49922,1,1,34a845182b3cd01a91a4cae744accd08b801ec682cfaa547cbd320b921e7046b,2025-10-22T15:15:38.073000 +CVE-2025-49923,1,1,52180cc45a75f2781a70b84d81c6b5df9fa04e268db6de57d64560f9f2c13772,2025-10-22T15:15:38.193000 +CVE-2025-49924,1,1,4571f1b07356963f9455f5c40c7b835c7ba061658df7fda26a77a34d415e9dac,2025-10-22T15:15:38.327000 +CVE-2025-49925,1,1,d38171ba14f0c4d5b8c4bbe5ee7c5ee58d8e18b14d57326b67290ea0c50cd08f,2025-10-22T15:15:38.460000 +CVE-2025-49926,1,1,0223c65fb81e3a923d347ab76ddec51795959f43e5bc0c10d50f17201b4325ac,2025-10-22T15:15:38.583000 +CVE-2025-49927,1,1,b64f724bf4e89ecd64db3ff1b15a493cbb121184466e3c02997d1e4a568db9c1,2025-10-22T15:15:38.723000 +CVE-2025-49928,1,1,1693606d0e7185667eaf10021603601b249456cd11088ebcd29cd05fbc3abeef,2025-10-22T15:15:38.850000 +CVE-2025-49929,1,1,2c92246f993aed879041e103344ea33533b8feb20850bc325004841349d785ec,2025-10-22T15:15:38.970000 CVE-2025-4993,0,0,363f703c543e6d7ebcf512fceb9dff93dc50a1005f63cbd546b1821eba0997c0,2025-10-01T18:40:15.517000 +CVE-2025-49930,1,1,2c0f65b2ba6377f49d6b6cd6d6dbd3870470ff991ee544e6cbaf288ff774d11c,2025-10-22T15:15:39.103000 +CVE-2025-49931,1,1,50da8f58602469c87d7b5702edda24e8eee27dd0bed1d52260f46da2fbc12080,2025-10-22T15:15:39.227000 +CVE-2025-49932,1,1,400753247c72d713be638ca229c3fc3526a1d9a06d1235523c595ef5c8f244f4,2025-10-22T15:15:39.350000 +CVE-2025-49933,1,1,1e7ee120c4a9a39ed791542c98fd5b7a0227978bac5ae39697ec6a3238f1cc2d,2025-10-22T15:15:39.477000 +CVE-2025-49934,1,1,f53c9aff7807b8e06e4b6d4cb31aa679aad634292c192139bcd6d4273b560d71,2025-10-22T15:15:39.617000 +CVE-2025-49935,1,1,40e1ced774830b8b805b57c3f7435a1adb221f702d1e178741e1e81cf86fb915,2025-10-22T15:15:39.750000 +CVE-2025-49936,1,1,db7665b185f2eaadd915f37b5400a9dce4942c46103cee2455ecf93ab9a47646,2025-10-22T15:15:39.883000 +CVE-2025-49937,1,1,a8aad18a7f3771ea540c361c4bf63ab9cbc1a8a501e89058341f7cfbc64b8195,2025-10-22T15:15:40.023000 +CVE-2025-49938,1,1,778513ab9becbdea54279fd0ed49ba0e5bf165102e2d9c383ed973452be56fde,2025-10-22T15:15:40.157000 +CVE-2025-49939,1,1,c79b93f39f299a81841a8d4b31d88c1b5fffce48f2675e114016c0abb836e1b4,2025-10-22T15:15:40.293000 +CVE-2025-49940,1,1,a7364f0b80de6f94a410fe155f758849e99e7474c5e7b6d3f7f74b10e361c144,2025-10-22T15:15:40.420000 +CVE-2025-49944,1,1,13e1ec5edf1fd44a2212416db9e83eb14c8b3520913b555b355135af7aa07798,2025-10-22T15:15:40.570000 +CVE-2025-49945,1,1,fc14c076660374a54ae14f8c62f18c110ad2ea4c24380fa372bf316691bb5dc6,2025-10-22T15:15:40.713000 +CVE-2025-49946,1,1,d215d1f376db5d93e465e16ab7b6729deba963f633ceeceaa9ed3f7592fedefe,2025-10-22T15:15:40.840000 +CVE-2025-49947,1,1,35b9ca6d16a0f9717ee26a27668d3237859dba0a5e0f8f7b21469bdfa990fb31,2025-10-22T15:15:40.963000 +CVE-2025-49948,1,1,aef10e20af00fd648557cf732d4b4457d6b252ee9bef9ca8b23eabd77ec4f081,2025-10-22T15:15:41.107000 +CVE-2025-49949,1,1,cde4477a352b6abb4e5a953a6e010fc07973c24390d037bca6d26360677c9120,2025-10-22T15:15:41.250000 +CVE-2025-49950,1,1,d4cb4709e15005d5f5b4d2fbe3c2073c7cb8d56cb215502ebff5ad2218b77801,2025-10-22T15:15:41.373000 +CVE-2025-49951,1,1,1b71c0c420cf027e1b92f1009234640c27dce619f1f0b596000c7d1141b5a7da,2025-10-22T15:15:41.497000 +CVE-2025-49952,1,1,aae11ffe0c79bec0392b4f0d3d00e8dfb9b14afbcda5b23fceb55b29d0c4f693,2025-10-22T15:15:41.620000 +CVE-2025-49953,1,1,73e36330b9c5e63f6fd9e40464097d383b52eee276268f021c70f4e92760bd6d,2025-10-22T15:15:41.747000 +CVE-2025-49954,1,1,08b5428ba516d441de3f6b1c13435d8a6e966ae31a9c41871c01095cecc6e820,2025-10-22T15:15:41.873000 +CVE-2025-49955,1,1,0e2dcc3e92f23352535a38c1b93030c75de40bf5a0f6641257a02b02ec1d8644,2025-10-22T15:15:42.013000 +CVE-2025-49956,1,1,12538717f53fc12ff5225c3ac471fd1e37c7241b2256b7b9b3be44ac9ff64e05,2025-10-22T15:15:42.140000 +CVE-2025-49957,1,1,02e27ca31d68fb5fab33331ffb1ad93de722adeee6de66016b1143e3b093ec31,2025-10-22T15:15:42.270000 +CVE-2025-49958,1,1,ab90a177825e0b0c718f58a91977c3c6ae151dae7e1b83a68f2b3d1e29491168,2025-10-22T15:15:42.410000 +CVE-2025-49959,1,1,cde2f944d64cd2169e67a6c20a22a13d06872081f9fea1caa1264ab7ddc90652,2025-10-22T15:15:42.567000 CVE-2025-4996,0,0,01c374c560811bd4951a0baf104248c2dacc855112424c09410e3d0cdc0b6780,2025-05-21T20:24:58.133000 +CVE-2025-49960,1,1,fd9e1dc4cc07276bba3f0ab801c1b7b0619c8f1bea770e3eefb62337da906221,2025-10-22T15:15:42.720000 +CVE-2025-49961,1,1,533c13a94ffc16e3264b7d0263c75e76212298478cb73f2f8c0b19458c589def,2025-10-22T15:15:42.873000 +CVE-2025-49962,1,1,6cf74597624422756f79a3debe9971db6ec1d54bdf843bfca6a551d82d362c43,2025-10-22T15:15:43.027000 +CVE-2025-49963,1,1,1720d09a35784534339565c6ed7e7a6b29c1fe98eda9654af07fc5667dee0ffc,2025-10-22T15:15:43.157000 CVE-2025-49964,0,0,65df94fbd6521cee7c65f39d8831c54671656dc31460eab5a173d0ff7cc07535,2025-06-23T20:16:40.143000 CVE-2025-49965,0,0,701e932ac7018a98e432cfade784c2e385b83434b76e5b158149665308dab326,2025-06-23T20:16:40.143000 CVE-2025-49966,0,0,1a6ad083edc70be4276e6cad5aa6538505d44a689678f06ae399b38164d95a49,2025-06-23T20:16:40.143000 @@ -305628,6 +305778,7 @@ CVE-2025-49989,0,0,ada1755230a278ef630cb13a85519e4b3e588de5984bbcb9553fc65323928 CVE-2025-4999,0,0,8043ad69949e942625703ec992d9f0bcf342f6427fd4b42b3a0d85b4a3c8ce57,2025-06-12T16:20:24.230000 CVE-2025-49990,0,0,d4fd60c525f6336b65a7ddc165a7e76d53a0e3848e7ccc3bce2bc89ecd2bcb2b,2025-06-23T20:16:40.143000 CVE-2025-49991,0,0,64e04305953c0f38139bf95fd8d3ac3014f1f88035c0d0a70b4b977d88ca5fea,2025-06-23T20:16:40.143000 +CVE-2025-49992,1,1,25a8fbda85bebb64e333a1ea555b9cbd693a35d1c68e78a09c7fe2d55f84e7f2,2025-10-22T15:15:43.280000 CVE-2025-49993,0,0,9dd589d5728bccdf6f1b1075b41a5a52ff4eee758db50c75d74217d52dde9f47,2025-06-23T20:16:40.143000 CVE-2025-49995,0,0,790d183b24b8dd6207429ec02fc05ea454b1d8d4757801ca263311385863e27e,2025-06-23T20:16:40.143000 CVE-2025-49996,0,0,681017f5e0c9045e74727f9827806dd55134e950276957a28825358bcfbd6119,2025-06-23T20:16:40.143000 @@ -305705,8 +305856,8 @@ CVE-2025-50070,0,0,517f545c6cb62878b95604090a58071fe47985cf607cc87823ad216314ec3 CVE-2025-50071,0,0,1d36a3061727eac6b692a96ff451e3a7cc7bd7001adc971f18a4a657e4b8196f,2025-07-24T21:29:35.020000 CVE-2025-50072,0,0,acfc64951f9dd268edb94df0c70001328cf11a70be05bbddf56d164ccebe4b1f,2025-07-24T20:27:11.957000 CVE-2025-50073,0,0,044b8afef56339d5e80e1980437c7aa9f1e6b7accdb1f9148933cde96072469a,2025-07-24T20:27:24.660000 -CVE-2025-50074,0,0,523dc4a77875fbbb64d4e2528a2438a504fe3778490373ce1897393191ad85d3,2025-10-21T20:20:40 -CVE-2025-50075,0,0,b9c16cc5831c6b75920bdad787914a31f5d71a28337d715db007d766c71456c0,2025-10-21T20:20:40.173000 +CVE-2025-50074,0,1,8c58a5696c0c79707049358c9b339f19ef53fe95c4aea5913e2d8cb1de31ff89,2025-10-22T14:15:50.303000 +CVE-2025-50075,0,1,0e49b3ff15210fa01d495cfd5b5c2e03b99edad424d6d1d668ca27f64b84c1b5,2025-10-22T14:15:50.437000 CVE-2025-50076,0,0,8d119603eff4e06ba553b27f3d493c8d3846bc79a53dfa3c15de376ef25ebad5,2025-07-17T12:31:42.750000 CVE-2025-50077,0,0,13cd524e21ea9ffacceaddee5c023c6f66956ff580e2d6d75294e17b15277cd8,2025-07-17T12:31:36.597000 CVE-2025-50078,0,0,0783267d43c4f5206e43c9d7ef9dfd32b8557854feee2b97b5adb519aba7e1d7,2025-07-17T12:31:29.860000 @@ -306556,13 +306707,36 @@ CVE-2025-52730,0,0,a12d6a0123f0067ba369398125738034707b1458c9c2723aa9cc8215b475c CVE-2025-52731,0,0,b105d272874c703b8caa32ceba0066ad5329aaa3edad7d70629da200ac1cdeaf,2025-08-14T13:11:53.633000 CVE-2025-52732,0,0,64e3380632f06ca3035d563e577b62cbbf89935e2e4624568f8f3703f981cf31,2025-08-14T13:11:53.633000 CVE-2025-52733,0,0,7b459b7ccea847e17c1de3d7bfd534831df085ed8c830c3122c8262c5439f0d8,2025-06-23T20:16:40.143000 +CVE-2025-52734,1,1,381672aae9eb522336a6c60f1a1823540b8948559c33cef1f1c75138bde6485f,2025-10-22T15:15:43.410000 +CVE-2025-52735,1,1,a9c6c8d95b2f5f1d4dc688ef30eed013f54891ad42e1596dac4d666f7c0630b2,2025-10-22T15:15:43.563000 +CVE-2025-52736,1,1,3f68e1eaab2d9e426dbd12788df5b9d44286b24dc4fe2f26573033a83c8cf12a,2025-10-22T15:15:43.713000 +CVE-2025-52737,1,1,132bed19f8dc2859263ec7794c16755c5071bf6c2df719b10264ed6c57bb3786,2025-10-22T15:15:43.837000 +CVE-2025-52738,1,1,ae408b327a70f16b7ce305ed6f2a4db3e4808d2ca203db5d8ccf6fcd0dc12b33,2025-10-22T15:15:43.960000 +CVE-2025-52740,1,1,2a390b57ac43f0a963910b3d137d645752d86f52b05dc524d92ce8367da61d7e,2025-10-22T15:15:44.087000 +CVE-2025-52741,1,1,6d982bcdaa2ff090e6e4747d4387068a11e46d0bac6e2fd53afd0121352a4a63,2025-10-22T15:15:44.213000 +CVE-2025-52742,1,1,901413b9aeb91d46e039da22c321d26e39e87a23158fe93e35f2136f3a361d99,2025-10-22T15:15:44.340000 +CVE-2025-52743,1,1,9c829b47fe3bd9152ff544476d3e92b9194ab76b3747ee197af6c24638d1f5c6,2025-10-22T15:15:44.467000 +CVE-2025-52748,1,1,665671a10dc8c7e99037ddb4eef787f31fd6b61d5cede429b747d7bbdaab8e10,2025-10-22T15:15:44.593000 +CVE-2025-52749,1,1,367cf8b6b6f948d03720e97a31853cdd68b6ee24522dfa1ba1834bb3ccbe74f6,2025-10-22T15:15:44.710000 CVE-2025-5275,0,0,5b77f3d7d547bfc5aca0dea72dfa50f5ec03b6706fb1b7fce785a83ffe687ef4,2025-07-08T11:32:22.210000 +CVE-2025-52750,1,1,9bc14c1ef210c47feaea3dcaf58deaee9c1df27ae4166b2abfb62b9710a4c898,2025-10-22T15:15:44.827000 +CVE-2025-52751,1,1,f204c18742f477a4b7aa200ecf7cfb6efd359bc1f772f1612b7b722d218220f0,2025-10-22T15:15:44.947000 +CVE-2025-52752,1,1,9426d050650aa53ae775ec709b876c612ece4d0229206701facaf3e5563af45f,2025-10-22T15:15:45.070000 +CVE-2025-52753,1,1,b6f4544799526f992b923b50ff6d67c64fcb04b8c5faeba943cb073ffdb63656,2025-10-22T15:15:45.190000 +CVE-2025-52754,1,1,e834903941803d137bfd2e73021ccbd1921e3c92244170be1c20020847dd8d52,2025-10-22T15:15:45.313000 +CVE-2025-52755,1,1,eb7e2d10cf42f5ecf76990ec139d754398800fb52e94414bcfa1ad6c3b7bda33,2025-10-22T15:15:45.440000 +CVE-2025-52756,1,1,3be26ff68c50608ba8fc325a0cbc888a4e679606b0f4366900ec56d6aea93da1,2025-10-22T15:15:45.563000 +CVE-2025-52757,1,1,c39fbdf8600ad4f30bcc73ef06bfe2d5e051d7f9cd2a0f131f719fb469efa211,2025-10-22T15:15:45.687000 +CVE-2025-52758,1,1,a60766f9d891ac013ad1fd3fa02280c4e57c7f235f61e4ebbb09c8d478629686,2025-10-22T15:15:45.813000 CVE-2025-5276,0,0,39d67915dab7ad2300f3ccd3a288fcee1075e32b914c45ad140eb6b7725be52b,2025-05-29T14:29:50.247000 +CVE-2025-52760,1,1,bbfd84ae8e9fde923c9c453b1ad8898f9f21b785750f25e750f4674b0d3adb47,2025-10-22T15:15:45.937000 CVE-2025-52761,0,0,4b0a010e44a268a67fed78436c091ab5d2c24e5f0be8ffacabb261aa03f78839,2025-08-29T16:24:29.730000 +CVE-2025-52763,1,1,e5296412d7e10539e6d1bdd4e66a225e6bf9004a7abf980944db226a07ae0d34,2025-10-22T15:15:46.063000 CVE-2025-52765,0,0,70d426fd8a0770d7edb0f36d6962cb3a0db49a22685dee04566831b5637ef197,2025-08-15T13:12:51.217000 CVE-2025-52767,0,0,7eb6861faa67269905b177c4251c7bec3bae86933db08db9dded5b81764a7864,2025-08-15T13:12:51.217000 CVE-2025-52769,0,0,987df366583b2d3ab228f163cfaee1dc68272ea315388e0a114d0b03b739f615,2025-08-15T13:12:51.217000 CVE-2025-5277,0,0,ba5aa3a145e9e2e34ac18c63e7fe60e94ac49ba4d7121cc0bc36eebe3309abbf,2025-05-28T15:01:30.720000 +CVE-2025-52770,1,1,76d7dfa4d7731b617fdb21c6a4ada9edcbefd23988d9b5bd0ea36b8be0eebe53,2025-10-22T15:15:46.197000 CVE-2025-52771,0,0,56676278d220a8e272a8745c0ff32550768a705a5cf5a11c7530acf34bc0ba22,2025-08-15T13:12:51.217000 CVE-2025-52772,0,0,deb02b2d983c296f8b89a2559d4d4f189f1c6c676131c9feadcc246a08a5cc14,2025-06-23T20:16:40.143000 CVE-2025-52774,0,0,de771a5b10a99171a6970cc2eda061e856ddfde2b5144a0771c7c0ff4baad63d,2025-06-30T18:38:48.477000 @@ -306797,13 +306971,13 @@ CVE-2025-5303,0,0,546057fa156dd0bfd15529f37c8ab9dae75346583c1c67316386c3461de424 CVE-2025-53030,0,0,c7d2f5076fe0d4d909edc5233f435dac26b886d26ab86a4b64b713ba01515c7d,2025-07-16T19:57:59.720000 CVE-2025-53031,0,0,a0de3ca71a32b18578f303667116707166aab49fcda79b4cdcb7021b6df3f48c,2025-07-24T20:34:58.503000 CVE-2025-53032,0,0,6c3320bad3b080a8768b96684f937e37c722fbc05dea27fcc03dac2169a2f32f,2025-07-24T20:35:43.353000 -CVE-2025-53034,0,0,5ac84c0d3866de41900e0d354f003e0191893b32b389c8aad93a4693e5ceed55,2025-10-21T20:20:40.487000 -CVE-2025-53035,0,0,62d11de5b59a715d5f577ac870f640a5f7fe7e84ac41ec834226d54e49e7f56a,2025-10-21T20:20:40.650000 -CVE-2025-53036,0,0,8783c45ae48b5733c5929bffc105e1a8360ae7d412e7a32f259cc3fa6dbe705e,2025-10-21T20:20:40.803000 -CVE-2025-53037,0,0,ee9822939d04cff6cb6833cfcd48097e93cd515a19d22eb3f01c568de7d5875d,2025-10-21T20:20:40.993000 +CVE-2025-53034,0,1,466692bd094e2352f5fa0645be7db8454db0fb5aa6eda46944135a31d832dcc4,2025-10-22T15:15:46.327000 +CVE-2025-53035,0,1,557f425c07ca7ee5d0e264c897baf8126779fbb122c6bec563ba71a2cec583e3,2025-10-22T15:15:46.453000 +CVE-2025-53036,0,1,a6ba9dd05f796554c97c2c6237ae63e78040a804ac06fcfe21405705f63e5b6f,2025-10-22T15:15:46.580000 +CVE-2025-53037,0,1,4df14103f1bed33b2156c880adb677173235ab4a822e9e4751136805efbcf823,2025-10-22T15:15:46.740000 CVE-2025-5304,0,0,27c7f2edf9ea9d7b46be7f6eeec8234451bc5c2847f1212c43eda6372fcf7130,2025-07-07T14:47:29.020000 -CVE-2025-53040,0,0,6db1a905a170ba9aee11d0e91d4bb505e4a3f1b0bd37064e6b61725ceeeaefae,2025-10-21T20:20:41.140000 -CVE-2025-53041,0,0,c5749ccda5a68339fd0e86b34cd382cd54aea43fcf0c90df94849f11657aebb6,2025-10-21T20:20:41.273000 +CVE-2025-53040,0,1,30303bdda7e799161f165ad0e949d2b20d97741cbdc302ecde250a41174898e2,2025-10-22T15:15:46.877000 +CVE-2025-53041,0,1,d2309505519c11cde3f750b629f30b4b8e89e43c1b0e7e06d35716d4a11bc90b,2025-10-22T15:15:47.057000 CVE-2025-53042,0,0,bddfd1ae9c1b8e18a2086f6f309a8b4d3aab9dc6ee8d4ed328dee9b8a0cf5d4f,2025-10-21T20:20:41.400000 CVE-2025-53043,0,0,a5e3e82e86700315a12eeb43fc21a3487d9cddc6a6049e63918ed44aac5faf85,2025-10-21T20:20:41.527000 CVE-2025-53044,0,0,aaa899605889c99c719a8ac25e84f971bb9777dad71ae1a33d32bdac335c86af,2025-10-21T20:20:41.653000 @@ -306819,14 +306993,14 @@ CVE-2025-53052,0,0,568cba3aa795d29265a79db440523b84599e5c5804807f443783b844d1990 CVE-2025-53053,0,0,f23f693459e7e2307338ebbc10ddc947d487db3c207f1c2507bfd2f2e0aff03d,2025-10-21T20:20:43.453000 CVE-2025-53054,0,0,fa0c1abe69e11e81f75dcf355e64747b6704437e41f4267df4c0237cdf7fc98a,2025-10-21T20:20:43.587000 CVE-2025-53055,0,0,db2fd2ca9ba22496aa64db1264c5e50185d7d7ea8815cb246e7b6edbd03fa7e2,2025-10-21T20:20:43.713000 -CVE-2025-53056,0,0,1b2ead2593a7cdcef991958c9c32e101bc1f149fa9b5d6ffa88a01ae6087498f,2025-10-21T20:20:44.783000 -CVE-2025-53057,0,0,5e5286095c66891ebd78e5861a4b4a395971cab637571cc835f2a0d3dab028f4,2025-10-21T20:20:45.240000 -CVE-2025-53058,0,0,6d78c37c2b554902cea24f5a1a6fff9c6b0ccbd581936fef2c9cf1d695e1ce6c,2025-10-21T20:20:45.487000 -CVE-2025-53059,0,0,bf9835e26f8c88c03e7a01699f1fc8308ecea8ae42f474b840755fba3a2231c4,2025-10-21T20:20:45.663000 +CVE-2025-53056,0,1,3c7f7a553e6a12c649643d42db8d0ba8942cb73001e047ce9f1216441f8464da,2025-10-22T14:15:50.567000 +CVE-2025-53057,0,1,f261d36a8363b36dfac3823ca194a9b17e203e992935d59c66ea8eff2723fa34,2025-10-22T15:15:47.207000 +CVE-2025-53058,0,1,4383cde8ebaedca1ad53f68a50eca7f83997299d708755e1f6c20934c8ae85e4,2025-10-22T15:15:47.347000 +CVE-2025-53059,0,1,0ac911c56789d8124481888c88346f4aa3d32f1cb2af23f7e6caf48cd5c62816,2025-10-22T15:15:47.477000 CVE-2025-5306,0,0,8e759a80e2ac17573f0771395d0fe0be685c345a3389988c1ab6b692f3cd05fc,2025-09-16T13:25:41.920000 -CVE-2025-53060,0,0,233ddcc3a16d60f813cc7583b3267a71f5bab2eb483a2dfe109a5e7cb1967a52,2025-10-21T20:20:45.800000 -CVE-2025-53061,0,0,33e8dee5b38594cdc578b1aeb218f16ada39a6498796dff8b8c238cdc40950da,2025-10-21T20:20:46.207000 -CVE-2025-53062,0,0,e68f08c7590832e41e619d5247774fc191d71dd4dead03cdc94cc1097c65bc2e,2025-10-21T20:20:46.377000 +CVE-2025-53060,0,1,1c0acf1ce6b8f7e3ca81522d8cac6eb1f97121511d323c4e372480000037e292,2025-10-22T15:15:47.603000 +CVE-2025-53061,0,1,76e0319d9abab1d1d04a10b4a3fd35ecd8092f9ee0298ae936e79819576b84db,2025-10-22T15:15:47.750000 +CVE-2025-53062,0,1,ee0821925d30f1e7d8535db43c5cceaffcf570eb5c923c6e6ea0562c78994c42,2025-10-22T15:15:47.887000 CVE-2025-53063,0,0,ce5fe7302d4e8ec9669ec84af43829b86789b0f7805b0a225cfc7a884ebced3f,2025-10-21T20:20:46.600000 CVE-2025-53064,0,0,0993673c548911fe1a02c00d2ea5a6618035099441c728128edd4f8a76c55bd3,2025-10-21T20:20:46.773000 CVE-2025-53065,0,0,beb69b47c3f184ce924e1811c85b4c829233052a655674301d3b22b63b2165f8,2025-10-21T20:20:47.013000 @@ -306969,6 +307143,7 @@ CVE-2025-53212,0,0,7d630b0913e6d5e598428f6335e6a271dd777eee1bbb325dc70c4841a3ba0 CVE-2025-53213,0,0,07d1848f7042801f840a452e4e14d70c274be5c9e80192aa1a7bcd67cf26874b,2025-08-20T14:39:07.860000 CVE-2025-53215,0,0,6a37bb82a9adebc0875cf7808733b6eb557f5126a4c5ed35622e223b26a4f909,2025-08-29T16:24:29.730000 CVE-2025-53216,0,0,48e44f06601beb44b64990f3ae0afc04c1b07d8134f6813479fe5e15a2c85bea,2025-08-29T16:24:29.730000 +CVE-2025-53218,1,1,ec2b4fb57dd42008162deca065680dc95e7805d09cc72bf0945e052204783199,2025-10-22T15:15:48.020000 CVE-2025-53219,0,0,8f9deef421322f53e659f3d2b1216c25287f3c3a56a76014f1491433db359c99,2025-08-15T13:12:51.217000 CVE-2025-5322,0,0,6cd074297fc750e6ff1735a0dc3faa3256d1d6a3d1e92b9acf4df0a8db7d4c38,2025-07-10T15:15:29.830000 CVE-2025-53220,0,0,4fb7631d67a960cab5ed613e28169d45dffbc6be48977846050a56aa8dc4a525,2025-08-29T16:24:29.730000 @@ -306978,8 +307153,13 @@ CVE-2025-53224,0,0,cfb21ce017e525b357bd1d3f9ed76a4ecac5bb803fe8a9f86be5d901a7885 CVE-2025-53225,0,0,eb89068795838747bdd83c498a55e83d9d760119f2777a4b67de376deeb6f3bd,2025-08-29T16:24:29.730000 CVE-2025-53226,0,0,12bb3228288832f90ef14d9348058d4b6156f0e4223d916ce07572a7dc7180cb,2025-08-20T14:39:07.860000 CVE-2025-53227,0,0,2794bf5fe459fee1660377dffbe3b1aef3b9bbb25bddec6eed8a409577a545fc,2025-08-29T16:24:29.730000 +CVE-2025-53229,1,1,b539573f0f40d15109264fe96b421d3bf8e195196116daea52ad1b10180466b3,2025-10-22T15:15:48.157000 CVE-2025-5323,0,0,b0785ba87cd1215b18904af4ecc0dec4461f38599fcb91263ef5f63563e48a70,2025-05-30T16:31:03.107000 CVE-2025-53230,0,0,b968dae3f9a5074869a0e54d97dccc0a9759e4974980c12a5758689f4089d298,2025-08-29T16:24:29.730000 +CVE-2025-53232,1,1,178f676e34257c53b17fc681695da74c1a39f2aeb2355c402bcf1b9e80922f7f,2025-10-22T15:15:48.277000 +CVE-2025-53234,1,1,74b96f968793d3f9f0ca96dcb5a8a34855b1a15ff430a85f76394e71e00b89c5,2025-10-22T15:15:48.397000 +CVE-2025-53236,1,1,3ac3790e853f491ae3ae03e651d44171c5beefc2b4a05120e2049924199f7fa9,2025-10-22T15:15:48.520000 +CVE-2025-53238,1,1,a2039bbf38831e5fc010a5cc53c021f843077e77b7ba383d140549cb6932b5e0,2025-10-22T15:15:48.663000 CVE-2025-5324,0,0,78e349d2bd14065297b1365314e2e0d4a2b731776a4275b89f97d27f39ee4fa3,2025-05-30T16:31:03.107000 CVE-2025-53241,0,0,4b488834e9f18b86b9ace08ad76550386594777f2816edbfa71fb7a54121538a,2025-08-15T13:12:51.217000 CVE-2025-53243,0,0,3323bf1900e2c7782bcaf983d8ab8c968c9c9275b1576421603b8f812f7769f0,2025-08-29T16:24:29.730000 @@ -307035,6 +307215,7 @@ CVE-2025-53293,0,0,78c2b2206e0582670344322edb51a5619563fd920fa85c6c54e741d3571f3 CVE-2025-53294,0,0,d9d8813955cd87745a244ad51353327145e011f34ec2117b81021892d3e6f32b,2025-06-30T18:38:48.477000 CVE-2025-53295,0,0,81ada6604db2bcf8dca70cc44a9d02e5acc489d50dabf024ed88ab05d5b3422a,2025-06-30T18:38:48.477000 CVE-2025-53296,0,0,eca2cc82fa788a814946cb81970875312e95e57812c70ee2881f09cb4a02dee4,2025-06-30T18:38:48.477000 +CVE-2025-53297,1,1,9a508c562351fc10cae02a359f590dc17b70ab56f96d74f328714a659a898ac3,2025-10-22T15:15:48.793000 CVE-2025-53298,0,0,150c2315e04e7f08442a54650d8487875d2daeb20c77485e70e85b605015f9e8,2025-06-30T18:38:48.477000 CVE-2025-53299,0,0,86e5232139de557a07f32bcf92c5687f16b325de82e8c296e20974cf5cfaed72,2025-08-20T14:39:07.860000 CVE-2025-5330,0,0,e7ffe160dd4f6c3817c7e36e2e683e91c9ad47396ef2482f8a3aba919f7252b8,2025-06-23T14:37:01.860000 @@ -307084,6 +307265,9 @@ CVE-2025-53343,0,0,e96562afdeeb373e1cfb8f00d2141f32dec2761098e10230dfaf9026a4b1b CVE-2025-53347,0,0,2bca1f3fe1d2e77d74927047b2b9fbeb7b192a3386aa577d0d0bfb43513a6dd4,2025-08-15T13:12:51.217000 CVE-2025-53348,0,0,d4fe714c911fa075f3c7d18dcea167e0dec0bb03f2ca20d0a12b1a1b22548de6,2025-09-11T17:14:36.413000 CVE-2025-5335,0,0,ac23836a336f6543872e1a0155b1cafdab35c5a72752926e0759c62e88e98c82,2025-08-19T14:15:41.633000 +CVE-2025-53350,1,1,8b59e761ac92ef33dfc6b99e46bccadb70c264d2248f1135dc5c3488610cac18,2025-10-22T15:15:48.927000 +CVE-2025-53351,1,1,cb1ece1a10fea3a89213e9a94423c3be678b17d10234ad6fced66266e12c8411,2025-10-22T15:15:49.057000 +CVE-2025-53352,1,1,07420c3e7dd684e67580f70aed78b0333dba10bca37721cc53c5841f64833787,2025-10-22T15:15:49.183000 CVE-2025-53354,0,0,6d36616c755606b91ebe25866e2d5f68f25c2dccffcc5029519f53dd9bf09fae,2025-10-06T14:56:47.823000 CVE-2025-53355,0,0,6e01e3fe932be42442559bfccbc90db58f3e3b88ea49810c157c49f349000be0,2025-07-10T13:18:53.830000 CVE-2025-53357,0,0,0689c155bfa13ecbe1f08be01e33d8745ff0b56723ee1f2c10d7d2917df72f46,2025-08-04T18:57:31.007000 @@ -307135,6 +307319,15 @@ CVE-2025-53416,0,0,52feb1d6518e7186fce651d3ed0e50ccee583515f8661ac9a991102a97f40 CVE-2025-53417,0,0,1a18342c6e16471d9461d484c29aa71e6813a3af2e9d644bf5fc769fc33b4267,2025-08-05T14:34:17.327000 CVE-2025-53418,0,0,f3f2748fca066a7b002fea7fab4579e71e6cbde58a3c15c1a4dd33657539c61c,2025-08-26T13:41:58.950000 CVE-2025-53419,0,0,dd10f78d56d077c54a59553eab7c39386de235339a22cb805279ddd62b7c3562,2025-08-26T13:41:58.950000 +CVE-2025-53420,1,1,c1ef28b6351f0e8e99537531fdff753a04d5422b653d60b6e5089122f6b066a0,2025-10-22T15:15:49.310000 +CVE-2025-53421,1,1,c8961b7704a6d1fbc9a8633b2a3bbdfde41db7bd89e60e81b6cd2a554a5fb95b,2025-10-22T15:15:49.437000 +CVE-2025-53422,1,1,dbdf9a7e1c57432bb24a9c9d18f9addd9ead5fe646c60d152e27ae65b9da3d78,2025-10-22T15:15:49.563000 +CVE-2025-53423,1,1,7b0fdc04ff3035cb0d7b2f1ff45ce2418a8d0882907c55ade9bf5f4037450164,2025-10-22T15:15:49.700000 +CVE-2025-53424,1,1,e679c5919fbf6b14a192f07dd3e3ec5d328bd527ead464e69d3568b98d66aded,2025-10-22T15:15:50.727000 +CVE-2025-53425,1,1,eae7ebdb55a0b18e527fa000f3e6febdd73334368041be1a7354f3e6301d6430,2025-10-22T15:15:50.863000 +CVE-2025-53426,1,1,618de2ccbb6044341c5e6786a9cbdbb0bca2b3e4fc1c361070336f17ddd075a3,2025-10-22T15:15:50.993000 +CVE-2025-53427,1,1,c31464eb6a3f8ed88c8e120e52380eb2c25e0e40d68484510312e6b8fb3bec1e,2025-10-22T15:15:51.143000 +CVE-2025-53428,1,1,ade48fb2d1cfc462db2f7881eb5e07fcccc923ea1cafdd180686ea661dcb753d,2025-10-22T15:15:51.323000 CVE-2025-5344,0,0,e20fa78d4a47fd0e295ae42b3394e19e51d5ed435bec8af0ae43a57f08afdfd7,2025-07-17T21:15:50.197000 CVE-2025-5345,0,0,c065fefab571f8c8883bcd4ffcb112cdfb957b46e0d69d20d77ba981d8bdd88e,2025-07-17T21:15:50.197000 CVE-2025-53450,0,0,9cd62ac276746d2a372904bc57c1b35b29aa8d6d79170d11cf2c334b6d31ca4c,2025-09-22T21:22:33.590000 @@ -307879,8 +308072,8 @@ CVE-2025-54281,0,0,2397de6818861fa81218be205283a818b36df5f57f3e98136ad1c50c9f772 CVE-2025-54282,0,0,7e20337d4216eb15f3bc4c375b8e734cd57feac4155804317712728f3e3f0d4d,2025-10-17T14:53:48.910000 CVE-2025-54283,0,0,3c0fb3526f605ccc8b79c6318e6dfda9ebce9e0a2e7b22cbdea80a50feceed9f,2025-10-16T17:40:03.267000 CVE-2025-54284,0,0,87556d97a5c0841b389c20edaeaaecbed446cf3125cde84ab4767e783986710c,2025-10-16T17:40:05.930000 -CVE-2025-54286,0,0,6e4874188e343bacfbd24a38ab96025a82dffd1afe935e5d4c579cb5860ea7b3,2025-10-02T19:11:46.753000 -CVE-2025-54287,0,0,a1ccbce2cd0efaf066940bebb6e1bc51b62de507d03221ffa4405b33b6f2a241,2025-10-02T19:11:46.753000 +CVE-2025-54286,0,1,a634911af83c26ad48d620f079eab5eb81755cfb1cd43393bb6d01a8909674d4,2025-10-22T15:47:31.957000 +CVE-2025-54287,0,1,f990de8e8fb826232e3b59ba15651c630789886fa041d333aed72d5b735369a4,2025-10-22T15:39:01.910000 CVE-2025-54288,0,0,193659f7c7151180dbfb6df290bd6690433c423c71ba76d509449604c3c82da0,2025-10-02T19:11:46.753000 CVE-2025-54289,0,0,2308e1566302ecb4a27762103cee4453c7a29626bc04f3dd421acc77070c1dac,2025-10-03T14:15:45.600000 CVE-2025-5429,0,0,4fb90f6f61f001b2df63d98ac4a6940b3b8387c064a27049429bbaa8520457eb,2025-06-18T15:14:39.320000 @@ -308367,8 +308560,8 @@ CVE-2025-54887,0,0,5d445adfc33f3b779fc757c13a1c5448169bb97908ce0e1c3764f87f2ad6b CVE-2025-54888,0,0,beb51af03e835c87af0d74a6c3aa866fecc8ffcecc3c507bb89fab3cb0980011,2025-08-11T18:32:48.867000 CVE-2025-54889,0,0,ae5995827c85c8edd40789acdae835d40b6b9369a66729f469c3e5b3d2ca68f4,2025-10-21T19:42:19.127000 CVE-2025-54891,0,0,78200a42ed4d60cdbe8b5d020b309a7c0d3922c255bb2148d056c9e0ea985fa4,2025-10-21T19:40:51.233000 -CVE-2025-54892,0,0,f6129de6714f9478e21f32b697b1baa4c2c1c4f72824fee3decfdc95e0be98a4,2025-10-15T14:15:51.073000 -CVE-2025-54893,0,0,b903109b9c8e1edbe0a1ea73392e448532566fcf261ec37b848ec1e5eb8472a6,2025-10-15T14:15:51.183000 +CVE-2025-54892,0,1,7d5d4a0a316fb5a0b0e78fd7bbda34f595db4640064e5f3d14e196f9fa82c04f,2025-10-22T14:08:08.843000 +CVE-2025-54893,0,1,c346cdd32ddb7dbd5a3afe2cb8277c56843ad82650e24cbb8b850caa94231008,2025-10-22T14:09:19.470000 CVE-2025-54894,0,0,33ec828b825f0b603f56ed24bd4f1f4a3ea2755a56a12764bc2b9b0a80c49351,2025-10-02T18:03:12.120000 CVE-2025-54895,0,0,17c85540bf98bc5b1a76b5f039135298f25c28a884d26f8dd2fb69fe4ff178ec,2025-10-02T18:03:20.903000 CVE-2025-54896,0,0,5a461a76699c0a8f4ae648705ef62f16cc98c2dbb6f75ee14d29fff2b5eb130f,2025-09-12T16:45:48.937000 @@ -309044,6 +309237,7 @@ CVE-2025-5643,0,0,bdc7b71238ce4013f922d9b127c18310da265916fde136924493a6a34126de CVE-2025-56432,0,0,6cb134ba3b0903f499af51c4e06e0b41a61258fd7565bcb993cdc51f63c5e0d1,2025-09-09T18:56:36.227000 CVE-2025-56435,0,0,e9edc4bdf9732010fb8d9d799722ad21b766cae4ab809fdbc67f76a52a87e6df,2025-09-09T15:59:26.683000 CVE-2025-5644,0,0,5900d2ca0f624df2ba2cda28d1db8544b5da24767efe33d6c650c6c3f7428c8e,2025-06-23T14:38:45.623000 +CVE-2025-56447,1,1,7a419de61d5166eb39a4bb5208ee426eb73ec8a283b2ee6818f76129d3f582fe,2025-10-22T15:15:51.497000 CVE-2025-56448,0,0,78f2e4865d5bcdb24874e6750eb8135836bebd2bdd2ed2e105fb568876bee22f,2025-10-14T19:33:01.220000 CVE-2025-56449,0,0,eae32bdd511fa3005baf128461e3621489bd318db8e120029e0c7497f55670fd,2025-09-29T19:34:10.030000 CVE-2025-5645,0,0,17c50a7d3445db31fbfcc3af059c43697342bb3ec0608c670b1178f5cc8192e1,2025-06-23T14:39:01.727000 @@ -309077,7 +309271,7 @@ CVE-2025-56572,0,0,a41e3c0dcc14439d1e54f6c5d61105c03c9e44c9e0e439e429e8b52978e3e CVE-2025-56577,0,0,ea0609392c3dabd7213d5b83ee11a52e566c424a6aacdfa3c6f56a81f87c3f9e,2025-09-08T16:37:47.407000 CVE-2025-56578,0,0,4670d08da4aea0cb674ff79441f6ec153fe56847aee4facba916ded5c6f17b82,2025-10-15T17:15:59.737000 CVE-2025-5658,0,0,34516b29cf10eeba1bcf5853f6a1ed2cecd0392d82eb87eea008132056b82722,2025-06-10T15:02:02.407000 -CVE-2025-56588,0,0,7c78198aed07913c39543ab5ccb31dea821fe08db9839f775af8deb7fe18ca8a,2025-10-02T19:11:46.753000 +CVE-2025-56588,0,1,99f4a4b806d6a0bdebbb21eba5a87e1ab840e9f47c65b5fff6b57daad5eafe54,2025-10-22T15:56:31.857000 CVE-2025-5659,0,0,2e9f4a0e418de16bd3132ecd2481fb9b9879d63feb5400e7c03179d6af45fcfd,2025-06-06T18:42:31.650000 CVE-2025-5660,0,0,d49a54f32a97bad23440ace013a3dd27ada7eeb7c7e0a58f71ba52213e92aef2,2025-06-06T18:42:59.143000 CVE-2025-56608,0,0,a72cc2eb0ddbb51bdeeb7f119b50f7cfbb01b954c912e129d535dec98e410046,2025-09-08T17:40:36.713000 @@ -309123,11 +309317,11 @@ CVE-2025-5677,0,0,364b4a61489a27818eacb60d1e1f6c17d4c2d09e9d81b672d48b3e04da11eb CVE-2025-5678,0,0,38a46c28ab47d4075d68a853baf022d7d7f4fbcb5807bb3d7524af93d22f1b7c,2025-07-17T13:31:56.730000 CVE-2025-5679,0,0,39a76065dd3011f556df8ecc5c1607529488c249cbea269aa42dbb97296654d5,2025-06-05T20:12:23.777000 CVE-2025-56795,0,0,4f235428c4f13cab56fead7206e527ce2bd2f1b7f61ea3c6ee9181d03cc1b667,2025-10-16T15:42:33.617000 -CVE-2025-56799,0,0,1fbf6dcd4caf403721670773bf558bded1bf2ba6e0157152c733996203b0ff43,2025-10-21T21:15:37.960000 +CVE-2025-56799,0,1,e05d4d9ba3b4e9e6afe9dc8da0e7d218c00e07f9a31ca7c6dc13da27bc05083c,2025-10-22T14:15:50.863000 CVE-2025-5680,0,0,951e9727eb6f85cb1826e5addda531b5a3ed92e200dcd69a9572852fb51b7dd6,2025-06-06T14:07:28.330000 -CVE-2025-56800,0,0,c1b726847532557439cdde1a5887961c3f0ba2dc3a1f9d6f605478b41b14fdbd,2025-10-21T21:15:38.113000 -CVE-2025-56801,0,0,0306b64537d84e274ca033b652e20dcd471f13e48072c0087e3d31aff7f8dca3,2025-10-21T21:15:38.267000 -CVE-2025-56802,0,0,cf29b7cb50c57614ce321e15cdcdeaa1387860c6e59a76a1e9832e9dfd1350b9,2025-10-21T21:15:38.413000 +CVE-2025-56800,0,1,3c11bc7057ba4770a95157a0623815f0af62586a1dfa8bd81dedfd6acb0be76b,2025-10-22T14:15:51.080000 +CVE-2025-56801,0,1,3c8932f8d490c816014eb67d722b214dd2751b334a8341f37d4081a99649cb4b,2025-10-22T14:15:51.277000 +CVE-2025-56802,0,1,a7e74fb39ac6541c75dbfe76bfd4a0fc27007739471fb49c4747dc6d09e55b11,2025-10-22T14:15:51.480000 CVE-2025-56803,0,0,e204236e38e23de0500b842169e0fc177fb410f193e1aaf81d3d07a4b150df22,2025-09-26T14:02:46.583000 CVE-2025-56807,0,0,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000 CVE-2025-5681,0,0,70eb3560f9b0a9adf9942c00bab52f4c30008d3472df352a3b27a6a516747773,2025-07-22T13:06:07.260000 @@ -309295,7 +309489,7 @@ CVE-2025-57441,0,0,16a7488c0c7e379682fd1833d93862289955287dded53e3adaf5c2d6ec61c CVE-2025-57443,0,0,37ce0a707637dcbae2683bf80e2c76285c0a482f9a6f57da1c7df3075648db9d,2025-10-02T20:15:33.583000 CVE-2025-57444,0,0,e556ca8271725a37f2ee3d7bb440aa7f18b8b195dd5840c4eff7aed80f59cc89,2025-10-02T19:11:46.753000 CVE-2025-57446,0,0,e892c395dc2ac3248895782c62c75a80d68556256a6aa366fd0cf3d38a12c961,2025-09-26T20:15:37.677000 -CVE-2025-5745,0,0,2bc6939e726c1d82131cb431d1959aa10a930465d7aba1c819a790a214ec3b77,2025-06-06T14:07:28.330000 +CVE-2025-5745,0,1,b7061d2cd18a14388a367d559840aca96a8b4c7984541b6233cdca7b9227c5a4,2025-10-22T14:03:33.570000 CVE-2025-57452,0,0,2db935c336268c917b8a3ef096ca6d4d8f42482f88da5110382a96fe818f393a,2025-10-08T17:04:29.033000 CVE-2025-57457,0,0,6fc816a5c393bced5f66ff87276f4bfb4936afe3b6a61697f244c620f705cf4e,2025-10-08T20:15:35.510000 CVE-2025-5746,0,0,056ea6c0a98547dc03e9ea5b7d2db7b23a8dcd4896e6644f25db46e7fea0be56,2025-07-03T15:13:53.147000 @@ -309309,7 +309503,7 @@ CVE-2025-57515,0,0,0dfcb56226b6f4688aa0de55d9d429c2c4fb251f0e84fd63ed18dc520eb5d CVE-2025-57516,0,0,181f5197c60f13dcb7c084577cc6c279882641cf3187d039d26783a5b0fdc600,2025-09-29T19:34:10.030000 CVE-2025-5752,0,0,b4bc5fca162e2d2c0e7aee0e8870c56cfd1ba08e5287bde0c1e4c1f60838d9d2,2025-07-22T13:06:27.983000 CVE-2025-57520,0,0,779ee3c81cf042260bd143e5394c0d80aea41300c9a3679e196fa33e01952b4a,2025-09-16T17:35:50.310000 -CVE-2025-57521,0,0,b3d0ed605ddccffa84b4838da87e2220f7acd226c242563463e551c6f72d6416,2025-10-21T21:15:38.737000 +CVE-2025-57521,0,1,2fae5b0429c0a6174d520e6f617bf1eb37e8e3de86749d6cfc6f76db5c57f120,2025-10-22T14:15:51.677000 CVE-2025-57528,0,0,969584b5eee69823692e28a154219bf5df5fe7577b1b0d37b7b813e6c124e3be,2025-10-03T15:08:38.653000 CVE-2025-5753,0,0,3a8d706a680f71602d33de9167328ad0108e0abddd5db23903d2f041bb36bd31,2025-07-25T15:29:44.523000 CVE-2025-57538,0,0,656dbf5c8dcf9c7e79b0343c5ec19d3e72113dc47aaeb0d213e29803f9eec77a,2025-09-18T17:41:56.570000 @@ -309487,6 +309681,7 @@ CVE-2025-5785,0,0,bed468c76f00e36e796a823df55cc8ba5b8001ab8cd4a0bc3ebd1b409037ea CVE-2025-57852,0,0,d2210aee87b2fedb881c50c7b8819e1ad9f6e573d6f2e016c8102ef44abb9e7c,2025-10-02T19:12:17.160000 CVE-2025-5786,0,0,cba78e3d1605d0575de2eda7ef0114839aba755a1d173d5fef8167822e753f46,2025-06-10T14:56:32.553000 CVE-2025-5787,0,0,33fdb7d532b54bc886ec0cf9d76d17f2a503e91b7267fc08e8c1631a963666fb,2025-06-09T19:08:58.440000 +CVE-2025-57870,1,1,d770c8d40de88424d24d5dbdae086d314cbe09619479f013d8e6d96442dfa482,2025-10-22T15:15:51.830000 CVE-2025-57871,0,0,94cb5aafa6dc4b8f0e54e5381df122f147939ad24635cb0dd84a9788c2b1dd07,2025-10-17T14:08:29.920000 CVE-2025-57872,0,0,6750e1b2df89c701c305a403f72e8c6808ac82d1053adfeb5737d31fca5e9086,2025-10-17T14:14:32.447000 CVE-2025-57873,0,0,bd83757020be1af25e9108bb1a06f202fa8785faa15788d925deb2c2570eb5df,2025-10-17T14:14:40.383000 @@ -309840,7 +310035,7 @@ CVE-2025-58270,0,0,733c2640dabbb73f31e844cd75ec0723327a6979d81217d1c79429cef169a CVE-2025-58271,0,0,22c96fddc67cb29439568bf6838809f5878cccfe9c2857146f01d81a9416bccd,2025-09-22T21:22:16.313000 CVE-2025-58272,0,0,6e1772f590e29893accfbb96c5a520366051e6cd2b11855ef0f8ffa78f8b9efb,2025-09-04T15:36:56.447000 CVE-2025-58276,0,0,71498c348e31b5422684a0317ba134edf7cc93210494dfee31be36f11dfdb671,2025-09-11T12:14:04.980000 -CVE-2025-58277,0,0,a28e7da0323054b46c6490afc374e9358ff763aaa66ec14cd9f4f47d9b3cc852,2025-10-14T19:36:59.730000 +CVE-2025-58277,0,1,bfaf01eb6cc66f8c7320b4c89a2e268583717684c86d6dc53ff7c55be8b73e69,2025-10-22T14:18:48.477000 CVE-2025-58278,0,0,ca3bbda18a5f7de657939cba97201a9afbcdb9180844eefd2af46efe821ee6c2,2025-10-16T15:25:02.187000 CVE-2025-5828,0,0,37290bfb8c8330e52b0b6d9ce16d7084e1500c9aeb632c27f35f8e8ff9af4dc4,2025-09-10T14:46:41.230000 CVE-2025-58280,0,0,26a385ece660ee9511d0342ffdf8304742f9970f352141dcff2e17e9a37a9393,2025-09-11T12:13:47.110000 @@ -310296,21 +310491,32 @@ CVE-2025-58911,0,0,5f67b8ecf332031e9c0b04344f45cdb8c89cd01b94b2214b33ba911fe1d9d CVE-2025-58912,0,0,544e4fc8eaf6c71ea21bb171af45ce3c2d90adc1c9d54f33523b90b949bf6c71,2025-09-06T03:15:41.107000 CVE-2025-58914,0,0,c9a6d03561f22b01b63ab827b8f727e5c7711b09ddfdeefe5894781b5869b6b5,2025-09-26T14:32:19.853000 CVE-2025-58915,0,0,dc834b40889dc24b475728b7eabdbfd8e4c4a39c5663415d5f7cd1c074f16815,2025-09-24T18:11:24.520000 +CVE-2025-58916,1,1,6c7f221503c7ec41732e285ed2c517d34e1d4ca4de1ca5bcd55ccf28880efbdb,2025-10-22T15:15:52.003000 CVE-2025-58917,0,0,49e8d0d5cc321c1ce18ed6f4fa83a2e3398981bc00ac73759727966bf85c678c,2025-09-26T14:32:19.853000 CVE-2025-58919,0,0,e3ca77d371de5405e99f738acd3b072e5463eb63c56c31ab8794f93a3628c3b1,2025-09-26T14:32:19.853000 CVE-2025-5892,0,0,039d5a5f1b878e6a95db2203c9250e58ccec5f811f3e5b5a79a5b1e656493ef9,2025-07-10T16:24:57.087000 +CVE-2025-58921,1,1,7d648cd1015a701cb95b94864c3823eb0589235933f963c78d72f81172226934,2025-10-22T15:15:52.153000 CVE-2025-5893,0,0,b61b07be300b899b567084a8ad5ced3784281d0bce8aa355a3665ed584929e11,2025-06-09T12:15:47.880000 CVE-2025-5894,0,0,f84a3a7402232a02746652be917d286ca270709ff85e33a9bd0da14ddf6b9deb,2025-06-09T12:15:47.880000 CVE-2025-5895,0,0,1f655dba6b0917ab2940289673fcc8ac2dbeb06dff17479124fd9e4dba6f24cc,2025-07-10T16:26:17.607000 +CVE-2025-58955,1,1,39e6781ec0d9821c4dd58a6c2d5411abaee1cf9e3910c85a4856a4b36752e991,2025-10-22T15:15:52.287000 CVE-2025-58956,0,0,f87f73ee519b24aa584698ad432210bca8ca7db981135b8aa8bd0459fe5771af,2025-09-22T21:22:16.313000 CVE-2025-58957,0,0,454f1ea5f818ac76280023618c93fc8408a5cc7918f32ce9c2cf764c66d51e04,2025-09-22T21:22:16.313000 +CVE-2025-58958,1,1,5f8769bced98b0e80702ddb5393a4b16591fb1d7cd9cbb6bd5cd8b0437e21b1c,2025-10-22T15:15:52.413000 +CVE-2025-58959,1,1,2d2e26d027f3efb78e16fd0f85433128af52e3a699dcc4d9f6ccf9207b277efb,2025-10-22T15:15:52.543000 CVE-2025-5896,0,0,ab9de4874dfc2fa367a9bda9ac9e47ee4d77a81716ba4a511ce4ca643a19fb4b,2025-07-10T16:27:20.890000 CVE-2025-58960,0,0,b041e479cd1a50a19b091d04f1a8e36eba3c434423514fbb7a761dc794402c5e,2025-09-22T21:22:16.313000 +CVE-2025-58961,1,1,3a9b4cf3432c5fd86f3adf6a1ae6318151fa3eca4c72fb1b4da6679bc897c5ff,2025-10-22T15:15:52.690000 CVE-2025-58962,0,0,7f724531435257bff959d0cd7b24a4ba362c041194531eb5c057307849560b22,2025-09-22T21:22:16.313000 +CVE-2025-58963,1,1,3dd58da092fada7e98fa9c816a4b1afcde1a9ccc3e2aab6b85256f82c9ee2710,2025-10-22T15:15:52.830000 CVE-2025-58965,0,0,0f9427414562acec50466ed82721c0daf362676bcfee8090b26e9fb5a7bef9ec,2025-09-22T21:22:16.313000 +CVE-2025-58966,1,1,4f05833985de4b809ef1f64eb26d2cfe73ffc6cfa073121700ba9ff4a7585e3d,2025-10-22T15:15:52.960000 +CVE-2025-58967,1,1,838eeead62ece86492f9838057470060b4c12f2044b91e31094a40c7b9f609e4,2025-10-22T15:15:53.090000 CVE-2025-58968,0,0,3d22d48a6598c13800f4930d7d77905dfb5da2b186c52fc5067bb3b84dcf18b5,2025-09-22T21:22:16.313000 CVE-2025-58969,0,0,498296afb6593b8f41f5e0c2f9c0dc887001207e63af4f8c772f1ec1034e1ed1,2025-09-22T21:22:16.313000 CVE-2025-5897,0,0,86d1a279064ae9f90a5b0e83e2f5b7aee69bdaa99c0801425f743a7ad7af16f1,2025-07-10T16:28:50.510000 +CVE-2025-58970,1,1,f48ed732fc8119404cd7d299c4c150f33316829f10e593f5ec069a127b18b146,2025-10-22T15:15:53.207000 +CVE-2025-58971,1,1,ae67f1e20cc4bb004fbdc680c779e7e3fd6c5756c9817a76926292c59670d037,2025-10-22T15:15:53.333000 CVE-2025-58973,0,0,90f8176bfac4481ed4e64ff18348ca4bf4abc8c78e38606326b2f09adedb788f,2025-09-22T21:22:16.313000 CVE-2025-58974,0,0,a9fa7f54a744427968fdad68ec90491e26ff6682572a691d5a28cd0138ddcc4e,2025-09-22T21:22:16.313000 CVE-2025-58975,0,0,8ac9b2769e510e2440c55392bbed0c4fb581c5b79e9d327ba38a7a4502955c53,2025-09-11T17:14:25.240000 @@ -310336,7 +310542,10 @@ CVE-2025-58993,0,0,c08ae175bcbb10c788cec6e0f44d368bbd756c51d6a825175aa15763bb110 CVE-2025-58997,0,0,8a82b91e4adb37465c3d5f15a3a4c0cbf49e097c48e3875db43e4ca980d69faf,2025-09-11T17:14:25.240000 CVE-2025-5900,0,0,c656554bd03843370fd58ffda57d8c16de9c87b7cbbbbe829e6d8cfc3ba87d5a,2025-06-16T14:42:41.297000 CVE-2025-59002,0,0,1a9ce397e77b2e3042586b534c81a5f2351933cbaa5115ffeeac0239a3b448c3,2025-09-26T14:32:19.853000 +CVE-2025-59004,1,1,32b1e048b078a75bbf6028a6880c7429d66a0402bc41e44f94d2e4fcabccd9ba,2025-10-22T15:15:53.460000 CVE-2025-59005,0,0,c471e82f5154d812f19d246ea54f5fd6f3ca3f8fa1ed9329b656638115036737,2025-09-11T17:14:25.240000 +CVE-2025-59006,1,1,cc36d65cee831036904379c583b1e6411b9968f8d3c1d2cbbb6f2864c9730953,2025-10-22T15:15:53.587000 +CVE-2025-59007,1,1,84b1aba0924de0c60086dfc22dc191bf44633ad2982f5581056dc345e5df98de,2025-10-22T15:15:53.730000 CVE-2025-59008,0,0,a60947d79380cafc2c4a0c4e7ac81583a5bcc7a13f5dd2a21ae5e739b8962c09,2025-09-11T17:14:25.240000 CVE-2025-5901,0,0,514ce87db5d65c319d88ff4845a9b4075bdb5ec2199efff957755bce215b3468,2025-06-16T14:36:39.083000 CVE-2025-59010,0,0,fd312abe2ee14ea9d2e211a6a892c1b511d68b41e3194507fe91cb245f997d53,2025-09-26T14:32:19.853000 @@ -310622,7 +310831,7 @@ CVE-2025-59455,0,0,46e7ecac913b06b50b0d3aa024c8cb85098b5e3d8154928286fda6df5d573 CVE-2025-59456,0,0,81f118236763a35e1ec1d0092cd847418342cd293b5b04cf6745237ca1e28588,2025-09-22T17:07:38.200000 CVE-2025-59457,0,0,68986a067538d3b7c8f2741bbc07250e935d94b92f2abaef5f890c64932fc1f6,2025-09-22T17:07:35.593000 CVE-2025-59458,0,0,6259493d57797f8d5e3fa893a963440f81d26ed23b191b7d42359815e34bd2ed,2025-09-17T14:18:55.093000 -CVE-2025-5946,0,0,e48b9e424e0c13ea09e1bcd8743a8aa4c412450671217495ceff3b51560be3f0,2025-10-14T19:36:29.240000 +CVE-2025-5946,0,1,16c49d3e62b438b8a275c883dbce4ee2c2f8aeb3061745971c40d30355bbdf0d,2025-10-22T14:08:29.633000 CVE-2025-5947,0,0,7ef019a00e8c2ec071930b687c87c0d7388115f037132479a4075057b8752c09,2025-08-04T15:06:15.833000 CVE-2025-59474,0,0,ded0505e4c863971b7dff2057a98a9ef96ccfff10ace54b4eb8a9ebbd0811b60,2025-10-02T18:47:33.420000 CVE-2025-59475,0,0,d0e755136cf7b212e6fdaf07de176d54badcd315d0147d55e68526a4cc9f386b,2025-10-02T18:47:05.153000 @@ -310662,25 +310871,36 @@ CVE-2025-59547,0,0,5a09a9ad5c1cccd43ec2303b70509d41da804c0f5753411356e85badcab9a CVE-2025-59548,0,0,d88aeb4aed2dc594c4a108358eee52d12188ca9901031fc2bec9b9d12d5c174d,2025-09-29T12:58:02.710000 CVE-2025-59549,0,0,69b8c06f323a3697305e9b1f9097b1e5eb00627850e4903db317c429fb16a2e3,2025-09-22T21:22:16.313000 CVE-2025-5955,0,0,c96313e035d3919d05ccfb3070b52d8d0a583efc2eb90cb6072ec0bb03bd6af6,2025-09-19T16:00:27.847000 +CVE-2025-59550,1,1,bccb83a774a90f33aeb2efcbf8bdda5aabf943fe7c80e261d4762efe7b5dc8d2,2025-10-22T15:15:53.850000 CVE-2025-59551,0,0,8a37a02b366e33068ec1731b42215f831e697ae7a14b828672b0a22134c36e42,2025-09-22T21:22:16.313000 CVE-2025-59552,0,0,a2d96e2af196ef67527aa8cfb054f259cc0fb5601e916fd69924058c573338e4,2025-09-22T21:22:16.313000 CVE-2025-59553,0,0,c5b215ebe15c94aaa4ac7ccfce8ae1cc18e35c0d1ca0f49bd5d922375c7f9364,2025-09-22T21:22:16.313000 +CVE-2025-59555,1,1,dd48c2181a2d94fb6bac68039733bfe72b882c606646534d62e0006afc116bf8,2025-10-22T15:15:53.977000 +CVE-2025-59557,1,1,e851afbeb1f92839703b8982edf2c66520c290ea983b1fd1530f7f3489dcdd1b,2025-10-22T15:15:54.117000 +CVE-2025-59558,1,1,709e431709c2386277fc7f1a7f20d6aea1d4d6085cbd386fd1cac0c76ed7f08c,2025-10-22T15:15:55.127000 CVE-2025-59559,0,0,20f482ddb757be7c77362627e0bb011cd5882e6836c493b9139a255027a4c6fb,2025-09-22T21:22:16.313000 CVE-2025-5956,0,0,dcba828d66da6c349c48e9a8a382d8812fb815ba65032f8efab7d081dfe6d1be,2025-08-13T19:29:30.883000 CVE-2025-59561,0,0,5e8293f3cbbaae07d6beb1436eaa798bd6a1cdc54fb59bf99ae94c5f7f08c805,2025-09-22T21:22:16.313000 CVE-2025-59562,0,0,6bd690dbeb70742aae91c696c7bc83e1c739c917bb9e807fba996e8b9c1bb99c,2025-09-22T21:22:16.313000 +CVE-2025-59564,1,1,0169903b2846d2da254e146a1365def8072f434c7025bfc64e0b77cd7a9437d2,2025-10-22T15:15:55.297000 CVE-2025-59565,0,0,bf6cb8a5fbf91b5023fccc67baaa5649f4e1a38ebcc40ae9df096aeef3f30648,2025-09-22T21:22:16.313000 +CVE-2025-59566,1,1,78a9706b8991d35414cd215a2cb9a2a4e55490d443b08a58738982982a3856d7,2025-10-22T15:15:55.447000 CVE-2025-59567,0,0,5fe5e6a9b9c13f4b15e2e4ff13e2d13cd9a7e63f966f3c6c4c486b4517902eff,2025-09-22T21:22:16.313000 CVE-2025-59568,0,0,e2f610957198fd4fa120080d660a514090b3be74e4f71e1987c868f683c4c2d0,2025-09-22T21:22:16.313000 CVE-2025-59569,0,0,3740aff4d1da65152cbe8d1acf487539e0e4f14cfd9c84919a929d50f6f927a9,2025-09-22T21:22:16.313000 CVE-2025-5957,0,0,e0ce057a69c31c1a0e9954b748f53f9e249946af7ebe4038ea1eb122e7f228bb,2025-07-08T16:18:14.207000 CVE-2025-59570,0,0,76c8023e3da02446797a5315197bf1f4b8159739e139e7c9bf83f79d84289e9c,2025-09-22T21:22:16.313000 +CVE-2025-59571,1,1,a2da431e670ad2c2db88a672f2af3ce7e867564b0fcae46740b84e793032c029,2025-10-22T15:15:55.690000 CVE-2025-59572,0,0,6e10b5c127651df1fd24fe6528fc5ee4216e0d4742c31603462244330e4de4d7,2025-09-22T21:22:16.313000 CVE-2025-59573,0,0,1aa4722dcab9b13103d717857042449150ec500ae63104d7e7db3f37b2169746,2025-09-22T21:22:16.313000 CVE-2025-59574,0,0,972b6d29036ec38179e885760a243c5595a61ba359d021d68fcb5911a508863b,2025-09-22T21:22:16.313000 +CVE-2025-59575,1,1,3ea5c37d547aabc9df27ea470ff144895f4e96687d6a50110f47b0091ebd29db,2025-10-22T15:15:55.833000 CVE-2025-59576,0,0,e767bbf6261c4dc104c54bc7641c1909b29967a61095f0e122d1fa14580c3ea2,2025-09-22T21:22:16.313000 CVE-2025-59577,0,0,e0ebd63876a731130b0e3270bffcf106787aa3d5eb52edd83f24b3cb776d7192,2025-09-22T21:22:16.313000 +CVE-2025-59578,1,1,927745994647a65208d134338bf1d7dcab1279e2ce56fd26f32f0d31a1eb17d9,2025-10-22T15:15:56.040000 +CVE-2025-59579,1,1,fb4018ef485353a68312574daf781d8993a4a1a89fa57257b461f46bd0f3eb53,2025-10-22T15:15:56.167000 CVE-2025-5958,0,0,a36b78799dbbd1551f96c1bff1614591c13905c454c0b07d9b02e19316c76c99,2025-06-16T14:50:15.493000 +CVE-2025-59580,1,1,9c3c9f998c0925f9b01568879976196618d39a14d8dbdde9bf1fef5c298d98f6,2025-10-22T15:15:56.287000 CVE-2025-59581,0,0,7c61629cf3bf0c397d93515d26005116f1d57b9a405800e0df56e423fbd864e4,2025-09-22T21:22:16.313000 CVE-2025-59582,0,0,343203676cb0874cb5d271b5e188ffc427f6576be17d88ba69d41677f887b575,2025-09-22T21:22:16.313000 CVE-2025-59583,0,0,babf7fdb4fba2c7e6204128f590451443433d3cd387b008491f2af87b5e9cf47,2025-09-22T21:22:16.313000 @@ -310694,6 +310914,7 @@ CVE-2025-5959,0,0,a39e129e58512bcee45e4710589bda0209f85db251e85a57b71fd6de1e6610 CVE-2025-59590,0,0,2f274006ca2e4c4cb493ab9313749e0bacaf163141bf21fb55f8f0852a512cf2,2025-09-22T21:22:16.313000 CVE-2025-59591,0,0,a36f5bd0309818aa528f544c1c0e0ec1e1284916cc11cd71c3cbbb904977298c,2025-09-22T21:22:16.313000 CVE-2025-59592,0,0,a25b2363e853d5922835c2ba8113f8605dd0269700ea9a6423f6dddebeb81316,2025-09-22T21:22:16.313000 +CVE-2025-59593,1,1,8e86f2d74e1b04ef672b13ee8429a0ff45cacb0216d0e0861953fcee7fcae14c,2025-10-22T15:15:56.407000 CVE-2025-5961,0,0,f29de724d19f35633b2aa8f913c0e600fe9f653e00ebdc99f8a8c31e3ccc7c51,2025-07-09T17:51:24.543000 CVE-2025-5962,0,0,8ee6dcfbe6d19cfdacd898b5906679a59645a08bdc2e69b23a0d08ed7caecdce,2025-09-22T21:22:33.590000 CVE-2025-5963,0,0,fa08382550ea0c3ee30b8fad922b8d6a6c917f388130b237bfade6a185c04053,2025-06-23T20:16:40.143000 @@ -310711,7 +310932,7 @@ CVE-2025-59676,0,0,23ab4cc25c7f1d4292068846ebb0fb693d749d488e2bbd801c72e2b496828 CVE-2025-59677,0,0,4d947fd17a1577bedd4c9be34caf0e8207f8461a8342b2ac7993c77ee47883e2,2025-09-19T03:15:37.780000 CVE-2025-59678,0,0,676cba16493940018c558c079f5b8604d2071f734d88129bb5b00b35e1fe9414,2025-09-19T03:15:37.847000 CVE-2025-59681,0,0,01b2d2e7c77c74989201c4b3f85ef166d0ec9dde3d9bbb1759bd291c4eab8c50,2025-10-07T14:50:04.887000 -CVE-2025-59682,0,0,a17faf7ae99032d9bc2045d8035214340ff720c2829c896620137e38b078cdae,2025-10-02T19:11:46.753000 +CVE-2025-59682,0,1,a7484554cb178f2069499e576b38992b49798659cc5144c9fe4423a95a2e59fc,2025-10-22T15:58:29.237000 CVE-2025-59684,0,0,ca417ea1cd55e5b39d90ee64c686c6bc7db3410177be2b8822a52eae8b9e7e25,2025-10-08T13:57:51.603000 CVE-2025-59685,0,0,96f5ec545f5040268d42c972d41c7c3e65013ee69a49db776b4397b680b40b76,2025-10-02T19:11:46.753000 CVE-2025-59686,0,0,32908b59785d5fc278ea05059ee5d6f46669dd4336cd35ed3bf7a610dd8ccd6c,2025-10-02T19:11:46.753000 @@ -310940,8 +311161,10 @@ CVE-2025-60030,0,0,ebc9fc315f6b79df1410955af0e674cc73dd37af14ecf39061c1d4d719ac9 CVE-2025-60031,0,0,b8e843d970e9e8d3bb5d0b81f02f5ebe26e4e196a7f6369dabf8e73eda6a2703,2025-09-26T03:15:44.520000 CVE-2025-60032,0,0,f734f4ea7a19cd90b397225e341e901721f9f5a26a209da33d973e2bc5612be2,2025-09-26T03:15:44.590000 CVE-2025-60033,0,0,7bef5a173b26f8b45898643b9ec7cd4a7c76b2840a5715617e663059cfdc0043,2025-09-26T03:15:44.663000 +CVE-2025-60039,1,1,8c1a6f42ed8241b2539c7c89d9b67ff9fafd9322c9de879d9ca6fdd19f7c0cc7,2025-10-22T15:15:56.533000 CVE-2025-6004,0,0,bc73aa23598be2ea1938019c973c20a49d98f5d1d5c793801495cf855e947a81,2025-08-13T18:10:19.797000 CVE-2025-60040,0,0,033a8594adc51d35a7d9db77e1baa5431a5db22d0456d4d2c3ff49aa9e8f875c,2025-09-26T14:32:19.853000 +CVE-2025-60041,1,1,b4a7c2edf6c7ab0271d15569026dc392049c7210c7ba4421ad871d1413c405ba,2025-10-22T15:15:56.660000 CVE-2025-6005,0,0,9a2ac8246f422ef5614eb749e32675eaa624d97ea333814ae3828209772ff515,2025-06-20T12:48:20.400000 CVE-2025-6006,0,0,7a386c846906f2e1152f82f788f56ad0aa39222b613fc15254d86bd6e33a6943,2025-06-20T12:46:43.687000 CVE-2025-6007,0,0,ad7217a46edf88f3122f03c09e2fdcfd31382468cbe1002c4a5de402899399f2,2025-06-19T01:26:45.850000 @@ -310989,7 +311212,11 @@ CVE-2025-60128,0,0,c14e7c9c1fc2ee88ef93c131e3e23cb30877a7c0bc09acf9df376e683a1f2 CVE-2025-60129,0,0,46c0571aac3f90c6c94f17c0d30b11600b91055c1694e881ccbbbf534cef8ea7,2025-09-26T14:32:19.853000 CVE-2025-6013,0,0,ce2dee093c7ee8f8b8650206c859c38974e2ca32dcd7602f0bce033d8ff76e80,2025-08-06T20:23:37.600000 CVE-2025-60130,0,0,b5b8336882c490042f0e110969b1669c5c12791c4170a9881f0c905974a7f505,2025-09-26T14:32:19.853000 +CVE-2025-60131,1,1,2977eeec0bc45da7dae62edfc4bdba5de8b4bf907c5a5153dc977b047ff5a06c,2025-10-22T15:15:56.770000 +CVE-2025-60132,1,1,13a0c470a013cd4a3a9d3d711cec0bf7b5ff295586ab2dc4d108bf5abffc0435,2025-10-22T15:15:56.897000 CVE-2025-60133,0,0,510ff44cd726fce553ccac457485bf02896f1ec1cd6e2d94612fbda6f479ce06,2025-09-26T14:32:19.853000 +CVE-2025-60134,1,1,0070d8abab95e304174c9d41878be2df15184ecf205300a6a53440c508e62c5d,2025-10-22T15:15:57.023000 +CVE-2025-60135,1,1,553333dbcd335c827b82d73140506b1b7c4ddd9e58a744a9c9d20c8b95e0d160,2025-10-22T15:15:57.173000 CVE-2025-60136,0,0,5c69943d11e11de543401336443595683b63878ad81d26c0cd22c27cb6443704,2025-09-26T14:32:19.853000 CVE-2025-60137,0,0,5694021bf49b0c441d66b450a2b1859f13ba165b966ff90651fb365df967b3d3,2025-09-26T14:32:19.853000 CVE-2025-60138,0,0,64b38969e5d67deac480533ca1cf32b980b75c2fb291d54f8eb877df3b3c04c2,2025-09-26T14:32:19.853000 @@ -311007,6 +311234,7 @@ CVE-2025-60148,0,0,00dbc6b4bc59ba65dd545848903cbd4bad969286954de49141f9e19e11b05 CVE-2025-60149,0,0,1359f63cb6b8510d1aa37e7b08f620d2bdf73ccee344643394ad0b807cd49eb4,2025-09-26T14:32:19.853000 CVE-2025-6015,0,0,336d6f10e0b2c817fd6d8c4142681a14290363f5d34e5be51a6b2b02653cc1db,2025-08-13T18:09:08.700000 CVE-2025-60150,0,0,94eae1e3983dc845734d6f1db1afb1287dc69da63078775ec9b7ff3a904c906f,2025-09-26T14:32:19.853000 +CVE-2025-60151,1,1,e1aaee1e703973d5c6bac68fed1b80566d4bd5551e39a7b5d74d1e08b69151d5,2025-10-22T15:15:57.313000 CVE-2025-60152,0,0,b5af6c13059695897f86408d9d94b30d9eb5516ae0c0757353075058edec3757,2025-09-26T14:32:19.853000 CVE-2025-60153,0,0,609bde90334eaa89b6f4220e4ad0db6df8619e8c85b1725d57da6548381decc0,2025-09-26T14:32:19.853000 CVE-2025-60154,0,0,697bb36306ebde254c8727f160f0ee95144d07853d67d5d7a16ea42fd3559c37,2025-09-26T14:32:19.853000 @@ -311023,12 +311251,14 @@ CVE-2025-60164,0,0,52a38f957c130e2b1c4b53132a497d18d57e220ef24d429bdf25ab32720b5 CVE-2025-60165,0,0,10da1208b7bea63dfde7fc042d010b95cf3206bd5d9df9e2b54af60a8bcaff4b,2025-09-26T14:32:19.853000 CVE-2025-60166,0,0,fab3d90c0b60175860f728787192e34ffd438ccbc551e57063627a64b25577f2,2025-09-26T14:32:19.853000 CVE-2025-60167,0,0,07c77a037d39371be3d713d2b9a7311d3d4dace5ae9acec985f1be19c6211eba,2025-09-26T14:32:19.853000 +CVE-2025-60168,1,1,6eb9a9dd8b62d552f3939930564eb2db1c9d019f4db673b3f7dd88495ad22115,2025-10-22T15:15:57.457000 CVE-2025-60169,0,0,b4a9921a4645a2cf987245cfb719870b5b0fd1d4e16b091dfe0f4caef0eb7d78,2025-09-26T14:32:19.853000 CVE-2025-6017,0,0,96cd5b859692848f39f1333afd76de8433e292aad69341d3f397d5e0542a4235,2025-08-20T16:33:58.457000 CVE-2025-60170,0,0,b93fbd75c05953370a9c747775baf6cbd36a0e0e8607bf60b1eaa2ca4ee4c5ad,2025-09-26T14:32:19.853000 CVE-2025-60171,0,0,467224eb69cd04f7490a47890eae594018ed0e651f00f373666989759de64c63,2025-09-26T14:32:19.853000 CVE-2025-60172,0,0,83193eea46a61b0263ec9a460d945a5376bda9db8ad297712c8c838d2fa6c605,2025-09-26T14:32:19.853000 CVE-2025-60173,0,0,59943f7d0695b5bdd01b3152f4aa41162c454af22e1ad0ad266516576c575e3e,2025-09-26T14:32:19.853000 +CVE-2025-60176,1,1,309adf8258300142166ddf8207cb5b84e66345123a34140d2b8556eac92b029c,2025-10-22T15:15:57.583000 CVE-2025-60177,0,0,0268736d4fe0054754f13edc0cbec1a0dd7b13c7a5311bd3e4f6a29da5366c48,2025-09-26T14:32:19.853000 CVE-2025-60179,0,0,85cd5aee33eee5002db48c1e04317380301fe47352fe516183b0fe580e37b893,2025-09-26T14:32:19.853000 CVE-2025-6018,0,0,4d1ab1f5bbd8b0ff863cc4ae3194cf097d7c0beb2384a58f641284d74f01c1a3,2025-10-09T15:55:11.957000 @@ -311038,10 +311268,33 @@ CVE-2025-60185,0,0,1c1cac70fe98c909d24f3a0bf7daa9b7dd180d5fe97fc9e3bdfa64f43a4a1 CVE-2025-60186,0,0,9f8776eae93bfd11b8655949de197599754e31e514014ac45da64561891d45f4,2025-09-26T14:32:19.853000 CVE-2025-6019,0,0,bf632c485beb37dbe798f798f4eff0baa7c87b8abc0217b675bda9385ddb8133,2025-07-10T14:15:26.630000 CVE-2025-6020,0,0,e140d9bb3bf8d0399fe8cbc2cf9846c67772d29a2ff7464f4f5264bd9ffac8de,2025-10-16T09:15:35.850000 -CVE-2025-6021,0,1,04d98b2408b32b82545804e959c61dd6dbc0ca0c20b076df334464a418d64950,2025-10-22T13:08:44.160000 +CVE-2025-60206,1,1,b1abd7455fcd0bcc15c07cab28ca632a113fbb71e1182c3edb373e145d51978f,2025-10-22T15:15:57.720000 +CVE-2025-60208,1,1,1860a29a9b578492d83890a7f46022eb448e13ccc449ea650012cec289d946d8,2025-10-22T15:15:57.843000 +CVE-2025-60209,1,1,4d62f22b3bdeb83b748cc1f631106c12c3f87c8b43bb91e2bd88dd8803433e37,2025-10-22T15:15:57.983000 +CVE-2025-6021,0,0,04d98b2408b32b82545804e959c61dd6dbc0ca0c20b076df334464a418d64950,2025-10-22T13:08:44.160000 +CVE-2025-60210,1,1,5857bd19e5bcf4f33771eb244f1376372f62356efaf2df031d122d6d04cecae7,2025-10-22T15:15:58.123000 +CVE-2025-60211,1,1,9979978e78110390cc171b0f2b545d199386edd660a3bccc06a97edce2fb7028,2025-10-22T15:15:58.250000 +CVE-2025-60212,1,1,23e034e54f85afdc48eb5ef7d511360ec6fb738bbde11c43a7324a814a85c20b,2025-10-22T15:15:58.370000 +CVE-2025-60213,1,1,57492e750b22b831f78dee3112778624a2db2ee2b95d985b356b6690081a546b,2025-10-22T15:15:58.487000 +CVE-2025-60214,1,1,03d76108bf46b9b8337617ae0021835a19cdd0409853daf7159697d50c56d25e,2025-10-22T15:15:58.607000 +CVE-2025-60215,1,1,ab53e5de53f51c71f54cbd383fa71d3f0b4f8f98f7308dba4ca87b961b99ca18,2025-10-22T15:15:58.720000 +CVE-2025-60216,1,1,aef0f7d7daccd585f465c41b306e97b722edf91d0428d01ffa1f45a4236653cc,2025-10-22T15:15:58.843000 +CVE-2025-60217,1,1,443c5e7666950565156c216bb6169eb465678526b8368419a5408fd666aa8b6b,2025-10-22T15:15:58.967000 CVE-2025-60219,0,0,5b932027e1d5ab7e308c77e8e9035da79cccf4c7016904f116ee29008a3b4d43,2025-09-26T14:32:19.853000 CVE-2025-6022,0,0,673713355118472c1ebaabd5c5e4854e0f9320e04b049cdd5cc68d5d0f25f012,2025-07-05T23:15:26.353000 +CVE-2025-60220,1,1,dc4e197b86b37f3b391bf08c82365e963ef31cda7fb5b5d873376d22908daf28,2025-10-22T15:15:59.107000 +CVE-2025-60221,1,1,280e87b745bf3057f4a6e0aaaca91e318a1d25de4bdcfcc069478d09e63d92ff,2025-10-22T15:15:59.257000 +CVE-2025-60222,1,1,f7024100b460590653bce678f73c58541f0e112c58659685b5d84ef45230aaa2,2025-10-22T15:15:59.377000 +CVE-2025-60224,1,1,a09b475d5c4703667752c0afde8ab4f0c109da8fa495cef7e300911ed69fae5a,2025-10-22T15:15:59.497000 +CVE-2025-60225,1,1,187f20deb66c333a6796537a7dc4693daf71da06bd5de6308b1ae0e5d189b4ef,2025-10-22T15:15:59.620000 +CVE-2025-60226,1,1,85d72c5a3d677a393c6054435d1c79db994f5ac0042fd6c8699b67ef946822c3,2025-10-22T15:15:59.757000 +CVE-2025-60227,1,1,7e864e4489090648cc71a77474ebdfec6454f7db67e83e40fb8a394127c6ee9e,2025-10-22T15:15:59.877000 +CVE-2025-60228,1,1,496ea0dc1221b0af119aa4a7d4468ab8fbe2487e6c42390d8da68d61ce25f280,2025-10-22T15:16:00.003000 CVE-2025-6023,0,0,4627bd157e5e14ea24002cfdef72568ba0df65f26fcef5bd8f869ccd299993d6,2025-07-22T13:06:27.983000 +CVE-2025-60232,1,1,0db58a3310aa9d3d5a7336f2476360075868b2822af5eb377d6504883fc63d03,2025-10-22T15:16:00.130000 +CVE-2025-60234,1,1,ae996fde6eb085309b55770e5cba3b5c88e305cff56c2abb7bac009824e46af0,2025-10-22T15:16:00.260000 +CVE-2025-60238,1,1,dfc543d3a9b05dedf79cfb210329eba2fbdf82d84a1213f8801037ce47a067d3,2025-10-22T15:16:00.377000 +CVE-2025-60246,1,1,02483f59ed66a326fffe6a8c066c42893808cfcf8b8fe5e5d75826218a7fa206,2025-10-22T15:16:00.497000 CVE-2025-60249,0,0,14a71f93e04f4060a1c993f7f7759d4ca3c7e0cc4f1fa622b44ba0572ae28bd3,2025-09-26T14:32:19.853000 CVE-2025-6025,0,0,66cb58f91d813a392e92dc6e016b119cc95dbcd99bde4b3a8224ca58ef2f6b53,2025-08-15T13:12:51.217000 CVE-2025-60250,0,0,1d679c1e298d9c4d3a83bb125a8e4a79105dd7095ac76110e60c9c93612d6581,2025-09-26T14:32:19.853000 @@ -311073,6 +311326,8 @@ CVE-2025-60316,0,0,bf192f8c396b826d01bf644b8c41a5846ce686796861a4ea4656b6d7419f3 CVE-2025-60318,0,0,5849593dcdafdebfdf216d2bf0cc9670b37f8102447ff07d6887a979b66d3bc1,2025-10-09T16:06:43.363000 CVE-2025-6032,0,0,a375e4e02af9bce22f1203ac990116a96711b040a1e8eeb7db728699136ff4ee,2025-10-21T20:20:56.210000 CVE-2025-6033,0,0,8060cd78393aaff0735d9131f4595376ff505d6aaf8ae08a3d0fe13d443d1674,2025-10-07T13:24:30.283000 +CVE-2025-60331,1,1,6bc6b947bcbb484b43a23d46e1bb8ba3b448e0e0eadf9134d1c115f2c310d03c,2025-10-22T15:16:00.617000 +CVE-2025-60332,1,1,65797674bf02cbc571dc4a8750a102dffb43e6140e46fc9fbbf10f92fac530e5,2025-10-22T15:16:00.733000 CVE-2025-6034,0,0,645d376761e780a7051f07bb8e837833b50788f50b325a750375e5c9570a12de,2025-10-07T13:20:48.400000 CVE-2025-60344,0,0,99f5b799651478f723ceb704c6cad3634cd4b699187a17351497655d4ec34fb1,2025-10-21T21:15:39.050000 CVE-2025-6035,0,0,9ae3f54ffd6e0326cd0ac0337f3b3629819c1abcc0d51c53e8ec97c569a12d3d,2025-08-21T20:15:48.673000 @@ -311089,7 +311344,7 @@ CVE-2025-6039,0,0,6b84c21907e40cd684bcb033e3b9f89fbbdd3d87aa6c728045af124524704d CVE-2025-6040,0,0,76a8c143b5834b0cf93cda3bf80ab595e40b144f2532ce0d72ddcf42d08934bb,2025-06-16T12:32:18.840000 CVE-2025-6041,0,0,badfbc363966712654f0b1003b7bdd31a116fa19d6631eae2317fc8409f3f851,2025-07-08T16:18:53.607000 CVE-2025-6042,0,0,9e0ffa6f50445e9fdd991249482c55170b0223b8704e8cb2348a90dfbe8667d8,2025-10-16T15:29:11.563000 -CVE-2025-60427,0,0,7e1c85ea650e321afb013a035b5915acb1b7eded920a69ca78adec9c696ee5c8,2025-10-21T19:31:25.450000 +CVE-2025-60427,0,1,3129a9fca03857b6a0df05a7de0df8032e04863cd027a59ee68e21ff3d59170c,2025-10-22T15:16:00.853000 CVE-2025-6043,0,0,89ab9b9fe427245658639732d70645591335581a21549ecac2d164a4505a30fb,2025-07-16T14:58:59.837000 CVE-2025-6044,0,0,47899a5747794cb8a77e90b27ddf786e668c32be6c367c340a69b1ea8d6ed07c,2025-10-03T15:54:42.200000 CVE-2025-60445,0,0,e501af19cd8c790381ac140fd907a84651d530a09034014cbd29b68ae3b33fb1,2025-10-10T16:22:12.093000 @@ -311104,7 +311359,7 @@ CVE-2025-60454,0,0,6cf4692a4b125d26bcc270487706fddefff075b4fab4b81623755bd03ce21 CVE-2025-6046,0,0,eff19aab09235c846a666c221db7d00dce7ee0674b5586b5fd3f227d004712ae,2025-10-07T23:15:33.923000 CVE-2025-6050,0,0,3bcde1a8155a4512306f02b41d8e568aee84c2ab0f4880ff0cc4e34bfadce3fc,2025-07-30T19:09:37.570000 CVE-2025-60500,0,0,4f86dd2a498556a6d307d1ae55fddeaae66360c7be0759a90db2736e515358ac,2025-10-21T19:31:25.450000 -CVE-2025-60506,0,0,ab568331dd6b553a5f8f31ffb72d412be0c7c30e4f95a60ca16f83e3b7da5960,2025-10-21T19:31:25.450000 +CVE-2025-60506,0,1,205884deca1f2808cae3ed5ec315f63d389f9c10d632a8bade6a53e7af45683a,2025-10-22T15:16:01.020000 CVE-2025-60507,0,0,47a29c114dbcab03b2fd6e441d0b13229c9d4f8448ae99efca5a66767cb9e9be,2025-10-21T19:31:25.450000 CVE-2025-6051,0,0,3b80491f39c88615e5e7108328052e6403f35699fbbf12b6ab8d011c5702e836,2025-10-21T14:16:24.770000 CVE-2025-60511,0,0,4f345de34a73f1127f1a06d605fb5dcd497ea5ee0baa76ce52a530921445735e,2025-10-21T19:31:25.450000 @@ -311144,14 +311399,14 @@ CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418a CVE-2025-60751,0,0,0671f1ee98d83d62c7ae27b294ef2844830fc5591889789a2feb7c6a4fe3c953,2025-10-21T21:15:39.200000 CVE-2025-6076,0,0,34c85139f7850389377ec94990de20f7a4ffa7f010201d174b09a6ea7b9bb278,2025-09-25T04:16:24.140000 CVE-2025-6077,0,0,dcc34d07d9d46c290bb5cfc1c4da41a649e98c0104f2a3dc715b8e8dac2a0603,2025-09-25T04:16:24.483000 -CVE-2025-60772,0,0,7f17983b26554fa7050552d254762cb5955bed98e1f0df1f440f593407ca4d5e,2025-10-21T19:31:25.450000 +CVE-2025-60772,0,1,4d6dd1f3cf12551e90c32e474582b968ce133f652b512fc05b3c54a0cc402b66,2025-10-22T15:16:01.193000 CVE-2025-6078,0,0,27fca84f9eecc93c2ae593c458ad54c2547f69397f62d1c2ae67137878bca3a4,2025-09-25T04:16:24.793000 CVE-2025-60781,0,0,5895e3a433de8192e2ac70bb3a33c7edac74c718e45a7a52c669eaed59716ee9,2025-10-21T19:31:25.450000 CVE-2025-60782,0,0,2dc00cb941a042f8fbf753c1eb3ec79105fa10eab6d313e797a6fdb7ac017f73,2025-10-07T18:14:56.730000 CVE-2025-60783,0,0,85a8b9702ad000ba08bff0372c3add5728d13f5da0da35d574bd30acd2a38699,2025-10-21T19:31:25.450000 CVE-2025-60787,0,0,19afa390450ed0b61ebf03923dab6f6d840abd55261d0e90ae5973fdb346d3bc,2025-10-10T16:22:30.703000 CVE-2025-6079,0,0,3acae9406359beeb566b8c872a5ac87499ca5a517d323b5859b95024ba8d796e,2025-08-18T20:16:28.750000 -CVE-2025-60790,0,0,a5703fd5ffbb909887dbe50683aea64ca2b0075d8082085a6f0d27e339bfc621,2025-10-21T19:31:25.450000 +CVE-2025-60790,0,1,58bf635d2e62d9cfa2a71f371f92a06076d8967523878fc86a7578b8748b1731,2025-10-22T15:16:01.357000 CVE-2025-6080,0,0,09cd9257aacd26b3c0d0b7db39eeca754c6a52ebacd815d309102b493d922e90,2025-08-18T20:16:28.750000 CVE-2025-6081,0,0,1392e63485f5340f9ebbe3280ccff994df6ebed7ffeba0a6bfe7122906780321,2025-07-03T15:14:12.767000 CVE-2025-6082,0,0,fba3e65236f32f2f0e83727558294334ebf97c307523fc565b758ec4123e35d5,2025-07-22T13:05:40.573000 @@ -311201,6 +311456,7 @@ CVE-2025-6100,0,0,5405a19638696c78881918cc3dae691d9cfe2f2242d824f0444e05ebd02e95 CVE-2025-6101,0,0,12ddf8cc79414ec2bf41fa00be7eca750c6138fd7c74ca9963020b3cb2df9984,2025-06-16T12:32:18.840000 CVE-2025-6102,0,0,226571f04d9d9af7c13b51336d43e24fde03b3d2e5774114aa8090b13ea7c842,2025-06-16T12:32:18.840000 CVE-2025-6103,0,0,696e9c964da4a6e69e85aac2d42d330e30757f62af6bf540ba2c64bd7b24d94e,2025-06-16T12:32:18.840000 +CVE-2025-61035,1,1,98e4c6722e8e990e90399deb78b4f95da988c9769e8991ed3fdc5f1e324c063f,2025-10-22T14:15:51.873000 CVE-2025-6104,0,0,4956a0e2f40ce3622bc8790617b04042352d384fe4f5245d1c794777153bd9a8,2025-06-16T12:32:18.840000 CVE-2025-61044,0,0,dbf826c206758247b0836a950a9e288d11376450a29288fea4256e85d75888fd,2025-10-16T20:15:34.650000 CVE-2025-61045,0,0,8d1c7f428a567cb6475a48311e5ce9e1bb791f07f93d6e8c39e10cac4c094e7b,2025-10-21T20:20:50.870000 @@ -311384,15 +311640,15 @@ CVE-2025-61753,0,0,4e544b1220da8a6f1e894423f51018d39e82fcbb6757a8f250f7511788eb5 CVE-2025-61754,0,0,f4210450886c392753f175b0604ed8b2cd9aad24fe4efd933700ff0e84a12bfd,2025-10-21T20:20:51.847000 CVE-2025-61755,0,0,36a4af82467adffc81fa95f27f5ef11fa91ec07e87749da2d85279b785be9d9d,2025-10-21T20:20:51.983000 CVE-2025-61756,0,0,6c633318255556953319075e129edab26db2789b8960267590e8c7b012a17f8d,2025-10-21T23:17:08.653000 -CVE-2025-61757,0,0,0eecf83cf7a4404c204bfed1ad933357544a6ae68c002914819bd62fde91a73e,2025-10-21T20:20:52.117000 +CVE-2025-61757,0,1,4fb95149815e5ce9befb1fd9c5ce1850ab9ae19d17d8cfbbf06055edcedfd1d4,2025-10-22T15:16:01.527000 CVE-2025-61758,0,0,09d2092cd5cb1546a569f21e46c6244917720a51868b35dbf0cff93d57cac936,2025-10-21T20:20:52.247000 CVE-2025-61759,0,0,8aa3280f9f4d69be4d6ce48f8c1ca9daf4da104f33589e2b8e804e13c17fb341,2025-10-21T20:20:52.373000 CVE-2025-61760,0,0,73747de6b9f380c32056ddd87c24dea22ff4fe0e02b1effd2c5d33027735bd48,2025-10-21T20:20:52.507000 CVE-2025-61761,0,0,d4d12081dd4266ca7688e9fe047283ec45cb5af5d6f56da978f0f46bcb828ff3,2025-10-21T20:20:52.633000 -CVE-2025-61762,0,0,7411303d0422ae8c3ff2be15c05ac5c67d4a8261ef1bd16ee5cced54e3529105,2025-10-21T20:20:52.757000 -CVE-2025-61763,0,0,c9f65f56ea95491d98cd89de3490c2fd0ddf39e4718899d63ba77ac7a2eec7c7,2025-10-21T20:20:52.883000 -CVE-2025-61764,0,0,6ffd96f9764a6dbd5321794f22f8bebcc332d34ae6c6a1f8fa72258a85417680,2025-10-21T20:20:53.027000 -CVE-2025-61765,0,0,f4caa57b7a54b92956daf581f625a0eec0e5ad018a0d835ac7045151d81d97ea,2025-10-08T19:38:32.610000 +CVE-2025-61762,0,1,6bd1742a5d29a27781c0e1342f0e37a93540b1c8038998ff9505ee6c7a461bce,2025-10-22T15:16:01.660000 +CVE-2025-61763,0,1,460c93ca67276a333a946b8e78e2606638a58a90fc4eba11497859ee8dc324ed,2025-10-22T15:16:01.790000 +CVE-2025-61764,0,1,4f3bb36ad4c7c02b9ae14060f315b8b324448bb7166927dd229215b4aa3fd14b,2025-10-22T15:16:01.910000 +CVE-2025-61765,0,1,ce2cfbf3c20054b75c7ac47dba7fae1993b64e7560e6df4de5382c06129bb003,2025-10-22T14:15:52.040000 CVE-2025-61766,0,0,034a8b8330618875071d804a704a2cb41d0622324d9def94d62a11bae4729275,2025-10-08T19:38:32.610000 CVE-2025-61768,0,0,b2f89db9059e56a641049d3dfbc9cbef6cd704a940736be9e4e2fc328411f7b4,2025-10-08T19:38:32.610000 CVE-2025-61769,0,0,b1a3cd293caab7e5419fe557a9449a3b6ee99497f7ff844f17471699b4deda02,2025-10-09T16:48:42.397000 @@ -311456,10 +311712,10 @@ CVE-2025-61864,0,0,c2c66b65c20fa0ba9e5ec938a208eef765ce1d81ccde762f3ad3407927282 CVE-2025-6187,0,0,cf085428843a2619f450ab289da427a297bc5faa0426a63aff864e32d5997d4d,2025-07-22T13:05:40.573000 CVE-2025-61871,0,0,9020835a7a208c086f2667e545a0cffedfe97a22157931a9050a6bbe4de407fe,2025-10-14T19:37:28.107000 CVE-2025-6188,0,0,e010acd503c07cc6828cd17cefe8ffc663ab49b7f0b66d4625b10e280ca4eaac,2025-08-27T15:15:40.633000 -CVE-2025-61881,0,0,44cacf34753f84c5f64c08fd271f47238202176ff127e7fd0669928e6f58092d,2025-10-21T20:20:53.170000 +CVE-2025-61881,0,1,5f59ab3d81a34844b4ea8fc360388606c555ad308a2a8ea8f69053faecfa83ca,2025-10-22T15:16:02.030000 CVE-2025-61882,0,0,aa8a298048659c91d3a72150615155cac156d75c7fe547907109cf46d1f77dde,2025-10-21T23:17:08.857000 CVE-2025-61884,0,0,1e1cad6f31b24820074811d969f20924df37d32532fc4d58ac60bbcd45a4e0ea,2025-10-21T23:17:08.960000 -CVE-2025-61885,0,0,b918e132e49e4e092cf97a504d9ce96a9ce19e92a806903effd3c8a4663b869c,2025-10-21T20:20:53.523000 +CVE-2025-61885,0,1,1428a6d88fcb3c26ec60f94c8767693d24b944e04e6f371c4b921e685c011874,2025-10-22T15:16:02.153000 CVE-2025-61887,0,0,3dcddf1a3cbe3e4f5f57592fb576a62bd131a5d9bbe77f17c6722f882fa5b34c,2025-10-04T03:15:37.220000 CVE-2025-61888,0,0,069f3fe88b0c8123419013398d969a1f719d13e42ea67d624a1e517a32ebfd4a,2025-10-04T03:15:37.310000 CVE-2025-61889,0,0,92659284b31836e3b173c4606451b8f102fcd658647f387704e2cf012a40591c,2025-10-04T03:15:37.380000 @@ -311512,18 +311768,50 @@ CVE-2025-61984,0,0,32606a434d4017e51a703e08f9871d7b230a8462667863fc47b9984b980e4 CVE-2025-61985,0,0,5d33b8575f3bc64b3690e1f198299acfcfc079d0f287f48c5bf85b48f5ae182f,2025-10-08T19:38:32.610000 CVE-2025-6199,0,0,4b699fc3d41c1cd5ec554598f0043d4faabf4d3adf3f9e852ac413108625db8b,2025-08-21T01:16:43.190000 CVE-2025-61990,0,0,dd9eccd2d841f704fc8e0d08ef104bf80ba9bce59d83daf1fb4df34f536813db,2025-10-21T12:12:24.840000 -CVE-2025-61996,0,0,a70c2db1b74272cfaf716fa8098468d45c463f9cd6d6478941957ced756da43f,2025-10-08T19:38:09.863000 -CVE-2025-61997,0,0,f1c58796b20ea4bfe913ed2dfa293f1e3e7c92dd0b8852d9b8977b7e9295c9f8,2025-10-08T19:38:09.863000 -CVE-2025-61998,0,0,bcdd0f20d0cc1fed05427b7afce90c4dbb7c95c423a01a86c988cfbbd99f21a6,2025-10-08T19:38:09.863000 -CVE-2025-61999,0,0,d5feffd0f99b8fbad2071189cc3aebf5aa5113e8ee25cbef2c466c0f05dd0046,2025-10-08T19:38:09.863000 +CVE-2025-61996,0,1,ffd88057d2062d204fcf2276af77068a0b2a4a309884c5ec807423cd6d39c6fa,2025-10-22T14:45:18.763000 +CVE-2025-61997,0,1,2ff0f36cb80da0202efa635d72c9b38eb0d73f200771ef85729d1ca88a59f5e1,2025-10-22T14:45:25.083000 +CVE-2025-61998,0,1,f53a050a9b61b383cf5906f71a16ea7aa6083ff267bed50cb5e9debbc5c3de4f,2025-10-22T14:45:10.300000 +CVE-2025-61999,0,1,01dfd686c933d2597be6fced503fb83a835c14aeebef7e7e5ec6132462e30e01,2025-10-22T14:45:32.930000 CVE-2025-6200,0,0,9a910a38b88392376f5190b20a5562991881e482a016d8b5bec3bcfcf4cf4f4e,2025-07-17T01:04:44.910000 +CVE-2025-62005,1,1,16c3b146e67369a340a480c3a2a2860072d96ac8c86d1f80f2330cd0233becf5,2025-10-22T15:16:02.287000 +CVE-2025-62006,1,1,7432da6d3483bda7193568eb99a874eab13a7b121121d5eef45bb4e02ab5eae6,2025-10-22T15:16:02.407000 +CVE-2025-62007,1,1,9ae311869726cc08219fdb8356624c4c7bf29374a4e4e626daaffe1d6a009726,2025-10-22T15:16:02.530000 +CVE-2025-62008,1,1,0325de9e9a45047ea4854d04a5a81cedd4a70815588962cc739bcddaa49da96f,2025-10-22T15:16:02.650000 +CVE-2025-62009,1,1,0897fcdb40bcf6df9cfbe1818d672f33bcda4b8c542f496f897aaebd9f89bde1,2025-10-22T15:16:02.780000 CVE-2025-6201,0,0,09953b11a7588a9edc2f3925b0cbb84add185ea803d7765dc4a2a786cd413a85,2025-06-23T20:16:59.783000 +CVE-2025-62013,1,1,e16794db6b8d752563d76276b495399671e6b420b0f674904bfaed52e6236f6a,2025-10-22T15:16:02.910000 +CVE-2025-62015,1,1,e800b4b4bd7824d745a1b1b935f188fb4a210c52a92042e84bf7450cf03bb00a,2025-10-22T15:16:03.040000 +CVE-2025-62019,1,1,1bd660b2e3b621bbb35f19e90c20d1e2d283b49cad0d367697bf7a3822dc7ed8,2025-10-22T15:16:03.163000 CVE-2025-6202,0,0,d1eef517f578dc5d8fe3b8046d9f38b4a7f4bee57a3cb67a35ac2d5dcf229b92,2025-09-15T18:15:39.903000 +CVE-2025-62020,1,1,e2de1fb5f689507ca7bfd6efadcdcc3671426e7644e28fbb773eba3a7ab5da97,2025-10-22T15:16:03.300000 +CVE-2025-62021,1,1,a4e338a473faa3f5b5a388a22ec032cf0915a9efff68ee3827042db0d2b70f45,2025-10-22T15:16:03.423000 +CVE-2025-62022,1,1,f11d55bc36cb6e5bbd645706306407e9a108bc034531c886215f6573528c4333,2025-10-22T15:16:03.547000 +CVE-2025-62023,1,1,9d50155580d5494cc891b2f183e6b47d65f14d4b019c46758a37916f0bd3dd7a,2025-10-22T15:16:03.667000 +CVE-2025-62024,1,1,f95f1b31989f887f8dcd95bf7505b80b664169629a6c7736c159077970a22175,2025-10-22T15:16:03.797000 +CVE-2025-62025,1,1,33d4e33773590eddb1e71cb71f260833ae61797fdce6967138b192fca8b48609,2025-10-22T15:16:03.913000 +CVE-2025-62026,1,1,29e61d002edf5100136738593b222863876bf724c683adaa5d26b704135c1212,2025-10-22T15:16:04.037000 +CVE-2025-62027,1,1,031b1bc1ae3bcc0cf0cd8b813872ef9539106ce676769803333b3df56be1a3ab,2025-10-22T15:16:04.160000 +CVE-2025-62029,1,1,6579b6dfe7dc141afd17aedf8ee0146acb7a500bf4eb5162bd56b72b7b69772a,2025-10-22T15:16:04.287000 CVE-2025-6203,0,0,c3a0f7d4e4be1184a13335b5b2f9ae1e3f7c52721c7b31256e93d9dbe49cb4ef,2025-08-29T16:24:29.730000 CVE-2025-6204,0,0,6a4c59c9e64fe2c2c01369c4518d75a1e6f596383ec1eba679eee7961f3cd2ec,2025-08-04T15:06:15.833000 +CVE-2025-62042,1,1,57505d112b26d027b3dfdf9d306a4af6f2e1cb62e9fcb3b0cc4a1ca2fa9a415c,2025-10-22T15:16:04.410000 +CVE-2025-62048,1,1,079055d31215199593407103d5c2f2ec544b25622ac43186c24ca4a90ae495b7,2025-10-22T15:16:04.533000 CVE-2025-6205,0,0,0e171ecd03597856737f1165846dc8c0e164ea22995b388ef5f9e3c18b9e5660,2025-08-04T15:06:15.833000 +CVE-2025-62052,1,1,e2b970c04b0b9c3dcd5d28d42ba2decfc094bb6f23c1e9a9b133a66fbb97a32f,2025-10-22T15:16:04.667000 +CVE-2025-62054,1,1,d95b01c2dddc188d884e07715116d34bfade4eaa3d3779e7df103dca2c7a959d,2025-10-22T15:16:04.790000 +CVE-2025-62058,1,1,b94dce0bea0b7f1864215a0490e60791bf10e3caa669a0bdf9bd833b5eb992ca,2025-10-22T15:16:04.930000 CVE-2025-6206,0,0,67744bc94abc66efd7369351b5266ca710cbd2d3e03d903621e45e3856e0131d,2025-08-13T13:39:01.753000 +CVE-2025-62060,1,1,5db5646e9125faec744d4a111ec94779a30e05debbd0cb36e92bac440212b75b,2025-10-22T15:16:05.080000 +CVE-2025-62061,1,1,dae97ba21f8669b50c291a927ff7b21069ac797483fb0916a919f67e1d9ff981,2025-10-22T15:16:05.213000 +CVE-2025-62062,1,1,253932fabb0fdb32114a426d99762d2e6ffacc0c41420a15645ce563fd652a3f,2025-10-22T15:16:05.343000 +CVE-2025-62063,1,1,21b8b1a0505b33538688851e3e44a0cb139bda787d97bcb1e1be086a554e11f0,2025-10-22T15:16:05.467000 +CVE-2025-62068,1,1,532ab6a3cfd6b4742f02a3b5d2491fe9fe241204485ca77b790a916e39f8c737,2025-10-22T15:16:05.590000 +CVE-2025-62069,1,1,f6bb7510169ef608f3e8a092b4ca94632306e1b0facb1fd5e224ec64c6b24175,2025-10-22T15:16:05.720000 CVE-2025-6207,0,0,0a4faf14a2657b36c45e9f0ee5991c1bf6a5ef7f2aef7eeee94547db712bae2b,2025-08-12T16:29:41.927000 +CVE-2025-62070,1,1,b97668f69ba36f878665b527f7b107dd9d6a7ebd9a921762cc86fcc76e6b168b,2025-10-22T15:16:05.853000 +CVE-2025-62071,1,1,0851e61735c2ccc8feeb3a48d3020361e2b1bdd2bb965dd9c5c3986ade16938d,2025-10-22T15:16:05.977000 +CVE-2025-62072,1,1,7eec680e2eefb37ceb7a3096e3615ecbef20ef7b3771b593934add47859b82fb,2025-10-22T15:16:06.100000 +CVE-2025-62073,1,1,bcac328e1079e52f5fadce6ef9e7b9222bdf7e108dfed7c3708859914187c571,2025-10-22T15:16:06.223000 CVE-2025-6209,0,0,7abffe69a2c7d7c6750ac729bceb93bec3786b9c143da6535c28169177f90151,2025-07-30T20:01:32.410000 CVE-2025-6210,0,0,a814ead12ccd1e1e3b05b660641f2827b9281267a09e3ed6fb3af4d5dd71d141,2025-07-30T20:01:47.780000 CVE-2025-6211,0,0,77fd0022d34157c70322aed6af21d7691d68bc4325d76ab8692783349932ce84,2025-07-30T20:00:35.440000 @@ -311577,7 +311865,7 @@ CVE-2025-6228,0,0,ed31f98beaf28f0fcf9a78ed60f320dcd979667d618a8d9ece684f95b599a9 CVE-2025-62287,0,0,35f74ddf771f304aa9f4ae18b3a09e1dc7734165e24a5d7c6eb0a3e8bd51b901,2025-10-21T21:15:40.733000 CVE-2025-62288,0,0,ba68f57a1ec9feed9ae5a638d503c89cf352ce4d252fd71265c768eb2ce8392b,2025-10-21T21:15:40.860000 CVE-2025-62289,0,0,1cba7c340c3fd5d4fb267942c090a8b158e30a0b9e0dc4d3a37aefe276ede808,2025-10-21T21:15:40.980000 -CVE-2025-62290,0,0,8d9b0089d9ad7b716357c96c038744d1e363af54f0a9be4b64c042de094978bc,2025-10-21T20:20:54.003000 +CVE-2025-62290,0,1,be954a532d8f1d8f7f0e499ac71bf43aa7f3d5543271aef9a6bac2c2469cdc05,2025-10-22T15:16:06.357000 CVE-2025-62292,0,0,3f54a3e68af8639cbdc0b825937f0b616ee785df8e22a6ce4775cd8434c1f788,2025-10-14T19:37:28.107000 CVE-2025-6230,0,0,2821356870de7ef897b0ff9d79e35c45ab51386147581829cfb5da7197b6d3d3,2025-08-19T16:32:52.043000 CVE-2025-6231,0,0,91ff042ce36eb369399a98f6eb9a3d1894b5db6b61e6a0c712e420933879d84f,2025-07-22T17:05:25.170000 @@ -311656,10 +311944,10 @@ CVE-2025-62446,0,0,93df14e8702948859354fbab84aab153ffa49172bafecece4c8142b754acf CVE-2025-62447,0,0,ffcdcbb68d3eefe012c2b504a16c8c05ac5847b5eebd423e4e6bcb813ac02995,2025-10-15T03:15:34.063000 CVE-2025-62448,0,0,530aa50b4f17789705379482f34d371d6149325b6fb604e9d151db9d56027878,2025-10-15T03:15:34.127000 CVE-2025-6247,0,0,9dd0eef5de01eff9564340bdecce27db6a94dc6a05571052e160d9bb54e5468e,2025-08-26T13:41:58.950000 -CVE-2025-62475,0,0,65a8592172ecf0ea5d60c634f02ea26231ab3d33f4f0bfbecd4e5a9c9e428638,2025-10-21T20:20:54.123000 -CVE-2025-62476,0,0,d9e588b89c367211539a8918fb85bca9b475a0e85d1b9db8dfc85f54d299caab,2025-10-21T20:20:54.243000 -CVE-2025-62477,0,0,b8a9d87c8ab376188fbbfbf000b349b30d0653b77b5cfe37f78ac7aca0547484,2025-10-21T20:20:54.363000 -CVE-2025-62478,0,0,f5ec24797a13719b2b27cd855edb1cd7724809f146238541321bd87cc710e77f,2025-10-21T20:20:54.483000 +CVE-2025-62475,0,1,126ff8475cdb63f1cfcc02886facbf06724010151bf3f934f006c55736e01781,2025-10-22T15:16:06.480000 +CVE-2025-62476,0,1,e84740cdd41e500dd8c0fc3193d7d6c551ee7fa2975672b4f34bced4eaaa6d8c,2025-10-22T15:16:06.613000 +CVE-2025-62477,0,1,d25b051007f141e5f38ac1ed4915172e681f615ee3ea64540df4bf1a3344507f,2025-10-22T15:16:06.777000 +CVE-2025-62478,0,1,43e526ac0280b96ef21ab467705d808a303cd6934471b46d6c54dab3fa981bbc,2025-10-22T15:16:06.897000 CVE-2025-62479,0,0,7598744bc01befa8f66aa9d89d41c2397533b1170afb0fbe8cdf3e83b877baf0,2025-10-21T21:15:41.100000 CVE-2025-6248,0,0,d696583fc9b81a33041337bebc4d888957417f46a56d99f0e71c27e8ecbc0b42,2025-07-17T21:15:50.197000 CVE-2025-62480,0,0,995c3a4dd9cf47b0148539e762d8740fb22b99baba88ba804b16ae2417106d04,2025-10-21T21:15:41.217000 @@ -311684,6 +311972,8 @@ CVE-2025-62515,0,0,176b720d4cb0f4ed7a8f8af31d8740f47498d912d913d6ee8f74c886d3000 CVE-2025-62518,0,0,e3f305fc2a4cb905da6ee78928396ae0201532fdfc6b8b3cc163daec2839d05e,2025-10-21T19:31:25.450000 CVE-2025-6252,0,0,04266fde32de91a19cd75afe711753a0e9f9154bece1418589e4e14bad3b2599,2025-07-07T14:51:20.410000 CVE-2025-62522,0,0,98beebf8c12272d6e9509df6ddeddaaeebca90f3ceeee0593874463deb396f18,2025-10-21T19:31:25.450000 +CVE-2025-62525,1,1,3616e8cc47e4a4c7701adc01a2d8192bdc212d6aeb4bde1ed346e27f134d52e2,2025-10-22T15:16:07.017000 +CVE-2025-62526,1,1,0e9ec4dcd4f4dbf96c24b4a992c8cacf7d8f3e36495838f17a79a1c0b3ea50d3,2025-10-22T15:16:07.177000 CVE-2025-62527,0,0,350321c2ed36803f90932084670b5b659247bb8615809fe4ae4c199199dc560c,2025-10-21T19:31:25.450000 CVE-2025-62528,0,0,c95722565a28f3bd93b147a21e178fd317154f735b0b4c61cd9c26ff7085f3e1,2025-10-21T19:31:25.450000 CVE-2025-6253,0,0,cb5d9b8da47d572dbcd6d6c40c90b13d168a9738cebc8580b12d2462ed6f96c9,2025-08-12T14:25:33.177000 @@ -311704,12 +311994,14 @@ CVE-2025-62589,0,0,f1ef50593058e677930779653997105b43101e632ebf99dbf172fa5211fe9 CVE-2025-6259,0,0,d744e9e7d9739548d1aa01b93be40d8149be7b6157d90d79a79ca07cfece5609,2025-08-06T20:23:37.600000 CVE-2025-62590,0,0,c3a7f81009ce1371dace27873c1f349f187052e193f55793b21464f7a2f0149b,2025-10-21T21:15:41.837000 CVE-2025-62591,0,0,f20d5327ec1ad91ccc1f060608363f449f47c19a2ee278cfb7400a1f84f78a09,2025-10-21T21:15:41.963000 -CVE-2025-62592,0,0,f09216a39b461e3be4115b1eb082a44041438e79cea344051114922167797b90,2025-10-21T20:20:55.617000 +CVE-2025-62592,0,1,8731069b305b3b4e3bb50cedb0846de9772e2308a4a5bd918fc4342802c567cd,2025-10-22T14:15:52.217000 CVE-2025-62595,0,0,e00ef1096cde2ef474100abac53c55eb3f02c17b43bb9b554ce59e805c15ae33,2025-10-21T19:31:25.450000 CVE-2025-62597,0,0,660c775312bf4a690c7460f5a3122b7120125a6205eedbbf28b241b36ff2bf8b,2025-10-21T19:31:25.450000 -CVE-2025-62598,0,0,1b4cab3478eb2f858fe05a35bc16f370b84650e2337e7bd813332b3a510111fe,2025-10-21T19:31:25.450000 +CVE-2025-62598,0,1,4f6e9447c8ea842a700ae84a8ab137dd21cda8a5685703b4e9e64d79f013872d,2025-10-22T14:19:55.570000 CVE-2025-6260,0,0,31d8a8fe623c3eb38350582f7b8664017a796cede476db64c602981f5d92a0b2,2025-07-25T15:29:19.837000 +CVE-2025-62604,1,1,c6d32d41e7b3292b54231dfd9729824c9482ffd741f87abca2d4bc5a1b33f215,2025-10-22T15:16:07.343000 CVE-2025-62605,0,0,d5b694693552403f0b0ef20e4c4d827e0f929c0f72fd638d84cd4c89f507bafa,2025-10-21T19:31:25.450000 +CVE-2025-62606,1,1,09d27c035275814d8214c14479d24c14010d897c535e2bf667a12525ca5104b2,2025-10-22T15:16:07.493000 CVE-2025-6261,0,0,17e47e129725a71ccd00ed7c77e040816136371560cd91f6d3e65f5539177870,2025-07-25T15:29:44.523000 CVE-2025-6262,0,0,ea373df26a3a66cafc50c2aefa0420fdb13ab09424e029a0e05b173c4d4bc1e2,2025-07-25T15:29:19.837000 CVE-2025-62632,0,0,b5b659531ae329f6eea774278525bca4f149da6f0ec2760d42ab15183bbb99ca,2025-10-18T03:15:46.787000 @@ -312243,7 +312535,7 @@ CVE-2025-6786,0,0,114110aea89359fa5073bce534fd1a6e354736f2ab9a56eca60fc46743bec1 CVE-2025-6787,0,0,21615fc9be3891566a1f3e571e2312e1de3e305c31f93562221a723e1c0f1d47,2025-07-09T17:46:49.343000 CVE-2025-6788,0,0,4c3f69e08bb2b64e86e54677a2dd52a2a8990f3b3413c2ba53f203d28bf15b81,2025-07-15T13:14:49.980000 CVE-2025-6790,0,0,533a8b90252a351ae6ff58e68061e7eba16774842c8a1c2b69959cad37483eb4,2025-08-14T15:15:41.867000 -CVE-2025-6791,0,0,d1932856d6afc28d67264808c418c0261d4e0214d76dfcaaf01e9262c36cdc33,2025-09-16T20:15:37.020000 +CVE-2025-6791,0,1,99514dd0e7707aab06d4cc010747bc22bf60f3987d25ba5d28fc3ec2bba19393,2025-10-22T14:06:29.580000 CVE-2025-6793,0,0,4a9f41c0e226b1d9f2e1a895a325ff06f933496058870477ef1a4c9656229a4f,2025-07-14T17:16:32.440000 CVE-2025-6794,0,0,8a431d3a65781345b75b5105a652ca6ada1fd6efb2e249e97a2b20073ed184c7,2025-07-14T17:15:14.250000 CVE-2025-6795,0,0,5ad4bfa74e8f130df7e47dc92d4c011700035c583b8b0292d8629cf18483571b,2025-07-14T17:14:58.500000 @@ -313670,9 +313962,9 @@ CVE-2025-8423,0,0,256bff61016ba8367cc5d64de89c4344a60614bd3063f8940e5359d691b61d CVE-2025-8424,0,0,4f5d5a26d0a95a31b39deb7fcb4427040fd91165b8c4ae2180566bbdee078e83,2025-08-29T16:22:31.970000 CVE-2025-8425,0,0,1ed6f9c0132041378d9e4c51fe287cc57deca747df0f263f9f5e91d183248d62,2025-09-11T17:14:10.147000 CVE-2025-8426,0,0,692d686181ec10efd169df3927627349bdcb2e4b023c690c711461a95ff1f482,2025-08-06T16:50:11.847000 -CVE-2025-8428,0,0,60e90075fa1f3bfa9aa89f1f1a4466efab80fd2a6e046ef38aad9b14e38b88a4,2025-10-14T19:36:29.240000 -CVE-2025-8429,0,0,f7ac807c7e66caf034158581540d7b87e3f78be7451f7914af533240c22100ca,2025-10-15T14:15:59.433000 -CVE-2025-8430,0,0,1d3ab658b1ceae674754d7898a7b1a053c991d156df215dc78c8b6ddf8b45c8d,2025-10-15T14:15:59.937000 +CVE-2025-8428,0,1,927ce52fb91d7843a7c2ef78c45bc20a0544d69c5c91b3e4cb116793b5061a1f,2025-10-22T14:08:48.743000 +CVE-2025-8429,0,1,4099beb417580fe1fb7b46b9bc7ecf19e6a472a8125d7ddd9dc6ca9446c9e680,2025-10-22T14:02:24.350000 +CVE-2025-8430,0,1,7b479a3f3794d83905b77dd4ced25c8a0b89efa56e97228dcfff3deccfed1a0a,2025-10-22T14:10:20.427000 CVE-2025-8431,0,0,ace322af2ab259aedc133ad1c528dd7f05647677ac4c4b17a5b36c7c3a68bb6f,2025-08-05T19:04:58.027000 CVE-2025-8433,0,0,4eeb8bf5452ce795b0d57b8a9f2943254544aef802d98562b434a582c8e4dd93,2025-08-05T19:04:43.947000 CVE-2025-8434,0,0,b2aac0f3f032417264b2629523e6fb30fd17a5487768a9e4df97d98a90c04c0d,2025-08-05T18:55:25.380000 @@ -313695,7 +313987,7 @@ CVE-2025-8451,0,0,42e4aab422ea27594efe50ec4a4cbfa0a287f556a7eca7a3db2d63ed3c6b28 CVE-2025-8452,0,0,90f6b8f7315bb81d7fa5e054c673fb66355e3b661bc24d3bb273c135eeab00a1,2025-10-08T14:15:48.047000 CVE-2025-8453,0,0,3c563fc99abe83b72127215fbc86bfe51f687a0c60dac7bf724cc353faa4ff01,2025-08-20T14:39:07.860000 CVE-2025-8454,0,0,9ce82a5970c4291bfc1243759f3acc6ea3942513fc5719906dd5ab1938d9c0c4,2025-08-06T16:17:38.593000 -CVE-2025-8459,0,0,f035276e248c56e707f23ebb9a1a6e286d4cdd6183c48027fb2070098805edea,2025-10-15T14:16:00.080000 +CVE-2025-8459,0,1,bbfc3fd4bc17b5fb1b463f1f9fb974ceddbb6608dc71ac23ed981597c6c11d7d,2025-10-22T14:09:29.607000 CVE-2025-8462,0,0,a3b41a2055283faa733124b796e71632f8622b369b68a1d34c42374dc8d66e28,2025-08-12T14:25:33.177000 CVE-2025-8463,0,0,429a1173b015cfdede5fc44d3e4f12aad0bb21c404b14c9300019e197aa59419,2025-09-30T14:15:40.773000 CVE-2025-8464,0,0,7fca339973de93e29ea297f0624b5e8556f05da11fb9d0f2eefbb66918d00496,2025-08-18T20:16:28.750000 @@ -314027,6 +314319,7 @@ CVE-2025-8844,0,0,4a9adb2985b895ff61f7afdcfacc021e0e01083c92d24beecf8b020b15f369 CVE-2025-8845,0,0,8c89f882ea1fe4b26ef3cd6bc49d94e00f5f5cbb76bb487972f0b30cdd5dc173,2025-09-15T14:57:02.180000 CVE-2025-8846,0,0,97b48124ed7e5916fe3cd28822323eb4e4b9c3ac315328880a3919e66bc6cda3,2025-09-15T14:59:51.370000 CVE-2025-8847,0,0,9dc75db6b8a15cb558c17cebcb7250b2751bb0d2a2cd438f2977bc9d8eba98b6,2025-09-11T15:32:32.850000 +CVE-2025-8848,1,1,7ae4b3066ca0d89491753cfb491247295e020663b412bf0a9fddbc03c2000f6e,2025-10-22T14:15:52.393000 CVE-2025-8851,0,0,bd6b54c701968a0c1acf3ac6855e82c27e5f762a709ceb303ac318339d11be45,2025-09-11T16:54:34.523000 CVE-2025-8852,0,0,c6d0218e3de8c72ea53e144096effa5d82542f91a23f9750511191cf8b9b298d,2025-09-16T18:45:36.473000 CVE-2025-8853,0,0,5ba92e706c8911e46ee7ee8be6485129f8b1b4e00a4e54cfa6d77326ffa17641,2025-08-11T18:32:48.867000