From a83095c4037fff00e4d65f4654098ca1c0e38dcc Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Thu, 20 Nov 2025 23:04:00 +0000 Subject: [PATCH] Auto-Update: 2025-11-20T23:00:11.468537+00:00 --- CVE-2018/CVE-2018-251xx/CVE-2018-25124.json | 4 +- CVE-2020/CVE-2020-368xx/CVE-2020-36870.json | 4 +- CVE-2021/CVE-2021-44xx/CVE-2021-4462.json | 4 +- CVE-2022/CVE-2022-501xx/CVE-2022-50143.json | 118 ++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50144.json | 94 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50145.json | 106 +++++- CVE-2022/CVE-2022-501xx/CVE-2022-50151.json | 82 ++++- CVE-2022/CVE-2022-501xx/CVE-2022-50152.json | 142 +++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50179.json | 142 +++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50181.json | 106 +++++- CVE-2022/CVE-2022-502xx/CVE-2022-50208.json | 106 +++++- CVE-2024/CVE-2024-120xx/CVE-2024-12085.json | 6 +- CVE-2024/CVE-2024-128xx/CVE-2024-12847.json | 6 +- CVE-2024/CVE-2024-73xx/CVE-2024-7314.json | 4 +- CVE-2025/CVE-2025-130xx/CVE-2025-13087.json | 108 ++++++ CVE-2025/CVE-2025-256xx/CVE-2025-25613.json | 64 ++++ CVE-2025/CVE-2025-340xx/CVE-2025-34021.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34022.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34023.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34024.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34029.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34030.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34031.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34032.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34033.json | 10 +- CVE-2025/CVE-2025-340xx/CVE-2025-34034.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34035.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34036.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34037.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34038.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34039.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34040.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34041.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34042.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34043.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34045.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34046.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34047.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34049.json | 4 +- CVE-2025/CVE-2025-340xx/CVE-2025-34054.json | 4 +- CVE-2025/CVE-2025-343xx/CVE-2025-34322.json | 64 +++- CVE-2025/CVE-2025-343xx/CVE-2025-34323.json | 64 +++- CVE-2025/CVE-2025-361xx/CVE-2025-36153.json | 56 +++ CVE-2025/CVE-2025-361xx/CVE-2025-36158.json | 56 +++ CVE-2025/CVE-2025-361xx/CVE-2025-36159.json | 56 +++ CVE-2025/CVE-2025-361xx/CVE-2025-36160.json | 56 +++ CVE-2025/CVE-2025-380xx/CVE-2025-38091.json | 112 +++++- CVE-2025/CVE-2025-380xx/CVE-2025-38092.json | 119 ++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38093.json | 94 +++++- CVE-2025/CVE-2025-380xx/CVE-2025-38096.json | 81 ++++- CVE-2025/CVE-2025-380xx/CVE-2025-38098.json | 82 ++++- CVE-2025/CVE-2025-380xx/CVE-2025-38099.json | 81 ++++- CVE-2025/CVE-2025-381xx/CVE-2025-38101.json | 82 ++++- CVE-2025/CVE-2025-381xx/CVE-2025-38105.json | 94 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38106.json | 87 ++++- CVE-2025/CVE-2025-381xx/CVE-2025-38109.json | 99 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38110.json | 99 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38114.json | 75 +++- CVE-2025/CVE-2025-381xx/CVE-2025-38116.json | 75 +++- CVE-2025/CVE-2025-381xx/CVE-2025-38117.json | 99 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38121.json | 70 +++- CVE-2025/CVE-2025-381xx/CVE-2025-38123.json | 94 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38125.json | 82 ++++- CVE-2025/CVE-2025-381xx/CVE-2025-38127.json | 94 +++++- CVE-2025/CVE-2025-381xx/CVE-2025-38128.json | 70 +++- CVE-2025/CVE-2025-381xx/CVE-2025-38129.json | 82 ++++- CVE-2025/CVE-2025-381xx/CVE-2025-38130.json | 70 +++- CVE-2025/CVE-2025-489xx/CVE-2025-48986.json | 18 +- CVE-2025/CVE-2025-489xx/CVE-2025-48987.json | 18 +- CVE-2025/CVE-2025-516xx/CVE-2025-51661.json | 39 ++- CVE-2025/CVE-2025-516xx/CVE-2025-51663.json | 39 ++- CVE-2025/CVE-2025-524xx/CVE-2025-52410.json | 39 ++- CVE-2025/CVE-2025-526xx/CVE-2025-52666.json | 18 +- CVE-2025/CVE-2025-526xx/CVE-2025-52668.json | 18 +- CVE-2025/CVE-2025-526xx/CVE-2025-52669.json | 18 +- CVE-2025/CVE-2025-526xx/CVE-2025-52671.json | 18 +- CVE-2025/CVE-2025-53xx/CVE-2025-5318.json | 6 +- CVE-2025/CVE-2025-551xx/CVE-2025-55123.json | 18 +- CVE-2025/CVE-2025-551xx/CVE-2025-55124.json | 18 +- CVE-2025/CVE-2025-551xx/CVE-2025-55127.json | 39 ++- CVE-2025/CVE-2025-590xx/CVE-2025-59089.json | 22 +- CVE-2025/CVE-2025-59xx/CVE-2025-5914.json | 6 +- CVE-2025/CVE-2025-607xx/CVE-2025-60738.json | 39 ++- CVE-2025/CVE-2025-607xx/CVE-2025-60794.json | 39 ++- CVE-2025/CVE-2025-607xx/CVE-2025-60797.json | 39 ++- CVE-2025/CVE-2025-607xx/CVE-2025-60798.json | 39 ++- CVE-2025/CVE-2025-607xx/CVE-2025-60799.json | 39 ++- CVE-2025/CVE-2025-60xx/CVE-2025-6020.json | 6 +- CVE-2025/CVE-2025-611xx/CVE-2025-61138.json | 21 ++ CVE-2025/CVE-2025-61xx/CVE-2025-6171.json | 94 +++++- CVE-2025/CVE-2025-626xx/CVE-2025-62674.json | 108 ++++++ CVE-2025/CVE-2025-632xx/CVE-2025-63212.json | 39 ++- CVE-2025/CVE-2025-632xx/CVE-2025-63214.json | 39 ++- CVE-2025/CVE-2025-635xx/CVE-2025-63512.json | 27 +- CVE-2025/CVE-2025-635xx/CVE-2025-63513.json | 39 ++- CVE-2025/CVE-2025-635xx/CVE-2025-63514.json | 33 +- CVE-2025/CVE-2025-636xx/CVE-2025-63685.json | 56 +++ CVE-2025/CVE-2025-637xx/CVE-2025-63700.json | 39 ++- CVE-2025/CVE-2025-638xx/CVE-2025-63807.json | 56 +++ CVE-2025/CVE-2025-638xx/CVE-2025-63848.json | 39 ++- CVE-2025/CVE-2025-638xx/CVE-2025-63888.json | 39 ++- CVE-2025/CVE-2025-638xx/CVE-2025-63889.json | 39 ++- CVE-2025/CVE-2025-638xx/CVE-2025-63892.json | 37 +- CVE-2025/CVE-2025-640xx/CVE-2025-64027.json | 39 ++- CVE-2025/CVE-2025-644xx/CVE-2025-64446.json | 19 +- CVE-2025/CVE-2025-647xx/CVE-2025-64753.json | 52 ++- CVE-2025/CVE-2025-647xx/CVE-2025-64770.json | 108 ++++++ CVE-2025/CVE-2025-69xx/CVE-2025-6945.json | 53 ++- CVE-2025/CVE-2025-70xx/CVE-2025-7000.json | 74 +++- CVE-2025/CVE-2025-71xx/CVE-2025-7195.json | 6 +- CVE-2025/CVE-2025-74xx/CVE-2025-7425.json | 6 +- CVE-2025/CVE-2025-78xx/CVE-2025-7895.json | 72 +++- CVE-2025/CVE-2025-78xx/CVE-2025-7896.json | 68 +++- CVE-2025/CVE-2025-78xx/CVE-2025-7897.json | 72 +++- CVE-2025/CVE-2025-89xx/CVE-2025-8941.json | 6 +- README.md | 87 +++-- _state.csv | 357 ++++++++++---------- 117 files changed, 5040 insertions(+), 610 deletions(-) create mode 100644 CVE-2025/CVE-2025-130xx/CVE-2025-13087.json create mode 100644 CVE-2025/CVE-2025-256xx/CVE-2025-25613.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36153.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36158.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36159.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36160.json create mode 100644 CVE-2025/CVE-2025-611xx/CVE-2025-61138.json create mode 100644 CVE-2025/CVE-2025-626xx/CVE-2025-62674.json create mode 100644 CVE-2025/CVE-2025-636xx/CVE-2025-63685.json create mode 100644 CVE-2025/CVE-2025-638xx/CVE-2025-63807.json create mode 100644 CVE-2025/CVE-2025-647xx/CVE-2025-64770.json diff --git a/CVE-2018/CVE-2018-251xx/CVE-2018-25124.json b/CVE-2018/CVE-2018-251xx/CVE-2018-25124.json index dc9f8420ce2..0e36efd068a 100644 --- a/CVE-2018/CVE-2018-251xx/CVE-2018-25124.json +++ b/CVE-2018/CVE-2018-251xx/CVE-2018-25124.json @@ -2,13 +2,13 @@ "id": "CVE-2018-25124", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-10T23:15:39.840", - "lastModified": "2025-11-12T21:15:45.410", + "lastModified": "2025-11-20T22:15:52.670", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path' parameter. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-07 UTC." + "value": "PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path' parameter. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC." } ], "metrics": { diff --git a/CVE-2020/CVE-2020-368xx/CVE-2020-36870.json b/CVE-2020/CVE-2020-368xx/CVE-2020-36870.json index 8ed0ea9ca3f..f596dcc02e2 100644 --- a/CVE-2020/CVE-2020-368xx/CVE-2020-36870.json +++ b/CVE-2020/CVE-2020-368xx/CVE-2020-36870.json @@ -2,13 +2,13 @@ "id": "CVE-2020-36870", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-07T22:15:38.587", - "lastModified": "2025-11-12T16:20:22.257", + "lastModified": "2025-11-20T22:15:53.293", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-06-07 UTC." + "value": "Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC." } ], "metrics": { diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4462.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4462.json index 9356ef01ae5..9ad5dd0de47 100644 --- a/CVE-2021/CVE-2021-44xx/CVE-2021-4462.json +++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4462.json @@ -2,13 +2,13 @@ "id": "CVE-2021-4462", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-10T23:15:40.967", - "lastModified": "2025-11-12T21:15:46.383", + "lastModified": "2025-11-20T22:15:53.470", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation." + "value": "Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC." } ], "metrics": { diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50143.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50143.json index d5f9af14fe9..d36dab23ee5 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50143.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50143.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50143", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:44.297", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:40:03.710", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: intel_th: corrige una p\u00e9rdida de recursos en una ruta de manejo de errores Si ocurre un error despu\u00e9s de llamar a 'pci_alloc_irq_vectors()', se debe llamar a 'pci_free_irq_vectors()' como ya se hizo en la funci\u00f3n de eliminaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "1C918407-E556-45B3-AB2F-26F968D0BF3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/086c28ab7c5699256aced0049aae9c42f1410313", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/859342220accd0d332864fafbf4e3d2d0492bc3f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b5469573a274729bdb04b60a8d71f8d09940a31", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a8f3b78b1f8e959d06801ae82149f140a75724e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed4d5ecb7d7fd80336afb2f9ac6685651a6aa32f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fae9da7d4c2ccad3792de03e3cac1fe2bfabb73d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50144.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50144.json index 40030da5418..ded9cd887e2 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50144.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50144.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50144", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:44.413", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:38:58.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soundwire: revisitar la vinculaci\u00f3n/desvinculaci\u00f3n del controlador y las devoluciones de llamada. En la sonda SoundWire, almacenamos un puntero desde las operaciones del controlador en la estructura \"slave\". Esto puede provocar errores en el kernel al desvincular los controladores de c\u00f3dec, por ejemplo, con la siguiente secuencia para eliminar el controlador de la m\u00e1quina y el controlador de c\u00f3dec: /sbin/modprobe -r snd_soc_sof_sdw /sbin/modprobe -r snd_soc_rt711. Los detalles completos se pueden encontrar en el enlace de error a continuaci\u00f3n. Como referencia, los dos ejemplos siguientes muestran diferentes casos de operaciones/devoluciones de llamada del controlador que se invocan despu\u00e9s de la instrucci\u00f3n `.remove()` del controlador. kernel: ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000150 kernel: Cola de trabajo: eventos cdns_update_slave_status_work [cadencia_soundwire] kernel: RIP: 0010:mutex_lock+0x19/0x30 kernel: Rastreo de llamadas: kernel: ? sdw_handle_slave_status+0x426/0xe00 [bus_soundwire 94ff184bf398570c3f8ff7efe9e32529f532e4ae] kernel: ? newidle_balance+0x26a/0x400 kernel: ? cdns_update_slave_status_work+0x1e9/0x200 [soundwire_cadence 1bcf98eebe5ba9833cd433323769ac923c9c6f82] kernel: ERROR: no se puede manejar el error de p\u00e1gina para la direcci\u00f3n: ffffffffc07654c8 kernel: Cola de trabajo: pm pm_runtime_work kernel: RIP: 0010:sdw_bus_prep_clk_stop+0x6f/0x160 [soundwire_bus] kernel: Rastreo de llamadas: kernel: kernel: sdw_cdns_clock_stop+0xb5/0x1b0 [soundwire_cadence 1bcf98eebe5ba9833cd433323769ac923c9c6f82] kernel: intel_suspend_runtime+0x5f/0x120 [soundwire_intel aca858f7c87048d3152a4a41bb68abb9b663a1dd] kernel: ? dpm_sysfs_remove+0x60/0x60 Esto no se detect\u00f3 previamente en las pruebas de Intel, ya que estas primero eliminan el dispositivo PCI principal y apagan el bus. La secuencia anterior es un caso excepcional que mantiene el bus operativo, pero sin un controlador vinculado. Al intentar resolver este error del kernel, se hizo evidente que el bus SoundWire existente no gestiona bien el caso de desvinculaci\u00f3n. el commit 528be501b7d4a (\"soundwire: sdw_slave: a\u00f1adir estructura probe_complete y nuevos campos\") a\u00f1adi\u00f3 una variable de estado \"probed\" y una finalizaci\u00f3n de estructura \"probe_complete\". Sin embargo, este estado no se restablece al eliminar el dispositivo y, del mismo modo, la prueba \"probe complete\" no se reinicializa, por lo que las pruebas de vinculaci\u00f3n/desvinculaci\u00f3n/vinculaci\u00f3n fallar\u00edan. El tiempo de espera utilizado antes de la devoluci\u00f3n de llamada \"update_status\" tambi\u00e9n fue una mala idea en retrospectiva; no deber\u00eda haber suposiciones sobre el tiempo que determina si un controlador est\u00e1 vinculado a un dispositivo y cu\u00e1ndo. Un borrador inicial se bas\u00f3 en device_lock() y se prob\u00f3 device_unlock(). Esto result\u00f3 ser demasiado complicado, con interbloqueos creados durante las secuencias de suspensi\u00f3n-reinicio, que tambi\u00e9n utilizan el mismo device_lock/unlock() que las secuencias de vinculaci\u00f3n/desvinculaci\u00f3n. En un dispositivo CometLake, un DSDT/BIOS defectuoso provoc\u00f3 reanudaciones falsas y el uso de device_lock() provoc\u00f3 bloqueos durante la suspensi\u00f3n. Tras varias semanas de pruebas y una ardua ingenier\u00eda inversa de interbloqueos en diferentes dispositivos, buscamos alternativas que no interfirieran con el n\u00facleo del dispositivo. Se utiliz\u00f3 con \u00e9xito un notificador de bus para realizar un seguimiento de los eventos DRIVER_BOUND y DRIVER_UNBIND. Esto solucion\u00f3 el problema de enlazar-desenlazar-enlazar en las pruebas, pero a\u00fan se puede solucionar con un caso l\u00edmite te\u00f3rico donde la memoria se libera mediante un `.remove` mientras se usa la devoluci\u00f3n de llamada. El notificador solo ayuda a garantizar que las devoluciones de llamada del controlador sean v\u00e1lidas, pero no que la memoria asignada en la sonda siga siendo v\u00e1lida mientras se invocan las devoluciones de llamada. Este parche sugiere la introducci\u00f3n de un nuevo ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.16", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "BB46D507-9C6C-4EFB-8C7E-F2B302DF084C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/250b46505175889c6b5958c3829f610f52199f5f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/432b30f08ca3303d2ebb22352cb04c4b6cfefe65", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8fd6b03646b9a9e16d1ec19bd724cd6bd78e0ea5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd29c00edd0a5dac8b6e7332bb470cd50f92e893", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50145.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50145.json index 87684f40427..ca81b5458e4 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50145.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50145.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50145", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:44.527", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:36:27.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: sf-pdma: Agregar soporte multihilo para un canal DMA Cuando obtenemos un canal DMA e intentamos usarlo en m\u00faltiples subprocesos, provocar\u00e1 errores y colgar\u00e1 el sistema. % echo 64 > /sys/module/dmatest/parameters/threads_per_chan % echo 10000 > /sys/module/dmatest/parameters/iterations % echo 1 > /sys/module/dmatest/parameters/run [ 89.480664] No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 00000000000000a0 [ 89.488725] Ups [#1] [ 89.494708] CPU: 2 PID: 1008 Comm: dma0chan0-copy0 No contaminado 5.17.0-rc5 [ 89.509385] epc : vchan_find_desc+0x32/0x46 [ 89.513553] ra : sf_pdma_tx_status+0xca/0xd6 Esto ocurre debido a la ejecuci\u00f3n de datos. Cada hilo reescribe el descriptor del canal en cuanto se llama a device_prep_dma_memcpy(). Esto provoca que el controlador crea que est\u00e1 usando el descriptor correcto, pero en realidad se libera o sustituye a otro. Con las correcciones actuales, un descriptor cambia su valor solo cuando se ha usado. Se obtiene un nuevo descriptor de la cola vc->desc_issued, que ya contiene descriptores listos para enviarse. Los hilos no tienen acceso directo al descriptor del canal DMA. Ahora solo es posible poner en cola un descriptor para su posterior procesamiento." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4c7350b1dd8a192af844de32fc99b9e34c876fda", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5ab2782c944e324008ef5d658f2494a9f0e3c5ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a93b3f1e11971a91b6441b6d47488f4492cc113f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2cc5c465c2cb8ab697c3fd6583c614e3f6cfbcc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b9b4992f897be9b0b9e3a3b956cab6b75ccc3f11", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50151.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50151.json index 3af07764525..8f036854b06 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50151.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50151.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50151", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:45.190", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:36:06.367", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: cdns3: se corrige un mensaje de advertencia aleatorio al cargar el controlador. Registro de advertencias: [4.141392] GFP inesperado: 0x4 (GFP_DMA32). Se est\u00e1 solucionando hasta gfp: 0xa20 (GFP_ATOMIC). \u00a1Corrige tu c\u00f3digo! [ 4.150340] CPU: 1 PID: 175 Comm: 1-0050 No contaminado 5.15.5-00039-g2fd9ae1b568c #20 [ 4.158010] Nombre del hardware: Freescale i.MX8QXP MEK (DT) [ 4.163155] Rastreo de llamadas: [ 4.165600] dump_backtrace+0x0/0x1b0 [ 4.169286] show_stack+0x18/0x68 [ 4.172611] dump_stack_lvl+0x68/0x84 [ 4.176286] dump_stack+0x18/0x34 [ 4.179613] kmalloc_fix_flags+0x60/0x88 [ 4.183550] new_slab+0x334/0x370 [ 4.186878] ___slab_alloc.part.108+0x4d4/0x748 [ 4.191419] __slab_alloc.isra.109+0x30/0x78 [ 4.195702] kmem_cache_alloc+0x40c/0x420 [ 4.199725] dma_pool_alloc+0xac/0x1f8 [ 4.203486] cdns3_allocate_trb_pool+0xb4/0xd0 pool_alloc_page(struct dma_pool *pool, gfp_t mem_flags) { ... page = kmalloc(sizeof(*page), mem_flags); page->vaddr = dma_alloc_coherent(pool->dev, pool->allocation, &page->dma, mem_flags); ... } kmalloc se llam\u00f3 con mem_flags, que se transmite en cdns3_allocate_trb_pool() y tiene indicadores GFP_DMA32. kmall_fix_flags() informa una advertencia. GFP_DMA32 no es \u00fatil. dma_alloc_coherent() gestionar\u00e1 correctamente la regi\u00f3n de memoria DMA mediante pool->dev. GFP_DMA32 se puede eliminar de forma segura." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "A2AB1EA2-D627-490F-A831-7710F8F6920E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "76BFD0D7-0432-4749-A21D-9EE275AFCB53" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/8659ab3d936fcf0084676f98b75b317017aa8f82", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e142744f0e96abc69ccd99e6d6c7eb662267f21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/960a8a35a6027a08c4b511435bf59609b5d5e5cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50152.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50152.json index fc419b45250..f1f6a36b9ab 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50152.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50152.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50152", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:45.297", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:31:12.133", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: ohci-nxp: Se corrige la fuga de recuento de referencias en ohci_hcd_nxp_probe. of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha a\u00f1adido la funci\u00f3n of_node_put() que falta para evitar la fuga de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "4EAD548B-888D-4D7B-8EA9-742AADC5F1A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/302970b4cad3ebfda2c05ce06c322ccdc447d17e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4db00c2fa6f8c9876a7e20511dccf43b50be9006", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50238c4b54c2ac6c2da7a84a4a2b0a570e3da0e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/59026d5cc615da28e0c9806a71bf07065c906464", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/591ab8dbf6c21927f23f83ddb90691f48b86d136", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65d36ec409b635dfc2f95f0d7c5877c9d0cb7630", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a0fbac3bf26a11f084233519ddf3fd5e5bb28939", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d35903e9650f4fa79426ce390db8678dbf5ac432", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50179.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50179.json index 541fb4ae0cc..e53a673b992 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50179.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50179.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50179", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:48.330", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T22:02:06.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath9k: correcci\u00f3n del Use-After-Free en ath9k_hif_usb_rx_cb. Syzbot report\u00f3 una lectura de Use-After-Free en ath9k_hif_usb_rx_cb() [0]. El problema resid\u00eda en una inicializaci\u00f3n incorrecta de htc_handle->drv_priv. Posible rastreo de llamadas que puede activar el Use-After-Free: ath9k_htc_probe_device() /* htc_handle->drv_priv = priv; */ ath9k_htc_wait_for_target() <--- Error en ieee80211_free_hw() <--- el puntero privado se liber\u00f3 ... ath9k_hif_usb_rx_cb() ath9k_hif_usb_rx_stream() RX_STAT_INC() <--- acceso a htc_handle->drv_priv Para no agregar protecci\u00f3n sofisticada para drv_priv, podemos mover la inicializaci\u00f3n de htc_handle->drv_priv al final de ath9k_htc_probe_device() y agregar una macro auxiliar para hacer que todas las macros *_STAT_* sean seguras para NULL, ya que syzbot inform\u00f3 una desreferencia NULL relacionada en esas macros [1]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.35", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "8232B530-0C81-478C-AAE9-219DDA579A48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/03ca957c5f7b55660957eda20b5db4110319ac7a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0ac4827f78c7ffe8eef074bc010e7e34bc22f533", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62bc1ea5c7401d77eaf73d0c6a15f3d2e742856e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6b14ab47937ba441e75e8dbb9fbfc9c55efa41c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab7a0ddf5f1cdec63cb21840369873806fc36d80", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b66ebac40f64336ae2d053883bee85261060bd27", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9e21206b8ea62220b486310c61277e7ebfe7cec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eccd7c3e2596b574241a7670b5b53f5322f470e5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50181.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50181.json index 5c2a0006c15..3b6109433b4 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50181.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50181.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50181", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:48.587", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T22:05:33.677", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: virtio-gpu: se corrige una comprobaci\u00f3n faltante para evitar la desreferencia de NULL. 'cache_ent' podr\u00eda establecerse en NULL dentro de virtio_gpu_cmd_get_capset(), lo que provocar\u00eda una desreferencia de NULL al usarla recientemente (es decir, ptr = cache_ent->caps_cache). Se corrige con una comprobaci\u00f3n de NULL. [kraxel: correcci\u00f3n menor de estilo de c\u00f3digo]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "7322B1A2-F602-42B2-8B43-12340389E87B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/259773fc874258606c0121767a4a27466ff337eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/367882a5a9448b5e1ba756125308092d614cb96c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/39caef09666c1d8274abf9472c72bcac236dc5fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/adbdd21983fa292e53aec3eab97306b2961ea887", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd63f11f4c3c46afec07d821f74736161ff6e526", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-502xx/CVE-2022-50208.json b/CVE-2022/CVE-2022-502xx/CVE-2022-50208.json index baa6076a920..949d1a84d06 100644 --- a/CVE-2022/CVE-2022-502xx/CVE-2022-50208.json +++ b/CVE-2022/CVE-2022-502xx/CVE-2022-50208.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50208", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:51.620", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T22:06:11.527", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: amlogic: Se corrige una p\u00e9rdida de recuento de referencias en meson-secure-pwrc.c En meson_secure_pwrc_probe(), hay una p\u00e9rdida de recuento de referencias en una ruta de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "674AABE4-BC3E-4530-9717-5DFE7AB70A3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5509d07a9364b75b28055bf2d89289e4e5269929", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/80c469e63bfa9a5a8114952bffc6a7d241e7497e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d18529a4c12f66d83daac78045ea54063bd43257", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d1fbbb5ded714b6610a16ec3d7e271a55291ccc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f370fbbd3151c1c87d1e976c8964cb6cc46f2e00", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json index 3b23fc6e353..c9a936485fd 100644 --- a/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json +++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json @@ -2,7 +2,7 @@ "id": "CVE-2024-12085", "sourceIdentifier": "secalert@redhat.com", "published": "2025-01-14T18:15:25.123", - "lastModified": "2025-11-03T22:16:39.030", + "lastModified": "2025-11-20T21:15:59.487", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -588,6 +588,10 @@ "Third Party Advisory" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:2701", "source": "secalert@redhat.com", diff --git a/CVE-2024/CVE-2024-128xx/CVE-2024-12847.json b/CVE-2024/CVE-2024-128xx/CVE-2024-12847.json index 22ffd24a80a..788033afdad 100644 --- a/CVE-2024/CVE-2024-128xx/CVE-2024-12847.json +++ b/CVE-2024/CVE-2024-128xx/CVE-2024-12847.json @@ -2,13 +2,13 @@ "id": "CVE-2024-12847", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-01-10T20:15:30.150", - "lastModified": "2025-11-20T16:14:08.560", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-20T22:15:53.813", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017." + "value": "NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-73xx/CVE-2024-7314.json b/CVE-2024/CVE-2024-73xx/CVE-2024-7314.json index 997c1e6e280..0f985267918 100644 --- a/CVE-2024/CVE-2024-73xx/CVE-2024-7314.json +++ b/CVE-2024/CVE-2024-73xx/CVE-2024-7314.json @@ -2,13 +2,13 @@ "id": "CVE-2024-7314", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2024-08-02T17:16:41.400", - "lastModified": "2025-11-20T17:15:48.330", + "lastModified": "2025-11-20T22:15:53.973", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append \";swagger-ui\" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-19 UTC." + "value": "anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append \";swagger-ui\" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13087.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13087.json new file mode 100644 index 00000000000..ca0e1e220d1 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13087.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-13087", + "sourceIdentifier": "ics-cert@hq.dhs.gov", + "published": "2025-11-20T22:15:54.310", + "lastModified": "2025-11-20T22:15:54.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to build commands, allowing an attacker with administrative privileges to inject arbitrary commands that execute as root." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.5 + } + ] + }, + "weaknesses": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-03.json", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-03", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://www.opto22.com/support/resources-tools/knowledgebase/kb91326", + "source": "ics-cert@hq.dhs.gov" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25613.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25613.json new file mode 100644 index 00000000000..1185b2f5edc --- /dev/null +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25613.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-25613", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-20T21:16:02.310", + "lastModified": "2025-11-20T22:15:54.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-539" + } + ] + } + ], + "references": [ + { + "url": "http://fs.com", + "source": "cve@mitre.org" + }, + { + "url": "http://s3150-8t2f.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34021.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34021.json index 5068e341cdb..2138fb45644 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34021.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34021.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34021", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:36.530", - "lastModified": "2025-06-23T20:16:21.633", + "lastModified": "2025-11-20T22:15:54.743", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A server-side request forgery (SSRF) vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The application fails to validate user-supplied input in JSON POST parameters such as ipnotify_address and url, which are used by internal mechanisms to perform image fetch and DNS lookups. This allows remote unauthenticated attackers to induce the system to make arbitrary HTTP requests to internal or external systems, potentially bypassing firewall policies or conducting internal service enumeration." + "value": "A server-side request forgery (SSRF) vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The application fails to validate user-supplied input in JSON POST parameters such as ipnotify_address and url, which are used by internal mechanisms to perform image fetch and DNS lookups. This allows remote unauthenticated attackers to induce the system to make arbitrary HTTP requests to internal or external systems, potentially bypassing firewall policies or conducting internal service enumeration.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34022.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34022.json index 1902a697d31..cd1f5af1902 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34022.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34022.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34022", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:36.720", - "lastModified": "2025-11-20T17:15:50.007", + "lastModified": "2025-11-20T22:15:54.877", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/get_file.php script in the \u201cDownload Archive in Storage\u201d page fails to properly validate user-supplied input to the file parameter. Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files containing cleartext credentials, potentially leading to authentication bypass and exposure of system information.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-06 UTC." + "value": "A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/get_file.php script in the \u201cDownload Archive in Storage\u201d page fails to properly validate user-supplied input to the file parameter. Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files containing cleartext credentials, potentially leading to authentication bypass and exposure of system information.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34023.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34023.json index d52d980a802..9cab506951a 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34023.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34023.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34023", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:36.887", - "lastModified": "2025-11-20T16:15:57.063", + "lastModified": "2025-11-20T22:15:55.003", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences. Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-06 UTC." + "value": "A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34024.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34024.json index 173f40c60eb..a66a34a3444 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34024.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34024.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34024", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:37.053", - "lastModified": "2025-11-20T16:15:57.220", + "lastModified": "2025-11-20T22:15:55.127", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-07 UTC." + "value": "An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34029.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34029.json index 0ffc6b5f672..f7b586eb2f1 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34029.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34029.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34029", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:37.210", - "lastModified": "2025-11-20T16:15:57.433", + "lastModified": "2025-11-20T22:15:55.260", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell commands directly, resulting in command execution as the root user.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-07 UTC." + "value": "An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell commands directly, resulting in command execution as the root user.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34030.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34030.json index 3f77d8ab20f..e8e7c4b323e 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34030.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34030.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34030", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-20T19:15:37.343", - "lastModified": "2025-11-19T22:16:03.230", + "lastModified": "2025-11-20T22:15:55.413", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-07 UTC." + "value": "An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34031.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34031.json index 7f4a6766057..8f7d2ba5590 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34031.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34031.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34031", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:23.340", - "lastModified": "2025-11-19T22:16:03.417", + "lastModified": "2025-11-20T22:15:55.557", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This vulnerability can be exploited without authentication and may expose sensitive configuration data, including database credentials.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-07 UTC." + "value": "A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This vulnerability can be exploited without authentication and may expose sensitive configuration data, including database credentials.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34032.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34032.json index c7a24b6bc82..0d2924aaee4 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34032.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34032.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34032", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:24.350", - "lastModified": "2025-11-19T22:16:03.613", + "lastModified": "2025-11-20T22:15:55.707", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's browser by crafting a malicious link. This can be used to hijack user sessions or manipulate page content.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-10-07 UTC." + "value": "A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's browser by crafting a malicious link. This can be used to hijack user sessions or manipulate page content.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34033.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34033.json index 4e4c7ea2ec7..2e2a6a6f7e7 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34033.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34033.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34033", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:24.493", - "lastModified": "2025-07-09T19:09:18.207", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-20T22:15:55.867", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can inject arbitrary commands by appending shell metacharacters to the ping_addr parameter in a crafted GET request to /cgi-bin/webctrl.cgi?action=pingtest_update. The command's output is reflected in the application's web interface, enabling attackers to view results directly. Default and backdoor credentials can be used to access the interface and exploit the issue. Successful exploitation results in arbitrary command execution as the root user." + "value": "An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can inject arbitrary commands by appending shell metacharacters to the ping_addr parameter in a crafted GET request to /cgi-bin/webctrl.cgi?action=pingtest_update. The command's output is reflected in the application's web interface, enabling attackers to view results directly. Default and backdoor credentials can be used to access the interface and exploit the issue. Successful exploitation results in arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC." }, { "lang": "es", @@ -88,10 +88,6 @@ "source": "disclosure@vulncheck.com", "type": "Secondary", "description": [ - { - "lang": "en", - "value": "CWE-20" - }, { "lang": "en", "value": "CWE-78" diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34034.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34034.json index 93ba529a2b7..f21551ac45b 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34034.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34034.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34034", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:24.630", - "lastModified": "2025-11-17T23:15:52.240", + "lastModified": "2025-11-20T22:15:56.047", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device\u2019s web interface.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-08-24 UTC." + "value": "A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device\u2019s web interface.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34035.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34035.json index d98d2d31178..8c31f2dc64a 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34035.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34035.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34035", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:24.763", - "lastModified": "2025-11-17T22:15:45.440", + "lastModified": "2025-11-20T22:15:56.183", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-08-27 UTC." + "value": "An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34036.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34036.json index 1230f0a23c3..29785e40d59 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34036.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34036.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34036", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:24.903", - "lastModified": "2025-11-17T22:15:45.647", + "lastModified": "2025-11-20T22:15:56.347", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called \"Cross Web Server\" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When the server processes a request to /language/[lang]/index.html, it uses the [lang] input unsafely in a tar extraction command without proper escaping. This allows an unauthenticated remote attacker to inject shell commands and achieve arbitrary command execution as root.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-08-27 UTC." + "value": "An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called \"Cross Web Server\" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When the server processes a request to /language/[lang]/index.html, it uses the [lang] input unsafely in a tar extraction command without proper escaping. This allows an unauthenticated remote attacker to inject shell commands and achieve arbitrary command execution as root.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34037.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34037.json index 4172934494b..a77895bce63 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34037.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34037.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34037", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T01:15:25.037", - "lastModified": "2025-11-17T22:15:45.833", + "lastModified": "2025-11-20T22:15:56.513", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in various models of E-Series Linksys\u00a0routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability is exploited in the wild by the \"TheMoon\" worm to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. This vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-13 UTC." + "value": "An OS command injection vulnerability exists in various models of E-Series Linksys\u00a0routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability is exploited in the wild by the \"TheMoon\" worm to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. This vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34038.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34038.json index 08a5a8f92ae..df8f78ce5f3 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34038.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34038.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34038", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T02:15:21.667", - "lastModified": "2025-11-17T22:15:45.997", + "lastModified": "2025-11-20T22:15:56.640", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-13 UTC." + "value": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34039.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34039.json index 0f89c4dc771..1835ce8da59 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34039.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34039.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34039", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T02:15:22.540", - "lastModified": "2025-11-17T22:15:46.140", + "lastModified": "2025-11-20T22:15:56.780", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-21 UTC." + "value": "A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34040.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34040.json index 5a5342dfade..7d40ca57aa2 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34040.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34040.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34040", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T02:15:22.673", - "lastModified": "2025-11-17T22:15:46.287", + "lastModified": "2025-11-20T21:16:03.350", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-05 UTC." + "value": "An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-01 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34041.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34041.json index 50195cb45b5..a57156b21dd 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34041.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34041.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34041", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-24T02:15:22.820", - "lastModified": "2025-11-17T22:15:46.423", + "lastModified": "2025-11-20T21:16:03.487", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-05 UTC." + "value": "An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34042.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34042.json index 2cf6b1a0133..3c6dc19a08e 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34042.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34042.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34042", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:27.197", - "lastModified": "2025-11-17T22:15:46.553", + "lastModified": "2025-11-20T21:16:03.617", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which are unsafely embedded into backend system calls without proper input sanitization. Successful exploitation results in remote code execution with root privileges.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-04 UTC." + "value": "An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which are unsafely embedded into backend system calls without proper input sanitization. Successful exploitation results in remote code execution with root privileges.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-02 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34043.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34043.json index dbe4a638bff..b51657ddf94 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34043.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34043.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34043", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:27.490", - "lastModified": "2025-11-17T22:15:46.707", + "lastModified": "2025-11-20T21:16:03.750", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests. These commands are executed with the privileges of the web server process, enabling remote code execution and potential full device compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-05 UTC." + "value": "A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests. These commands are executed with the privileges of the web server process, enabling remote code execution and potential full device compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34045.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34045.json index 2e31fb5d1e8..4a732603d0a 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34045.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34045.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34045", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:27.830", - "lastModified": "2025-11-17T22:15:46.997", + "lastModified": "2025-11-20T21:16:03.880", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-07 UTC." + "value": "A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34046.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34046.json index e59b7a0e92f..fab7fee9e9c 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34046.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34046.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34046", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:27.987", - "lastModified": "2025-11-17T22:15:47.157", + "lastModified": "2025-11-20T21:16:04.020", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An unauthenticated file upload vulnerability exists in the Fanwei E-Office <= v9.4 web management interface. The vulnerability affects the /general/index/UploadFile.php endpoint, which improperly validates uploaded files when invoked with certain parameters (uploadType=eoffice_logo or uploadType=theme). An attacker can exploit this flaw by sending a crafted HTTP POST request to upload arbitrary files without requiring authentication. Successful exploitation could enable remote code execution on the affected server, leading to complete compromise of the web application and potentially the underlying system.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-10 UTC." + "value": "An unauthenticated file upload vulnerability exists in the Fanwei E-Office <= v9.4 web management interface. The vulnerability affects the /general/index/UploadFile.php endpoint, which improperly validates uploaded files when invoked with certain parameters (uploadType=eoffice_logo or uploadType=theme). An attacker can exploit this flaw by sending a crafted HTTP POST request to upload arbitrary files without requiring authentication. Successful exploitation could enable remote code execution on the affected server, leading to complete compromise of the web application and potentially the underlying system.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34047.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34047.json index e519ca205f7..a27c1bac25d 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34047.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34047.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34047", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:28.140", - "lastModified": "2025-11-17T22:15:47.283", + "lastModified": "2025-11-20T21:16:04.147", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard), allowing unauthenticated attackers to read arbitrary files on the underlying system via the ostype parameter in the /vpn/user/download/client endpoint. This flaw arises from insufficient input sanitation, enabling traversal sequences\u00a0to escape the intended directory and access sensitive files.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-10 UTC." + "value": "A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard), allowing unauthenticated attackers to read arbitrary files on the underlying system via the ostype parameter in the /vpn/user/download/client endpoint. This flaw arises from insufficient input sanitation, enabling traversal sequences\u00a0to escape the intended directory and access sensitive files.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34049.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34049.json index 1ada90753c7..c2c22e67240 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34049.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34049.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34049", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-06-26T16:15:28.413", - "lastModified": "2025-11-17T22:15:47.563", + "lastModified": "2025-11-20T21:16:04.273", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11_X101 Build 1127.190306 and earlier. The router\u2019s web management interface fails to properly sanitize user input in the target_addr parameter of the formTracert and formPing administrative endpoints. An authenticated attacker can inject arbitrary operating system commands, which are executed with root privileges, leading to remote code execution. Successful exploitation enables full compromise of the device.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-13 UTC." + "value": "An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11_X101 Build 1127.190306 and earlier. The router\u2019s web management interface fails to properly sanitize user input in the target_addr parameter of the formTracert and formPing administrative endpoints. An authenticated attacker can inject arbitrary operating system commands, which are executed with root privileges, leading to remote code execution. Successful exploitation enables full compromise of the device.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-340xx/CVE-2025-34054.json b/CVE-2025/CVE-2025-340xx/CVE-2025-34054.json index 5e96dfd6c3a..6dd722f3d48 100644 --- a/CVE-2025/CVE-2025-340xx/CVE-2025-34054.json +++ b/CVE-2025/CVE-2025-340xx/CVE-2025-34054.json @@ -2,13 +2,13 @@ "id": "CVE-2025-34054", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-07-01T15:15:23.910", - "lastModified": "2025-11-17T22:15:47.757", + "lastModified": "2025-11-20T21:16:04.400", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-03-07 UTC." + "value": "An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root.\u00a0Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json b/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json index 4563dabcb76..4a7e646a8fd 100644 --- a/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json +++ b/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34322", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-17T18:15:56.710", - "lastModified": "2025-11-18T14:06:29.817", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:48:00.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,50 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2026", + "matchCriteriaId": "193F80CC-75B5-4F6B-8C44-ABB8ADC43C31" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2026:r1:*:*:*:*:*:*", + "matchCriteriaId": "B2FC4948-E93B-4F6F-83D5-17A39A5DDAAA" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-authenticated-command-injection-via-natural-language-queries", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json b/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json index 57a601953c7..a9d85e0c6d9 100644 --- a/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json +++ b/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34323", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-11-17T18:15:56.880", - "lastModified": "2025-11-18T14:06:29.817", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:47:39.343", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,18 +91,50 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2026", + "matchCriteriaId": "193F80CC-75B5-4F6B-8C44-ABB8ADC43C31" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nagios:log_server:2026:r1:*:*:*:*:*:*", + "matchCriteriaId": "B2FC4948-E93B-4F6F-83D5-17A39A5DDAAA" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.nagios.com/products/security/#log-server", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.vulncheck.com/advisories/nagios-log-server-local-privilege-escalation-via-writable-scripts-and-sudo-rules", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36153.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36153.json new file mode 100644 index 00000000000..06c702c7eb4 --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36153.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36153", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-20T22:15:56.970", + "lastModified": "2025-11-20T22:15:56.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7252019", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36158.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36158.json new file mode 100644 index 00000000000..b1a2e1cc880 --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36158.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36158", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-20T22:15:57.153", + "lastModified": "2025-11-20T22:15:57.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.4, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-674" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7252019", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36159.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36159.json new file mode 100644 index 00000000000..9b5d49ac0fb --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36159.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36159", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-20T22:15:57.340", + "lastModified": "2025-11-20T22:15:57.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.2, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-117" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7252019", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36160.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36160.json new file mode 100644 index 00000000000..b93483d2dbb --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36160.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36160", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-11-20T22:15:57.530", + "lastModified": "2025-11-20T22:15:57.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7252019", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38091.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38091.json index 645e7035fba..a4bab504c4e 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38091.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38091.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38091", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-02T15:15:26.070", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T22:07:13.727", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: comprobar el ID de flujo del wrapper dml21 para obtener plane_id [Por qu\u00e9 y c\u00f3mo] Se soluciona una advertencia de falso positivo que se produce debido a la falta de comprobaciones correctas al consultar plane_id en DML21. Esto corrige la advertencia al realizar un reinicio en modo 1 (cat /sys/kernel/debug/dri/1/amdgpu_gpu_recover): [ 35.751250] ADVERTENCIA: CPU: 11 PID: 326 at /tmp/amd.PHpyAl7v/amd/amdgpu/../display/dc/dml2/dml2_dc_resource_mgmt.c:91 dml2_map_dc_pipes+0x243d/0x3f40 [amdgpu] [ 35.751434] Modules linked in: amdgpu(OE) amddrm_ttm_helper(OE) amdttm(OE) amddrm_buddy(OE) amdxcp(OE) amddrm_exec(OE) amd_sched(OE) amdkcl(OE) drm_suballoc_helper drm_ttm_helper ttm drm_display_helper cec rc_core i2c_algo_bit rfcomm qrtr cmac algif_hash algif_skcipher af_alg bnep amd_atl intel_rapl_msr intel_rapl_common snd_hda_codec_hdmi snd_hda_intel edac_mce_amd snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec kvm_amd snd_hda_core snd_hwdep snd_pcm kvm snd_seq_midi snd_seq_midi_event snd_rawmidi crct10dif_pclmul polyval_clmulni polyval_generic btusb ghash_clmulni_intel sha256_ssse3 btrtl sha1_ssse3 snd_seq btintel aesni_intel btbcm btmtk snd_seq_device crypto_simd sunrpc cryptd bluetooth snd_timer ccp binfmt_misc rapl snd i2c_piix4 wmi_bmof gigabyte_wmi k10temp i2c_smbus soundcore gpio_amdpt mac_hid sch_fq_codel msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs ip_tables x_tables autofs4 hid_generic usbhid hid crc32_pclmul igc ahci xhci_pci libahci xhci_pci_renesas video wmi [ 35.751501] CPU: 11 UID: 0 PID: 326 Comm: kworker/u64:9 Tainted: G OE 6.11.0-21-generic #21~24.04.1-Ubuntu [ 35.751504] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE [ 35.751505] Hardware name: Gigabyte Technology Co., Ltd. X670E AORUS PRO X/X670E AORUS PRO X, BIOS F30 05/22/2024 [ 35.751506] Workqueue: amdgpu-reset-dev amdgpu_debugfs_reset_work [amdgpu] [ 35.751638] RIP: 0010:dml2_map_dc_pipes+0x243d/0x3f40 [amdgpu] [ 35.751794] Code: 6d 0c 00 00 8b 84 24 88 00 00 00 41 3b 44 9c 20 0f 84 fc 07 00 00 48 83 c3 01 48 83 fb 06 75 b3 4c 8b 64 24 68 4c 8b 6c 24 40 <0f> 0b b8 06 00 00 00 49 8b 94 24 a0 49 00 00 89 c3 83 f8 07 0f 87 [ 35.751796] RSP: 0018:ffffbfa3805d7680 EFLAGS: 00010246 [ 35.751798] RAX: 0000000000010000 RBX: 0000000000000006 RCX: 0000000000000000 [ 35.751799] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 35.751800] RBP: ffffbfa3805d78f0 R08: 0000000000000000 R09: 0000000000000000 [ 35.751801] R10: 0000000000000000 R11: 0000000000000000 R12: ffffbfa383249000 [ 35.751802] R13: ffffa0e68f280000 R14: ffffbfa383249658 R15: 0000000000000000 [ 35.751803] FS: 0000000000000000(0000) GS:ffffa0edbe580000(0000) knlGS:0000000000000000 [ 35.751804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.751805] CR2: 00005d847ef96c58 CR3: 000000041de3e000 CR4: 0000000000f50ef0 [ 35.751806] PKRU: 55555554 [ 35.751807] Call Trace: [ 35.751810] [ 35.751816] ? show_regs+0x6c/0x80 [ 35.751820] ? __warn+0x88/0x140 [ 35.751822] ? dml2_map_dc_pipes+0x243d/0x3f40 [amdgpu] [ 35.751964] ? report_bug+0x182/0x1b0 [ 35.751969] ? handle_bug+0x6e/0xb0 [ 35.751972] ? exc_invalid_op+0x18/0x80 [ 35.751974] ? asm_exc_invalid_op+0x1b/0x20 [ 35.751978] ? dml2_map_dc_pipes+0x243d/0x3f40 [amdgpu] [ 35.752117] ? math_pow+0x48/0xa0 [amdgpu] [ 35.752256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 35.752260] ? math_pow+0x48/0xa0 [amdgpu] [ 35.752400] ? srso_alias_return_thunk+0x5/0xfbef5 [ 35.752403] ? math_pow+0x11/0xa0 [amdgpu] [ 35.752524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 35.752526] ? core_dcn4_mode_programming+0xe4d/0x20d0 [amdgpu] [ 35.752663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 35.752669] dml21_validate+0x3d4/0x980 [amdgpu] (seleccionado del commit f8ad62c0a93e5dd94243e10f1b742232e4d6411e)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.32", + "matchCriteriaId": "4A0B0CEE-D47B-434F-86D9-03E1CFBEF1AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.10", + "matchCriteriaId": "DB4249FA-EF24-4488-A579-B8E8EE87EA6F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ddac70fed50485aa4ae49cdb7478ce41d8d4715", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6f47d7408133631a1b178f8a04e79aee189ef046", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c53f23f7075c9f63f14d7ec8f2cc3e33e118d986", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38092.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38092.json index ab35b45a41c..2cf1dbb72a2 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38092.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38092.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38092", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-02T15:15:26.197", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:58:27.000", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: usar list_first_entry_or_null para opinfo_get_list(). La macro list_first_entry() nunca devuelve NULL. Si la lista est\u00e1 vac\u00eda, devuelve un puntero no v\u00e1lido. Use list_first_entry_or_null() para comprobar si la lista est\u00e1 vac\u00eda." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.88", + "versionEndExcluding": "6.6.93", + "matchCriteriaId": "F54AB024-7562-4452-93AE-645798E55BC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.25", + "versionEndExcluding": "6.12.32", + "matchCriteriaId": "832CC9EC-F0C4-4B47-9980-86D9414763B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14.4", + "versionEndExcluding": "6.14.10", + "matchCriteriaId": "B5929498-4B70-40E7-98F4-40F6F0D68158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C300BA32-5854-4B59-A00A-18A402F291D0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/10379171f346e6f61d30d9949500a8de4336444a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/334da674b25fdb7a1a4d4b89dcd7795144fc7e11", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c78abb646ff823e7d22faad4cc0703d4484da9e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb7e06e9736d73007dc8dab7b353733bb37df86b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38093.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38093.json index a11e3cdf741..7c234073149 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38093.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38093.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38093", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-02T15:15:26.317", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:53:26.073", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: dts: qcom: x1e80100: A\u00f1adir refrigeraci\u00f3n de la GPU. A diferencia de la CPU, la GPU no reduce su velocidad autom\u00e1ticamente al alcanzar altas temperaturas. Con ciertas cargas altas de la GPU, es posible alcanzar la temperatura cr\u00edtica de apagado del hardware de 120 \u00b0C, lo que pone en peligro el hardware e imposibilita la ejecuci\u00f3n de ciertas aplicaciones. Configure la refrigeraci\u00f3n de la GPU de forma similar a las tablas ACPI, limitando la velocidad de la GPU al alcanzar los 95 \u00b0C y realizando un sondeo cada 200 ms." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "51F754D9-F4F7-4E6E-BFD8-0BC3B2C2D498" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.10", + "matchCriteriaId": "DB4249FA-EF24-4488-A579-B8E8EE87EA6F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.15", + "versionEndExcluding": "6.15.1", + "matchCriteriaId": "ACD734B1-0431-4BEB-9769-ECB016833EB2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5ba21fa11f473c9827f378ace8c9f983de9e0287", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae664ca09072857349857530dce12e09c048b12d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd9d354bdd28b20a8f3170dab3bc0f096e66d6b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d145a6a3e252f093dc243d2944fecb2387a3d690", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38096.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38096.json index a56ae052699..355e655b8ac 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38096.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38096.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38096", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:22.913", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:53:08.080", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: iwlwifi: no avisa si hay un error de firmware. iwl_trans_reclaim avisa si se ejecuta cuando el firmware no est\u00e1 activo. Sin embargo, si se ejecuta cuando hay un reinicio pendiente, es decir, despu\u00e9s de un error de firmware, no es necesario avisar; en su lugar, regresa silenciosamente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.31", + "matchCriteriaId": "762BCFB6-5DF9-4665-8651-F8936F5D8FB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.9", + "matchCriteriaId": "A9B72DD1-715C-4101-A720-1C8D70044C06" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0446d34a853d9576e2a7628c803d2abd2f8cf3a8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c7f50d0433a016d43681592836a3d484817bfb34", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d07a08f42dc7230c902e1af2a899a72b0a03aa69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38098.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38098.json index acae597bd24..b6c7f5666ff 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38098.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38098.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38098", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:23.173", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:52:51.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: No trate el conector wb como f\u00edsico en create_validate_stream_for_sink. No intente operar en un drm_wb_connector como un amdgpu_dm_connector. Aunque desreferenciar aconnector->base funciona, es incorrecto y podr\u00eda provocar problemas desconocidos. Simplemente... no lo haga." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7.2", + "versionEndExcluding": "6.12.31", + "matchCriteriaId": "E57E8C0A-CFAB-49DC-85D6-418A3F199253" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.9", + "matchCriteriaId": "A9B72DD1-715C-4101-A720-1C8D70044C06" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18ca68f7c657721583a75cab01f0d0d2ec63a6c9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b14e726d57f61085485f107a6203c50a09695abd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cbf4890c6f28fb1ad733e14613fbd33c2004bced", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38099.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38099.json index 02a2522fcc0..b7813488edb 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38099.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38099.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38099", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:23.307", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:52:36.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: deshabilitar la compatibilidad con SCO si READ_VOICE_SETTING no es compatible o est\u00e1 roto. Una conexi\u00f3n SCO sin el voice_setting adecuado puede provocar que el controlador se bloquee." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.31", + "matchCriteriaId": "762BCFB6-5DF9-4665-8651-F8936F5D8FB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.9", + "matchCriteriaId": "A9B72DD1-715C-4101-A720-1C8D70044C06" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/14d17c78a4b1660c443bae9d38c814edea506f62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec1f015ec0c6fd250a6564e8452f7bb3160b9cb1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f48ee562c095e552a30b8d9cc0566a267b410f8a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38101.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38101.json index 430a12e9497..214b7ff61dc 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38101.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38101.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38101", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:23.573", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:39:20.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ring-buffer: Se corrige el bloqueo del b\u00fafer en ring_buffer_subbuf_order_set() Se ampl\u00eda la secci\u00f3n cr\u00edtica en ring_buffer_subbuf_order_set() para garantizar que el manejo de errores se realice con el mutex por b\u00fafer retenido, evitando as\u00ed la corrupci\u00f3n de listas y otros problemas relacionados con la concurrencia." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "15BC1D57-68F1-439E-BE58-136CEB32896A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0fc9a295cd8e59c3636e97395e7c74a9c89fee42", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/40ee2afafc1d9fe3aa44a6fbe440d78a5c96a72e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e09c0600beea469b3ebf974464e526a02d59ad62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38105.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38105.json index 42c83ed4644..8de488b3e2a 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38105.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38105.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38105", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:23.997", - "lastModified": "2025-10-12T12:15:54.880", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:39:12.730", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: usb-audio: Kill timer properly at removal El c\u00f3digo MIDI USB-audio inicializa el temporizador, pero en un caso raro, el controlador podr\u00eda liberarse sin la llamada de desconexi\u00f3n. Esto deja al temporizador en un estado activo mientras el objeto asignado se libera a trav\u00e9s de snd_usbmidi_free(), lo que termina con una advertencia del kernel cuando se habilita la configuraci\u00f3n de depuraci\u00f3n, como lo detect\u00f3 un fuzzer. Para evitar el problema, coloque timer_shutdown_sync() en snd_usbmidi_free(), para que el temporizador pueda ser eliminado correctamente. Mientras estamos en ello, reemplace tambi\u00e9n el timer_delete_sync() existente en la devoluci\u00f3n de llamada de desconexi\u00f3n con timer_shutdown_sync()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.14", + "versionEndExcluding": "6.6.111", + "matchCriteriaId": "0317582A-6B0D-428B-AEE4-F2F23E337ACF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.52", + "matchCriteriaId": "2D9B210A-8880-498F-A5CE-0C653F909220" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0718a78f6a9f04b88d0dc9616cc216b31c5f3cf1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62066758d2ae169278e5d6aea5995b1b6f6ddeb5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/647410a7da46067953a53c0d03f8680eff570959", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c611b9e55174e439dcd85a72969b43a95f3827a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38106.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38106.json index b2516aa186c..d4af4a20895 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38106.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38106.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38106", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:24.123", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:36:43.990", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,94 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: io_uring: correcci\u00f3n del use-after-free de sq->thread en __io_uring_show_fdinfo() syzbot informa: ERROR: KASAN: slab-use-after-free en getrusage+0x1109/0x1a60 Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff88810de2d2c8 por la tarea a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out No contaminado 6.16.0-rc1 #1 PREEMPT(voluntario) Nombre del hardware: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 01/04/2014 Rastreo de llamadas: dump_stack_lvl+0x53/0x70 print_report+0xd0/0x670 ? __pfx__raw_spin_lock_irqsave+0x10/0x10 ? getrusage+0x1109/0x1a60 kasan_report+0xce/0x100 ? getrusage+0x1109/0x1a60 getrusage+0x1109/0x1a60 ? __pfx_getrusage+0x10/0x10 __io_uring_show_fdinfo+0x9fe/0x1790 ? ksys_read+0xf7/0x1c0 ? do_syscall_64+0xa4/0x260 ? vsnprintf+0x591/0x1100 ? __pfx___io_uring_show_fdinfo+0x10/0x10 ? __pfx_vsnprintf+0x10/0x10 ? mutex_trylock+0xcf/0x130 ? __pfx_mutex_trylock+0x10/0x10 ? __pfx_show_fd_locks+0x10/0x10 ? io_uring_show_fdinfo+0x57/0x80 io_uring_show_fdinfo+0x57/0x80 seq_show+0x38c/0x690 seq_read_iter+0x3f7/0x1180 ? inode_set_ctime_current+0x160/0x4b0 seq_read+0x271/0x3e0 ? __pfx_seq_read+0x10/0x10 ? __pfx__raw_spin_lock+0x10/0x10 ? __mark_inode_dirty+0x402/0x810 ? selinux_file_permission+0x368/0x500 ? file_update_time+0x10f/0x160 vfs_read+0x177/0xa40 ? __pfx___handle_mm_fault+0x10/0x10 ? __pfx_vfs_read+0x10/0x10 ? mutex_lock+0x81/0xe0 ? __pfx_mutex_lock+0x10/0x10 ? fdget_pos+0x24d/0x4b0 ksys_read+0xf7/0x1c0 ? __pfx_ksys_read+0x10/0x10 ? do_user_addr_fault+0x43b/0x9c0 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0f74170fc9 Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 8 RSP: 002b:00007fffece049e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f74170fc9 RDX: 0000000000001000 RSI: 00007fffece049f0 RDI: 0000000000000004 RBP: 00007fffece05ad0 R08: 0000000000000000 R09: 00007fffece04d90 R10: 0000000000000000 R11: 0000000000000206 R12: 00005651720a1100 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Allocated by task 298: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x6e/0x70 kmem_cache_alloc_node_noprof+0xe8/0x330 copy_process+0x376/0x5e00 create_io_thread+0xab/0xf0 io_sq_offload_create+0x9ed/0xf20 io_uring_setup+0x12b0/0x1cc0 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 22: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x37/0x50 kmem_cache_free+0xc4/0x360 rcu_core+0x5ff/0x19f0 handle_softirqs+0x18c/0x530 run_ksoftirqd+0x20/0x30 smpboot_thread_fn+0x287/0x6c0 kthread+0x30d/0x630 ret_from_fork+0xef/0x1a0 ret_from_fork_asm+0x1a/0x30 Last potentially related work creation: kasan_save_stack+0x33/0x60 kasan_record_aux_stack+0x8c/0xa0 __call_rcu_common.constprop.0+0x68/0x940 __schedule+0xff2/0x2930 __cond_resched+0x4c/0x80 mutex_lock+0x5c/0xe0 io_uring_del_tctx_node+0xe1/0x2b0 io_uring_clean_tctx+0xb7/0x160 io_uring_cancel_generic+0x34e/0x760 do_exit+0x240/0x2350 do_group_exit+0xab/0x220 __x64_sys_exit_group+0x39/0x40 x64_sys_call+0x1243/0x1840 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f La direcci\u00f3n con errores pertenece al objeto en ffff88810de2cb00 que pertenece a la cach\u00e9 task_struct de tama\u00f1o 3712 La direcci\u00f3n con errores se encuentra 1992 bytes dentro de la regi\u00f3n liberada de 3712 bytes [ffff88810de2cb00, ffff88810de2d980) que es causada por task_struct Al que apunta sq->thread, se libera mientras se usa en la funci\u00f3n __io_uring_show_fdinfo(). Mantener ctx->uring_lock no impide la liberaci\u00f3n ni la salida de sq->thread. Solucione esto asignando y buscando ->thread en RCU, y obteniendo una referencia a task_struct. Esto se trunca." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.9", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "A373E395-B1B2-445B-8784-2A89BF879AD5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/ac0b8b327a5677dc6fecdf353d808161525b1ff0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/af8c13f9ee040b9a287ba246cf0055f7c77b7cc8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d0932758a0a77b38ba1b39564f3b7aba12407061", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38109.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38109.json index e5bf492d736..51f911a5590 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38109.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38109.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38109", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:24.553", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:36:33.887", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: Se corrige la descarga de puertos virtuales de ECVF durante el flujo de apagado. Se corrige el UAF del flujo de apagado cuando se crea una funci\u00f3n virtual en el chip integrado (ECVF) de un dispositivo BlueField. En tal caso, la tabla de entrada ACL del puerto virtual no se destruye correctamente. La funcionalidad de ECVF es independiente de la capacidad ecpf_vport_exists y, por lo tanto, las funciones mlx5_eswitch_(enable|disable)_pf_vf_vports() no deber\u00edan probarla al habilitar o deshabilitar los puertos virtuales de ECVF. Registro del kernel: [] refcount_t: desbordamiento; use-after-free. [] ADVERTENCIA: CPU: 3 PID: 1 at lib/refcount.c:28 refcount_warn_saturate+0x124/0x220 ---------------- [] Call trace: [] refcount_warn_saturate+0x124/0x220 [] tree_put_node+0x164/0x1e0 [mlx5_core] [] mlx5_destroy_flow_table+0x98/0x2c0 [mlx5_core] [] esw_acl_ingress_table_destroy+0x28/0x40 [mlx5_core] [] esw_acl_ingress_lgcy_cleanup+0x80/0xf4 [mlx5_core] [] esw_legacy_vport_acl_cleanup+0x44/0x60 [mlx5_core] [] esw_vport_cleanup+0x64/0x90 [mlx5_core] [] mlx5_esw_vport_disable+0xc0/0x1d0 [mlx5_core] [] mlx5_eswitch_unload_ec_vf_vports+0xcc/0x150 [mlx5_core] [] mlx5_eswitch_disable_sriov+0x198/0x2a0 [mlx5_core] [] mlx5_device_disable_sriov+0xb8/0x1e0 [mlx5_core] [] mlx5_sriov_detach+0x40/0x50 [mlx5_core] [] mlx5_unload+0x40/0xc4 [mlx5_core] [] mlx5_unload_one_devl_locked+0x6c/0xe4 [mlx5_core] [] mlx5_unload_one+0x3c/0x60 [mlx5_core] [] shutdown+0x7c/0xa4 [mlx5_core] [] pci_device_shutdown+0x3c/0xa0 [] device_shutdown+0x170/0x340 [] __do_sys_reboot+0x1f4/0x2a0 [] __arm64_sys_reboot+0x2c/0x40 [] invoke_syscall+0x78/0x100 [] el0_svc_common.constprop.0+0x54/0x184 [] do_el0_svc+0x30/0xac [] el0_svc+0x48/0x160 [] el0t_64_sync_handler+0xa4/0x12c [] el0t_64_sync+0x1a4/0x1a8 [] --[ fin de seguimiento 9c4601d68c70030e ]---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "3D3A3F5D-1F88-4BFE-92A6-43E827D27BE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "4FFA54AA-CDFE-4591-BD07-72813D0948F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/24db585d369f949f698e03d7d8017e5ae19d0497", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5953ae44dfe5dbad374318875be834c3b7b71ee6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/687560d8a9a2d654829ad0da1ec24242f1de711d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da15ca0553325acf68039015f2f4db750c8e2b96", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38110.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38110.json index bd76fbabea3..c1df9018dd0 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38110.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38110.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38110", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:24.680", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:36:19.313", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mdiobus: Arregla el potencial acceso de lectura/escritura fuera de los l\u00edmites de la cl\u00e1usula 45 Cuando se usan herramientas disponibles p\u00fablicamente como 'mdio-tools' para leer/escribir datos desde/hacia la interfaz de red y su PHY a trav\u00e9s de C45 (cl\u00e1usula 45) mdiobus, no hay verificaci\u00f3n de los par\u00e1metros pasados a ioctl y acepta cualquier direcci\u00f3n mdio. Actualmente hay soporte para 32 direcciones en el kernel a trav\u00e9s de la definici\u00f3n PHY_MAX_ADDR, pero es posible pasar un valor m\u00e1s alto que ese a trav\u00e9s de ioctl. Si bien la operaci\u00f3n de lectura/escritura generalmente deber\u00eda fallar en este caso, mdiobus proporciona una matriz de estad\u00edsticas, donde la direcci\u00f3n incorrecta puede permitir lectura/escritura fuera de los l\u00edmites. Arregla eso agregando la verificaci\u00f3n de direcci\u00f3n antes de la operaci\u00f3n de lectura/escritura C45. Si bien esto excluye este acceso de cualquier estad\u00edstica, mejora la seguridad de la operaci\u00f3n de lectura/escritura." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "2F32A46D-A3D6-46B7-841B-D6FED06301AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "4FFA54AA-CDFE-4591-BD07-72813D0948F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/260388f79e94fb3026c419a208ece8358bb7b555", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/31bf7b2b92563a352788cf9df3698682f659bacc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4ded22f7f3ce9714ed72c3e9c68fea1cb9388ae7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/abb0605ca00979a49572a6516f6db22c3dc57223", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38114.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38114.json index 9738995dd82..b7d873dad23 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38114.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38114.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38114", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:25.227", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:43.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,80 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: e1000: mover cancel_work_sync para evitar el interbloqueo Anteriormente, e1000_down llamaba a cancel_work_sync para la tarea de reinicio de e1000 (a trav\u00e9s de e1000_down_and_stop), que toma RTNL. Seg\u00fan lo informado por los usuarios y syzbot, es posible que se produzca un interbloqueo en el siguiente escenario: CPU 0: - Se mantiene RTNL - e1000_close - e1000_down - cancel_work_sync (cancelar/esperar a e1000_reset_task()) CPU 1: - process_one_work - e1000_reset_task - tomar RTNL Para remediar esto, evite llamar a cancel_work_sync desde e1000_down (e1000_reset_task no hace nada si el dispositivo est\u00e1 inactivo de todos modos). En su lugar, llame a cancel_work_sync para e1000_reset_task cuando se est\u00e9 quitando el dispositivo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1fd4438ddcc4958ed24662d5125114299e19bae4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4a8085ceefb7bbb12c2b71c55e71fc946c6929f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38116.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38116.json index e6c121f4b78..e1718ab4347 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38116.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38116.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38116", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:25.490", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:35.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,80 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: correcci\u00f3n de uaf en ath12k_core_init(). Cuando falla la ejecuci\u00f3n de ath12k_core_hw_group_assign() o ath12k_core_hw_group_create(), la cadena de notificadores registrada no se desregistra correctamente. Su memoria se libera despu\u00e9s de rmmod, lo que puede generar un problema de use-after-free (UAF) si se accede posteriormente a esta cadena de notificadores. Se soluciona el problema llamando a ath12k_core_panic_notifier_unregister() en caso de fallo. Rastreo de llamadas: notifier_chain_register+0x4c/0x1f0 (P) atomic_notifier_chain_register+0x38/0x68 ath12k_core_init+0x50/0x4e8 [ath12k] ath12k_pci_probe+0x5f8/0xc28 [ath12k] pci_device_probe+0xbc/0x1a8 really_probe+0xc8/0x3a0 __driver_probe_device+0x84/0x1b0 driver_probe_device+0x44/0x130 __driver_attach+0xcc/0x208 bus_for_each_dev+0x84/0x100 driver_attach+0x2c/0x40 bus_add_driver+0x130/0x260 driver_register+0x70/0x138 __pci_register_driver+0x68/0x80 ath12k_pci_init+0x30/0x68 [ath12k] ath12k_init+0x28/0x78 [ath12k] Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "59623E70-FBCF-4F5B-A3CE-07A4482CED29" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/65e1b3404c211dcfaea02698539cdcd26647130f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f3fe49dbddd73f0155a8935af47cb63693069dbe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38117.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38117.json index 064a8c4d21b..7b419fad771 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38117.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38117.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38117", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:25.617", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:29.773", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: MGMT: Proteger la lista mgmt_pending con su propio bloqueo Esto usa un mutex para proteger del acceso concurrente a la lista mgmt_pending que puede causar fallos como: ====================================================================== ERROR: KASAN: slab-use-after-free in hci_sock_get_channel+0x60/0x68 net/bluetooth/hci_sock.c:91 Read of size 2 at addr ffff0000c48885b2 by task syz.4.334/7318 CPU: 0 UID: 0 PID: 7318 Comm: syz.4.334 Not tainted 6.15.0-rc7-syzkaller-g187899f4124a #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 print_address_description+0xa8/0x254 mm/kasan/report.c:408 print_report+0x68/0x84 mm/kasan/report.c:521 kasan_report+0xb0/0x110 mm/kasan/report.c:634 __asan_report_load2_noabort+0x20/0x2c mm/kasan/report_generic.c:379 hci_sock_get_channel+0x60/0x68 net/bluetooth/hci_sock.c:91 mgmt_pending_find+0x7c/0x140 net/bluetooth/mgmt_util.c:223 pending_find net/bluetooth/mgmt.c:947 [inline] remove_adv_monitor+0x44/0x1a4 net/bluetooth/mgmt.c:5445 hci_mgmt_cmd+0x780/0xc00 net/bluetooth/hci_sock.c:1712 hci_sock_sendmsg+0x544/0xbb0 net/bluetooth/hci_sock.c:1832 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg net/socket.c:727 [inline] sock_write_iter+0x25c/0x378 net/socket.c:1131 new_sync_write fs/read_write.c:591 [inline] vfs_write+0x62c/0x97c fs/read_write.c:684 ksys_write+0x120/0x210 fs/read_write.c:736 __do_sys_write fs/read_write.c:747 [inline] __se_sys_write fs/read_write.c:744 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:744 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Allocated by task 7037: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_alloc_info+0x44/0x54 mm/kasan/generic.c:562 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x9c/0xb4 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4327 [inline] __kmalloc_noprof+0x2fc/0x4c8 mm/slub.c:4339 kmalloc_noprof include/linux/slab.h:909 [inline] sk_prot_alloc+0xc4/0x1f0 net/core/sock.c:2198 sk_alloc+0x44/0x3ac net/core/sock.c:2254 bt_sock_alloc+0x4c/0x300 net/bluetooth/af_bluetooth.c:148 hci_sock_create+0xa8/0x194 net/bluetooth/hci_sock.c:2202 bt_sock_create+0x14c/0x24c net/bluetooth/af_bluetooth.c:132 __sock_create+0x43c/0x91c net/socket.c:1541 sock_create net/socket.c:1599 [inline] __sys_socket_create net/socket.c:1636 [inline] __sys_socket+0xd4/0x1c0 net/socket.c:1683 __do_sys_socket net/socket.c:1697 [inline] __se_sys_socket net/socket.c:1695 [inline] __arm64_sys_socket+0x7c/0x94 net/socket.c:1695 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Freed by task 6607: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_free_info+0x58/0x70 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x68/0x88 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [en l\u00ednea ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.1", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "C55A712F-B599-4389-8F6D-CBC27CAB8BA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "4FFA54AA-CDFE-4591-BD07-72813D0948F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*", + "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4e83f2dbb2bf677e614109df24426c4dded472d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6fe26f694c824b8a4dbf50c635bee1302e3f099c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bdd56875c6926d8009914f427df71797693e90d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7882db79135c829a922daf3571f33ea1e056ae3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38121.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38121.json index 7a077d2b3d5..0af438253d7 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38121.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38121.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38121", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:26.170", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:23.777", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: iwlwifi: mld: evitar p\u00e1nico en caso de fallo de inicializaci\u00f3n. En caso de un error durante la inicializaci\u00f3n, se establecer\u00e1 in_hw_restart, pero nunca se borrar\u00e1. En su lugar, volveremos a intentar la inicializaci\u00f3n y luego actuaremos como si estuvi\u00e9ramos en un reinicio cuando en realidad no lo estamos. Esto provoca (entre otras cosas) una desreferencia de puntero NULL al cancelar rx_omi::finished_work, que ni siquiera se inicializ\u00f3, porque cre\u00edamos que est\u00e1bamos en hw_restart. Establezca in_hw_restart en verdadero solo si el firmware se est\u00e1 ejecutando; entonces, sabremos que el firmware se carg\u00f3 correctamente y no entraremos en el bucle de reintentos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "59623E70-FBCF-4F5B-A3CE-07A4482CED29" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/960c7e6d388034d219dafffa6da0a5c2ccd5ff30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a26ec8e16958b6dd37dac9daf5fb6978fe0cb0b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38123.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38123.json index d0dc8f96b18..1d30c1a566b 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38123.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38123.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38123", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:26.427", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:18.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: wwan: t7xx: Soluci\u00f3n del problema de sondeo de napi rx. Cuando el controlador gestiona las solicitudes de sondeo de napi rx, es posible que la l\u00f3gica dellink activada por la operaci\u00f3n de desconexi\u00f3n en el plano de usuario haya liberado netdev. Sin embargo, en la l\u00f3gica de procesamiento de skb en el sondeo, se sigue utilizando un netdev no v\u00e1lido, lo que provoca un p\u00e1nico. ERROR: desreferencia de puntero nulo del kernel, direcci\u00f3n: 0000000000000f1 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:dev_gro_receive+0x3a/0x620 [...] Call Trace: ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x4f/0xa0 ? asm_exc_page_fault+0x22/0x30 ? __pfx_t7xx_ccmni_recv_skb+0x10/0x10 [mtk_t7xx (HASH:1400 7)] ? dev_gro_receive+0x3a/0x620 napi_gro_receive+0xad/0x170 t7xx_ccmni_recv_skb+0x48/0x70 [mtk_t7xx (HASH:1400 7)] t7xx_dpmaif_napi_rx_poll+0x590/0x800 [mtk_t7xx (HASH:1400 7)] net_rx_action+0x103/0x470 irq_exit_rcu+0x13a/0x310 sysvec_apic_timer_interrupt+0x56/0x90 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "304E3F01-7D7A-4908-994E-7F95C5C00B06" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "4FFA54AA-CDFE-4591-BD07-72813D0948F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/66542e9430c625f878a5b5dc0fe41e3458d614bf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc89f457d9133a558d4e8ef26dc20843c2d12073", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e2df04e69c3f10b412f54be036dd0ed3b14756cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38125.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38125.json index 51c7ab4472e..c0d5a5bc866 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38125.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38125.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38125", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:26.680", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:33:13.663", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: stmmac: aseg\u00farese de que ptp_rate no sea 0 antes de configurar EST Si el ptp_rate registrado anteriormente en el controlador resulta ser 0, este valor falso se propagar\u00e1 hasta la configuraci\u00f3n de EST, donde activar\u00e1 una divisi\u00f3n por 0. Evite esta divisi\u00f3n por 0 agregando el c\u00f3digo de verificaci\u00f3n y error correspondiente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "C104E955-79ED-4ADE-86C6-5952D241853C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/451ee661d0f6272017fa012f99617101aa8ddf2c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cbefe2ffa7784525ec5d008ba87c7add19ec631a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5e3bfdba0dc419499b801937128957f77503761", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38127.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38127.json index e7b7a7133dd..e978b2b08a1 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38127.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38127.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38127", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:26.923", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:32:54.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: correcci\u00f3n del manejo de errores del programador de Tx en la devoluci\u00f3n de llamada XDP. Al cargar el programa XDP, la devoluci\u00f3n de llamada XDP a\u00f1ade nuevas colas de Tx. Esto significa que la devoluci\u00f3n de llamada debe actualizar el programador de Tx con el nuevo n\u00famero de cola. En caso de fallo del programador de Tx, la devoluci\u00f3n de llamada XDP tambi\u00e9n deber\u00eda fallar y revertir cualquier cambio realizado previamente para la preparaci\u00f3n de XDP. La implementaci\u00f3n anterior presentaba un error que imped\u00eda revertir todos los cambios realizados por la devoluci\u00f3n de llamada XDP. Esto provoc\u00f3 el bloqueo con el siguiente seguimiento de llamada: [ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice] [...] [ +0.002715] Call Trace: [ +0.002452] [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] [ +0.002098] [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690. Para solucionar este problema, realice la desasignaci\u00f3n de colas XDP de q_vectors y restablezca el puntero de anillos XDP a NULL despu\u00e9s de liberar todas esas colas. Adem\u00e1s, a\u00f1ada una salida inmediata de la devoluci\u00f3n de llamada XDP en caso de un fallo en la preparaci\u00f3n del anillo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "6.6.94", + "matchCriteriaId": "9698FB8D-81AC-452A-A7BC-FEAF8047C4C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "4FFA54AA-CDFE-4591-BD07-72813D0948F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0153f36041b8e52019ebfa8629c13bf8f9b0a951", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0e061abaad1498c5b76c10c594d4359ceb6b9145", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1d3c5d0dec6797eca3a861dab0816fa9505d9c3e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/276849954d7cbe6eec827b21fe2df43f9bf07011", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38128.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38128.json index b098b50a095..b4d8cfd484f 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38128.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38128.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38128", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:27.043", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:31:37.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: MGMT: rechazar comandos HCI_CMD_SYNC malformados En 'mgmt_hci_cmd_sync()', verifique si el tama\u00f1o de los par\u00e1metros pasados en 'struct mgmt_cp_hci_cmd_sync' coincide con el tama\u00f1o total de los datos (es decir, 'sizeof(struct mgmt_cp_hci_cmd_sync)' m\u00e1s los bytes finales). De lo contrario, un 'params_len' grande y no v\u00e1lido har\u00e1 que 'hci_cmd_sync_alloc()' haga 'skb_put_data()' desde un \u00e1rea m\u00e1s all\u00e1 de la que realmente se pas\u00f3 a 'mgmt_hci_cmd_sync()'." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/03f1700b9b4d4f2fed3165370f3c23db76553178", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9eeafd16d76a7642d12b3442a26c15cd345e12f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38129.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38129.json index 85349db69b0..bb51cfd807f 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38129.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38129.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38129", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:27.170", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:24:30.710", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: page_pool: Fix use-after-free en page_pool_recycle_in_ring syzbot inform\u00f3 un uaf en page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free en lock_release+0x151/0xa30 kernel/locking/lockdep.c:5862 Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff8880286045a0 por la tarea syz.0.284/6943 CPU: 0 UID: 0 PID: 6943 Comm: syz.0.284 No contaminado 6.13.0-rc3-syzkaller-gdfa94ce54f41 #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 13/09/2024 Rastreo de llamadas: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x169/0x550 mm/kasan/report.c:489 kasan_report+0x143/0x180 mm/kasan/report.c:602 lock_release+0x151/0xa30 kernel/locking/lockdep.c:5862 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:165 [inline] _raw_spin_unlock_bh+0x1b/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_produce_bh include/linux/ptr_ring.h:164 [inline] page_pool_recycle_in_ring net/core/page_pool.c:707 [inline] page_pool_put_unrefed_netmem+0x748/0xb00 net/core/page_pool.c:826 page_pool_put_netmem include/net/page_pool/helpers.h:323 [inline] page_pool_put_full_netmem include/net/page_pool/helpers.h:353 [inline] napi_pp_put_page+0x149/0x2b0 net/core/skbuff.c:1036 skb_pp_recycle net/core/skbuff.c:1047 [inline] skb_free_head net/core/skbuff.c:1094 [inline] skb_release_data+0x6c4/0x8a0 net/core/skbuff.c:1125 skb_release_all net/core/skbuff.c:1190 [inline] __kfree_skb net/core/skbuff.c:1204 [inline] sk_skb_reason_drop+0x1c9/0x380 net/core/skbuff.c:1242 kfree_skb_reason include/linux/skbuff.h:1263 [inline] __skb_queue_purge_reason include/linux/skbuff.h:3343 [inline] root cause is: page_pool_recycle_in_ring ptr_ring_produce spin_lock(&r->producer_lock); WRITE_ONCE(r->queue[r->producer++], ptr) //recycle last page to pool page_pool_release page_pool_scrub page_pool_empty_ring ptr_ring_consume page_pool_return_page //release all page __page_pool_destroy free_percpu(pool->recycle_stats); free(pool) //free spin_unlock(&r->producer_lock); //pool->ring uaf read recycle_stat_inc(pool, ring); page_pool puede estar libre mientras el grupo de p\u00e1ginas recicle la \u00faltima p\u00e1gina del anillo. Se ha a\u00f1adido una barrera de bloqueo del productor a page_pool_release para evitar que el grupo de p\u00e1ginas est\u00e9 libre antes de que se hayan reciclado todas las p\u00e1ginas. recycle_stat_inc() est\u00e1 vac\u00edo cuando CONFIG_PAGE_POOL_STATS no est\u00e1 habilitado, lo que activar\u00e1 la advertencia de compilaci\u00f3n Wempty-body. Se ha a\u00f1adido una definici\u00f3n para la macro de estad\u00edsticas del grupo para corregir la advertencia." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.18", + "versionEndExcluding": "6.12.34", + "matchCriteriaId": "D52CF84C-B143-4A91-B892-0DE244D504A7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "0541C761-BD5E-4C1A-8432-83B375D7EB92" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/271683bb2cf32e5126c592b5d5e6a756fa374fd9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4ab8c0f8905c9c4d05e7f437e65a9a365573ff02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e869a85acc2e60dc554579b910826a4919d8cd98", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-381xx/CVE-2025-38130.json b/CVE-2025/CVE-2025-381xx/CVE-2025-38130.json index fa1f17b7f47..dd2be1778a0 100644 --- a/CVE-2025/CVE-2025-381xx/CVE-2025-38130.json +++ b/CVE-2025/CVE-2025-381xx/CVE-2025-38130.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38130", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-03T09:15:27.303", - "lastModified": "2025-07-03T15:13:53.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:22:16.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/connector: solo se llama al auxiliar de audio HDMI plugged cb si no es nulo. Al eliminar el controlador, sound/soc/codecs/hdmi-codec.c llama a plugged_cb con NULL como funci\u00f3n de devoluci\u00f3n de llamada y codec_dev, como se observa en su funci\u00f3n hdmi_remove. El auxiliar de audio HDMI intenta entonces llamar a dicho puntero de funci\u00f3n nulo, pero produce un error. Para solucionar esto, ejecute la devoluci\u00f3n de llamada solo si fn no es nulo. Esto significa que los miembros .plugged_cb y .plugged_cb_dev se borran correctamente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.15.3", + "matchCriteriaId": "59623E70-FBCF-4F5B-A3CE-07A4482CED29" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/933f3eab1d489af8d734bff855b10d29dd5968a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be9b3f9a54101c19226c25ba7163d291183777a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48986.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48986.json index 78fc241355e..e8490f1fb77 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48986.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48986.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48986", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:22.407", - "lastModified": "2025-11-20T20:16:22.407", + "lastModified": "2025-11-20T22:15:57.717", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3398283", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3398283", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48987.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48987.json index 1f2faf34722..7bcd61b7338 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48987.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48987.json @@ -2,7 +2,7 @@ "id": "CVE-2025-48987", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:22.550", - "lastModified": "2025-11-20T20:16:22.550", + "lastModified": "2025-11-20T22:15:57.840", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3399191", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3399191", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-516xx/CVE-2025-51661.json b/CVE-2025/CVE-2025-516xx/CVE-2025-51661.json index 71ccc81de27..426f33a6f88 100644 --- a/CVE-2025/CVE-2025-516xx/CVE-2025-51661.json +++ b/CVE-2025/CVE-2025-516xx/CVE-2025-51661.json @@ -2,7 +2,7 @@ "id": "CVE-2025-51661", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-19T20:15:52.867", - "lastModified": "2025-11-19T20:15:52.867", + "lastModified": "2025-11-20T21:16:05.287", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.save_file method in core/storage.py uses filenames from user input without validation to construct save_path and save files. This allows remote attackers to perform arbitrary file writes outside the intended directory by sending crafted POST requests with malicious traversal sequences to /share/file/ upload endpoint, which does not require any authorization." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-24" + } + ] + } + ], "references": [ { "url": "https://github.com/vastsa/FileCodeBox", diff --git a/CVE-2025/CVE-2025-516xx/CVE-2025-51663.json b/CVE-2025/CVE-2025-516xx/CVE-2025-51663.json index 5a4d339be60..cb398adbff2 100644 --- a/CVE-2025/CVE-2025-516xx/CVE-2025-51663.json +++ b/CVE-2025/CVE-2025-516xx/CVE-2025-51663.json @@ -2,7 +2,7 @@ "id": "CVE-2025-51663", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-19T20:15:53.203", - "lastModified": "2025-11-19T20:15:53.203", + "lastModified": "2025-11-20T22:15:58.280", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-305" + } + ] + } + ], "references": [ { "url": "https://github.com/vastsa/FileCodeBox", diff --git a/CVE-2025/CVE-2025-524xx/CVE-2025-52410.json b/CVE-2025/CVE-2025-524xx/CVE-2025-52410.json index b06a46e899d..479d645c21e 100644 --- a/CVE-2025/CVE-2025-524xx/CVE-2025-52410.json +++ b/CVE-2025/CVE-2025-524xx/CVE-2025-52410.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52410", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T17:15:50.760", - "lastModified": "2025-11-20T17:15:50.760", + "lastModified": "2025-11-20T22:15:58.457", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], "references": [ { "url": "https://github.com/mathurvishal/Institute-of-Current-Students---PHP-Project/issues/2", diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52666.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52666.json index 3d7f8001da5..1312637ad3a 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52666.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52666.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52666", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:22.687", - "lastModified": "2025-11-20T20:16:22.687", + "lastModified": "2025-11-20T22:15:58.647", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-134" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3399218", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3399218", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52668.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52668.json index 4cf47dbde66..4e66f3bb51e 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52668.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52668.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52668", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:22.987", - "lastModified": "2025-11-20T20:16:22.987", + "lastModified": "2025-11-20T22:15:58.767", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3400506", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3400506", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52669.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52669.json index c13c327a788..2e9850b1c16 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52669.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52669.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52669", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:23.140", - "lastModified": "2025-11-20T20:16:23.140", + "lastModified": "2025-11-20T22:15:58.890", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3401464", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3401464", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-526xx/CVE-2025-52671.json b/CVE-2025/CVE-2025-526xx/CVE-2025-52671.json index bdf71f62ae2..f7fce2e9e08 100644 --- a/CVE-2025/CVE-2025-526xx/CVE-2025-52671.json +++ b/CVE-2025/CVE-2025-526xx/CVE-2025-52671.json @@ -2,7 +2,7 @@ "id": "CVE-2025-52671", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:23.410", - "lastModified": "2025-11-20T20:16:23.410", + "lastModified": "2025-11-20T22:15:59.010", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3403450", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3403450", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json b/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json index 09443c9b75c..b1da49126e4 100644 --- a/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json +++ b/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5318", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-24T14:15:30.523", - "lastModified": "2025-11-17T16:15:48.423", + "lastModified": "2025-11-20T22:16:00.117", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -206,6 +206,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:21013", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21329", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-5318", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-551xx/CVE-2025-55123.json b/CVE-2025/CVE-2025-551xx/CVE-2025-55123.json index cbe768b7bce..4617a860676 100644 --- a/CVE-2025/CVE-2025-551xx/CVE-2025-55123.json +++ b/CVE-2025/CVE-2025-551xx/CVE-2025-55123.json @@ -2,7 +2,7 @@ "id": "CVE-2025-55123", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:23.547", - "lastModified": "2025-11-20T20:16:23.547", + "lastModified": "2025-11-20T22:15:59.130", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3404968", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3404968", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-551xx/CVE-2025-55124.json b/CVE-2025/CVE-2025-551xx/CVE-2025-55124.json index 67bd8a35eb0..671cf26f5ef 100644 --- a/CVE-2025/CVE-2025-551xx/CVE-2025-55124.json +++ b/CVE-2025/CVE-2025-551xx/CVE-2025-55124.json @@ -2,7 +2,7 @@ "id": "CVE-2025-55124", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T20:16:23.677", - "lastModified": "2025-11-20T20:16:23.677", + "lastModified": "2025-11-20T22:15:59.250", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,10 +35,26 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3403727", "source": "support@hackerone.com" + }, + { + "url": "https://hackerone.com/reports/3403727", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-551xx/CVE-2025-55127.json b/CVE-2025/CVE-2025-551xx/CVE-2025-55127.json index 798e21feec8..e9cf464879a 100644 --- a/CVE-2025/CVE-2025-551xx/CVE-2025-55127.json +++ b/CVE-2025/CVE-2025-551xx/CVE-2025-55127.json @@ -2,7 +2,7 @@ "id": "CVE-2025-55127", "sourceIdentifier": "support@hackerone.com", "published": "2025-11-20T19:16:19.027", - "lastModified": "2025-11-20T19:16:19.027", + "lastModified": "2025-11-20T22:15:59.370", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-156" + } + ] + } + ], "references": [ { "url": "https://hackerone.com/reports/3413764", diff --git a/CVE-2025/CVE-2025-590xx/CVE-2025-59089.json b/CVE-2025/CVE-2025-590xx/CVE-2025-59089.json index 1bf5db5fe5b..6e0eedd8063 100644 --- a/CVE-2025/CVE-2025-590xx/CVE-2025-59089.json +++ b/CVE-2025/CVE-2025-590xx/CVE-2025-59089.json @@ -2,7 +2,7 @@ "id": "CVE-2025-59089", "sourceIdentifier": "secalert@redhat.com", "published": "2025-11-12T17:15:38.360", - "lastModified": "2025-11-19T09:15:48.630", + "lastModified": "2025-11-20T22:15:59.597", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,6 +76,26 @@ "url": "https://access.redhat.com/errata/RHSA-2025:21748", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21806", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21818", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21819", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21820", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21821", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-59089", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json index bbe27bb4757..2dc2ebb859d 100644 --- a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json +++ b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5914", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-09T20:15:26.123", - "lastModified": "2025-10-30T06:15:44.920", + "lastModified": "2025-11-20T21:16:05.697", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -222,6 +222,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19046", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-5914", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60738.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60738.json index cd889f130f2..6839968fcb8 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60738.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60738.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60738", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T16:15:58.927", - "lastModified": "2025-11-20T16:15:58.927", + "lastModified": "2025-11-20T22:16:00.677", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], "references": [ { "url": "https://github.com/iSee857/ilevia-EVE-X1-Server", diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60794.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60794.json index 2b9b6f3acd5..078dc6df334 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60794.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60794.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60794", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T15:17:37.937", - "lastModified": "2025-11-20T15:17:37.937", + "lastModified": "2025-11-20T22:16:00.860", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access techniques, potentially leading to session hijacking." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-316" + } + ] + } + ], "references": [ { "url": "https://github.com/perfood/couch-auth", diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60797.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60797.json index 8150b17aeb5..54f2ba992e4 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60797.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60797.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60797", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T15:17:38.250", - "lastModified": "2025-11-20T15:17:38.250", + "lastModified": "2025-11-20T22:16:01.047", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST['query'] parameter without any sanitization or parameterization via $data->conn->Execute($_REQUEST['query']). An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or privilege escalation." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], "references": [ { "url": "https://github.com/phppgadmin/phppgadmin/blob/master/dataexport.php#L118", diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60798.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60798.json index d27998467d8..4686497d97c 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60798.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60798.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60798", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T15:17:38.393", - "lastModified": "2025-11-20T15:17:38.393", + "lastModified": "2025-11-20T22:16:01.230", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['query'] directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute arbitrary SQL commands through malicious query manipulation, potentially leading to complete database compromise." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], "references": [ { "url": "https://github.com/phppgadmin/phppgadmin/blob/master/display.php#L396", diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60799.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60799.json index 2317193b958..91c19841ed0 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60799.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60799.json @@ -2,7 +2,7 @@ "id": "CVE-2025-60799", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T15:17:38.533", - "lastModified": "2025-11-20T15:17:38.533", + "lastModified": "2025-11-20T22:16:01.420", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryid') without proper validation or access control checks. Attackers can exploit this to store arbitrary SQL queries in $_SESSION['sqlquery'] by manipulating these parameters, potentially leading to session poisoning, stored cross-site scripting, or unauthorized access to sensitive session data." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://github.com/phppgadmin/phppgadmin/blob/master/sql.php#L68-L76", diff --git a/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json b/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json index 88521295973..ddae5edd367 100644 --- a/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json +++ b/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6020", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-17T13:15:21.660", - "lastModified": "2025-11-11T16:15:40.430", + "lastModified": "2025-11-20T21:16:06.943", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -140,6 +140,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:20181", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:9526", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61138.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61138.json new file mode 100644 index 00000000000..41df0a9085e --- /dev/null +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61138.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-61138", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-20T22:16:01.610", + "lastModified": "2025-11-20T22:16:01.610", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/Israel0x00/8a81ec98162e9ca8e4a3a6c8b4ef4762", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json b/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json index 3a16b1ba794..0931c4e7592 100644 --- a/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json +++ b/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json @@ -2,8 +2,8 @@ "id": "CVE-2025-6171", "sourceIdentifier": "cve@gitlab.com", "published": "2025-11-15T08:15:46.060", - "lastModified": "2025-11-18T14:06:55.963", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-20T21:09:38.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -47,18 +67,82 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "13.2.0", + "versionEndExcluding": "18.3.6", + "matchCriteriaId": "5D9621B6-120A-4697-95AF-A79BE88C0971" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "13.2.0", + "versionEndExcluding": "18.3.6", + "matchCriteriaId": "A5F24C1A-3D89-40FA-806E-A48A941D3424" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "18.4.0", + "versionEndExcluding": "18.4.4", + "matchCriteriaId": "36824F52-C9A0-4FB3-91F3-05593E3551E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.4.0", + "versionEndExcluding": "18.4.4", + "matchCriteriaId": "6D0A238D-1278-4D05-86F5-4C323E0CFE36" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "18.5.0", + "versionEndExcluding": "18.5.2", + "matchCriteriaId": "7E85D20B-EEE1-4CC9-B50A-4040972287D8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.5.0", + "versionEndExcluding": "18.5.2", + "matchCriteriaId": "B2A3A57F-C750-4C92-8C2B-C5FCF1D70F4F" + } + ] + } + ] + } + ], "references": [ { "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/549730", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://hackerone.com/reports/3183740", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-626xx/CVE-2025-62674.json b/CVE-2025/CVE-2025-626xx/CVE-2025-62674.json new file mode 100644 index 00000000000..862b1dcc404 --- /dev/null +++ b/CVE-2025/CVE-2025-626xx/CVE-2025-62674.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-62674", + "sourceIdentifier": "ics-cert@hq.dhs.gov", + "published": "2025-11-20T21:16:05.957", + "lastModified": "2025-11-20T21:16:05.957", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration information." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-02.json", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://icam365.net/en/aboutUs/", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02", + "source": "ics-cert@hq.dhs.gov" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63212.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63212.json index 6b0d753f07f..79c6ab51702 100644 --- a/CVE-2025/CVE-2025-632xx/CVE-2025-63212.json +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63212.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63212", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-19T20:15:53.380", - "lastModified": "2025-11-19T20:15:53.380", + "lastModified": "2025-11-20T21:16:06.173", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions without providing any credentials. This attack requires the legitimate user (admin) to have previously closed the browser window without logging out." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], "references": [ { "url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63212%20_GatesAir%20Flexiva-LX%20Series%20_%20Session%20Hijacking", diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63214.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63214.json index a5b677c7ad4..ff27ece0811 100644 --- a/CVE-2025/CVE-2025-632xx/CVE-2025-63214.json +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63214.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63214", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-19T20:15:53.677", - "lastModified": "2025-11-19T20:15:53.677", + "lastModified": "2025-11-20T22:16:02.060", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://bridgetech.tv/", diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json index 53cbda1364f..3d79f9c3588 100644 --- a/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63512.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63512", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T17:16:09.817", - "lastModified": "2025-11-19T19:14:59.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:58:59.003", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:kishan0725:hospital_management_system:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "826AA929-9CA8-47CB-AB83-CD0007357313" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_SQL2.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json index 76d0fdab594..c2a1b707814 100644 --- a/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63513.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63513", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T17:16:10.360", - "lastModified": "2025-11-19T19:14:59.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:57:49.427", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,47 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:kishan0725:hospital_management_system:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "826AA929-9CA8-47CB-AB83-CD0007357313" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_IDOR.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/kishan0725/Hospital-Management-System/issues/55", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://github.com/kishan0725/Hospital-Management-System/issues/55", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json b/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json index a507d0f6bdc..8545843d09b 100644 --- a/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json +++ b/CVE-2025/CVE-2025-635xx/CVE-2025-63514.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63514", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T18:16:13.280", - "lastModified": "2025-11-19T19:14:59.327", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:54:40.943", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:kishan0725:hospital_management_system:-:*:*:*:*:*:*:*", + "matchCriteriaId": "264AD27B-FAF6-4BBA-ABD9-06E683C89823" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_Stored_XSS.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/kishan0725/Hospital-Management-System/issues/54", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63685.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63685.json new file mode 100644 index 00000000000..a3b63b93e0d --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63685.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-63685", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-20T21:16:06.370", + "lastModified": "2025-11-20T22:16:02.247", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validate the path or signature of [regsvr32.exe] it loads. An attacker can place a crafted malicious DLL in the application's startup directory, which will be loaded and executed when the user launches the program." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-491" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/QIU-DIE/CVE/issues/5", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63700.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63700.json index 44b1a8dce12..33855f41ed9 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63700.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63700.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63700", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T19:16:21.367", - "lastModified": "2025-11-20T19:16:21.367", + "lastModified": "2025-11-20T22:16:02.437", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An issue was discovered in Clerk-js 5.88.0 allowing attackers to bypass the OAuth authentication flow by manipulating the request at the OTP verification stage." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-290" + } + ] + } + ], "references": [ { "url": "https://clerk.com", diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63807.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63807.json new file mode 100644 index 00000000000..1addcf5b165 --- /dev/null +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63807.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-63807", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-20T21:16:06.617", + "lastModified": "2025-11-20T22:16:02.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13). A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without authentication. Successful exploitation may result in account takeover via password reset or other authentication bypass methods." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1390" + } + ] + } + ], + "references": [ + { + "url": "https://gist.github.com/Rycarl-Furry/3e93c6f0d48a29518adf341e0fc7e2dd", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63848.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63848.json index 9841fa53891..260d28439f3 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63848.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63848.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63848", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T17:15:52.733", - "lastModified": "2025-11-20T17:15:52.733", + "lastModified": "2025-11-20T22:16:02.850", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/SWI-Prolog", diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63888.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63888.json index c6f7d973455..0352eaf7d49 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63888.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63888.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63888", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T18:15:50.977", - "lastModified": "2025-11-20T18:15:50.977", + "lastModified": "2025-11-20T22:16:03.327", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The read function in file thinkphp\\library\\think\\template\\driver\\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], "references": [ { "url": "https://gist.github.com/Master-0-0/0bf54cbb335b586b42b0db0db804e7aa", diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63889.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63889.json index ce000e9ebc7..0d711ed3621 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63889.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63889.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63889", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T18:15:51.110", - "lastModified": "2025-11-20T18:15:51.110", + "lastModified": "2025-11-20T22:16:03.520", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The fetch function in file thinkphp\\library\\think\\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://gist.github.com/Master-0-0/dd63209602f04267f1a27a75a064df26", diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63892.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63892.json index 3cfce76f45d..f070d57e264 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63892.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63892.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63892", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-18T15:16:36.367", - "lastModified": "2025-11-19T19:14:59.327", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-20T21:51:15.127", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:remyandrade:student_grades_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "3598B8C3-795C-4F26-9376-73D791CD287B" + } + ] + } + ] + } + ], "references": [ { "url": "http://sourcecodester.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "http://student.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Not Applicable" + ] }, { "url": "https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-63892.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-640xx/CVE-2025-64027.json b/CVE-2025/CVE-2025-640xx/CVE-2025-64027.json index 62716212017..2f397a50326 100644 --- a/CVE-2025/CVE-2025-640xx/CVE-2025-64027.json +++ b/CVE-2025/CVE-2025-640xx/CVE-2025-64027.json @@ -2,7 +2,7 @@ "id": "CVE-2025-64027", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-20T17:15:52.873", - "lastModified": "2025-11-20T17:15:52.873", + "lastModified": "2025-11-20T22:16:03.687", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface. An attacker can intercept and modify the POST /livewire/update request to inject arbitrary HTML or JavaScript into the progress_message. Because the server accepts the modified input without sanitization and reflects it back to the user, arbitrary JavaScript executes in the browser of any authenticated admin who views the import page." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/cybercrewinc/CVE-2025-64027/", diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64446.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64446.json index 6c77c9537c3..bc46cc0b809 100644 --- a/CVE-2025/CVE-2025-644xx/CVE-2025-64446.json +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64446.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64446", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-11-14T16:15:58.567", - "lastModified": "2025-11-19T18:35:00.540", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-20T22:16:03.870", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -106,21 +106,6 @@ "Vendor Advisory" ] }, - { - "url": "https://github.com/nu11secur1ty/CVE-mitre/tree/main/2025/CVE-2025-64446/8.0.0", - "source": "af854a3a-2127-422b-91ae-364da2661108", - "tags": [ - "Exploit", - "Third Party Advisory" - ] - }, - { - "url": "https://www.patreon.com/posts/cve-2025-64446-8-143791801", - "source": "af854a3a-2127-422b-91ae-364da2661108", - "tags": [ - "Exploit" - ] - }, { "url": "https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", diff --git a/CVE-2025/CVE-2025-647xx/CVE-2025-64753.json b/CVE-2025/CVE-2025-647xx/CVE-2025-64753.json index 281bc2b959d..6566867434e 100644 --- a/CVE-2025/CVE-2025-647xx/CVE-2025-64753.json +++ b/CVE-2025/CVE-2025-647xx/CVE-2025-64753.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64753", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-13T22:15:52.750", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:11:25.813", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -47,14 +67,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:getgrist:grist-core:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.7.7", + "matchCriteriaId": "B4BAA1F5-E447-47A3-9824-ECA85B6B42B2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/gristlabs/grist-core/releases/tag/v1.7.7", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/gristlabs/grist-core/security/advisories/GHSA-3v78-cw58-v685", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-647xx/CVE-2025-64770.json b/CVE-2025/CVE-2025-647xx/CVE-2025-64770.json new file mode 100644 index 00000000000..36261ebebc1 --- /dev/null +++ b/CVE-2025/CVE-2025-647xx/CVE-2025-64770.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-64770", + "sourceIdentifier": "ics-cert@hq.dhs.gov", + "published": "2025-11-20T21:16:06.753", + "lastModified": "2025-11-20T21:16:06.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration information." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "ics-cert@hq.dhs.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-02.json", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://icam365.net/en/aboutUs/", + "source": "ics-cert@hq.dhs.gov" + }, + { + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02", + "source": "ics-cert@hq.dhs.gov" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json b/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json index 01b5dba9fbc..f02d8ef0bc9 100644 --- a/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json +++ b/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json @@ -2,8 +2,8 @@ "id": "CVE-2025-6945", "sourceIdentifier": "cve@gitlab.com", "published": "2025-11-15T08:15:46.280", - "lastModified": "2025-11-18T14:06:55.963", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-20T21:07:40.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,61 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "17.9.0", + "versionEndExcluding": "18.3.6", + "matchCriteriaId": "F7F1402F-B9C8-4697-932D-AC37CE78F39B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.4.0", + "versionEndExcluding": "18.4.4", + "matchCriteriaId": "6D0A238D-1278-4D05-86F5-4C323E0CFE36" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.5.0", + "versionEndExcluding": "18.5.2", + "matchCriteriaId": "B2A3A57F-C750-4C92-8C2B-C5FCF1D70F4F" + } + ] + } + ] + } + ], "references": [ { "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/552611", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://hackerone.com/reports/3173458", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json b/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json index 2f3a792a9ad..72f686d9d42 100644 --- a/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json +++ b/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7000", "sourceIdentifier": "cve@gitlab.com", "published": "2025-11-15T08:15:46.487", - "lastModified": "2025-11-18T14:06:55.963", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-20T21:03:40.703", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,82 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "17.6.0", + "versionEndExcluding": "18.3.6", + "matchCriteriaId": "4398F785-F443-44A2-9191-768F48B10579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "17.6.0", + "versionEndExcluding": "18.3.6", + "matchCriteriaId": "1272563C-FE27-48BE-9666-065197613AE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "18.4.0", + "versionEndExcluding": "18.4.4", + "matchCriteriaId": "36824F52-C9A0-4FB3-91F3-05593E3551E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.4.0", + "versionEndExcluding": "18.4.4", + "matchCriteriaId": "6D0A238D-1278-4D05-86F5-4C323E0CFE36" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", + "versionStartIncluding": "18.5.0", + "versionEndExcluding": "18.5.2", + "matchCriteriaId": "7E85D20B-EEE1-4CC9-B50A-4040972287D8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "18.5.0", + "versionEndExcluding": "18.5.2", + "matchCriteriaId": "B2A3A57F-C750-4C92-8C2B-C5FCF1D70F4F" + } + ] + } + ] + } + ], "references": [ { "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/553129", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://hackerone.com/reports/3214025", - "source": "cve@gitlab.com" + "source": "cve@gitlab.com", + "tags": [ + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-71xx/CVE-2025-7195.json b/CVE-2025/CVE-2025-71xx/CVE-2025-7195.json index 145f34f0003..29b1f876200 100644 --- a/CVE-2025/CVE-2025-71xx/CVE-2025-7195.json +++ b/CVE-2025/CVE-2025-71xx/CVE-2025-7195.json @@ -2,7 +2,7 @@ "id": "CVE-2025-7195", "sourceIdentifier": "secalert@redhat.com", "published": "2025-08-07T19:15:29.367", - "lastModified": "2025-11-13T23:15:50.197", + "lastModified": "2025-11-20T21:16:07.237", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -68,6 +68,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:21368", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-7195", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-74xx/CVE-2025-7425.json b/CVE-2025/CVE-2025-74xx/CVE-2025-7425.json index 79ec622beb8..4a04b9204c7 100644 --- a/CVE-2025/CVE-2025-74xx/CVE-2025-7425.json +++ b/CVE-2025/CVE-2025-74xx/CVE-2025-7425.json @@ -2,7 +2,7 @@ "id": "CVE-2025-7425", "sourceIdentifier": "secalert@redhat.com", "published": "2025-07-10T14:15:27.877", - "lastModified": "2025-11-04T22:16:43.810", + "lastModified": "2025-11-20T21:16:07.453", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -148,6 +148,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:18219", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-7425", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-78xx/CVE-2025-7895.json b/CVE-2025/CVE-2025-78xx/CVE-2025-7895.json index b1192c9537c..acecbac3523 100644 --- a/CVE-2025/CVE-2025-78xx/CVE-2025-7895.json +++ b/CVE-2025/CVE-2025-78xx/CVE-2025-7895.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7895", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-20T15:15:24.670", - "lastModified": "2025-07-22T13:06:07.260", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:25:14.680", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,20 +142,60 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.2.6", + "matchCriteriaId": "996FCD58-2276-45A5-A7DA-B7E3BB897B4E" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.317010", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317010", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.608940", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-78xx/CVE-2025-7896.json b/CVE-2025/CVE-2025-78xx/CVE-2025-7896.json index b49725b22f7..5fb9cbc2830 100644 --- a/CVE-2025/CVE-2025-78xx/CVE-2025-7896.json +++ b/CVE-2025/CVE-2025-78xx/CVE-2025-7896.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7896", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-20T15:15:24.997", - "lastModified": "2025-07-22T13:06:07.260", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:21:59.963", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -120,22 +140,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.2.6", + "matchCriteriaId": "996FCD58-2276-45A5-A7DA-B7E3BB897B4E" + } + ] + } + ] + } + ], "references": [ { "url": "https://vuldb.com/?ctiid.317011", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317011", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.608941", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.609041", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-78xx/CVE-2025-7897.json b/CVE-2025/CVE-2025-78xx/CVE-2025-7897.json index 7c37c4835b6..ef8c2f09a94 100644 --- a/CVE-2025/CVE-2025-78xx/CVE-2025-7897.json +++ b/CVE-2025/CVE-2025-78xx/CVE-2025-7897.json @@ -2,8 +2,8 @@ "id": "CVE-2025-7897", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-20T15:15:25.227", - "lastModified": "2025-07-22T13:06:07.260", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-20T21:20:09.203", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,20 +142,60 @@ "value": "CWE-306" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.2.6", + "matchCriteriaId": "996FCD58-2276-45A5-A7DA-B7E3BB897B4E" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.317012", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.317012", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.609040", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-89xx/CVE-2025-8941.json b/CVE-2025/CVE-2025-89xx/CVE-2025-8941.json index 01255f148a0..d9ab3a620d9 100644 --- a/CVE-2025/CVE-2025-89xx/CVE-2025-8941.json +++ b/CVE-2025/CVE-2025-89xx/CVE-2025-8941.json @@ -2,7 +2,7 @@ "id": "CVE-2025-8941", "sourceIdentifier": "secalert@redhat.com", "published": "2025-08-13T15:15:41.873", - "lastModified": "2025-11-06T22:15:44.947", + "lastModified": "2025-11-20T21:16:08.110", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -116,6 +116,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:18219", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21885", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-8941", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index f05404ce42f..02ca838f4fb 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-20T21:00:11.012525+00:00 +2025-11-20T23:00:11.468537+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-20T20:59:13.137000+00:00 +2025-11-20T22:16:03.870000+00:00 ``` ### Last Data Feed Release @@ -33,60 +33,55 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318916 +318927 ``` ### CVEs added in the last Commit -Recently added CVEs: `16` +Recently added CVEs: `11` -- [CVE-2025-10571](CVE-2025/CVE-2025-105xx/CVE-2025-10571.json) (`2025-11-20T19:16:11.527`) -- [CVE-2025-35029](CVE-2025/CVE-2025-350xx/CVE-2025-35029.json) (`2025-11-20T20:16:22.187`) -- [CVE-2025-48986](CVE-2025/CVE-2025-489xx/CVE-2025-48986.json) (`2025-11-20T20:16:22.407`) -- [CVE-2025-48987](CVE-2025/CVE-2025-489xx/CVE-2025-48987.json) (`2025-11-20T20:16:22.550`) -- [CVE-2025-52666](CVE-2025/CVE-2025-526xx/CVE-2025-52666.json) (`2025-11-20T20:16:22.687`) -- [CVE-2025-52667](CVE-2025/CVE-2025-526xx/CVE-2025-52667.json) (`2025-11-20T20:16:22.830`) -- [CVE-2025-52668](CVE-2025/CVE-2025-526xx/CVE-2025-52668.json) (`2025-11-20T20:16:22.987`) -- [CVE-2025-52669](CVE-2025/CVE-2025-526xx/CVE-2025-52669.json) (`2025-11-20T20:16:23.140`) -- [CVE-2025-52670](CVE-2025/CVE-2025-526xx/CVE-2025-52670.json) (`2025-11-20T20:16:23.280`) -- [CVE-2025-52671](CVE-2025/CVE-2025-526xx/CVE-2025-52671.json) (`2025-11-20T20:16:23.410`) -- [CVE-2025-55123](CVE-2025/CVE-2025-551xx/CVE-2025-55123.json) (`2025-11-20T20:16:23.547`) -- [CVE-2025-55124](CVE-2025/CVE-2025-551xx/CVE-2025-55124.json) (`2025-11-20T20:16:23.677`) -- [CVE-2025-55126](CVE-2025/CVE-2025-551xx/CVE-2025-55126.json) (`2025-11-20T19:16:18.880`) -- [CVE-2025-55127](CVE-2025/CVE-2025-551xx/CVE-2025-55127.json) (`2025-11-20T19:16:19.027`) -- [CVE-2025-55128](CVE-2025/CVE-2025-551xx/CVE-2025-55128.json) (`2025-11-20T19:16:19.137`) -- [CVE-2025-63700](CVE-2025/CVE-2025-637xx/CVE-2025-63700.json) (`2025-11-20T19:16:21.367`) +- [CVE-2025-13087](CVE-2025/CVE-2025-130xx/CVE-2025-13087.json) (`2025-11-20T22:15:54.310`) +- [CVE-2025-25613](CVE-2025/CVE-2025-256xx/CVE-2025-25613.json) (`2025-11-20T21:16:02.310`) +- [CVE-2025-36153](CVE-2025/CVE-2025-361xx/CVE-2025-36153.json) (`2025-11-20T22:15:56.970`) +- [CVE-2025-36158](CVE-2025/CVE-2025-361xx/CVE-2025-36158.json) (`2025-11-20T22:15:57.153`) +- [CVE-2025-36159](CVE-2025/CVE-2025-361xx/CVE-2025-36159.json) (`2025-11-20T22:15:57.340`) +- [CVE-2025-36160](CVE-2025/CVE-2025-361xx/CVE-2025-36160.json) (`2025-11-20T22:15:57.530`) +- [CVE-2025-61138](CVE-2025/CVE-2025-611xx/CVE-2025-61138.json) (`2025-11-20T22:16:01.610`) +- [CVE-2025-62674](CVE-2025/CVE-2025-626xx/CVE-2025-62674.json) (`2025-11-20T21:16:05.957`) +- [CVE-2025-63685](CVE-2025/CVE-2025-636xx/CVE-2025-63685.json) (`2025-11-20T21:16:06.370`) +- [CVE-2025-63807](CVE-2025/CVE-2025-638xx/CVE-2025-63807.json) (`2025-11-20T21:16:06.617`) +- [CVE-2025-64770](CVE-2025/CVE-2025-647xx/CVE-2025-64770.json) (`2025-11-20T21:16:06.753`) ### CVEs modified in the last Commit -Recently modified CVEs: `63` +Recently modified CVEs: `104` -- [CVE-2025-38162](CVE-2025/CVE-2025-381xx/CVE-2025-38162.json) (`2025-11-20T19:44:12.210`) -- [CVE-2025-38164](CVE-2025/CVE-2025-381xx/CVE-2025-38164.json) (`2025-11-20T19:38:34.353`) -- [CVE-2025-38168](CVE-2025/CVE-2025-381xx/CVE-2025-38168.json) (`2025-11-20T19:29:30.023`) -- [CVE-2025-38169](CVE-2025/CVE-2025-381xx/CVE-2025-38169.json) (`2025-11-20T19:28:15.673`) -- [CVE-2025-38171](CVE-2025/CVE-2025-381xx/CVE-2025-38171.json) (`2025-11-20T19:24:31.590`) -- [CVE-2025-38172](CVE-2025/CVE-2025-381xx/CVE-2025-38172.json) (`2025-11-20T19:22:42.703`) -- [CVE-2025-38244](CVE-2025/CVE-2025-382xx/CVE-2025-38244.json) (`2025-11-20T20:13:41.240`) -- [CVE-2025-38246](CVE-2025/CVE-2025-382xx/CVE-2025-38246.json) (`2025-11-20T20:14:15.713`) -- [CVE-2025-38261](CVE-2025/CVE-2025-382xx/CVE-2025-38261.json) (`2025-11-20T20:14:50.460`) -- [CVE-2025-40601](CVE-2025/CVE-2025-406xx/CVE-2025-40601.json) (`2025-11-20T19:16:13.247`) -- [CVE-2025-40604](CVE-2025/CVE-2025-406xx/CVE-2025-40604.json) (`2025-11-20T19:16:13.447`) -- [CVE-2025-40605](CVE-2025/CVE-2025-406xx/CVE-2025-40605.json) (`2025-11-20T19:16:13.630`) -- [CVE-2025-52639](CVE-2025/CVE-2025-526xx/CVE-2025-52639.json) (`2025-11-20T19:03:16.257`) -- [CVE-2025-54320](CVE-2025/CVE-2025-543xx/CVE-2025-54320.json) (`2025-11-20T19:02:03.580`) -- [CVE-2025-54321](CVE-2025/CVE-2025-543xx/CVE-2025-54321.json) (`2025-11-20T19:00:58.973`) -- [CVE-2025-59512](CVE-2025/CVE-2025-595xx/CVE-2025-59512.json) (`2025-11-20T19:16:20.927`) -- [CVE-2025-61757](CVE-2025/CVE-2025-617xx/CVE-2025-61757.json) (`2025-11-20T19:16:21.107`) -- [CVE-2025-63693](CVE-2025/CVE-2025-636xx/CVE-2025-63693.json) (`2025-11-20T20:07:18.850`) -- [CVE-2025-63694](CVE-2025/CVE-2025-636xx/CVE-2025-63694.json) (`2025-11-20T19:16:32.317`) -- [CVE-2025-63695](CVE-2025/CVE-2025-636xx/CVE-2025-63695.json) (`2025-11-20T19:04:23.467`) -- [CVE-2025-63708](CVE-2025/CVE-2025-637xx/CVE-2025-63708.json) (`2025-11-20T20:27:23.200`) -- [CVE-2025-64456](CVE-2025/CVE-2025-644xx/CVE-2025-64456.json) (`2025-11-20T19:56:27.110`) -- [CVE-2025-64524](CVE-2025/CVE-2025-645xx/CVE-2025-64524.json) (`2025-11-20T19:16:21.510`) -- [CVE-2025-64681](CVE-2025/CVE-2025-646xx/CVE-2025-64681.json) (`2025-11-20T19:54:04.317`) -- [CVE-2025-64682](CVE-2025/CVE-2025-646xx/CVE-2025-64682.json) (`2025-11-20T19:53:25.727`) +- [CVE-2025-60797](CVE-2025/CVE-2025-607xx/CVE-2025-60797.json) (`2025-11-20T22:16:01.047`) +- [CVE-2025-60798](CVE-2025/CVE-2025-607xx/CVE-2025-60798.json) (`2025-11-20T22:16:01.230`) +- [CVE-2025-60799](CVE-2025/CVE-2025-607xx/CVE-2025-60799.json) (`2025-11-20T22:16:01.420`) +- [CVE-2025-6171](CVE-2025/CVE-2025-61xx/CVE-2025-6171.json) (`2025-11-20T21:09:38.063`) +- [CVE-2025-63212](CVE-2025/CVE-2025-632xx/CVE-2025-63212.json) (`2025-11-20T21:16:06.173`) +- [CVE-2025-63214](CVE-2025/CVE-2025-632xx/CVE-2025-63214.json) (`2025-11-20T22:16:02.060`) +- [CVE-2025-63512](CVE-2025/CVE-2025-635xx/CVE-2025-63512.json) (`2025-11-20T21:58:59.003`) +- [CVE-2025-63513](CVE-2025/CVE-2025-635xx/CVE-2025-63513.json) (`2025-11-20T21:57:49.427`) +- [CVE-2025-63514](CVE-2025/CVE-2025-635xx/CVE-2025-63514.json) (`2025-11-20T21:54:40.943`) +- [CVE-2025-63700](CVE-2025/CVE-2025-637xx/CVE-2025-63700.json) (`2025-11-20T22:16:02.437`) +- [CVE-2025-63848](CVE-2025/CVE-2025-638xx/CVE-2025-63848.json) (`2025-11-20T22:16:02.850`) +- [CVE-2025-63888](CVE-2025/CVE-2025-638xx/CVE-2025-63888.json) (`2025-11-20T22:16:03.327`) +- [CVE-2025-63889](CVE-2025/CVE-2025-638xx/CVE-2025-63889.json) (`2025-11-20T22:16:03.520`) +- [CVE-2025-63892](CVE-2025/CVE-2025-638xx/CVE-2025-63892.json) (`2025-11-20T21:51:15.127`) +- [CVE-2025-64027](CVE-2025/CVE-2025-640xx/CVE-2025-64027.json) (`2025-11-20T22:16:03.687`) +- [CVE-2025-64446](CVE-2025/CVE-2025-644xx/CVE-2025-64446.json) (`2025-11-20T22:16:03.870`) +- [CVE-2025-64753](CVE-2025/CVE-2025-647xx/CVE-2025-64753.json) (`2025-11-20T21:11:25.813`) +- [CVE-2025-6945](CVE-2025/CVE-2025-69xx/CVE-2025-6945.json) (`2025-11-20T21:07:40.250`) +- [CVE-2025-7000](CVE-2025/CVE-2025-70xx/CVE-2025-7000.json) (`2025-11-20T21:03:40.703`) +- [CVE-2025-7195](CVE-2025/CVE-2025-71xx/CVE-2025-7195.json) (`2025-11-20T21:16:07.237`) +- [CVE-2025-7425](CVE-2025/CVE-2025-74xx/CVE-2025-7425.json) (`2025-11-20T21:16:07.453`) +- [CVE-2025-7895](CVE-2025/CVE-2025-78xx/CVE-2025-7895.json) (`2025-11-20T21:25:14.680`) +- [CVE-2025-7896](CVE-2025/CVE-2025-78xx/CVE-2025-7896.json) (`2025-11-20T21:21:59.963`) +- [CVE-2025-7897](CVE-2025/CVE-2025-78xx/CVE-2025-7897.json) (`2025-11-20T21:20:09.203`) +- [CVE-2025-8941](CVE-2025/CVE-2025-89xx/CVE-2025-8941.json) (`2025-11-20T21:16:08.110`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 11a501381da..634c3bbc493 100644 --- a/_state.csv +++ b/_state.csv @@ -121696,7 +121696,7 @@ CVE-2018-25120,0,0,41e7fc4fde5f5cb665ee95f1985371c7438cac1de48828d4df8e4cf14ca36 CVE-2018-25121,0,0,3f409efec9931222cdd139a9f8bcfca106013d9b85729a70d36fece17b949943,2025-11-05T18:26:57.517000 CVE-2018-25122,0,0,ed65e5a4285f6da11128c43e176d06d8167f2c86da31f9d0f4b6c01b9c1a7fbc,2025-11-05T18:26:50.120000 CVE-2018-25123,0,0,f11575ca48bdfe4fc6bcd70014133105e3663bcfb095ac7dd8facffcf0ddd362,2025-11-05T18:26:40.703000 -CVE-2018-25124,0,0,8666612a9ad84bf9c236564cdb453d37662e07d12729fe092b97e236d328acfa,2025-11-12T21:15:45.410000 +CVE-2018-25124,0,1,05f221cb37f049b5dbe383586eec860693f9f9f9d05fc51441e730ad0c883f09,2025-11-20T22:15:52.670000 CVE-2018-25125,0,0,895b79a30821ea56cac944d1342dda2366aa92443c4c1d78401f2514d0987b50,2025-11-18T14:06:55.963000 CVE-2018-2515,0,0,5409b099d6b1ad12de2273669dad1cdf61ce6e1c2e305b93396a548635b48aa4,2023-11-07T02:57:57.887000 CVE-2018-2560,0,0,64c0ce8dd86b8cd41f028fc0faeb4c2703b3a3d6c99b5cfb7e065de6e8a10aab,2024-11-21T04:03:56.060000 @@ -159980,7 +159980,7 @@ CVE-2020-36867,0,0,c5ffc786b398242083e43ea118f46e5147c63e8712dc905ecb887ab364e41 CVE-2020-36868,0,0,6a9ab76c0a514f0c7657e7377852aa1ccaac4caac55d835de58666abf51c0f01,2025-11-05T18:23:19.037000 CVE-2020-36869,0,0,8ac5cb7df6ee3c21f962216a87e16d3efce10be4748705707e0275d36102b982,2025-11-05T18:23:07.570000 CVE-2020-3687,0,0,4f5fc687e6ec97625652ba8cc878e5dcedb758a9b86899e8a0bd5d38bccb2613,2024-11-21T05:31:34.637000 -CVE-2020-36870,0,0,d416d3d8bb898088e557e55c90ba2808da45817e799e38a05ad61289dfa80d9c,2025-11-12T16:20:22.257000 +CVE-2020-36870,0,1,dfd7b7842c2c5d2dbc2a9590c9be8ebed664d7f7e4e7cf6c696a0213aede6fc6,2025-11-20T22:15:53.293000 CVE-2020-3688,0,0,7155463c2e1adade3e99c9eb3a8b2f9018619b146f279496aabde13c3c9bf8bd,2024-11-21T05:31:34.760000 CVE-2020-3690,0,0,c27034118b24b8f1327ffde98be0c152791bc5ce1e9a137ea8727e3bf6e1b6c8,2024-11-21T05:31:34.943000 CVE-2020-3691,0,0,aaa0096c1f9a3f666449c8a44453e0543d6e370cd29b6f93a809989fa00d54e7,2024-11-21T05:31:35.080000 @@ -184468,7 +184468,7 @@ CVE-2021-42306,0,0,cfb345d3db69dabd503806783465aac5d257be909b1e4a53fb354ac0fb275 CVE-2021-42307,0,0,dc2a5f76192aa321745a008eb0f5515d94a44f25cbfaf1e691c4e0271b89796d,2024-11-21T06:27:34.360000 CVE-2021-42308,0,0,a43a7ca3f68348f13d22dbd6a179742948f46c7250a98bc8d7544def2754bfae,2024-11-21T06:27:34.500000 CVE-2021-42309,0,0,6e467d0155d8a574c5839cfb05a27bbed4c0850adcf3d13ecd31445083044127,2024-11-21T06:27:34.627000 -CVE-2021-4231,0,1,f608ae303d39e368ac2e70fb991fb64b39e34036d1c3b472aaaae15507d40e8a,2025-11-20T20:45:30.863000 +CVE-2021-4231,0,0,f608ae303d39e368ac2e70fb991fb64b39e34036d1c3b472aaaae15507d40e8a,2025-11-20T20:45:30.863000 CVE-2021-42310,0,0,f527ee88d5678a40e00a362a41952edcc224645e6d708d9f7b2674435da82f47,2024-11-21T06:27:34.773000 CVE-2021-42311,0,0,46c24328deefc88fe59952482639d6bc926971548eb0d5186d6863aeefb65801,2024-11-21T06:27:34.913000 CVE-2021-42312,0,0,e808118703976a4703c3e05065099e6584d4b4972d539293a3b2732ff2801f18,2024-11-21T06:27:35.043000 @@ -186159,7 +186159,7 @@ CVE-2021-4461,0,0,606eb497bb936d77c07bbc371b6d83f50bc7559ef5d909b0f3d4e9c1c422f6 CVE-2021-44610,0,0,94ef56d89f97926b88aae8daed698552b57313d0c8fba81d08dcd573b336501a,2024-11-21T06:31:16.377000 CVE-2021-44617,0,0,b7957de61b31e7ba6fd401c1550e9851d213940eb443b584b5e3a03af7ce7d81,2024-11-21T06:31:16.523000 CVE-2021-44618,0,0,9d917a3357147c122c0d2d38e3faac98e29b01ddcea630f210876dbf35d4a30e,2024-11-21T06:31:16.667000 -CVE-2021-4462,0,0,bee19a579b397bba233bbc17aa749d9bcbbc84a17955976ef07fbff22ef14713,2025-11-12T21:15:46.383000 +CVE-2021-4462,0,1,45e5acb121239c2ca00e5220b2ff1b8a008710602d32ab89e5411165072a57e5,2025-11-20T22:15:53.470000 CVE-2021-44620,0,0,d2ab2767bdab1399a0ae8f9bb4f0426790ebd3be67a86d973eaf51bed4cf6212,2024-11-21T06:31:16.827000 CVE-2021-44622,0,0,74bc8551ff217575a30acbfcab23bb84d4ed543c09ac3677f8ddbe2b077e2d49,2024-11-21T06:31:17.060000 CVE-2021-44623,0,0,f3d314694cb1614d9cad86ca11df3c46afafe5a516f85d6402e1134092d1616d,2024-11-21T06:31:17.210000 @@ -215032,16 +215032,16 @@ CVE-2022-50139,0,0,a60c55a217f872044b245a27b7baf431a53c9797f38653b15f1b5c3a0a17f CVE-2022-50140,0,0,753f84a931ee447a2985d770a6e2e879901452999e9c4beac3bf908386d88142,2025-11-18T02:56:32.010000 CVE-2022-50141,0,0,7033b5653b5cda1a6410fe0ed7ef971bc505737fb74fbe04cd9c8bb4d89ec985,2025-11-18T02:55:48.250000 CVE-2022-50142,0,0,7bbdc010410886ecf3793ed2741079b93cc30292e47233a109856dd1852d90a5,2025-11-19T13:29:01.230000 -CVE-2022-50143,0,0,6ba1754cc8e280ee5ce745e57b3c367344f3b2ea623b304781d6a6849c9201ec,2025-06-18T13:47:40.833000 -CVE-2022-50144,0,0,7f1cdb0f518d038ae2a470a6a4ee17365cf89878f5bf854200553fa8480a9da2,2025-06-18T13:47:40.833000 -CVE-2022-50145,0,0,5195d2bd3e2fea9a8fd61c883981b6de7d1245e8cee037807a147aa53f14e505,2025-06-18T13:47:40.833000 +CVE-2022-50143,0,1,2a5d003dc5f9c2c7557725d25718d91a3d7b7fe292bca6bf397f6c5160311831,2025-11-20T21:40:03.710000 +CVE-2022-50144,0,1,b77555a13ff7c67fda2e32ccd7e9fb64780b4d12839ddd303464c4dac3d13990,2025-11-20T21:38:58.637000 +CVE-2022-50145,0,1,1427a66e6d8085fd0ce1aba673ac0fe7dd79489fa35ab23f098c51178a57f279,2025-11-20T21:36:27.540000 CVE-2022-50146,0,0,49b6836ded8060227ffe21f93feb60c6e8074764046162b1c04816a15d1125e6,2025-11-17T19:57:54.970000 CVE-2022-50147,0,0,f059ecdb548d7dfaeadf5fb6f561a8bef10be0510a8686a83a15896ccc733ca6,2025-11-17T19:57:47.380000 CVE-2022-50148,0,0,f82eb5fc175583891ed2b79ce3f676920cae96341d3ae4a91a90c3cbafcfb9fb,2025-11-17T19:57:40.347000 CVE-2022-50149,0,0,70d212af71b2fb1b4c3f696aace9ec48660861354171a566d196e4ff96488b94,2025-11-17T19:57:30.287000 CVE-2022-50150,0,0,2da5ab560ff6b28a26cef47d69f0fb310b1815d842a512602cccde7488076506,2025-06-18T14:15:24.273000 -CVE-2022-50151,0,0,3f0d1b0cf5b4ace04840807b29c989c1d152df7b8f48013b624b769934fe575f,2025-06-18T13:47:40.833000 -CVE-2022-50152,0,0,ae6671812315b49c90c8df733f7d2c4190f49a80f2db2350d9f42838ac11b512,2025-06-18T13:47:40.833000 +CVE-2022-50151,0,1,9fa448ee483b4daa044d2599d2023771922f279aa352d307b55495219b6e8088,2025-11-20T21:36:06.367000 +CVE-2022-50152,0,1,b38b351c9c6006dc0a1004ed02d5a70abbd0c2be2fc27f443d986140d2b3df40,2025-11-20T21:31:12.133000 CVE-2022-50153,0,0,9b7345f7ba443f3ed6a677794305fb9dcb92f26c869c5e4a43aac3bf7155d670,2025-06-18T13:47:40.833000 CVE-2022-50154,0,0,70c8d68d75fa9ecbe17b0490a450df7c38a8dc0089187e2d754bd719d785c186,2025-06-18T13:47:40.833000 CVE-2022-50155,0,0,92129fb270a88c9ee6cf4f678e61af940cd54d83f3ceb2723b8e6901c0be1b27,2025-06-18T13:47:40.833000 @@ -215068,9 +215068,9 @@ CVE-2022-50175,0,0,5b054a3bff926d8621b8b6e873bbae11267cf7931865549632456b67cbbc5 CVE-2022-50176,0,0,d0841bc7909759b2cdf71a1b2dfee9687266784f36738c5b20cd9888b5caf962,2025-06-18T13:47:40.833000 CVE-2022-50177,0,0,9e460e166906e680666f0d48e60cdecff52b5d8952b5d2e56017d6de47af6337,2025-06-18T13:47:40.833000 CVE-2022-50178,0,0,2b356daa7df232bff98151a9f7f5a3d52e488040a36990f327dd20c414732385,2025-06-18T13:47:40.833000 -CVE-2022-50179,0,0,6a23b01fc275ac582fb441c46e4abaa2d83c596ab9af304553553538e3897a03,2025-06-18T13:47:40.833000 +CVE-2022-50179,0,1,e3e468e4606b747c0269a6ac7e4c9b4653bdc60d2cefe09f3770a09b88837a78,2025-11-20T22:02:06.180000 CVE-2022-50180,0,0,5911e07ce2458b7afa6996acfa5b5c49cee9423f63c84187063247cf93f71f5f,2025-06-18T14:15:24.327000 -CVE-2022-50181,0,0,87e98d06ded4e1fdb2e978cb6dfb39ba702976352643a433f6089dfb219ceb76,2025-06-18T13:47:40.833000 +CVE-2022-50181,0,1,864cab8e3b917a11c49b3cc8952d6b4d06013b54f895124a8e39c7318b0f60c0,2025-11-20T22:05:33.677000 CVE-2022-50182,0,0,689746ae701d4ad6089b170070dcb25b5e26a7574191801a1e5dc5ae9b401553,2025-11-19T12:52:11.973000 CVE-2022-50183,0,0,95a65f1703e3e6f00991fe116ab7067ff18e1a9036e7e9069c5f7641664d8927,2025-11-19T12:52:04.553000 CVE-2022-50184,0,0,6506ff83c9c084cb7197cac76c8ec00bfdb07059e0ed66640058931dcd8ec74f,2025-11-19T12:51:55.910000 @@ -215097,7 +215097,7 @@ CVE-2022-50204,0,0,ce76def9d743025712c806a402a85f1ed1973c6415c9309802d56db18dd30 CVE-2022-50205,0,0,bbaa69107e3a8f14f59e58967a0c5da57a8dae999405c3dcdb4faeef4b5b1ab9,2025-11-19T12:46:09.787000 CVE-2022-50206,0,0,bd9e1d4517f33b79b3058f49fa1bbeaf9094f3d622558671bd134cb55e436474,2025-11-19T12:45:43.787000 CVE-2022-50207,0,0,e258b1862ff0ff30e848bc09ecb06f4d7f4eebca76c64b7fa540407813cd951b,2025-11-19T12:45:31.187000 -CVE-2022-50208,0,0,ad9fbef12d022bd7b10969d91ae28805831f0226869493bce437685a76cc9395,2025-06-18T13:47:40.833000 +CVE-2022-50208,0,1,f0ebbb8a78c9d919a0361fca451de4697b7e94f4d239b16408e24c05c7e81fc4,2025-11-20T22:06:11.527000 CVE-2022-50209,0,0,0af2ccb1ccead0ef45fbe0ac6d2ebbb10137c36f154f313c384261e9522fe25b,2025-11-19T13:00:58.777000 CVE-2022-50210,0,0,b7f2998843ca03cf5e6d129d34abba6284c28efde38856028c3f6cb757791040,2025-11-19T13:00:46.937000 CVE-2022-50211,0,0,1792e2ceec788709c9517ed38c521eaf088c2cfed56e34fde38d4c6b7e690468,2025-11-19T13:00:36.680000 @@ -249068,7 +249068,7 @@ CVE-2024-1208,0,0,3c4b0e7895c1837530e812c9d592f58958b18ef870d236a49969dfb3f5e669 CVE-2024-12082,0,0,d67c450c190c0364d4b144dcd382bc569f8e4f4f12ff2a960005828e083c85c7,2024-12-11T17:12:56.793000 CVE-2024-12083,0,0,d43543ed1a2c4c8cfbaff70b85f71ffc7dc15514475ec8e8bc46a80ffd753fb3,2025-01-14T01:15:09.267000 CVE-2024-12084,0,0,e55ce68d5d6184ea3507998ff9fc87d46c74c32e5bdbd1b9083c8b9507b3efe4,2025-11-03T22:16:38.910000 -CVE-2024-12085,0,0,c7cc4927f4e14f940a6b0ed908a8004252cb5c144d4676e5e8c55ec56620db32,2025-11-03T22:16:39.030000 +CVE-2024-12085,0,1,22b76216c55888bc2cfedf00bb6ec5c394162555518afaed0683503dec1a5b9a,2025-11-20T21:15:59.487000 CVE-2024-12086,0,0,1f946e475f5e2d4b6e2ef772c3036716d49236e768d5ddffdf91484159096080,2025-11-03T22:16:39.200000 CVE-2024-12087,0,0,9560f5914d83b3c199c6f91e70c53248751c348de987368ae62a763691d96c97,2025-11-03T22:16:39.313000 CVE-2024-12088,0,0,8ba883f2a56176620c7e27173211b4e3a04259a5f9ebcf4280703e321f61a048,2025-11-03T22:16:39.430000 @@ -249863,7 +249863,7 @@ CVE-2024-12843,0,0,fd7557e365f1279a203962fe47a2da20ef4b036009d10dbcf81fd8fbe148f CVE-2024-12844,0,0,0405c35f7d084de26bb371db3ce6ee0878eb608e20c08cb62e569f5aa033d6a8,2025-01-07T18:45:15.590000 CVE-2024-12845,0,0,8a55ef16d01ed853090508f11e865486ac3e4a19f3e5f3d24da04712be187e9c,2025-01-07T18:35:19.607000 CVE-2024-12846,0,0,b4bbcd43fe7fc90c3195ac0958aca3584f9d578e1420a95dccc8ca96fab07598,2025-01-10T21:34:58.917000 -CVE-2024-12847,0,0,86f9ad6f0c7d433eb278213676ba7f2c8feb1d7ea5df28588c113d9628ccbd65,2025-11-20T16:14:08.560000 +CVE-2024-12847,0,1,b4e5cd82d037ce9a3bdecb2d185ec6db3b1a68205ac3b7ed090e7182c9f23f6d,2025-11-20T22:15:53.813000 CVE-2024-12848,0,0,95ac60390486f7accc1a4c21b3c339a643ce34c81e0e6f7a88c7c7253bce51fe,2025-01-09T11:15:15.870000 CVE-2024-12849,0,0,3437660a93e3ba43e7759c6102f16953543e1a3c3d091452a24c483dbd6bd5de,2025-01-07T06:15:17.607000 CVE-2024-1285,0,0,fe4bf0486aecf38df96027ff2e4acac0a69bae1f11408017e8547806f1a1d2a0,2025-01-08T17:13:54.647000 @@ -268724,7 +268724,7 @@ CVE-2024-41812,0,0,3535027c50f25dc911fabb21506f35d3cadc534d51d2a4d98f1aca3c50060 CVE-2024-41813,0,0,ea735ca1d14924fbd9926497a2a2b9138d4af4fcba12333c8e630cab3d9ea9fb,2024-11-21T09:33:07.533000 CVE-2024-41815,0,0,f54f358ae3df6bd716d7d0968afe7d0ce9701aa6f081ce81733d31e7029d2545,2024-11-21T09:33:07.663000 CVE-2024-41816,0,0,604a104dd299057160f287837a738f08bd40329160430b760049bed80cd4489e,2025-02-07T16:36:14.617000 -CVE-2024-41817,0,1,959c6ca7d2b01bd7eb5a3391e481a51be558430d15eda2d906983536c54d6d55,2025-11-20T19:21:58.747000 +CVE-2024-41817,0,0,959c6ca7d2b01bd7eb5a3391e481a51be558430d15eda2d906983536c54d6d55,2025-11-20T19:21:58.747000 CVE-2024-41818,0,0,d0644d0869d25b4a837ff388931c4c3c6770c0fda3a09adfcccd8d21bdbcec56,2024-11-21T09:33:08.093000 CVE-2024-41819,0,0,ad7050a51e770cf9065f3a43ede0c4fa99b2918cc4370b5d15474b1419e6bdc1,2024-11-21T09:33:08.247000 CVE-2024-4182,0,0,8c1770197e59320facc8983a505e6a1afd314255bac5a37153c24855d658fe5a,2025-05-12T13:41:16.170000 @@ -282191,7 +282191,7 @@ CVE-2024-7310,0,0,9204698dadd01fc733d35c6e6a916e541dca49105549f0fda37955e9b5c261 CVE-2024-7311,0,0,22a9ef01eb639df10f40f7e6dc2c7ee70ce920ffb3d5b55eb2f01c4b64d9a677,2025-10-23T20:06:00.793000 CVE-2024-7312,0,0,641179507959958e1b1a80f40fc2c2fe247ded9595f361521c4ffe25384cd43d,2024-09-13T16:27:50.577000 CVE-2024-7313,0,0,a9e5ba2db6d373fb38b9431711f17f47dcdf26c6525ff25f2f0cd915f8c943ec,2025-05-17T02:11:04.260000 -CVE-2024-7314,0,0,1a3d8f274ee8cfa703ff88cedbd3fa8feaafd17d527c3e73b51c9d7b65d8228b,2025-11-20T17:15:48.330000 +CVE-2024-7314,0,1,74eb90dedff83eeceac885745d42836c6f7c99126abfd7717673c2b03ad63088,2025-11-20T22:15:53.973000 CVE-2024-7315,0,0,56d03bb851e218902be61d9870743d04499b218bcc577f5fd3c1ffdf7481e2c7,2025-05-16T20:32:49.070000 CVE-2024-7316,0,0,cdda59fdbae2defc9f2010c9df08616665992987ff0afebc8ef909754d187d1c,2025-02-21T00:15:08.203000 CVE-2024-7317,0,0,74b94744a502a911bfc3fa448f659d1e62224059149675770167c008b6a94652,2024-11-22T19:12:46.280000 @@ -283923,7 +283923,7 @@ CVE-2024-9119,0,0,2ea0bcb7b3474c2efb183e08bfd8d0aed916bec857fdbb46a57dc7c2a2d4a5 CVE-2024-9120,0,0,62ca5e2c3c12d7aa5c2944c6062e0540459b16838fd7540c3f07bc59ab68562f,2025-01-02T16:55:15.393000 CVE-2024-9121,0,0,2a372eed588ab3d67ac63c5227f1e34914f1335f16dffaa50125b660da3eafe1,2025-01-02T16:06:06.220000 CVE-2024-9122,0,0,3487687e1aeaa14de3f41c8f004eeb595af43f29d050b6b0bcce63702905645c,2025-01-02T16:06:40.253000 -CVE-2024-9123,0,1,2977cc780297eff6e1ebb5d4dbd7d68f6f4a4f3d4dab7cc1096403197f43eb20,2025-11-20T19:16:10.840000 +CVE-2024-9123,0,0,2977cc780297eff6e1ebb5d4dbd7d68f6f4a4f3d4dab7cc1096403197f43eb20,2025-11-20T19:16:10.840000 CVE-2024-9124,0,0,cd69d463959840719b35b1ea0c52fd4d9f5768fb8108c42fcac176196205aed0,2025-09-22T18:34:28.750000 CVE-2024-9125,0,0,a2eaedda1b49b18236ac116998a1e45e7b5806e5e010d7ded75c88431dba6b9c,2024-10-01T14:00:52.460000 CVE-2024-9126,0,0,9fda76f77377e3e6ce0f60679ea4090df6ca424f1a5f37c5be071b991887ff19,2025-11-17T12:24:10.707000 @@ -284148,7 +284148,7 @@ CVE-2024-9365,0,0,50d038556e9b982d6c00720c1605537baa241a70f644caa3560a33db89666d CVE-2024-9366,0,0,db84f6e2ff16ebff2d502f21f85e90095a4a755ba5e4941bffb7a9e2e4c31307,2024-10-22T15:09:48.177000 CVE-2024-9367,0,0,284b3ec0cdadf0d2313886089a3b7179951a2c3d9a154374d4b81596fe243d99,2025-07-11T19:30:27.460000 CVE-2024-9368,0,0,6b310411ff00de8abfede8a1c8f49292bfd465b294d4fa7ea5baca1d5f7f7405,2024-10-10T20:30:51.240000 -CVE-2024-9369,0,1,324c161a402c202a3b7e6c67ed168c18ba947dabd94b28d4bc9ee74c1da8004b,2025-11-20T19:16:11.093000 +CVE-2024-9369,0,0,324c161a402c202a3b7e6c67ed168c18ba947dabd94b28d4bc9ee74c1da8004b,2025-11-20T19:16:11.093000 CVE-2024-9371,0,0,6b69a68b0411ce9f1a3873a71c65ed5e38b4a3301ee458433c180567bd1ea8c9,2024-11-21T13:57:24.187000 CVE-2024-9372,0,0,47c38539a001d789bd3a8f81e62698790222e24e108b5f4cf13a0c91792184c6,2024-10-10T20:36:28.020000 CVE-2024-9373,0,0,e94dc02302c82bfcf4d887e6137e98a0a5848ec0be40f176be36ef9530332f75,2024-10-22T15:07:23.907000 @@ -284364,7 +284364,7 @@ CVE-2024-9598,0,0,033218cb7901503211530e6a6e2cfd35fa19b15817a8c2eb72e57810d3b7d0 CVE-2024-9599,0,0,221a54d89f98eff75f076ac6667319f688f62e1af8885dfe78008663a9d508a5,2025-06-04T20:06:33.623000 CVE-2024-9600,0,0,5f81cf1f780c3d549db82b73b60268f85e55429bd8cf19fc06be55a0e992791f,2025-05-15T16:04:05.117000 CVE-2024-9601,0,0,16377aee6b1757cfe9136af384fa497dbe5d85cf18a9b0ffef21739c36f3986a,2025-02-25T19:42:12.050000 -CVE-2024-9602,0,1,d206891d016bbe72643badd2164a5e757756d0a3d0dac39d9731a5433a28fc99,2025-11-20T19:16:11.303000 +CVE-2024-9602,0,0,d206891d016bbe72643badd2164a5e757756d0a3d0dac39d9731a5433a28fc99,2025-11-20T19:16:11.303000 CVE-2024-9603,0,0,50669f21073ac14122f480035b4c1b46d69ab6d3ffcc460bb7bd86545f71cc92,2025-01-02T16:48:21.323000 CVE-2024-9606,0,0,4872f8ac3bee9b4537a1030d8879179bc283d6d5c67757f1a8cb811781ce2e08,2025-04-07T14:50:05.277000 CVE-2024-9607,0,0,54c7fa609071a2960fe8514c7e09434070f7928dbf6bf2601a0c6b5966a0c0f2,2024-11-05T17:40:57.777000 @@ -286080,7 +286080,7 @@ CVE-2025-10567,0,0,9d3e9a66742ffdc8dec57fb69edb1e323e5de5ff2f6bcaef14ecc6a3f3c42 CVE-2025-10568,0,0,8eff1d2dbc58b283a6c3f23cfb6d966ab0607123b7f80a240a8ae6dd9860bece,2025-09-22T21:23:01.543000 CVE-2025-1057,0,0,a82d3965d473151e0d8ae1e4d6d19087f9eb157186985c71bd74d7c50ba4c6c4,2025-03-15T09:15:10.770000 CVE-2025-10570,0,0,8b344729dd11abcf53a5adb9dcb520a41f0e4c4c2784cf3397640ca688b283c5,2025-10-22T21:12:48.953000 -CVE-2025-10571,1,1,2ce7700623d114493b5e2390b875ce8d69a7c579e3e6941c444f232d4a41d96c,2025-11-20T19:16:11.527000 +CVE-2025-10571,0,0,2ce7700623d114493b5e2390b875ce8d69a7c579e3e6941c444f232d4a41d96c,2025-11-20T19:16:11.527000 CVE-2025-10572,0,0,453bae88e0efcabc8e4a183bbb5d515ebcaff81f10f1846b514c6b852d990fed,2025-09-16T18:15:34.090000 CVE-2025-10575,0,0,9054a65c5f8e838af9f68e68f566d64fdecfb829321c44a3c9f9e943c05ece3e,2025-10-16T15:28:59.610000 CVE-2025-10576,0,0,ae272fe00cc11e3fbfd29a5127e197dc5546d0314971d0e2d2988a6599cf7ef3,2025-10-16T15:28:59.610000 @@ -287106,7 +287106,7 @@ CVE-2025-11678,0,0,da608f708b3f5d39db2dc3d8bcf0f83167c6fcc9293801159eb6dde8b2dd7 CVE-2025-11679,0,0,a5a009a1f7372061e87c62563152799972f8b88f7ecce322ba1233363a1a06da,2025-10-21T19:31:25.450000 CVE-2025-1168,0,0,1ea1d5bc4e270d6254a19bce9b3bd16dbcb0aa6cfa50f52ef9530ed2236d40f5,2025-03-03T17:20:31.693000 CVE-2025-11680,0,0,b2321c5f6524e9275218cd1a86c19c0061b764a2b5cfd019d226562a457ad82e,2025-10-21T19:31:25.450000 -CVE-2025-11681,0,1,e3521add8fff236da05e0f47a8b000eafc5ae939efa976201fb1b64556e08377,2025-11-20T20:35:07.147000 +CVE-2025-11681,0,0,e3521add8fff236da05e0f47a8b000eafc5ae939efa976201fb1b64556e08377,2025-11-20T20:35:07.147000 CVE-2025-11682,0,0,0e7fb35f6aabdb0ff5ae67f61a8707127178ee52a21670d6bef2406c9f4a9b62,2025-10-27T13:19:49.063000 CVE-2025-11683,0,0,562b6ddecd757d974a3cd06cb4a91e1cbf3407e06c1b215f13523df3f6204a17,2025-10-16T15:28:59.610000 CVE-2025-1169,0,0,ad57e3ebca9d9361258028a4f6880b5b420e9bfeb30e11c1ec67cc7b58af0c9a,2025-03-03T17:16:44.157000 @@ -287421,8 +287421,8 @@ CVE-2025-12115,0,0,7b929290e0bbbf56e05a740612ad657f73a13306fa0173d8926620a068b34 CVE-2025-12118,0,0,b6b99c55a4673baebdab7dba05ed42bf55535ab3cb2a1973e68ba787e4f13157,2025-11-04T15:41:31.450000 CVE-2025-12119,0,0,e0de8c853c63b7a27d719de1f5b64a601a46b50ef51b4a55e4bebef1eade3de8,2025-11-19T19:14:59.327000 CVE-2025-1212,0,0,3abd957af5194f62a619834352f61a49a30dbfb280f60a8147027e5362c8c4a2,2025-08-06T18:48:33.517000 -CVE-2025-12120,0,1,677b2a392d897735be0b3079ff9108cbe8700139e7136aa10561cbf35bb697af,2025-11-20T19:16:11.773000 -CVE-2025-12121,0,1,14132d67a6f140b7439cfb7195fb1c1ef53252c2ae42b177a77c12518076f412,2025-11-20T19:16:11.937000 +CVE-2025-12120,0,0,677b2a392d897735be0b3079ff9108cbe8700139e7136aa10561cbf35bb697af,2025-11-20T19:16:11.773000 +CVE-2025-12121,0,0,14132d67a6f140b7439cfb7195fb1c1ef53252c2ae42b177a77c12518076f412,2025-11-20T19:16:11.937000 CVE-2025-12125,0,0,d377c4ab97f1c931195e69299449d914aa968842e1322651dd3b6630e9f11202,2025-11-12T16:19:59.103000 CVE-2025-12126,0,0,204d6b6ca7ca6af9141fff2f2edfa46d59f0c85a3d08a6d5cecf1cdda3f252ee,2025-11-12T16:19:34.210000 CVE-2025-1213,0,0,09a6a70ca5cef42504b01e1673b93239bee3ac66032d2bec5ee9ff5bd8cae38d,2025-10-17T15:18:14.670000 @@ -287854,7 +287854,7 @@ CVE-2025-12703,0,0,38c862e8f8001319bfde0de4cfcd4d9afe83e979fc0c9b0a469df7a818442 CVE-2025-1271,0,0,0359319eae8a142a0720b34e58c3d3808902c47ddd06a524c0e8a18f2f2f366a,2025-02-13T13:15:09.433000 CVE-2025-12710,0,0,1d98c818e94ce4c052a727debb50d23e177c8fa491f163113374be1d452ba919,2025-11-19T19:14:59.327000 CVE-2025-12711,0,0,5c8c33dd13b0e86a8e1f8a718a7ca696e2ea5435c9b24584cbb0366862d51200,2025-11-12T16:19:34.210000 -CVE-2025-12725,0,1,dadb0d0941f2d6bad8d3679dc7d6d1d92864934b5703f9b4d32b9456264f3225,2025-11-20T19:16:12.120000 +CVE-2025-12725,0,0,dadb0d0941f2d6bad8d3679dc7d6d1d92864934b5703f9b4d32b9456264f3225,2025-11-20T19:16:12.120000 CVE-2025-12726,0,0,ef8987f4f6c1ec990cabbd8c166118a7b68470157907d31b636b93e77a8c14f3,2025-11-12T16:19:59.103000 CVE-2025-12727,0,0,ca05fe8a762d322fd59456837d4677698fcf559bde9605536ada1231494e5f3f,2025-11-12T17:15:36.293000 CVE-2025-12728,0,0,08002c8a5aa40947c4dce2808668dcf9f7ce85d3054aea03410137228d9f4926,2025-11-12T16:19:59.103000 @@ -287922,10 +287922,10 @@ CVE-2025-12855,0,0,30df6a956ee62de1312c986404aee18c6528b4faf44e48a2de355062dea45 CVE-2025-12856,0,0,5c66808ad32e867b6d4b8e3f6fac859abeed62fb00aaac7efcb8e368f680e66a,2025-11-17T12:43:41.087000 CVE-2025-12857,0,0,62aaea96bea0f61a8e5b57c2620c011846c9360e6a3c5a17f6b58db3d8aaade3,2025-11-17T12:43:22.537000 CVE-2025-12858,0,0,32edbb001f23714badb24b380ba6186a1c9ec2ca1ad8f543d00f39f45f596fb1,2025-11-07T18:15:35.910000 -CVE-2025-12859,0,1,c9f709f8464bdd3921e6593024f3ad5d364e8d8ba71f06e52bfd100d2eed3a9e,2025-11-20T20:12:57.220000 +CVE-2025-12859,0,0,c9f709f8464bdd3921e6593024f3ad5d364e8d8ba71f06e52bfd100d2eed3a9e,2025-11-20T20:12:57.220000 CVE-2025-1286,0,0,40bbeef96d95140e49bd4454f594373e42828e919694fd2421136359798adaf3,2025-06-12T16:37:11.290000 -CVE-2025-12860,0,1,1046531e723e474f49038e48d82d9c7580656c88cba1bf1e5e7e7d57a420d464,2025-11-20T20:11:00.350000 -CVE-2025-12861,0,1,9686ad5306e0781e685db73b7def980b59d712033071289b97c76fa936d7f4f7,2025-11-20T20:04:53.833000 +CVE-2025-12860,0,0,1046531e723e474f49038e48d82d9c7580656c88cba1bf1e5e7e7d57a420d464,2025-11-20T20:11:00.350000 +CVE-2025-12861,0,0,9686ad5306e0781e685db73b7def980b59d712033071289b97c76fa936d7f4f7,2025-11-20T20:04:53.833000 CVE-2025-12862,0,0,204e1ea810e5085277ffc4732b25c1a3a92d893d4b90fda8bb5bf26cf0eaf764,2025-11-12T16:20:22.257000 CVE-2025-12863,0,0,90452c6a5bb7a172a81434c9938eb5146abb721f564c56086d0b54c76d443c2d,2025-11-20T15:17:23.673000 CVE-2025-12864,0,0,0489db4cc8828518b13c1c7283080dc3f0a975044ad53eda805fa1e9d25f3ba8,2025-11-18T18:04:46.590000 @@ -287977,7 +287977,7 @@ CVE-2025-12923,0,0,c4a5971e61e942846cfa5fb97c18f88c407fdda9031853425be6036aab01e CVE-2025-12924,0,0,3949d706f061685b75e9ca674bdb002cf9f3343aa43bb6404f28be058685cdac,2025-11-12T16:19:59.103000 CVE-2025-12925,0,0,b2b3998fc00839146424f24349e43dd253cc3711c75036c7bfda6ee4aba972df,2025-11-12T16:19:59.103000 CVE-2025-12926,0,0,56a762e7adbc957c95d6f211ca000848ea248ca1b195c99fac6de83a78e44995,2025-11-18T18:03:27.043000 -CVE-2025-12927,0,1,9fdb2d0bfa46b7ccaf68f68bd111ebd7cf58794ec8e9c5163d0c648a1bbf6d36,2025-11-20T20:00:37.643000 +CVE-2025-12927,0,0,9fdb2d0bfa46b7ccaf68f68bd111ebd7cf58794ec8e9c5163d0c648a1bbf6d36,2025-11-20T20:00:37.643000 CVE-2025-12928,0,0,bc93b7aeaa531d98cddd8aca26502b5b1e31271347764905a42797e9ed05aa90,2025-11-17T19:18:40.530000 CVE-2025-12929,0,0,74e769043c2c60ff940affa69f91f78826221b8514ab6f34a03dd3ee973c9049,2025-11-18T18:02:42.837000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 @@ -288054,6 +288054,7 @@ CVE-2025-13081,0,0,44607eff1492059d0264c847be781aaab57e3ba98244ef4718dc138ab087e CVE-2025-13082,0,0,ee15611f3a9172566e9dfcdc7767888531ca515069f378e38033e9d7e0f8f615,2025-11-19T19:14:59.327000 CVE-2025-13083,0,0,77618ca0e8d88831f92278b5dbb60b753b0293cb9d9bc3260cfc532cdafb5f2d,2025-11-19T19:14:59.327000 CVE-2025-13085,0,0,f3268564e10861d5cf8f3603cc49dd097dab4010105744ec9806028772b4bb5e,2025-11-19T19:14:59.327000 +CVE-2025-13087,1,1,a931167a15e9a4c5f3a2a0cac0b12c56e38e22cc915f180c418b167fe0c04694,2025-11-20T22:15:54.310000 CVE-2025-13088,0,0,dc043644cd4125a857741cf9a91450bd763157cc91b68ab66e721861c232b0f0,2025-11-18T14:06:29.817000 CVE-2025-1309,0,0,5d2b17215fed7de1b66f6e9e5fd86a1c64bff76093266d0c2270f4eeb2161dcf,2025-03-07T08:15:42.017000 CVE-2025-13097,0,0,0a463c7146931e807334c871d0e683f7d8bea2d0ec5ce4001c32f9829ca46e11,2025-11-17T12:23:36.557000 @@ -288142,7 +288143,7 @@ CVE-2025-13235,0,0,2fd4f4820750aaf5266d4f920fef7cfeb1868e9cb87c5b1e2611cc5f15c65 CVE-2025-13236,0,0,b062392f4364fc9b32c4858896654fd25d3c005e5a553143dad3f3eb841372d4,2025-11-18T20:10:53.677000 CVE-2025-13237,0,0,7cd8400cadc898003e305f385ba98a09e30055ab8a6af7f29e8c4af2542525ca,2025-11-18T19:59:03.810000 CVE-2025-13238,0,0,890b187b5e9270fffb048dc586f4db5c396790afb421173c329863be557c6615,2025-11-18T14:06:55.963000 -CVE-2025-13239,0,1,7e8532ca20403d15471dcd10fd7c83be0a6e5a1d804718534722cbe556949e28,2025-11-20T20:59:13.137000 +CVE-2025-13239,0,0,7e8532ca20403d15471dcd10fd7c83be0a6e5a1d804718534722cbe556949e28,2025-11-20T20:59:13.137000 CVE-2025-1324,0,0,0b272f0faceca289f0c40e81d7e67cfed130feb379b2f510016e8db4dc34ecdf,2025-03-24T18:13:16.743000 CVE-2025-13240,0,0,06dbd2e8681e7035ef68bff53b7ca7a3b58ad31e4910282177b4ef95907e1ff7,2025-11-19T13:18:32.380000 CVE-2025-13241,0,0,a8e0c5b6670e6f551ba8fb7b4550084e7369bea8203af5f69bc8937c9510e156,2025-11-19T13:18:23.957000 @@ -288155,8 +288156,8 @@ CVE-2025-13247,0,0,d10ae6e2b1286e33e606d385e8e150826442e830ddfc4e65ca3af050970ed CVE-2025-13248,0,0,fa3c7425a9d3273602a436a0976efa4056df131f5e8745b074c8ac1b44340c96,2025-11-19T19:23:06.443000 CVE-2025-13249,0,0,50ade01c23282ffca521847da417bdedfb59ba43aec3a9150bc9fb68c6a97394,2025-11-18T14:06:29.817000 CVE-2025-1325,0,0,9137ca9db40c6a3347b80f5ba95e12ff095900fd07663b36ee12c2c6e50b3fd2,2025-03-24T18:12:02.770000 -CVE-2025-13250,0,1,e5dd7abbb408f1bdbc498421601779db2b478c350808f5b012bf04d6cafa66d2,2025-11-20T20:46:55.490000 -CVE-2025-13251,0,1,5d9d051e3c46a9bc7ada6257c4d712ea9215e14aa92adc2ccb88a3d6d7a057e2,2025-11-20T20:38:29.977000 +CVE-2025-13250,0,0,e5dd7abbb408f1bdbc498421601779db2b478c350808f5b012bf04d6cafa66d2,2025-11-20T20:46:55.490000 +CVE-2025-13251,0,0,5d9d051e3c46a9bc7ada6257c4d712ea9215e14aa92adc2ccb88a3d6d7a057e2,2025-11-20T20:38:29.977000 CVE-2025-13252,0,0,0befea829dcf914844190dbbb22531396d37be109114bfd7f5c12e180f25cc59,2025-11-18T14:06:29.817000 CVE-2025-13253,0,0,2d0211539ab0c94fbd2cb7c6214976802ff96ae791bea6c8cb4073bdafd6f2bc,2025-11-19T13:17:17.457000 CVE-2025-13254,0,0,1d3dc72730caa102af8bf9a2f5c62399bfcbf5e3548c3ce53b9fa6843f472ca4,2025-11-19T13:17:01.860000 @@ -288173,7 +288174,7 @@ CVE-2025-13263,0,0,4a8f8d202d704caa8ba15a72777c2ad72735d57dc689700639b42cd14adec CVE-2025-13264,0,0,fa277af94314035d9096f588aa287ed6ac74e300357d343eb4c1b85cf44834e6,2025-11-19T13:15:13.917000 CVE-2025-13265,0,0,a4f41b2908428edba8158f0b3fdb447afabb6bfdf9b38e8d9f9c9f90aa9083e9,2025-11-18T14:06:29.817000 CVE-2025-13266,0,0,82244ef72416d40d2ad451ece17e590b4265b9be9d87ec61d63ba7b50797fce9,2025-11-18T14:06:29.817000 -CVE-2025-13267,0,1,be035910fe4c444df571e971221a4df95ac90098ee6ee021fadf1f3c61557e35,2025-11-20T20:32:03.183000 +CVE-2025-13267,0,0,be035910fe4c444df571e971221a4df95ac90098ee6ee021fadf1f3c61557e35,2025-11-20T20:32:03.183000 CVE-2025-13268,0,0,6353550ee077c0912c00e9d580263a3b3b8594e70b8b3a6d5cd7d804adc49c27,2025-11-18T14:06:29.817000 CVE-2025-13269,0,0,fc384abb0ac0aa50d4f9e1913bb3dd6474f2ddad841af4db16da38e9c4f95ca5,2025-11-19T13:15:03.413000 CVE-2025-1327,0,0,a00f3a7838ee8cb34a28ac7722d227a8d885a7c055568ff1befbcea8c4c0fd5c,2025-05-06T15:29:09.143000 @@ -288200,7 +288201,7 @@ CVE-2025-13289,0,0,74042b175be01ed1f0ac20df1cb3de4fa0a7ed1a245678394ddfe1af9ee60 CVE-2025-1329,0,0,f0ae0ca3a9c8dfd08bbf3af3eafcbf638e06757e3a12c46d6b79af7a8a193835,2025-06-05T14:30:37.943000 CVE-2025-13290,0,0,b99611410f7a91574d4656a12a639b6445656f3b5ea87d765df77c33d5d4291f,2025-11-19T13:10:03.257000 CVE-2025-13291,0,0,f252ee41195cc28d902b6bcf908cf937c84b4ad764ac0543e65e8454d612473d,2025-11-19T13:09:52.813000 -CVE-2025-13297,0,1,3ab55af12053dab4579199bf77b928c5f8abb5fefb9a9d4a074e2f8fc61be14a,2025-11-20T20:23:24.450000 +CVE-2025-13297,0,0,3ab55af12053dab4579199bf77b928c5f8abb5fefb9a9d4a074e2f8fc61be14a,2025-11-20T20:23:24.450000 CVE-2025-13298,0,0,642cfc969dea89e7323e37b0adf50a169a474c7ce6da8117dc881fdb064ce931,2025-11-19T13:09:01.183000 CVE-2025-13299,0,0,0007e36c473e65b68668fdfffa9f2a77601899bcf5559afa329cc125aaba3001,2025-11-19T13:08:50.690000 CVE-2025-1330,0,0,e5548d630b4a5d00be349a3ec4aba946ab4046a68f7f0746f75dcc659a1ef9bb,2025-06-05T14:29:17.697000 @@ -288245,8 +288246,8 @@ CVE-2025-13415,0,0,b17965db9c66bd7efce677e4aa4b307109a0f172f697a9e2832f4ca126c5d CVE-2025-13420,0,0,820fb667fdc01a672c6249c3b1282cfd1bb08983a3193fac53707f0aa44a2127,2025-11-20T16:15:56.630000 CVE-2025-13421,0,0,93e5cd9ef3bed1ba58469ec4ed92c7461ed60689f51ceb505eba03ab95344294,2025-11-20T17:15:48.907000 CVE-2025-13422,0,0,b823fa70bd311bc542cfcf2efc55e2a17c099edaea27155a97f17642a774d1c8,2025-11-20T17:15:49.233000 -CVE-2025-13423,0,1,5e2256081694c9db164cb1221153296824e9b9dea8fb4f01ee26f4a5a21172f1,2025-11-20T19:16:12.340000 -CVE-2025-13424,0,1,e9c92e559ab1221d12495ca3288d92e94aaa38f5ea394bfd6408438f260d06e4,2025-11-20T19:16:12.593000 +CVE-2025-13423,0,0,5e2256081694c9db164cb1221153296824e9b9dea8fb4f01ee26f4a5a21172f1,2025-11-20T19:16:12.340000 +CVE-2025-13424,0,0,e9c92e559ab1221d12495ca3288d92e94aaa38f5ea394bfd6408438f260d06e4,2025-11-20T19:16:12.593000 CVE-2025-13425,0,0,51b527cefdcd77f530bdf63a36d57ae6b591dd9f57e049bc047711a9463ef516,2025-11-20T16:15:56.793000 CVE-2025-13433,0,0,ec35d613bec0e7f8f3fe67b4a1adf2eeecfdada775ff4ebe63854f58301bfb91,2025-11-20T15:17:24.337000 CVE-2025-13434,0,0,07c8b0103faf4635702b56a87420a6b1feb89b568ce414ef007f9828f862af1f,2025-11-20T15:17:24.617000 @@ -288256,9 +288257,9 @@ CVE-2025-13442,0,0,c50e8fc093353ebaa7d790072255386491fa1d50446062b200abdb5d3b367 CVE-2025-13443,0,0,bdfc19681571610db6e2fef6bb05e0911125b9fb79ceab393fbe7117e6971279,2025-11-20T15:17:25.267000 CVE-2025-13445,0,0,b48d5d76c3a583a3faf38e5545f535e7badedb91d2484ef6c01f21c31355288d,2025-11-20T15:17:25.480000 CVE-2025-13446,0,0,077eaf6833e5bc4bf24095a20f2e894938085c4046a6aa9f20bfae0996a5d8d0,2025-11-20T15:17:25.713000 -CVE-2025-13449,0,1,ef90ea34474c0c61514aa99c84200c92cef2363fbb8fe06dc9ef068a4f09ca15,2025-11-20T20:16:21.473000 -CVE-2025-13450,0,1,e6d175f3aeda486796dc8d71932e647241e11eb0d56c021a7a73d36047ec8a88,2025-11-20T20:16:21.633000 -CVE-2025-13451,0,1,02a6ff7fd7b29801594f68d40569b1a5ac5d982f323280d3157956e1e03fb6af,2025-11-20T20:16:21.777000 +CVE-2025-13449,0,0,ef90ea34474c0c61514aa99c84200c92cef2363fbb8fe06dc9ef068a4f09ca15,2025-11-20T20:16:21.473000 +CVE-2025-13450,0,0,e6d175f3aeda486796dc8d71932e647241e11eb0d56c021a7a73d36047ec8a88,2025-11-20T20:16:21.633000 +CVE-2025-13451,0,0,02a6ff7fd7b29801594f68d40569b1a5ac5d982f323280d3157956e1e03fb6af,2025-11-20T20:16:21.777000 CVE-2025-13468,0,0,ca866fb7399cfaa124ef4315fd2847aa60e6368e54e8f777599018fa969c5744,2025-11-20T15:17:26.627000 CVE-2025-13469,0,0,be1ae72ca5a8f82490e47f7f681ce2164ae244e2ddf93999a0d5f86d13033477,2025-11-20T15:17:26.853000 CVE-2025-1348,0,0,ad5b07dca40b6e849a1c97372fa9df66d93e7131088daf1d9df44209e6a8bbba,2025-07-25T17:57:57.480000 @@ -293960,6 +293961,7 @@ CVE-2025-25609,0,0,353094876441323d490e83a48523be60d5eb9eb9c98e0de6ee9312f642e87 CVE-2025-2561,0,0,3359c8834d22b099b6cfcf701e5d51d131ba54c21f1a60671f81716edd77aea2,2025-06-17T21:07:57.860000 CVE-2025-25610,0,0,e0689668b156fca91ef1f105b78072f67038706b216940f4601acf0901e8570f,2025-04-03T15:37:48.043000 CVE-2025-25612,0,0,3d5ba8d95bd4cf5257a75851925a661e44bd5b9835f17ccfa2c4bade6d51d6df,2025-03-17T18:15:21.300000 +CVE-2025-25613,1,1,cdf36ebffaefc86b56f416af4e0d41672461e6c00679eb28a4dd832dbcda4e39,2025-11-20T22:15:54.563000 CVE-2025-25614,0,0,997caaba993d80e68454c20f3c009f9ef7926044987154641fa486be802e0b69,2025-06-23T18:35:25.673000 CVE-2025-25615,0,0,e017c1e8362067196dff6a4ab7a37964b95c3b97fd5434db4dcfcea4137afb37,2025-03-13T18:01:27.860000 CVE-2025-25616,0,0,cf785e4cd60695d24dd22a04cc35febccc74308f8869df8a5484fdb2462187d5,2025-03-13T18:04:20.497000 @@ -299625,48 +299627,48 @@ CVE-2025-3399,0,0,feb74b6fb2a662d19abda10e01b3f11229d415dbdf4afe9748979f241aa09b CVE-2025-3400,0,0,cf8d2677c113eaba5cb7e83bc217fa3a16d8d96bb1f2d78546954dbd49132a47,2025-04-09T14:12:34.767000 CVE-2025-3401,0,0,631e8a4259cdba906c225d1eb0133c66fa3c13f4e78b0d1bc5178acd11ac745f,2025-04-09T14:11:52.510000 CVE-2025-3402,0,0,84d31b0a5aa5444678ef48824fd7a5d76057e15f22b858934256d08ba685e52e,2025-04-22T19:17:48.387000 -CVE-2025-34021,0,0,d0ec65f3dce65a8019fe0a076924093fd90f673794f2a2d15362a55fe42e8d3a,2025-06-23T20:16:21.633000 -CVE-2025-34022,0,0,cd823f6f6553ac0348e5381c2d04d2473d7ec33bf5fc0555e663388cb23988d1,2025-11-20T17:15:50.007000 -CVE-2025-34023,0,0,b293ab1d395eb012b0b71459ab1290efe0affbe6c37f95df0c7f694ff2a68c47,2025-11-20T16:15:57.063000 -CVE-2025-34024,0,0,6aefe8a4789be950fdcfa8fc58d147c9eec69314478a2e2ac5ba383827c199c4,2025-11-20T16:15:57.220000 +CVE-2025-34021,0,1,6d27a2575f753c127c6edec00e9d26d4a1a241abc9c6ce5c402961630bfb3f88,2025-11-20T22:15:54.743000 +CVE-2025-34022,0,1,e17ec3fe369a26fb842b66f0c46f1a3a9e7d3ed76babe9f611f05f1534f8b523,2025-11-20T22:15:54.877000 +CVE-2025-34023,0,1,992c684be23258c03fb8a2e8112a6e26bba0c677ae0da2e05eebda284bf50111,2025-11-20T22:15:55.003000 +CVE-2025-34024,0,1,bb56a142ea11e832488405abb03f1b462ea4a38ea4e58fef3e920dee1c7539c8,2025-11-20T22:15:55.127000 CVE-2025-34025,0,0,bbf2f37addf89f094928ae6318aa80daceab5e467601dc3a84c20b6d395136b4,2025-05-23T15:55:02.040000 CVE-2025-34026,0,0,49afce7c5a9fc22f3b430d91b2313b22713be6e3cc2459ca290f5faccc547f92,2025-09-23T16:15:31.960000 CVE-2025-34027,0,0,38d82cd50bd957922e4e90e3b83d00a6edad968a836b1c2fd706dbf7c0d63cae,2025-09-23T16:15:32.103000 CVE-2025-34028,0,0,b66b691f86089add5ec2afb917e5d8ac35e49f9dc3e5996677296c686a3e2263,2025-11-06T13:57:56.350000 -CVE-2025-34029,0,0,84256983971f7713720cdec61c477aec6a6f60d8ead9256c4e70389b714119d5,2025-11-20T16:15:57.433000 +CVE-2025-34029,0,1,7bbe682f38fe88ac20dc8bb511802c8d3539f9f7f4fdc722e8dd8278ad875e80,2025-11-20T22:15:55.260000 CVE-2025-3403,0,0,5499ba1d1841e737df5ef1f2a2d32505df727eeda279da8a9f0ff20d660ca6b7,2025-04-08T19:15:53.387000 -CVE-2025-34030,0,0,622ead7f53abf7aebb7d66d1398e3c984789e42f59a9dfdf5f743c5c7a73c881,2025-11-19T22:16:03.230000 -CVE-2025-34031,0,0,be759d8b662f63088c94292a30dce4fe5041032aa5d0f0294e91ba92f872d37e,2025-11-19T22:16:03.417000 -CVE-2025-34032,0,0,7716a9cefcb44ee45c334c384c492745712c12bfcb6219626d301a79f1af196a,2025-11-19T22:16:03.613000 -CVE-2025-34033,0,0,eb8c4dd348449421f7845abb5d3a2703f5d6f8e9fe6295b6cf7177e93e571ec3,2025-07-09T19:09:18.207000 -CVE-2025-34034,0,0,753e2c53abd55e9985cedb292796bab69c960c97aaf9c2138a9858c439254a6d,2025-11-17T23:15:52.240000 -CVE-2025-34035,0,0,c84fa2261eb1a1945780bbc971e24bd4d5340ea90d11d40a39e1aa7fdc35ba8a,2025-11-17T22:15:45.440000 -CVE-2025-34036,0,0,a29ec8d5bd16777087bc89cecbfeb1a47d8e202f1e95b40adb5d53b8a1bef6d2,2025-11-17T22:15:45.647000 -CVE-2025-34037,0,0,12f14a4e0d1d300b62fa41478afd10978c47584bdcd7b802d3ade9baed61771b,2025-11-17T22:15:45.833000 -CVE-2025-34038,0,0,daf1e0e0b5a678769b1b41bbd9d801dc0916969ea79ca9d8d75e76b7951de31f,2025-11-17T22:15:45.997000 -CVE-2025-34039,0,0,ec285ba9416686df77f791da8cbe272e7c842b87ee41abec9eff1e1497408726,2025-11-17T22:15:46.140000 +CVE-2025-34030,0,1,98147951f890cd47b0cb26f861dabe4d10bee64c5b58af1027af8c4f7d07df8c,2025-11-20T22:15:55.413000 +CVE-2025-34031,0,1,806f0da2e39c1e3e02a35f4504234d42b5b6cc6f71796184abb9ae0d2cbd8207,2025-11-20T22:15:55.557000 +CVE-2025-34032,0,1,8c5a66d755ab4d68985e584541c43829a1d7b3154b3dfa6f53e83bb1a6fae8c6,2025-11-20T22:15:55.707000 +CVE-2025-34033,0,1,dae78a44513a91db27b10c7515869d8b1b6f869bf1cc982d3a5e5439ba686658,2025-11-20T22:15:55.867000 +CVE-2025-34034,0,1,2033bbcf51d9a9873a08cc6594df867fa2f4cd659b40486b9825eeb130d1847b,2025-11-20T22:15:56.047000 +CVE-2025-34035,0,1,71acc40fcd486d11e167e435d14ce18c7e10bd693cd9e3b41ad0ccdb5798d493,2025-11-20T22:15:56.183000 +CVE-2025-34036,0,1,394bfe3aacbccbcd58f61ff05265c6e0bc8423862d13f0c8a57672e4664493c0,2025-11-20T22:15:56.347000 +CVE-2025-34037,0,1,521965bc201d72c63edad4680008b88d467534fc208955a316a8add8a3d5bf3e,2025-11-20T22:15:56.513000 +CVE-2025-34038,0,1,a264b16af14993c2331dde38763cb38f9cb506650c13a0fc011cf4b8379cfdc1,2025-11-20T22:15:56.640000 +CVE-2025-34039,0,1,d561e3793ac2587c854571d7eacaec5598fdc8c54398deb8e571ce81ca4ed3b2,2025-11-20T22:15:56.780000 CVE-2025-3404,0,0,3995b7b57c7d03bbf3188d8b6d9621100ea7b4d3b13f0d6dea5824ed5e0cab26,2025-04-21T14:23:45.950000 -CVE-2025-34040,0,0,968cb07b50119e48e0f0dbd272b5163054c6b46933d0199f8b026c9bd99f7cc1,2025-11-17T22:15:46.287000 -CVE-2025-34041,0,0,a53391372b3a795d419fa01066fe05ac47a64d1696aee0710de3e8f170dfd02f,2025-11-17T22:15:46.423000 -CVE-2025-34042,0,0,b23106616035cb636b6aa7fea94f9b11bc233b1539540ee71cd1d0864e56c6fd,2025-11-17T22:15:46.553000 -CVE-2025-34043,0,0,dc28cdc4960e91b3410ca130287ceead73b3c9e0c218f16a8ae0b2e3accc5106,2025-11-17T22:15:46.707000 +CVE-2025-34040,0,1,b7a91f3ea39df8f121970b85eaf5c250b3b225d81c465c6564a2a4b653186830,2025-11-20T21:16:03.350000 +CVE-2025-34041,0,1,305aa5a77434ef8fa71a101f050df5d5e5c8b40ee0d82a14ff3c5d78e8d640f6,2025-11-20T21:16:03.487000 +CVE-2025-34042,0,1,7a3d4d22c9b001941e60c4b03a4b39ba9988c9205e8509cc5afc83fa19897c56,2025-11-20T21:16:03.617000 +CVE-2025-34043,0,1,bbf76f380231c00668ddf1285e3b9001696ca86f2f67d8a42d934be1a737fbdc,2025-11-20T21:16:03.750000 CVE-2025-34044,0,0,366c33f7ae9a76c7157eb042c26a0f3ddcf9d6703270d713c098f34e0be9e3a3,2025-11-17T22:15:46.843000 -CVE-2025-34045,0,0,55e0931adeb83d90707e31076ce6575ebf52ce30c5dfca4ef1f5b8152b6d2a2c,2025-11-17T22:15:46.997000 -CVE-2025-34046,0,0,fdd5aa3231014ec417791c947b169bb009bd5e458d54386b5e74676188e46ee4,2025-11-17T22:15:47.157000 -CVE-2025-34047,0,0,073edb9c7e2fc7b3353ac8ce3f37921e4a4e13ef8e92ea3656e0a67f89d62653,2025-11-17T22:15:47.283000 +CVE-2025-34045,0,1,d5525dcc9a817e1bef69e49b1401574691595802e44a3a10a06597e65a170638,2025-11-20T21:16:03.880000 +CVE-2025-34046,0,1,7f531d105c270a2ffc74b55b3dddbe9c9e2fc5f1e0566e0d07a4ed4288a58e42,2025-11-20T21:16:04.020000 +CVE-2025-34047,0,1,728048c4a4424284dbc1835d3d66d9b191a52560bb21087110d256ccab6d661c,2025-11-20T21:16:04.147000 CVE-2025-34048,0,0,a407ac081db9f76a5098301b2648eaeef3b731e024123e1e760f1fe4fcc64d4b,2025-11-17T22:15:47.407000 -CVE-2025-34049,0,0,272b9d6c62540a18387587793670ea11f67d1021ee9dd4f935201330bf06574d,2025-11-17T22:15:47.563000 +CVE-2025-34049,0,1,4969752c11f1ed1abde55160ab8e0aeba3f248aaf804bef5347df0ccc67fa573,2025-11-20T21:16:04.273000 CVE-2025-3405,0,0,a31287bf487edd9888ccf3a2cc660111ad412bcd7d306362616791fdc35de9e0,2025-04-08T18:13:53.347000 CVE-2025-34050,0,0,af111c77c9b539b370be2c94db8e4883670055e8ebc5d5d09e04eacefd23542e,2025-07-03T15:14:12.767000 CVE-2025-34051,0,0,b852b8b2dc4772e109f3ec52f04af7fcf20ef87f3c39a1edab502c67751fe0bf,2025-07-03T15:14:12.767000 CVE-2025-34052,0,0,c01d6acf1ee9a2f57452ff9cd4c56c11308ecfa4e7fdc7155e04785b03982888,2025-10-09T16:15:44.593000 CVE-2025-34053,0,0,40c39c7a1a2c1d5dea129f265b4202b236b12e856e05e6e941efed60805c0f5f,2025-07-03T15:14:12.767000 -CVE-2025-34054,0,0,e6fe9922bd508ef801761980b92ee207dffc1352421520a7ce0f224d3cf53283,2025-11-17T22:15:47.757000 +CVE-2025-34054,0,1,7f425c449955d489912554112a8b6cfdb3071a3e693c7553207010ab5621ed6b,2025-11-20T21:16:04.400000 CVE-2025-34055,0,0,88e77e4abb772c93f7825a25dae60eaa003b509d5fc7315dc77d56a5be8f260c,2025-07-03T15:14:12.767000 CVE-2025-34056,0,0,f0bf2cc5ad974dfd32eae0d02492c9327636fb014de94d3a8e5876c4d72e5778,2025-07-03T15:14:12.767000 CVE-2025-34057,0,0,2583cd732042d0cc4db3736c258003e915fdf044e345b21590c71708056619ca,2025-11-13T20:15:49.110000 CVE-2025-34058,0,0,fd1d6135cbcb5a939cf5a00698e2051104b6bd46ef2e608640ce59a67cf5ed0e,2025-07-03T15:14:12.767000 -CVE-2025-34059,0,1,b3862d3e13db2cab19255e0d8a4e62fdc13b9159703281fe1c3307c6f6fa8211,2025-11-20T19:16:12.830000 +CVE-2025-34059,0,0,b3862d3e13db2cab19255e0d8a4e62fdc13b9159703281fe1c3307c6f6fa8211,2025-11-20T19:16:12.830000 CVE-2025-3406,0,0,1b9d71f36bb7e24145266005ec3e06d7d812fd0c70802f0cb70c212a2ac5a728,2025-10-16T15:03:33.840000 CVE-2025-34060,0,0,c9e66c79fa3e22979f6d536300a3a69b4248f557ef4ce60fb59bc75630daece1,2025-07-03T15:14:12.767000 CVE-2025-34061,0,0,d0e9b29f1304b1e5db459ee0806345af89a962a07b717e5de202c73a5968d72d,2025-07-08T16:19:11.700000 @@ -299675,8 +299677,8 @@ CVE-2025-34063,0,0,fbf50ba1666892a680b7e726cc84b450cde981ed5af9e60f07742062b62bf CVE-2025-34064,0,0,eb471144a9811114d1d1834fe8327f3c07a293fa4bbcfab9e78da16542b662d1,2025-07-03T15:14:12.767000 CVE-2025-34065,0,0,762233c4bc609a107f1f738ebedd0822859ababd12ff079e6ecf16dd47916b06,2025-07-03T15:14:12.767000 CVE-2025-34066,0,0,2c06d01ac374300a98d11b7ee5bae93ae717dc7cda884e4925e02feac29af7e4,2025-07-03T15:14:12.767000 -CVE-2025-34067,0,1,0209fead60326c8439d07f5b0ecf36911c39056241c1bb26df18c5988c87d97f,2025-11-20T19:16:12.970000 -CVE-2025-34068,0,1,fb9ee180ddcf619652cfbeafad0848685a91d010407699b47c33fc0455e09bc2,2025-11-20T19:16:13.113000 +CVE-2025-34067,0,0,0209fead60326c8439d07f5b0ecf36911c39056241c1bb26df18c5988c87d97f,2025-11-20T19:16:12.970000 +CVE-2025-34068,0,0,fb9ee180ddcf619652cfbeafad0848685a91d010407699b47c33fc0455e09bc2,2025-11-20T19:16:13.113000 CVE-2025-34069,0,0,6210c5ccacd8d9dfc01d84cf3aa158bc706ab7952f301d7d09f93d3d564322d1,2025-09-17T14:01:51.437000 CVE-2025-3407,0,0,80041d8df135c953776970ef2348ddefc818ec1b1a7ac53440630c9e959c5154,2025-10-16T15:06:07.900000 CVE-2025-34070,0,0,0729e7a8b8ccf0a394316a7d32551cfdbbe9e909fe56016e61f7bfaedbf349d4,2025-09-17T13:56:58.470000 @@ -299911,8 +299913,8 @@ CVE-2025-34317,0,0,c3bb7a21cec0e0d9c83fda19b5627323db05687be6d1b6cd996e35b05267f CVE-2025-34318,0,0,8a136f3d4321b5f2ec628b05406dc714e5fa1de322fbd7b251aeaf3d6550a0a6,2025-10-30T15:05:32.197000 CVE-2025-3432,0,0,32b4909a605e3dc15d41b2069e1ead14c30bcbe2dfa78debc747a89be022e4ba,2025-04-08T18:13:53.347000 CVE-2025-34320,0,0,d95b4616b85d0c8ad85d7ad63ce3723b341e97759936e1a6232f79e4d689cf91,2025-11-20T16:15:57.583000 -CVE-2025-34322,0,0,21b90c5a15e98bedce7ce7159d674be71e0381e4f438ba6e865c81e11a03eaeb,2025-11-18T14:06:29.817000 -CVE-2025-34323,0,0,aaaa99a1df8f503bf367f86780c7b690c94ffc438908196013b1c08d505ae01b,2025-11-18T14:06:29.817000 +CVE-2025-34322,0,1,f7360a5d1f4c34aac38763185baab5ac059f80f81c4225ede7c699074cf2698a,2025-11-20T21:48:00.250000 +CVE-2025-34323,0,1,6965f8aec7d4624b80fd90d119b81691d7fd2d204ecf4e5833741aa4988daba1,2025-11-20T21:47:39.343000 CVE-2025-34324,0,0,6c352fde3ead2f7874e345972d3190127c9615cae6e5f5c3c8610882423f696a,2025-11-19T19:14:59.327000 CVE-2025-34328,0,0,ffbb7c99e5c036da57b05e6ecc0249f5a05cb0820531863ad283a6ed49743ab6,2025-11-19T19:14:59.327000 CVE-2025-34329,0,0,04c4ed31319b0d896f5c48f774301ae1aab28d534632d7d5730f3eac00c94c52,2025-11-19T19:14:59.327000 @@ -300020,7 +300022,7 @@ CVE-2025-35010,0,0,1113be2dbd83122c4dc73ac15ff9397216b9c6135dbbacc0b793fe2e5464b CVE-2025-3502,0,0,7c73723b0d4b00e6da894445c57c5ec7f552a238ff16d874e6183139bc542d93,2025-05-07T16:30:24.910000 CVE-2025-35021,0,0,482a6d4ddfde0d7b0efdedf9b153bc7c5bac75a543a1a5c96f2910a3d96918e2,2025-11-04T15:41:31.450000 CVE-2025-35027,0,0,ee3bc3f6392163555f9fdb207e5108ce7b89ece2e4256bcf09db25f1613c2ec2,2025-09-30T18:15:49.780000 -CVE-2025-35029,1,1,299e72a25a82287e1cf65ea80b51c8550991c348a4dfd81dafe9f0552a02e715,2025-11-20T20:16:22.187000 +CVE-2025-35029,0,0,299e72a25a82287e1cf65ea80b51c8550991c348a4dfd81dafe9f0552a02e715,2025-11-20T20:16:22.187000 CVE-2025-3503,0,0,8d73ed34ec38f7a3fa46caf6863bc942845955658d4c73ee2f17e6ea13b905f5,2025-05-07T16:30:33.803000 CVE-2025-35030,0,0,e39d663aec752f9244945c42a080e972c1a94786b31d4e9166ff3449e0bd531b,2025-10-02T19:12:42.843000 CVE-2025-35031,0,0,fc880caef9addbfca6457f76c4b5a14f32235c362037c1b8a62fb19fdbe62002,2025-10-02T19:12:42.843000 @@ -300255,9 +300257,13 @@ CVE-2025-36143,0,0,1e82b2da60297014ec7d27a8e98d8cb4e86c5412a88d55b136ab5a2614b07 CVE-2025-36144,0,0,1da30bdd4ccd49cd4ec890b26153bf3d55025f1a95e35c154a245ebe04821347,2025-10-03T19:15:18.317000 CVE-2025-36146,0,0,e3618150e691b0b74ea90f60d841a93c82818d79e7aee8ea2f7ecaf82383ed59,2025-09-25T15:52:20.303000 CVE-2025-3615,0,0,8fdf4606cb6a0284ee0e09827c413ea146851550983dc6357a6b31a17ed36258,2025-04-17T20:21:48.243000 +CVE-2025-36153,1,1,a05b07c3f1f1fb4c28d6f8318d7a7e2d364d87eb0cda08174c48d60907883809,2025-11-20T22:15:56.970000 CVE-2025-36156,0,0,049b7eec39fbd18fdc6c7466dc6ba2fcdb79953a576acabf146af477dd8c771d,2025-10-16T17:44:10.913000 CVE-2025-36157,0,0,d4042d7b050d6d535f4db44d44cd43950e23acfe375ebe2b6e16a9b8b0723ed0,2025-08-25T20:24:45.327000 +CVE-2025-36158,1,1,1c65efa2737b3c7d65f73013bee2841d81703c1f2b5731bb2b685616b3bbda33,2025-11-20T22:15:57.153000 +CVE-2025-36159,1,1,37df3dadf9c2519d56a5c4fa8b03a1305e1183f98de32d5dfbe38bc53ac179af,2025-11-20T22:15:57.340000 CVE-2025-3616,0,0,85ddfd303733fa62ed9efef24f9f8a85faf23ed34487370e2b7cef38515b10a2,2025-05-28T17:38:29.717000 +CVE-2025-36160,1,1,9f505e8f1320d3c32293a67b44874bcd386de66d5f3e537e6cdab686fe5af3cc,2025-11-20T22:15:57.530000 CVE-2025-36161,0,0,df5c8be3f303553d7cec93b900b5dbff892c8dd2d487d3400b71768427ae9c3c,2025-11-20T16:15:58.330000 CVE-2025-36162,0,0,80d9dc94dac4a9f81e8dbf51072c45586362c2cdc481366e689f2684f1dfbbc2,2025-09-04T15:36:56.447000 CVE-2025-3617,0,0,ad16398ae273d75bf1db404a59f772756c09fed66772219b273759351710e3f0,2025-07-14T19:16:28.257000 @@ -300984,96 +300990,96 @@ CVE-2025-38088,0,0,bd7beccc3656761913cd6af9eb0cef1913d763ca873f64b01394f71b99138 CVE-2025-38089,0,0,0f9341fafa70952cbbcb5e4a85c26898da8a35265e247416ae8c20441cbaaca5,2025-11-19T12:56:38.213000 CVE-2025-3809,0,0,b0f7ce143ffe6fc36f9bbc17873d1316b0e5d9337b65e2cd57e88fbec5f74a76,2025-04-21T14:23:45.950000 CVE-2025-38090,0,0,55b1ce5ce9d84b2bd65c2080831aefec2f99a920603e4fa1529bd18cedd87360,2025-11-03T18:16:02.233000 -CVE-2025-38091,0,0,bb4485a92c95c3adcc901795b4d733d031583aa8106ffaf153513abfecf07bd9,2025-07-03T15:13:53.147000 -CVE-2025-38092,0,0,f9eabc95cd3a028366ee59b815c0deb623403f5d0e60fb7831608b7c71932a0b,2025-07-03T15:13:53.147000 -CVE-2025-38093,0,0,ed1bb71f517f806d397ec6b0c4bac52f1d16ab9dd8f8321afe771df55207d749,2025-07-03T15:13:53.147000 +CVE-2025-38091,0,1,36b4333967250456c5ebb8a29e21c94053492805efdcd33f21d8849255e51fcc,2025-11-20T22:07:13.727000 +CVE-2025-38092,0,1,e7115d6cf120546f992683bc99828f77a826d040675cf7d70379eacd8bbb52e2,2025-11-20T21:58:27 +CVE-2025-38093,0,1,f15f8a4bb91515141d3b91c76f32c031a0b70b512d063a0535ea398c08138150,2025-11-20T21:53:26.073000 CVE-2025-38094,0,0,5377e33e88dc86a0700fb10550bb92a07ad3b4a9f8677bdf89670672466df550,2025-11-03T20:18:46.420000 CVE-2025-38095,0,0,9fabe5cb4dde59b8b3243d870c795ca7089047dfba7738dcbe51fedfb35a5d09,2025-11-03T20:18:46.513000 -CVE-2025-38096,0,0,27337b4cf104913b5e156ae58b95c88dde73c003f9d57ea65d45761f3c797a5c,2025-07-03T15:13:53.147000 +CVE-2025-38096,0,1,fbc0bb2fc54da6900ed1b1406df786c7e69934c800aef76e0de51df03cd694de,2025-11-20T21:53:08.080000 CVE-2025-38097,0,0,03992136f0ad2258f07593f930a73241062764f83269a7d21267ebe5bd34bc20,2025-11-03T18:16:02.573000 -CVE-2025-38098,0,0,a41d701d4aeb9a3c8b5520d05d921ffb75ca032720eaa6a41e891be4803d3dbd,2025-07-03T15:13:53.147000 -CVE-2025-38099,0,0,a6d55bf0dcb60c8b11a1ad23b66444aadc204bd97d4435abbf3901e7d5e38f17,2025-07-03T15:13:53.147000 +CVE-2025-38098,0,1,2f354706f7f426718acc4f773f9bdcf3572ff57cea5db2b8bf99aabaa5d41556,2025-11-20T21:52:51.120000 +CVE-2025-38099,0,1,89c0a5169db19377db269c91ceb2ac6d72254a2be14e1e354f9fd2016193384d,2025-11-20T21:52:36.590000 CVE-2025-3810,0,0,c09636d61adf0ea2e7e3abe190febe3e38531dd71134cb03c3ac4cb7c56d634d,2025-06-27T17:39:17.577000 CVE-2025-38100,0,0,9d9a4ebf3131b3b3d827ccd26ea0914c1e83e3d93543a6c7b4802e5564f2c6af,2025-11-03T18:16:02.683000 -CVE-2025-38101,0,0,9a854c31833d7c545e1732f5070bc6b2b17e4913b4f946a29f3a475bd4bb0784,2025-07-03T15:13:53.147000 +CVE-2025-38101,0,1,ea1a33e436f2ade40ca9c75463be769459e538dfda2ff6b0ce94cd991934b213,2025-11-20T21:39:20.240000 CVE-2025-38102,0,0,fde55543abaa2d9ed5de7141031a775405af0edabeee3f06885707d0d33cc154,2025-11-03T18:16:02.797000 CVE-2025-38103,0,0,8686d48694cfb399c9f5a5b6db8a4d7b0aed2001d31b8a41027c987bfceb6731,2025-11-03T18:16:02.907000 CVE-2025-38104,0,0,fe7da678b6a85abbada6d83ed3d9256854cadc8b90cd0ae886bdeb63c030f0e4,2025-11-04T16:59:15.733000 -CVE-2025-38105,0,0,da2d7c74bef1d09b0de73e9515283c41caa467093e9225244873fa212a68f1f6,2025-10-12T12:15:54.880000 -CVE-2025-38106,0,0,17836d014dcc213719aca81c6b78dbeb91ff667d0e7345caa3d9b5b5ecb9da89,2025-07-03T15:13:53.147000 +CVE-2025-38105,0,1,ebdf0808d95fc8bf4146cf53c13cf12455b98884b6ad83bfafb546b2ce94fad9,2025-11-20T21:39:12.730000 +CVE-2025-38106,0,1,d920bbf765ae788c05db717aafd47daf4c0f382917d32bf171232f87b68b4d14,2025-11-20T21:36:43.990000 CVE-2025-38107,0,0,ac170fcf7f8d950f4a03585dbe521db359958c06ffaddcfdac33dc59c66e59c5,2025-11-03T18:16:03.020000 CVE-2025-38108,0,0,8fbe9c9cdf10d3eb1c33cd551a487143163589aaf1a2caeaba4813a05cb7e4d9,2025-11-03T18:16:03.137000 -CVE-2025-38109,0,0,4c4811814a5151ef8fc8a7e0fb8f40f174423f21cf70bd23a8c740de8737dd49,2025-07-03T15:13:53.147000 +CVE-2025-38109,0,1,0704f26cd879dcebe6f5718ae68adc24a7e2679ba266ccc442bcc74ff281a044,2025-11-20T21:36:33.887000 CVE-2025-3811,0,0,42c8bc37cb79bec823ed73bb03fc4422ed8eea640dadd9c0e84b52f3069662e4,2025-06-27T17:39:22.693000 -CVE-2025-38110,0,0,f5facc843b3fb290f1c3f3b558d02b51be0d41ffd401c594772f3be28082e85c,2025-07-03T15:13:53.147000 +CVE-2025-38110,0,1,782b653dc0a1a4f99e26abf65e909a828fab6e6a1572eeab3b9db6004a91cc36,2025-11-20T21:36:19.313000 CVE-2025-38111,0,0,562f1a7fe9efdadf5a9b39f6d0444596ebcb1143bea587bf88edeb6517f6aa9c,2025-11-03T18:16:03.250000 CVE-2025-38112,0,0,13bb318400f65ffe5f006aa219049df798f1b49cf86137700f9ae2b56afa5663,2025-11-03T18:16:03.363000 CVE-2025-38113,0,0,17ecbb6dd92e87665a22b78d843ddb79776e8e0d3c1b7aa1cc5344ef84a4b8a5,2025-11-03T18:16:03.470000 -CVE-2025-38114,0,0,d612921ba00f733eebdf9ef3c7fccf1271f0d967b10e18c53981b0b8a9fbd478,2025-07-03T15:13:53.147000 +CVE-2025-38114,0,1,0721eea4d6cb6354efc7738a7e3716cc9f8144f00a37cb1f5b135f9aa406eba4,2025-11-20T21:33:43.667000 CVE-2025-38115,0,0,1f925db76e873e0cdb20d660d271120fc06d87697167cd22256d895957356e5b,2025-11-03T18:16:03.577000 -CVE-2025-38116,0,0,326888402d10a53ff952e0537644b6e1c6b2e7eaa5e24f2b27cab3b0721f5d1d,2025-07-03T15:13:53.147000 -CVE-2025-38117,0,0,e5ad241085fbf463d0e1f60b78c4824b058f351ed340fadb88cdce09d76311e3,2025-07-03T15:13:53.147000 +CVE-2025-38116,0,1,69745a69c8c0106a3ff91cb069aaf5cc4864be8f9013c889bdd0ed911da0e4b8,2025-11-20T21:33:35.180000 +CVE-2025-38117,0,1,2b6cec5edd6d2ca7d09017eb96d16ddd4713255209a6aa8eb6865dc2fec93878,2025-11-20T21:33:29.773000 CVE-2025-38118,0,0,c8d570117dd79368e67bc4add1f4a04cfef469b68da76c9611e889fbf7e13e4f,2025-11-03T18:16:03.690000 CVE-2025-38119,0,0,6aad28d7c6f70ac1f7d800203ed55ba59646a875e7b1f09be7c65b4878a013b9,2025-11-03T18:16:03.813000 CVE-2025-3812,0,0,0f66093f84eb06bf3e1833106e7d524992fb03c23cda567c6a3d9deec629a713,2025-05-19T13:35:20.460000 CVE-2025-38120,0,0,2b68b0e3fdb7479a3c4e80482ce41e46753c3ed163ecf984e67d2e6833ddf1e9,2025-11-03T18:16:03.917000 -CVE-2025-38121,0,0,d846832fa5aea7b57f40073c422d3bf6345466828099e5a2802e8f21b56ed1fa,2025-07-03T15:13:53.147000 +CVE-2025-38121,0,1,198e6617fdb9a68ff937fd9b27858711297b052c6278a799ad3d56c938aada8b,2025-11-20T21:33:23.777000 CVE-2025-38122,0,0,eedac722ca00c289747b95e5fe1e59f5e8a4fcdbf99de69ecfb1442b38b543bb,2025-11-03T18:16:04.023000 -CVE-2025-38123,0,0,0ef3d8b08767761a0b3bd19b62095f2922689b18456b01037301c81a5a16e934,2025-07-03T15:13:53.147000 +CVE-2025-38123,0,1,53d64757f864e97e0630a2e3c1ce7d87578dc95d8cedddae574d2276eb24bbbe,2025-11-20T21:33:18.980000 CVE-2025-38124,0,0,b4c2993ed1aa4e58165bde3b35fd5246f43e6b44aa2cea67948d0d35fdee14cb,2025-11-03T18:16:04.127000 -CVE-2025-38125,0,0,21318b008d10b27e91b869a8c739f2f676985accf0bb66a4e52ee49b5fa82a98,2025-07-03T15:13:53.147000 +CVE-2025-38125,0,1,d511efceb3208eb7947b4a91732e5fb26f5b4d048138c28370894e19d952a3a0,2025-11-20T21:33:13.663000 CVE-2025-38126,0,0,b4d54b60378357b5f3c7ffaea3b6bd91b06ee6800fe9a1ba8d5614fd3e5b8a20,2025-11-03T18:16:04.233000 -CVE-2025-38127,0,0,402ae992597608625bca0445471eaf2767c570e49781bfcb845291b7d313a6f7,2025-07-03T15:13:53.147000 -CVE-2025-38128,0,0,e06123ac3c4a4db5f0b91273bf9641850b4805de944647786878cdc36d260ce1,2025-07-03T15:13:53.147000 -CVE-2025-38129,0,0,e8dc300c886301421816e83c72d4b36a5548742fcd51ffde5b918c70ae4b0c8b,2025-07-03T15:13:53.147000 +CVE-2025-38127,0,1,8ddd7a9f6c159a0034b0e806bb13230c46f8bf3653f210fda177a5b3dbfd80f4,2025-11-20T21:32:54.540000 +CVE-2025-38128,0,1,b0b12445c7e933beadbfedb11cf59f0b6b30c71c0977b0d3a13c341d9dc44430,2025-11-20T21:31:37.967000 +CVE-2025-38129,0,1,fe020ab60a43ce70ed539519aa2c266920163b04c15b71d1c797659d97210ddc,2025-11-20T21:24:30.710000 CVE-2025-3813,0,0,7231da6fa6ccd50fcfc3fc3971afcb526b8c03a86621c58a8fc81693c4ea9559,2025-07-11T18:54:56.213000 -CVE-2025-38130,0,0,d09b5a7a5107baf0e0899e4889b529a2aabd325dcfdca1f73b8ef8cc73e679bf,2025-07-03T15:13:53.147000 +CVE-2025-38130,0,1,52f81462240893c6fc0b3902b9b544d06491b943b102d0d7d12902a67c149030,2025-11-20T21:22:16.040000 CVE-2025-38131,0,0,dd491b852c06e8d1dde669f555deb4110711aeea176f0830de4c3aa60541ac6d,2025-11-03T18:16:04.340000 -CVE-2025-38132,0,1,ef0f09f660c4afdd337ba0dfcf256d7197bd1150ba22af263c37f148b9709fb8,2025-11-20T20:12:12.817000 -CVE-2025-38133,0,1,972b4b5dde6ff7cfcaac0811bfaafbc944c07c4aadd7c139781b5cef96c1d72e,2025-11-20T20:11:50.617000 -CVE-2025-38134,0,1,49a640202a738abaa7ed9c2c9549fb214c45ef4e9486e85614cb690f3020b324,2025-11-20T20:11:42.340000 +CVE-2025-38132,0,0,ef0f09f660c4afdd337ba0dfcf256d7197bd1150ba22af263c37f148b9709fb8,2025-11-20T20:12:12.817000 +CVE-2025-38133,0,0,972b4b5dde6ff7cfcaac0811bfaafbc944c07c4aadd7c139781b5cef96c1d72e,2025-11-20T20:11:50.617000 +CVE-2025-38134,0,0,49a640202a738abaa7ed9c2c9549fb214c45ef4e9486e85614cb690f3020b324,2025-11-20T20:11:42.340000 CVE-2025-38135,0,0,462c058502fc65ad05305400d576745d35dce146f4f3c1cc88c3d9ccb3c9585a,2025-11-03T18:16:04.447000 CVE-2025-38136,0,0,eda788c061a00a98b7ca35bf7f7cdc594eb810285a421a45d80c0b980a869a68,2025-11-03T18:16:04.557000 -CVE-2025-38137,0,1,05dc179af4b00f267604b5cdf7a4c19d84e9500862a5bfb68d2885b026ca49a2,2025-11-20T20:11:34.967000 +CVE-2025-38137,0,0,05dc179af4b00f267604b5cdf7a4c19d84e9500862a5bfb68d2885b026ca49a2,2025-11-20T20:11:34.967000 CVE-2025-38138,0,0,a9412e3361f3678985cfab4ac56d4b077dd2a5ecf696040c54b1323ef1059e8b,2025-11-03T18:16:04.677000 -CVE-2025-38139,0,1,20ddd31bb360446e40bc6d9e169fd21664c0f5da156a1400f1e4613535cf38e7,2025-11-20T20:11:27.733000 +CVE-2025-38139,0,0,20ddd31bb360446e40bc6d9e169fd21664c0f5da156a1400f1e4613535cf38e7,2025-11-20T20:11:27.733000 CVE-2025-3814,0,0,11c279efbeec4fa23a54b22cf013841136b5f0f0ea6d94e898bb584de2240f97,2025-04-23T14:08:13.383000 -CVE-2025-38140,0,1,f2ae6eb50229904964f8b5c7a80819150231c8259c2093749fe69a8ac03b7192,2025-11-20T20:11:16.690000 -CVE-2025-38141,0,1,62c6edd7fcf01d25071bf2c7ca1ae78508cf892e07780ad8b0e28659cac8d9ab,2025-11-20T20:10:06.327000 +CVE-2025-38140,0,0,f2ae6eb50229904964f8b5c7a80819150231c8259c2093749fe69a8ac03b7192,2025-11-20T20:11:16.690000 +CVE-2025-38141,0,0,62c6edd7fcf01d25071bf2c7ca1ae78508cf892e07780ad8b0e28659cac8d9ab,2025-11-20T20:10:06.327000 CVE-2025-38142,0,0,34b68a64ee1af8018e6a7176fb13a56f598e296fdf937f96f39245fad6ea1880,2025-11-03T18:16:04.783000 CVE-2025-38143,0,0,80b242616d68bd48d43c72e52f56709520d50139f392fd7d41b60b08c27c0bb9,2025-11-03T18:16:04.880000 -CVE-2025-38144,0,1,2733b1b96876df490beb9c7a5ae18f905319830e9f234e87c3e38af63676248e,2025-11-20T20:09:50.860000 +CVE-2025-38144,0,0,2733b1b96876df490beb9c7a5ae18f905319830e9f234e87c3e38af63676248e,2025-11-20T20:09:50.860000 CVE-2025-38145,0,0,7b1277e93ebdc4065cf77d91cc581ce482232cc2fb2acfa34eb936f46d996395,2025-11-03T18:16:04.983000 CVE-2025-38146,0,0,be5a835c6f8f3bd81a2ea81a6573ec51d26e9636d46961ea7c5ae141b33bca5b,2025-11-03T18:16:05.087000 CVE-2025-38147,0,0,0066aa3a5386acda615fc25f329410807474fab2f16bb92e72cbf15d22df19c8,2025-11-03T18:16:05.200000 CVE-2025-38148,0,0,a6e9840d50109eb8c1658978f73239c84d1829f90536915b50b22738cf3e102f,2025-11-03T18:16:05.320000 -CVE-2025-38149,0,1,68b0df6cd58dc369685e16b85f12efaf3cd2d40dab6a68b4cec77ca44646603a,2025-11-20T20:09:32.800000 +CVE-2025-38149,0,0,68b0df6cd58dc369685e16b85f12efaf3cd2d40dab6a68b4cec77ca44646603a,2025-11-20T20:09:32.800000 CVE-2025-3815,0,0,e6d6eafdf99072b79b824cef8fe42ba5009e89200a72e7566988b88e2d1ef899,2025-05-05T20:54:19.760000 -CVE-2025-38150,0,1,289db0d983fe6c4a1ed66d2c82bb78dda396f6bbd71dbe0aad0051ff0f8282a7,2025-11-20T20:13:06.303000 +CVE-2025-38150,0,0,289db0d983fe6c4a1ed66d2c82bb78dda396f6bbd71dbe0aad0051ff0f8282a7,2025-11-20T20:13:06.303000 CVE-2025-38151,0,0,adf17596d49dc7d3e40b6bf1d31986f361f05cb6b5293f0ce010fa23458ece48,2025-11-03T18:16:05.427000 CVE-2025-38152,0,0,cf0bc220d9a8aba28755a5b96a06c97a5813f798da3249a0fd4146c0492b1ff7,2025-11-03T20:18:46.613000 CVE-2025-38153,0,0,c42b0e59b80b911e9c1b5b027ad5fd67091ee4b5020299a4eb18e2f35f24eae4,2025-11-03T18:16:05.537000 CVE-2025-38154,0,0,ef94b25135acba25970bdb65e37888e3216b857a7feda0aef1109f6d69378b28,2025-11-03T18:16:05.650000 -CVE-2025-38155,0,1,28519888d8e608dcf1dc5eb3fc2cd6fed8ebb80a240f92aab3bcacf98effaeb0,2025-11-20T20:13:19.543000 -CVE-2025-38156,0,1,bd0305c0f579abbb1752b69e783e3c22a2a113da8d8b4cafe64927d2729290f7,2025-11-20T20:13:31.493000 +CVE-2025-38155,0,0,28519888d8e608dcf1dc5eb3fc2cd6fed8ebb80a240f92aab3bcacf98effaeb0,2025-11-20T20:13:19.543000 +CVE-2025-38156,0,0,bd0305c0f579abbb1752b69e783e3c22a2a113da8d8b4cafe64927d2729290f7,2025-11-20T20:13:31.493000 CVE-2025-38157,0,0,06ec6a6d042dbcbb2023a12b1dc17ab19fa1dccfe4d0326382edc7a35c6ec659,2025-11-03T18:16:05.750000 CVE-2025-38158,0,0,1483213f8d3c4ec0ec1a7ae0e09aaa6b57dfd1a6cd95956ee08e964f061190fe,2025-11-03T18:16:05.857000 CVE-2025-38159,0,0,b8138489e1ff1392f52bb5b6441974dddb3a5a9ed66a49c5d09e99b56e3d3019,2025-11-03T18:16:05.963000 CVE-2025-3816,0,0,5a89180e8864e5934d9caf49f68c9eff2ee5ee709d614f12cada0bf8c18ee432,2025-10-01T19:40:56.060000 CVE-2025-38160,0,0,c72439149b0cffec48c04f02a6f3d4bcaab7f3360f543d8727c48bb32d71ede0,2025-11-03T18:16:06.070000 CVE-2025-38161,0,0,09ce4f43e1b6dedd2b9d95e8d919c69dce5ac4149353ad58215549b571614305,2025-11-03T18:16:06.173000 -CVE-2025-38162,0,1,79b9b791cf71b9c876d26403b14b33292cdc8b0a9ae4a5014e7d2b7de30a64f3,2025-11-20T19:44:12.210000 +CVE-2025-38162,0,0,79b9b791cf71b9c876d26403b14b33292cdc8b0a9ae4a5014e7d2b7de30a64f3,2025-11-20T19:44:12.210000 CVE-2025-38163,0,0,c31d324643ab98c67f962ebedb1eb0b30a85f5a857e6733535c9d0cda75baea9,2025-11-03T18:16:06.290000 -CVE-2025-38164,0,1,f3987bac81a862d897c05e87d75ec534d9625eeeef8e9fd36fdd9668b179c839,2025-11-20T19:38:34.353000 +CVE-2025-38164,0,0,f3987bac81a862d897c05e87d75ec534d9625eeeef8e9fd36fdd9668b179c839,2025-11-20T19:38:34.353000 CVE-2025-38165,0,0,79d4cf9cef6174fac2b5a43fcd288fa7a964e8034d4273013439bccd7d89405e,2025-11-03T18:16:06.410000 CVE-2025-38166,0,0,325f44706fcb7eebd7e7c8d49de5ace017613974513790ec30ff2be7c043f298,2025-11-03T18:16:06.543000 CVE-2025-38167,0,0,aeadb42850e9c979ee6df9ac31fa0b725dc3f536f5848aef8bcb76f42879204f,2025-11-03T18:16:06.703000 -CVE-2025-38168,0,1,96626b9a4a6b6ee3c6f9979a8e55401443fa9adfcb3abfd19f7cb36e4fa5774b,2025-11-20T19:29:30.023000 -CVE-2025-38169,0,1,4107e47d9b3a711be2f17df65b2ae79b08e603e79c03c7b425bb7e83dff69cec,2025-11-20T19:28:15.673000 +CVE-2025-38168,0,0,96626b9a4a6b6ee3c6f9979a8e55401443fa9adfcb3abfd19f7cb36e4fa5774b,2025-11-20T19:29:30.023000 +CVE-2025-38169,0,0,4107e47d9b3a711be2f17df65b2ae79b08e603e79c03c7b425bb7e83dff69cec,2025-11-20T19:28:15.673000 CVE-2025-3817,0,0,d0f597db55b8dfaf3fcb7faaa03edd63ac7afaad668e4375c18af41b72dfbd4b,2025-05-14T21:01:06.513000 CVE-2025-38170,0,0,cfa4771d6c541b23580af8530376956f57d08fb6123500b8992354e25de015e3,2025-11-03T18:16:06.860000 -CVE-2025-38171,0,1,95d044ef6bd1544b0e47a3f81d0dabc84b93446f7f6934cf6bf398ea2061ab94,2025-11-20T19:24:31.590000 -CVE-2025-38172,0,1,d5fe381b5cd071ddcd45f72c64b09941a631bc36b12b06c43bed8992bd716fcc,2025-11-20T19:22:42.703000 +CVE-2025-38171,0,0,95d044ef6bd1544b0e47a3f81d0dabc84b93446f7f6934cf6bf398ea2061ab94,2025-11-20T19:24:31.590000 +CVE-2025-38172,0,0,d5fe381b5cd071ddcd45f72c64b09941a631bc36b12b06c43bed8992bd716fcc,2025-11-20T19:22:42.703000 CVE-2025-38173,0,0,41d0f95eaade5076a5b46c0bb72b3a7501e3b710387c986385be95059d2daad4,2025-11-03T18:16:06.970000 CVE-2025-38174,0,0,c5e693bc0c2692f1790edd3a5120f35b1cce26e820bc1479c6b3daa0b3223381,2025-11-03T18:16:07.080000 CVE-2025-38175,0,0,f6104efada74cdedbe50b08585b20ebc6e0e16a1fd372718ba355ebcea4d7082,2025-11-19T21:04:54.850000 @@ -301152,9 +301158,9 @@ CVE-2025-38240,0,0,c63d1778c2e47354c9d2e2a389a818a9e77160c56f3edc3f022b68720de6a CVE-2025-38241,0,0,0eb8428e050411f42ff87c59e542592ceefad798587be711edb8494aedf50533,2025-11-19T15:51:58.030000 CVE-2025-38242,0,0,0159afa6e15492bf56abd7f20ba3c736f69debc0cfae72b67bc20b02f24a6f97,2025-11-19T15:44:49.340000 CVE-2025-38243,0,0,079339401ddca319977a7ca1a878f8e165c1b904ae8680df6e1bd03b8fb3a562,2025-11-19T15:37:27.197000 -CVE-2025-38244,0,1,084ef7d20afe13496f419fa7087856531f2ce08f84f267489058ef1e41b4ff3b,2025-11-20T20:13:41.240000 +CVE-2025-38244,0,0,084ef7d20afe13496f419fa7087856531f2ce08f84f267489058ef1e41b4ff3b,2025-11-20T20:13:41.240000 CVE-2025-38245,0,0,86372dd420de1d900f6624b3597b655c0780252507b73c03fe5eb28d7d870b24,2025-11-03T18:16:10.830000 -CVE-2025-38246,0,1,4fb104a7062b99fa9130c6bb88711af67244bffbd74d8b03aa63e6289d01de85,2025-11-20T20:14:15.713000 +CVE-2025-38246,0,0,4fb104a7062b99fa9130c6bb88711af67244bffbd74d8b03aa63e6289d01de85,2025-11-20T20:14:15.713000 CVE-2025-38247,0,0,fedb78c2a7800e1373a2255a4fea7ebab72a22997ad93927dd142795a9164d8f,2025-11-19T21:01:49.597000 CVE-2025-38248,0,0,72052b3b50dd20164c4966fc5f715392661dd0109c6654dc31add6ac227cdd85,2025-11-19T21:01:34.850000 CVE-2025-38249,0,0,946a6dd680eabe29cfb57854ee0f983e4bb248f986df63d382a4746cd6f35cef,2025-11-03T18:16:10.943000 @@ -301171,7 +301177,7 @@ CVE-2025-38258,0,0,aebe16fbef2b2d4b5b64f3c05061ae5780a182c45dadbcde0c0eef18632f1 CVE-2025-38259,0,0,2ab3010a390cdf6a00e36d20426543575909adcaec5b4012c14f97dba340364e,2025-11-03T18:16:11.277000 CVE-2025-3826,0,0,12613660cc812171747dcc452352aee420b2e0e6059d26c52e556db0199baaa6,2025-04-30T17:16:40.730000 CVE-2025-38260,0,0,322700104c250774f26aedbdc2d8f9c4b27f1485e6c60d334b5e88d850d15325,2025-11-03T18:16:11.380000 -CVE-2025-38261,0,1,320ea145a3bebfbd0aeecd1a72e4b04fe77dc7422e10053a787c0eed4ee59e78,2025-11-20T20:14:50.460000 +CVE-2025-38261,0,0,320ea145a3bebfbd0aeecd1a72e4b04fe77dc7422e10053a787c0eed4ee59e78,2025-11-20T20:14:50.460000 CVE-2025-38262,0,0,c0a418bdff0c2ad131b4e6cdc5a6fd6c2203e6f618b477cf0fa9baf9b3eacb3b,2025-11-03T18:16:11.487000 CVE-2025-38263,0,0,be6cd7aa65d5da06187fa0155321eec142116f2f980b2f398241a24050863a33,2025-11-03T18:16:11.597000 CVE-2025-38264,0,0,d3b2ee9f94b8c15f74731d05a48374286a8e01c8f0adf0fc349f4b5600c560e7,2025-11-18T18:22:21.840000 @@ -302718,10 +302724,10 @@ CVE-2025-40598,0,0,e4a757e76d59d51e54afcd13cdca0e18aac3e181d6deadc26a8da41913e19 CVE-2025-40599,0,0,921a90b0f398efac4f5cba90f34db13818695f57fc9e8f6b06b31a69efc04a47,2025-11-06T16:41:11.763000 CVE-2025-4060,0,0,170985bf8f2f8cc428b363944749e5a7390ec03c3ff9ebf1391dace27bffb441,2025-05-09T19:34:16.987000 CVE-2025-40600,0,0,637429c32027f41b1ccacf9f344b2a8cc421bee10c0001c33f20c1f943b2ece1,2025-08-11T14:59:40.867000 -CVE-2025-40601,0,1,634f05d9fe078213daa8af9277e0ef693a191ff778cbceeb0e6a093ff2bab101,2025-11-20T19:16:13.247000 +CVE-2025-40601,0,0,634f05d9fe078213daa8af9277e0ef693a191ff778cbceeb0e6a093ff2bab101,2025-11-20T19:16:13.247000 CVE-2025-40603,0,0,39e629412d4f68c20b9cdaa52ebda3a5a4fc7a1fb40ca6e948c1de8e95e9f86b,2025-11-06T16:26:50.913000 -CVE-2025-40604,0,1,b51ffb0fb05157cdab204867471efa1dbe27728933cea388be8843699cb747e9,2025-11-20T19:16:13.447000 -CVE-2025-40605,0,1,27ed23bca2bbd140ce9415c278b57db234656b9e66335607072054c4171b43fd,2025-11-20T19:16:13.630000 +CVE-2025-40604,0,0,b51ffb0fb05157cdab204867471efa1dbe27728933cea388be8843699cb747e9,2025-11-20T19:16:13.447000 +CVE-2025-40605,0,0,27ed23bca2bbd140ce9415c278b57db234656b9e66335607072054c4171b43fd,2025-11-20T19:16:13.630000 CVE-2025-4061,0,0,38d10b753ff5d559244af6fd3081a54533e11210e5e1217338182a3bb0bb72be,2025-05-09T19:34:08.123000 CVE-2025-40615,0,0,831b8a0ef596d35c2bdf2a9df9931d72aef146c17c007d4a6e09c3614205def5,2025-10-14T20:59:06.600000 CVE-2025-40616,0,0,2e64b4eedf830b7fcabc514ce48c22b67be19c896fd36f474a4f8f45e7a145bd,2025-10-14T20:58:53.150000 @@ -307057,8 +307063,8 @@ CVE-2025-48982,0,0,fecc905a116bc4cd6e6bdd2bebd95539516075ea56b025b6bcf0607514fb7 CVE-2025-48983,0,0,e4f0c6261174e13900bbc1426d176dffe4cf6ef240dea0e9994f5d8e002ed08c,2025-11-11T02:07:03.383000 CVE-2025-48984,0,0,4615a534e05deec6f9a4718b4ebf1f6c8be52138f0367c85fd6e7a4ec7a89c8a,2025-11-11T02:08:57.443000 CVE-2025-48985,0,0,7537e95b5fa5cca849f052e15aa0ac61b2bfa7c42fe0f34ae0cdef3459dbd5fd,2025-11-12T16:20:22.257000 -CVE-2025-48986,1,1,835dcb7337a3586f8036493162e083d12b5918a211674b9755fe310a4851d668,2025-11-20T20:16:22.407000 -CVE-2025-48987,1,1,7ac292380f5742e696408cec74a864920618300b8c07639eb08b54a96d5047a1,2025-11-20T20:16:22.550000 +CVE-2025-48986,0,1,8d3bc76c7c6e36688914d3b2d295ca8d063ba248a6331ca5cf2a66b9b8d3fc93,2025-11-20T22:15:57.717000 +CVE-2025-48987,0,1,d1e5861ee15aa42b65f8a7c7b0469d055c96d4e164e7bb19d8d28e157aefb3a5,2025-11-20T22:15:57.840000 CVE-2025-48988,0,0,b950ad497f92ccff1815f5da970ae7efbac48cca58a8625908e10e1ae29d920d,2025-11-03T20:19:07.890000 CVE-2025-48989,0,0,cae9459cb1645ad3a6e3aa88781f22e13868e63c2d44d29140fae47a1bb87888,2025-11-04T22:16:17.987000 CVE-2025-4899,0,0,384aad67823f1c19c564c5975182391c80467536acba8235a635dfd93a5393e3,2025-05-21T19:37:31.280000 @@ -308468,9 +308474,9 @@ CVE-2025-51658,0,0,37ab6adefed9b7d63e945326a266a977810ac7592ef8584260dc45c494bcf CVE-2025-51659,0,0,c68b887fa67e35149f6c24df03e9fc928f6571c37ab316272e854130155b7133,2025-07-15T16:39:21.570000 CVE-2025-5166,0,0,c51ae421fabf1219a3900c58419bdaa5117f65f9603b27137cff53c0e0d61b00,2025-06-03T15:40:15.497000 CVE-2025-51660,0,0,b483ea37680ecb198c2a08081d84f255ffe0697ac6ce7647b7e8004cb6cc49f3,2025-07-15T16:33:42.263000 -CVE-2025-51661,0,0,2460dcfa94a741f97dbcea35870be16e5de6e8af9fd2c07cff031eb3cd458aa8,2025-11-19T20:15:52.867000 +CVE-2025-51661,0,1,40127eb2b3ca114122c1a5e2da30fa1bc44ad23d009e6a37bb1e48a6cea97f95,2025-11-20T21:16:05.287000 CVE-2025-51662,0,0,29c446c541ec2a07c87373e0a2adc3d2301c6d97d89c75d6bd98d110bcc8ebd7,2025-11-20T16:15:58.540000 -CVE-2025-51663,0,0,7146bd4c1b3c01b995e5bf6de5339fe172c952bd8a597e59c904be6e0494aa47,2025-11-19T20:15:53.203000 +CVE-2025-51663,0,1,300e7d3bc867535ee1ed937b91df2ddd48845e1fb6fa0cd92770d2d08b1d7dce,2025-11-20T22:15:58.280000 CVE-2025-51667,0,0,649ecaac5c359083c88787421628fa4b26e484ef86cfe0f6624ea32676da7524,2025-09-09T15:46:50.510000 CVE-2025-5167,0,0,d0507ecf0b5b21e24f107649f2515c6afbb660790e07751f18cd594dd93f34bc,2025-06-03T15:40:34.607000 CVE-2025-51671,0,0,e799dcb5c7f4e2c72e975ca6f751fefdaf18628907cc07caa283e469a95a7814,2025-07-01T15:53:21.097000 @@ -308673,7 +308679,7 @@ CVE-2025-52392,0,0,a8524b9195fd72b59ceff42369cac230053cf0567417e33fb521754731384 CVE-2025-52395,0,0,101f92783e119ad60c2f2d72b79a7ca36d0ab3c4b38f9d692ec3cdad36fb78cf,2025-08-22T18:09:17.710000 CVE-2025-5240,0,0,53ca53d475b36a195d6563767e65714b96e2893c3d1b8616e15faf613e5ae03c,2025-07-22T13:05:40.573000 CVE-2025-5241,0,0,28b47fa6c3eb507ae86be622cd1298e851a31944aba1ccc32b24fa77cf4d93e1,2025-07-15T13:14:49.980000 -CVE-2025-52410,0,0,39278197ca7e4c25a4c5b2abcacae10e157bed735743a3d5a55b3e7556b8d713,2025-11-20T17:15:50.760000 +CVE-2025-52410,0,1,3a4d4e52f0d79ddd83d51cf5da52cf9de5c0734de7aa1ac449608ab708be30c9,2025-11-20T22:15:58.457000 CVE-2025-5242,0,0,3430448059313f76ae0f8dcef9fc481fd3cfce1823da3d8abe54d77d5e6c274d,2025-06-07T23:15:22.130000 CVE-2025-52424,0,0,afdf2b5c7dfcfcf612ed70f8c8762d79ae1d051ab22cbed916b89047863b607d,2025-10-08T19:37:12.980000 CVE-2025-52425,0,0,6538565e4b839749249362698095dc7b1efff9c7ab5870db101fc8ef2b94603c,2025-11-14T20:12:47.743000 @@ -308812,7 +308818,7 @@ CVE-2025-52630,0,0,cbdfb3dedb624426f673ca1052c77fe2916a268bcb6c7d4cef5e65556acd4 CVE-2025-52632,0,0,3d32e3a264bb51cd6bd0b11b507902bc4abfeac7ffdf81b1db71a21ccb6975ed,2025-10-24T19:42:15.633000 CVE-2025-52634,0,0,95c30ed18cbc1c512a62d82679d21afa312036285e7b0d779bd286c6ea0b926f,2025-10-24T19:41:27.627000 CVE-2025-52635,0,0,2d02e943f2e8f7fe7568c439adfef4f49daac80bb479e952693a16b4f9d0ac76,2025-10-24T19:32:56.180000 -CVE-2025-52639,0,1,a24e52b6c3045ea3fa0fd770c8fc5004a1bf2217a8bdaaa547eea99e94805800,2025-11-20T19:03:16.257000 +CVE-2025-52639,0,0,a24e52b6c3045ea3fa0fd770c8fc5004a1bf2217a8bdaaa547eea99e94805800,2025-11-20T19:03:16.257000 CVE-2025-5264,0,0,6a4263f831079e5c34c202bc1ce8d0768baa1f78e5abc01f0118fd42f6e6f2b0,2025-11-03T20:19:16.097000 CVE-2025-52647,0,0,4913507f99b5de786f9912058d5372631e635b5866b4f2c681c385916831d588,2025-10-14T19:36:59.730000 CVE-2025-5265,0,0,28606bb83a73b4f9d7dede4858210717150080ffa1d142904c522b1757edcd5e,2025-06-11T12:15:27.553000 @@ -308827,13 +308833,13 @@ CVE-2025-52662,0,0,13bcc4552f7de60d6cf943f71c382b8a38c9b40d4e3d3982f658bd2c622fb CVE-2025-52663,0,0,89c70b1f284d5a929e459e22e646e0ae54f066a21de9f1960adeb90f3b16154c,2025-11-04T15:41:56.843000 CVE-2025-52664,0,0,8a78cd8a285585570ff9dfa58a07a23ecb144afd4964adcda10119fd8fec4b78,2025-11-12T16:46:13.480000 CVE-2025-52665,0,0,a5b22c967c7804f42540105aa948eeadd5ad62886fc137a68b2d02413d7d18d3,2025-11-12T14:51:21.057000 -CVE-2025-52666,1,1,0dc8cb90405b663f593180b7daf0a1ddc461bfb93a1c62b9c704f1a9fade21bf,2025-11-20T20:16:22.687000 -CVE-2025-52667,1,1,d40d1822bac86b0edc9b3fddfc6d5fdcf287875d66fcba52f014b05f29e5c9c6,2025-11-20T20:16:22.830000 -CVE-2025-52668,1,1,e6d3a6d334707d2e79fb22af54303e4d2983b105509954cc49aacd9532a8d420,2025-11-20T20:16:22.987000 -CVE-2025-52669,1,1,64b1d1f7c7f4b555a9b8aecf07d51c66858e6a274fcb6c89069f9b56b90755c7,2025-11-20T20:16:23.140000 +CVE-2025-52666,0,1,e5b8b3b3591d973e0d491fce14b639461ba8da46d7456b9386ce3a6c7b17f39e,2025-11-20T22:15:58.647000 +CVE-2025-52667,0,0,d40d1822bac86b0edc9b3fddfc6d5fdcf287875d66fcba52f014b05f29e5c9c6,2025-11-20T20:16:22.830000 +CVE-2025-52668,0,1,a919855ae49a7778f5587bca681a9c0f841ac1d94648645a538652b8a4b344b0,2025-11-20T22:15:58.767000 +CVE-2025-52669,0,1,70f977e56f71a2cb94a707287f34adcc7c5f03bbb2b3448ee5b506fe2a327b66,2025-11-20T22:15:58.890000 CVE-2025-5267,0,0,e23087e179cf44134836de7a812203898ef64aba608e835a2c99df1f209d68b6,2025-11-03T20:19:16.420000 -CVE-2025-52670,1,1,82a0931a82deafbed8b60500930e4de26429ba75be743d8bdf8df629c32ea0c6,2025-11-20T20:16:23.280000 -CVE-2025-52671,1,1,447cf50e0df0ab3d281e158854193381c80b4dacaf7a6e34a8b8c6a0bf9d158d,2025-11-20T20:16:23.410000 +CVE-2025-52670,0,0,82a0931a82deafbed8b60500930e4de26429ba75be743d8bdf8df629c32ea0c6,2025-11-20T20:16:23.280000 +CVE-2025-52671,0,1,760c877ae46086d8c3e9eba05565d47417441b4e150286672b7640e22365dda9,2025-11-20T22:15:59.010000 CVE-2025-5268,0,0,4fb0b611433478e9ed53bf2511f1d56960e851188c13f16758c88f8de9dc4515,2025-11-03T20:19:16.580000 CVE-2025-52687,0,0,557ddea57b56a7b1244ed82f9fa376bd958c5c08f84a9a0459f2b831b26b0483,2025-07-16T14:58:59.837000 CVE-2025-52688,0,0,d7ba8a534afcff886d8eec5b7762bf4a2a7e28807cbcfccb91c418a42c904bc8,2025-07-16T15:15:31.340000 @@ -309275,7 +309281,7 @@ CVE-2025-53176,0,0,d0007733595b5945fa414a854e602440e82442e74645c7488b9632b608831 CVE-2025-53177,0,0,b0be5d3bb33d219362f1f2fbeaa231f93668aaa0777efb34716d487d74e895a2,2025-08-12T14:39:19.227000 CVE-2025-53178,0,0,a0d7e67b0d2b525aa757acae538d17c5621a24c604f3024638a6a69c53ff5cf9,2025-08-12T14:39:35.227000 CVE-2025-53179,0,0,687550ad8868a1d17476346a82b7d07d767503d8b07be2e2e798efa81dc28f70,2025-07-09T19:14:21.773000 -CVE-2025-5318,0,0,6fa2c5002adb16a95034a41774e06b82e3a13f7d270f87b32324aa811f5c67d3,2025-11-17T16:15:48.423000 +CVE-2025-5318,0,1,3ad06394dd675a63b948b229103de5458929d4ae48c9c88be5b9de3497059fd3,2025-11-20T22:16:00.117000 CVE-2025-53180,0,0,c9f05a94231e52dc6d3774f4bdc50538c22337601fe5b488c5b0a8c351c6fd84,2025-07-09T19:14:10.030000 CVE-2025-53181,0,0,2419fc3291eb2772102bc14c08da3d83c4e96505d343985f7f9ecf527f541e8f,2025-07-09T19:14:42.683000 CVE-2025-53182,0,0,da92e9428b462ef529e392e5f35d7f75e9329521d5a7c414dac29903a8aa72a7,2025-07-09T19:15:01.380000 @@ -310307,8 +310313,8 @@ CVE-2025-54316,0,0,49cec3ea12bd11c97e45cca99760d640b91a8fbe125525ab0d6cfe9ebc326 CVE-2025-54317,0,0,450fd3c203e2715cd42d3ec7dbfd416904a9e5d98bcb022c25e13d70ac72d261,2025-07-30T16:15:28.560000 CVE-2025-54319,0,0,254168cc6911c617f767d3045873e687d08bedfeed47fa55233c281576cc0c95,2025-07-22T13:06:07.260000 CVE-2025-5432,0,0,084c55ddef7cbc29a899caf9c410373da7f69c539e6881174c3ce04e6d07171a,2025-06-16T15:22:21.913000 -CVE-2025-54320,0,1,f7d4c3524b4b3c55cf92be4aa814079b039c1d19d5eef27bab05db2387e86d03,2025-11-20T19:02:03.580000 -CVE-2025-54321,0,1,5e898ed5b35151d17135bdfe3a7ac0f2dd41075e4225beb00a1f3fdcb83e0676,2025-11-20T19:00:58.973000 +CVE-2025-54320,0,0,f7d4c3524b4b3c55cf92be4aa814079b039c1d19d5eef27bab05db2387e86d03,2025-11-20T19:02:03.580000 +CVE-2025-54321,0,0,5e898ed5b35151d17135bdfe3a7ac0f2dd41075e4225beb00a1f3fdcb83e0676,2025-11-20T19:00:58.973000 CVE-2025-54323,0,0,07930b91d4ddd44f7531e156693fc228c1dd67eb51892ca6ae7340358e66906b,2025-11-07T12:56:07.173000 CVE-2025-54325,0,0,11c56434b471abb0350e7ed941ab404bc0669fc78067fb69635d8287ee217f50,2025-11-07T12:56:43.197000 CVE-2025-54327,0,0,35ded79246437232e80ff92fba5b3f02123251a78ddea3455f4df93d6033e80d,2025-11-07T12:59:10.047000 @@ -311021,11 +311027,11 @@ CVE-2025-55116,0,0,2e308ca5157b9d43baf15fbdbe17a155c51520a76fc8afc9087659ba18727 CVE-2025-55117,0,0,3df17bda75d8c4ea3fb95272d2cc7b5da6aba206e53896ef8319ca14e1107800,2025-10-10T14:12:25.770000 CVE-2025-55118,0,0,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418c62,2025-11-18T15:16:31.550000 CVE-2025-5512,0,0,e298909e7d933eb5f783304ac70fd519fe6ced2380a8d0fd8cc914efcaaadd53,2025-10-03T01:14:16.500000 -CVE-2025-55123,1,1,ffaba90bed809f6417a3fa95439db68a0f22b3e8e58ea716b14f0b3d5e6086eb,2025-11-20T20:16:23.547000 -CVE-2025-55124,1,1,acc4fc404393c0aafc3969cdd8c9f8db29cc39ae0dd99a183bffbf58d7f3ee8f,2025-11-20T20:16:23.677000 -CVE-2025-55126,1,1,71cfee2d0ac2a56c5a9321123c71c6d738572f0e7fafb991ae1021c5f9d8640c,2025-11-20T19:16:18.880000 -CVE-2025-55127,1,1,288b5ea221096da6a06b05b848a6ec432fe96e2d8dfde08b2f996c463fe5bf86,2025-11-20T19:16:19.027000 -CVE-2025-55128,1,1,624add39b9429acc0327e4e1c1be552dc300afd95b8295997455afee6709a93a,2025-11-20T19:16:19.137000 +CVE-2025-55123,0,1,cab20c2c9da99ecd130b1179f35d4269fec70fa40cc9cc2647e4d542158c38a7,2025-11-20T22:15:59.130000 +CVE-2025-55124,0,1,a07ab8ba280d2f3949f074c10bb764d97c3efe35db4e4a4d63a4945a53810789,2025-11-20T22:15:59.250000 +CVE-2025-55126,0,0,71cfee2d0ac2a56c5a9321123c71c6d738572f0e7fafb991ae1021c5f9d8640c,2025-11-20T19:16:18.880000 +CVE-2025-55127,0,1,502445bddabaf3abd19a74c84fffbdae8383460657d81db61f88b56a94eace82,2025-11-20T22:15:59.370000 +CVE-2025-55128,0,0,624add39b9429acc0327e4e1c1be552dc300afd95b8295997455afee6709a93a,2025-11-20T19:16:19.137000 CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000 CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000 CVE-2025-55134,0,0,b2c2e6641a08a1f90a382e7c16f9cbf1a484104a3e1d2676e21bb24dcd6efc00,2025-08-08T13:15:30.060000 @@ -312982,7 +312988,7 @@ CVE-2025-5906,0,0,2f5cdcf2b30e524ee9cb93f26097a5ce4b137e574a18d9f4978bab9694e9cd CVE-2025-5907,0,0,61b0370b0148abdbc066a02dd0ec6b60b30cadf66ae3fb080a88892a459c879e,2025-06-16T17:22:27.860000 CVE-2025-5908,0,0,c3bdac397497f976939b525dc79f8291172dbf44dec99bcb5b91f199e1f0d3dd,2025-06-16T17:21:32.227000 CVE-2025-59088,0,0,2fad81a105a9248a12441da5cf412c2d628193a8d3f05d2d3b76d82d8dd12354,2025-11-20T15:17:37.227000 -CVE-2025-59089,0,0,048b9f3cdf777b2fff57083c6aa56a43ea4d14f843755fbf3104392352cf0594,2025-11-19T09:15:48.630000 +CVE-2025-59089,0,1,c3bf6418eb798324e419a97fc23ef00406e886d82a93d7a1320c5dfeb6031c15,2025-11-20T22:15:59.597000 CVE-2025-5909,0,0,f82bb01110c9ead7795cebb5ea4e7190d1b79e236ac8da87e1f6c74c57a9946d,2025-06-16T17:14:56.647000 CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f3e,2025-06-16T17:13:58.870000 CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 @@ -312998,7 +313004,7 @@ CVE-2025-59118,0,0,718f31b09aea9185650c6c11ae9f8f553f00c15bc116edbda7a20ebad6f1f CVE-2025-5912,0,0,10ff6acf965d367f7f73802da6c280421d13214babe0565635ffb936692b9383,2025-06-16T16:52:15.440000 CVE-2025-5913,0,0,4cba6ee8cf199de13dc8cd6aadd287347b651acc47698b712c4382a0d9737790,2025-06-16T16:49:15.273000 CVE-2025-59139,0,0,99dd209c1d4a413a58bb0483507147f4730401f0d7cf3d2183b150587aefb21d,2025-09-17T20:35:36.607000 -CVE-2025-5914,0,0,47e0ef55817e80e49d7fbbff1c18ed646154bf4f11338e7d0d1883f9becbfc1e,2025-10-30T06:15:44.920000 +CVE-2025-5914,0,1,931aa05a09edabffe925e0662e94ef64650295732084679dfe4beb9dd0f3b34d,2025-11-20T21:16:05.697000 CVE-2025-59140,0,0,6d8f57870aac181e9925ada5674e473adb05b7729326ce46d9e67a08bc75a401,2025-09-16T12:49:16.060000 CVE-2025-59141,0,0,b68f68c831fc474cc3fcd1789a1c5e9b3186cc53780bfe00d7c6aceb700835fe,2025-09-16T12:49:16.060000 CVE-2025-59142,0,0,bf8664571718385dad124a087e210b19deefb6362d3ae93359acdfe9ae44dda6,2025-09-16T12:49:16.060000 @@ -313277,7 +313283,7 @@ CVE-2025-59509,0,0,099946bd4372c8b9ca4243e757922844eb765c311d71aa492c2e28262603d CVE-2025-5951,0,0,8284d36183b5c5a20ce1ccc5cb7415a68b49193aca2a0e8df993129c1d1d98e3,2025-06-28T23:15:21.963000 CVE-2025-59510,0,0,66e7b8b4f59fa00bd73c43c7a10461c3e0c56b6b4ce618d45fe2df808dbddddc,2025-11-17T17:47:41.787000 CVE-2025-59511,0,0,d933ea1e33884fbb19c29c46e2b00f38ec2e4239e4772a8875cc21793a342c4e,2025-11-17T17:47:38.977000 -CVE-2025-59512,0,1,2cc004728f614f9f66721429486b10dd77805ddcaeb12426c72d55f313c99325,2025-11-20T19:16:20.927000 +CVE-2025-59512,0,0,2cc004728f614f9f66721429486b10dd77805ddcaeb12426c72d55f313c99325,2025-11-20T19:16:20.927000 CVE-2025-59513,0,0,983692786d2995ce1ea32653effaddb14462d9f7504fae52a2bcd53544868fdf,2025-11-17T17:47:32.230000 CVE-2025-59514,0,0,b46d86670c691dd2789096f8bb4c9ac6112ea1258e247690d9ddf3a0427ac271,2025-11-17T17:47:29.150000 CVE-2025-59515,0,0,91f3f6ec2a21104a290fa91964837b7cd2578a42b0841bf30a258ab46b2782ac,2025-11-17T17:47:23.013000 @@ -313729,7 +313735,7 @@ CVE-2025-60196,0,0,64b9f6a15c519f0bd0a1a2baee6b5095d3390468a50c6a5085123afe26609 CVE-2025-60197,0,0,6f6cb31802d941c0ae5e62a7f09c0a9b6456553e8bca2f6a8a69b1d7177459c6,2025-11-13T11:16:46.093000 CVE-2025-60198,0,0,471f0abf8cf89fd40eef7dc60b902eb88bfe7fa0589061a864c4ab355e1d46cb,2025-11-13T16:15:51.740000 CVE-2025-60199,0,0,c241f35e7401b815090b8a3201e292dd64f563c968a660b1ca23ee165ee7a3d2,2025-11-13T11:16:46.443000 -CVE-2025-6020,0,0,4cc5af20ba4f62a0998749441b153a85c6660a42c1ef20672eb049505a42a2c3,2025-11-11T16:15:40.430000 +CVE-2025-6020,0,1,50dd3a059ec64ad698849e6d7f2a4cf28a847ca4f2fc667cd0e532f94c9bc847,2025-11-20T21:16:06.943000 CVE-2025-60200,0,0,5ba42f52b051d68f221926799296cd98422171a8095a1a13dda7ca5222119104,2025-11-13T11:16:46.613000 CVE-2025-60201,0,0,da0f39e12edbc36e2f45b4e0ed67c3a3b988584c5300ec0f25c40e0b48912985,2025-11-13T11:16:46.780000 CVE-2025-60202,0,0,80b84b6da06517985a56b59e302efd3257490c46d9b382e7de1cc5741249da65,2025-11-13T11:16:46.967000 @@ -313983,7 +313989,7 @@ CVE-2025-60730,0,0,a02613861a6fe7fc18e5072823c1cb1f96ad36203a4ab0eaad7e65dedce4c CVE-2025-60731,0,0,f977cb89aae8edd3b6269243ba625994b642d741e650170198ab3a503f6bf2a7,2025-10-27T17:48:55.137000 CVE-2025-60735,0,0,111dacdcc23d07efe526713a5bfc96f7212a30261b713d87d5b80392c5ede318,2025-10-27T17:43:58.333000 CVE-2025-60737,0,0,79aef8804a12c3d479d138444a4c7b56f1d09a9e034a69167d33fad61601bffa,2025-11-20T16:15:58.800000 -CVE-2025-60738,0,0,1540467d05660686789a24eefe6de5449c6d36521529e606ed7910facf543200,2025-11-20T16:15:58.927000 +CVE-2025-60738,0,1,0beea59b8f47b46b3225735c2a45b8539cb72f8ba1eb7da9c7f9f850f02bc909,2025-11-20T22:16:00.677000 CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418ac5,2025-07-08T16:19:11.700000 CVE-2025-60749,0,0,cb6eff06b3c969716cbd50b62ca268ccadd09b2dc6ddbd4cbc884dd540525813,2025-11-04T15:41:31.450000 CVE-2025-6075,0,0,b3bc7794878d92e6cdb7a824f270ad5c28af39c5415573ef7588df9bc7eaf7bd,2025-11-04T15:41:31.450000 @@ -314002,11 +314008,11 @@ CVE-2025-60787,0,0,19afa390450ed0b61ebf03923dab6f6d840abd55261d0e90ae5973fdb346d CVE-2025-6079,0,0,3acae9406359beeb566b8c872a5ac87499ca5a517d323b5859b95024ba8d796e,2025-08-18T20:16:28.750000 CVE-2025-60790,0,0,90bd93828e7ce637ba03d103d1f976b5bcb8490774ec534159f3267d75862b96,2025-11-07T20:08:57.933000 CVE-2025-60791,0,0,cfdaa058991af2fde073ea1a3cea6115e71482b82a25afe3aad41dd87438c61c,2025-10-30T15:05:50.613000 -CVE-2025-60794,0,0,95da6e1cb3e893b16d0488eda0bf698344d846bc84dd075d87f444ce5e3d4815,2025-11-20T15:17:37.937000 +CVE-2025-60794,0,1,e44afd57954787f74a27e2171509e6ffc2bdd3748a5189ddeacf479b9ec2ae00,2025-11-20T22:16:00.860000 CVE-2025-60796,0,0,fdbb571166e2b8422eeab5a060f0c9f2cba375224a08ebbbfb95f4e6a482e891,2025-11-20T15:17:38.100000 -CVE-2025-60797,0,0,953b4ab659f036d68492e6ee793da5a0a48fbfffbb1c248baa3ac10814ca8851,2025-11-20T15:17:38.250000 -CVE-2025-60798,0,0,c31b0f050ef65f0ff4d808b495727ecfae1e1138188a9293d75f4c9e22f3057c,2025-11-20T15:17:38.393000 -CVE-2025-60799,0,0,a5671fecb1feda58e26b00ab0e3468550b8c89295367e78bd770a6d397722966,2025-11-20T15:17:38.533000 +CVE-2025-60797,0,1,a14aa43dd1beb0e5dc5d09990c3af5e39372512a3d4f3e6dd4c2ecb737ccea2c,2025-11-20T22:16:01.047000 +CVE-2025-60798,0,1,538d00cd33835a566a497e35c1cea48cad4d7687f79660caceb5375beb428519,2025-11-20T22:16:01.230000 +CVE-2025-60799,0,1,d0298f287093f681aa06f122d1a31208c00e49202a07613479f8b67f8b73f455,2025-11-20T22:16:01.420000 CVE-2025-6080,0,0,09cd9257aacd26b3c0d0b7db39eeca754c6a52ebacd815d309102b493d922e90,2025-08-18T20:16:28.750000 CVE-2025-60800,0,0,7a6e4f1e6314c918b39f3ef11c20b034c50878af2ae5bc4d729e671a0d917a55,2025-11-06T18:44:16.530000 CVE-2025-60801,0,0,f70de56cd9340f3a45bf9002fc19239305100f5aeab221554eb5cc4119bb2ad9,2025-11-05T21:06:25.470000 @@ -314113,6 +314119,7 @@ CVE-2025-61128,0,0,69d2c38e8ea9b59d062f5c60036490ac8009cd5c2fbff1e9a3a105248601a CVE-2025-6113,0,0,0c5f7bf3ffcc790306137c58e7adf127bcac39f60f0d4f5880a251fa13bbbd68,2025-06-17T19:38:13.637000 CVE-2025-61132,0,0,f36b7403d998bbdc9200fd0c855259f79bebf91c7802b96a5de1573ba718b466,2025-10-27T13:20:15.637000 CVE-2025-61136,0,0,63c1fe05f94f27b6871aa887b983f5b7b79c9236df5dad4fde69bceb03986936,2025-10-27T13:20:15.637000 +CVE-2025-61138,1,1,8472b64d489cb088cf90aa68bb404a416ea0247b361e3fa1182333e2d1ba0697,2025-11-20T22:16:01.610000 CVE-2025-6114,0,0,a5a1fc96e35eee24acc4782ad200c5dc760c08b01c254701514c850e1da2af86,2025-06-17T20:32:17.510000 CVE-2025-61141,0,0,b32a63b019fb502e4df838e5bedd8da8d6dbda5e470b178a678f176dd793b0fc,2025-11-04T15:41:56.843000 CVE-2025-6115,0,0,af077fb1bef81f56ac7ab650236e0c91f9462b0467974cfad475a819f130e356,2025-06-17T20:32:10.530000 @@ -314284,7 +314291,7 @@ CVE-2025-61690,0,0,4ca1e0da46ce90ce2654e003fface6498e5c618774382ab7e243aa66cffed CVE-2025-61691,0,0,eec839b13fa21074d44e3bbffeae75a4b252e2fc2cfd48d4a38fd47ce3e2546c,2025-10-07T14:13:05.040000 CVE-2025-61692,0,0,6d4b2dd3d04d38f2353f575dfbbccc93c25bf9f06993949a8d61ea2f96eae14c,2025-10-07T14:09:27 CVE-2025-6170,0,0,8ee62512245e2af562128802327ad4e5836ac5fc4d880ffe07a3d169847f512f,2025-11-03T20:19:18.300000 -CVE-2025-6171,0,0,c44f2fd4f71ecef9ddc8db0c2ec060f5f97b7b394de77cdf0495b522fc1b65d7,2025-11-18T14:06:55.963000 +CVE-2025-6171,0,1,de5c17738b20039c484b1898393d28e19c76d523a952a9f9b716b6203b00c09d,2025-11-20T21:09:38.063000 CVE-2025-61713,0,0,744aa3abeb8dffe779ab40f5f641647138c05976f4db39702257cc67db99ae5a,2025-11-20T14:37:37.193000 CVE-2025-61714,0,0,c02deb5a89a330eb5e764d72dfc6a2022cdb6c3eb0846d7603c4fcf125e99cde,2025-10-01T03:15:36.940000 CVE-2025-61715,0,0,acebc75d3bddb97cd22dac1f8d270822aed8a8abfbc5b81f36e35c32dd634eea,2025-10-01T03:15:37.037000 @@ -314314,7 +314321,7 @@ CVE-2025-61753,0,0,e35017e74bbebdfff52fc82ae0dc25c3c92cd170791e5f5c53b51f1686fc1 CVE-2025-61754,0,0,7d82d9acf376dbbefb6a7d67d18db72fe5ae9c2f57f3a592bcc2d4ee7574c7c9,2025-10-24T14:36:01.160000 CVE-2025-61755,0,0,7f4310e4c9d5f7af0bd960df1a385cb2d0bce2a36b59a906c8c1b317036f2269,2025-10-27T20:36:48.053000 CVE-2025-61756,0,0,8b273f06edee9fd306c9c7c6e2763854bccc085f67cbb1e5eb70cf7525550770,2025-10-24T13:19:32.327000 -CVE-2025-61757,0,1,0e6f07343e9034387b1b5ac645b0ee9b5a71f3648b531b3aced5920f070d6300,2025-11-20T19:16:21.107000 +CVE-2025-61757,0,0,0e6f07343e9034387b1b5ac645b0ee9b5a71f3648b531b3aced5920f070d6300,2025-11-20T19:16:21.107000 CVE-2025-61758,0,0,359c2b02740e558fefb2e70e28ae456cf4a91557a2ca715924496177bda4b20d,2025-10-24T14:25:51.313000 CVE-2025-61759,0,0,c7f147f108153e748c1cf567908be1cdcef454e072243ed917d0b32640ec1479,2025-10-23T16:03:36.487000 CVE-2025-6176,0,0,11d3b0243981365b97c1a43a76cc22558db6bc0fc86add548be5c013b947bf69,2025-11-04T15:41:56.843000 @@ -314895,6 +314902,7 @@ CVE-2025-6267,0,0,75cfd5c30a98e2c1f537a62cb4e6506e4846f17cf649cd0fc63cb44bd6abc5 CVE-2025-62670,0,0,7c36a09d51fd45a26c56df2ec95abda3bf5ddeb5ab9d75fa75045a65f33a75b4,2025-10-21T19:31:25.450000 CVE-2025-62671,0,0,8f7122c422b0a744a681f0455da4e8fb13608acc56e30cb51157d69c33ab728b,2025-10-21T19:31:25.450000 CVE-2025-62672,0,0,0c8a0414fa239c34cdd41ebc05aba547936fff0c2342739d1901d1c08169d5b4,2025-10-21T19:31:25.450000 +CVE-2025-62674,1,1,3138651bd4bac14dc0abb939c1ebd753eddfd5bc72cb643fb4de462f90b34e81,2025-11-20T21:16:05.957000 CVE-2025-62677,0,0,7ae0bca999408557eea6bf6a2a73b3908cba1b39a204eaff7482b40cb77bb1fc,2025-10-21T04:16:05.260000 CVE-2025-62678,0,0,fee41f6ae555eb4ef9afe9361f4b5252685c351b43b64781deb4ffbc37390d77,2025-10-21T04:16:05.997000 CVE-2025-62679,0,0,9c4a62b14961237e36d75b2a4533868316d32f24481758ecf7f3d8cf862c73d5,2025-10-21T04:16:06.760000 @@ -315163,9 +315171,9 @@ CVE-2025-63209,0,0,21bc08a0f29f2b6fd5778b1fe54f9ecefde1cec28c4bfc11ad0ea0536bb8f CVE-2025-6321,0,0,8b14deec62d79defbe334f3056c2caf5c124010dace898a21baa1ce8fd4c05f2,2025-06-26T21:08:27.197000 CVE-2025-63210,0,0,bce48810ed6d1b0a70350f21161d6ad8047c6652967d18c69e0ec3efbee0ab23,2025-11-19T19:15:49.240000 CVE-2025-63211,0,0,5b229a78efdee3f9097a50f1395d1c2b4fca2a7c0dd8558a4221b5bf2a4eb7dd,2025-11-19T19:15:49.430000 -CVE-2025-63212,0,0,667f6689e275f2b7e07e94b867d583670c2759c86f288c4d6ed8027293bf08cc,2025-11-19T20:15:53.380000 +CVE-2025-63212,0,1,49994717c264c74b15eb2875c7773160d78e04fa8aae7530b361ce15a89d932a,2025-11-20T21:16:06.173000 CVE-2025-63213,0,0,68e03dcfd34ae5922c30171a425fe1d8fa33124c241a212480118255caf00d80,2025-11-19T20:15:53.523000 -CVE-2025-63214,0,0,281b336a8743b1d411e2c125f37b2e0d2c6fefe5da1d873a273e10ec462c08c1,2025-11-19T20:15:53.677000 +CVE-2025-63214,0,1,93bc485b440b379ff156e073a73a272dad3b66238e2edea1b2856826439dbe70,2025-11-20T22:16:02.060000 CVE-2025-63215,0,0,4742b0e0b5d280423091166f75bda48ab7c0ca5ce38d1299d4e1b652741209df,2025-11-19T19:14:59.327000 CVE-2025-63216,0,0,4b8d66160ba21ee59d3a2755d39d71217cbd34c6d58c4303111b1a742b9326ef,2025-11-19T19:14:59.327000 CVE-2025-63217,0,0,76205a35a8a802ebdb43bd9ab016ac264f2dc766240a6d2db26188f48b0fdc1a,2025-11-19T19:14:59.327000 @@ -315262,9 +315270,9 @@ CVE-2025-6348,0,0,9e42f8c7e366619532860c7cd5bbe1d98918b912d4a7739385dee9f89f381c CVE-2025-63497,0,0,10ce1c93b208a29c95044c5da2a1ddae810a082440d130d432288699a67a3ca1,2025-11-12T21:15:52.683000 CVE-2025-6350,0,0,a86ee8e77b19eb2905a6818fe7d360409130293abf6abafd272b9012f376c67f,2025-07-07T15:28:10.050000 CVE-2025-6351,0,0,58d9ebbc99a1fb6475be804d7a4fe745e483538a102155a9e63fef3060dd4f15,2025-06-26T14:05:27.120000 -CVE-2025-63512,0,0,f17b9f8ba9719b71f1b901cd4d51b57124650b94fe333fef4a5b7cf07c495fb6,2025-11-19T19:14:59.327000 -CVE-2025-63513,0,0,cc554d1e516ff2e64e78e6760d841d14654cf9af8b220a058c1da4e203edaf74,2025-11-19T19:14:59.327000 -CVE-2025-63514,0,0,b4cb14090b56507f927adcff5fc6532fe881b6d18b2a73d1f6e121b078b13d20,2025-11-19T19:14:59.327000 +CVE-2025-63512,0,1,fb9b2e6f20fa24a31c3b324b6541fb73d5a9e82d5076e7bd845d1b7452be4d35,2025-11-20T21:58:59.003000 +CVE-2025-63513,0,1,77f0379ed940c32021762ed219df800f46c0c479772ae7fe91e8d4d3d0319688,2025-11-20T21:57:49.427000 +CVE-2025-63514,0,1,a48a4fe98cc0afdd6ca735b421e2951c674c2395b539204fb8d3a74ba18fbb6f,2025-11-20T21:54:40.943000 CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000 CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000 CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000 @@ -315310,19 +315318,20 @@ CVE-2025-63678,0,0,c2f4b0a920b217addc4f0d29db833da7ecce835f0b86cb787ae5040b7ab82 CVE-2025-63679,0,0,b846b6d3322a05c9860673b5a9f224518b27f0e23691e5e1b3fe590a7ac806d4,2025-11-14T16:42:30.503000 CVE-2025-6368,0,0,126289802a5d0156ea451f7d958f55128ca1a1dddb40c6c6124f3221f79d35cd,2025-06-25T20:09:17.983000 CVE-2025-63680,0,0,174b3190484f45ff37c9b2a5ab3b871b9b304edcb6070dd509dec2de46a86ccd,2025-11-18T14:06:55.963000 +CVE-2025-63685,1,1,7db749f29c645facb4599aef316a3039fa4008d4ce67434f5c868268e6c1b661,2025-11-20T22:16:02.247000 CVE-2025-63686,0,0,5706e409c84f3263a077d49029d90d5b0029aa83dd01bf8d5b66dfc658a10195,2025-11-12T17:15:38.890000 CVE-2025-63687,0,0,48b74a8f19813e4c448920295cc80cefabe0694d5fa2586e6a8d78fbaae2bf88,2025-11-12T17:15:39.127000 CVE-2025-63689,0,0,ca884d3a8d08e0708274c67dbb0cbe060bdc573bd0bb52d2b2c634e45be2dbe6,2025-11-12T16:20:22.257000 CVE-2025-6369,0,0,4187feb2cde6bcc9d06148b06739c8e59691f4fcb04265209e201b0758fabfe1,2025-06-25T20:09:28.010000 CVE-2025-63690,0,0,496ac9d7e888dd7271d7c82f910393c3ade06187e222d0a80b077f281db91d20,2025-11-12T16:20:22.257000 CVE-2025-63691,0,0,0e8ec491f0b05c60cbd9fb85c0b28bffccfbd130bd00ad0f06b9650f0e2bc85a,2025-11-12T16:20:22.257000 -CVE-2025-63693,0,1,b6a9ac2959a56f8138bc9c7b6257e3e4199a4ec68db8c53116b1cb5d3ec0b3bd,2025-11-20T20:07:18.850000 -CVE-2025-63694,0,1,4517b31d52202121eac3b17148526e039a9610e8978869300de7f86e9fdadd8e,2025-11-20T19:16:32.317000 -CVE-2025-63695,0,1,9d7573956a52db32272ff71f9653004dc351887b1c62ba482fe6fc1343c9f676,2025-11-20T19:04:23.467000 +CVE-2025-63693,0,0,b6a9ac2959a56f8138bc9c7b6257e3e4199a4ec68db8c53116b1cb5d3ec0b3bd,2025-11-20T20:07:18.850000 +CVE-2025-63694,0,0,4517b31d52202121eac3b17148526e039a9610e8978869300de7f86e9fdadd8e,2025-11-20T19:16:32.317000 +CVE-2025-63695,0,0,9d7573956a52db32272ff71f9653004dc351887b1c62ba482fe6fc1343c9f676,2025-11-20T19:04:23.467000 CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc83,2025-06-25T20:09:39.790000 -CVE-2025-63700,1,1,74c237f9dca03672718a08ea9c54121ec8c921a78df165a1322d8910230faec2,2025-11-20T19:16:21.367000 +CVE-2025-63700,0,1,549c198f8ee3a7b070e351e76ba142fc8b26abdf3aff576f4e2be57c74cd2136,2025-11-20T22:16:02.437000 CVE-2025-63701,0,0,662ea7849c27be5b80c25e2e58f382b31e98a3c765f38948a74aa0fa7306e223,2025-11-18T14:06:55.963000 -CVE-2025-63708,0,1,daf3ebd701919b695e0a83c8005a392854f3a79d50268da940d9cac92eda2fe6,2025-11-20T20:27:23.200000 +CVE-2025-63708,0,0,daf3ebd701919b695e0a83c8005a392854f3a79d50268da940d9cac92eda2fe6,2025-11-20T20:27:23.200000 CVE-2025-63709,0,0,3ee3d3119216acbdd856f816aed9b25e1eac9bf664876444a248a02328e34eea,2025-11-18T17:16:11.890000 CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000 CVE-2025-63710,0,0,840583f3b4f0b85b92ea3d82cdb8fbd2d27339511c0160e41078f43563d92e92,2025-11-17T18:18:39.677000 @@ -315354,6 +315363,7 @@ CVE-2025-63785,0,0,540fd149847400b2c4ab5e9be1d157cf0986dc25be0a572c51197c617bbc0 CVE-2025-6379,0,0,a573d0789f74e2940a233e26e5770bd43ee83276728b28e7918a6f6c0e9e28bc,2025-07-07T15:24:31.510000 CVE-2025-6380,0,0,8038af934fb98ec6cb1fd37b6f439a7d7ffbe43ae5c1a00c7e81bd72f09813f4,2025-07-25T15:29:19.837000 CVE-2025-63800,0,0,fbd39a4af183e139887f7755c3416982880a4f8110c610b47a275496def8217d,2025-11-19T19:14:59.327000 +CVE-2025-63807,1,1,b732da975fcc3ccd1de4e559a1f046051eb28ea2d0cc2eb14736b525ddbc49fc,2025-11-20T22:16:02.647000 CVE-2025-6381,0,0,bcb772a2599dc7010241cc7bbab88371a6f4c6ca137948aff05aab6ef1ed3e85,2025-07-07T15:24:28.070000 CVE-2025-63811,0,0,4f7263eb3d2fb17697e7a3a05437a2c81636562357efcad7db279b056f97af7a,2025-11-14T16:42:30.503000 CVE-2025-6382,0,0,efd8750cb574f4b8ddeed5e07b9915e567566e97e99b145524009524920bff34,2025-07-25T15:29:19.837000 @@ -315364,7 +315374,7 @@ CVE-2025-63830,0,0,64bb7b74542849e475a50c70d15ab1b2e1a45c8ce9737df66a6fb312752a7 CVE-2025-63834,0,0,06bca667db37bd19e457ae81f941eabc0c0fed97aa9f25b2d14a20ca88bf9ad0,2025-11-18T17:16:13.093000 CVE-2025-63835,0,0,3f8f66f94330f37380d25aacc7f62dc373a4f1752d30e3e8f5ad5cb4e3e435ef,2025-11-18T17:16:13.363000 CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000 -CVE-2025-63848,0,0,bc95a9b5317c6f7702668c6ff0184c09cf5e6151b24ff663d6c9e16e1f382620,2025-11-20T17:15:52.733000 +CVE-2025-63848,0,1,754773d6986a7bb9f97dd33e6ca13485727b7c209ef554c0901561ec408f573b,2025-11-20T22:16:02.850000 CVE-2025-6385,0,0,464badea5b662001b494c98ff4f924b7b5edadd5780086f421fd9e2a4d9d1971,2025-07-25T15:29:19.837000 CVE-2025-6386,0,0,36273686c966a96e6687737cbcaf18f7573e7dd2a4ed9617fdf7c38b7cac9900,2025-07-08T16:18:34.923000 CVE-2025-6387,0,0,2cd1a43e98ae88ad7a6b5a63e665518e4af490af78f6281175d60f26b1475718,2025-07-25T15:29:19.837000 @@ -315373,10 +315383,10 @@ CVE-2025-63879,0,0,bc700556a62ebb43dc123d898891121cc3bf7a624c463c132360d413dc13a CVE-2025-6388,0,0,c57f74fcbb2b7d66e1341c84f56bc9041f6a01f87ae6ca05d02074754598d138,2025-10-06T14:57:05 CVE-2025-63883,0,0,7a5546ec4610831904269a5f85163a5667d51e67296f9cc4d01b9779904007cd,2025-11-19T19:14:59.327000 CVE-2025-63885,0,0,12c6f95cbe8095c93fc90e41bd7e68c1f40301c95e3edc50862766fa954ae56e,2025-11-04T15:41:56.843000 -CVE-2025-63888,0,0,dc842065dfdc18e3857464410dc091acbb00d958322fd6d802d59ede0211b8c7,2025-11-20T18:15:50.977000 -CVE-2025-63889,0,0,18c670812c436be74df149fa6d54d10761ad2c85597ec5cd0d3456b37224ab42,2025-11-20T18:15:51.110000 +CVE-2025-63888,0,1,b7fcd83cf03cf3937682c2105ef43b27849e42df230345889d639c0524ff5a33,2025-11-20T22:16:03.327000 +CVE-2025-63889,0,1,7562522fa975cfa6c54d06a43e089e1f5e549afff9a26485d4a0d197ec26f1d6,2025-11-20T22:16:03.520000 CVE-2025-63891,0,0,66fcb1cc479052e59fbe41b7be4bfb31f789d2b4ec2603d9d3272aafc2144305,2025-11-19T18:55:50.953000 -CVE-2025-63892,0,0,3689dcc7d191b8f971d2143b5614b724d893a56143876b80fb46366295cf47f1,2025-11-19T19:14:59.327000 +CVE-2025-63892,0,1,de573c268486ad23e0433ca11e9f69d972467c7e5988015a096527465d5a4856,2025-11-20T21:51:15.127000 CVE-2025-6390,0,0,9c2995b97c77e7da4f43909b7b6f4b7215a1357d7553475969bba1d7250f8bdd,2025-08-27T17:56:40.230000 CVE-2025-6391,0,0,76a67f2aac9fc01ec5ea0b9c5be515086faf87f6a920d69dbd894ac3dce21de0,2025-07-22T13:06:27.983000 CVE-2025-63916,0,0,eb94b82f05d0180da1604630a7a9fdd8507401f60230f5ed563ea1889083ab99,2025-11-18T14:06:29.817000 @@ -315397,7 +315407,7 @@ CVE-2025-63994,0,0,a5a2bf363c223692026a1ccfb7824b70d34875e30eaf0fe78f68d5884057f CVE-2025-6400,0,0,b7834b01ffc76dd6d3a754915f4603e275b0aa9a7826af0f6615e59accec721d,2025-06-25T20:13:52.420000 CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff44,2025-06-25T20:14:01.440000 CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000 -CVE-2025-64027,0,0,13e92e810b465d07eb02225f24dc066b94181a95900d46c3fdbfcbf2d5e4e1a9,2025-11-20T17:15:52.873000 +CVE-2025-64027,0,1,4b1f7c1f3f31be7ed3ba2c06d446e247e8a0ccf3381c99dd41df73eb7d19840d,2025-11-20T22:16:03.687000 CVE-2025-6403,0,0,007861183f6687f9c9a79ed265c27e5792ce1d4050de9b4571cc349ce6d48442,2025-07-02T18:56:36.940000 CVE-2025-6404,0,0,f0c24c4f38cddef26208faf5fffbe2ab0f5998ff0d6d820bde73ac92320b2d1d,2025-06-24T19:33:00.033000 CVE-2025-64046,0,0,2473d61fcd444f7107420add86bfb5a479b28afca70336dc60642cd4e6e6ba2c,2025-11-19T13:11:59.527000 @@ -315638,7 +315648,7 @@ CVE-2025-64439,0,0,7174df671ba598d247db688be42afb2684efd47404140f8ffba215a0135a4 CVE-2025-6444,0,0,5b05a1f07597d8649478255ed8ad41e8b8905b898ef59d2d48e63e5c86f3f68b,2025-08-08T19:18:00.390000 CVE-2025-64442,0,0,4d5b9d32c11011842a65c43afb87e8736f39b68aa0da9c40ce5bcf565962ad62,2025-11-12T16:20:22.257000 CVE-2025-64444,0,0,e369d7fbc95a089c483e1bc81a4fde85fd3976d43075f0cf11d7c068c647c204,2025-11-14T16:42:03.187000 -CVE-2025-64446,0,0,6d4624e27ef99387f5c56b8be31d1f721ef2826364d06a9541bc91763f64586e,2025-11-19T18:35:00.540000 +CVE-2025-64446,0,1,ec686442dd2c995aaa13081f150ee427f19f90a3d5ad6c63ad933b597fcd9a63,2025-11-20T22:16:03.870000 CVE-2025-64448,0,0,918af3d0633c131f7576a5dc50e03cef33a14863d6be5bf5ffc88c89f4c499f8,2025-11-05T04:15:33.227000 CVE-2025-64449,0,0,bb167934696cae9c738d33dde208255bd198547cda5fae8e78f0ff9d441b6005,2025-11-05T04:15:33.313000 CVE-2025-6445,0,0,c195408f9d95be27c74c9f5f64fe2a26b0041f54b6379805ed96c0ed57704677,2025-08-08T19:17:57.443000 @@ -315648,7 +315658,7 @@ CVE-2025-64452,0,0,e71ac78a52bb644bbbc302503772517d6a39c90a6095e8841629007d10551 CVE-2025-64453,0,0,ef4bdd91067e33af49105ecab6914978fe3c540c70ba81ecdf91fcc3cbe7b7a0,2025-11-05T04:15:33.573000 CVE-2025-64454,0,0,5ba67ec3e05265328e78c5c20da3383e039ef9335dfeb604dc9d730d177c9926,2025-11-05T04:15:33.637000 CVE-2025-64455,0,0,78d5e89d360486d82ec519f08bd749f1aa350127a11da8d22bf0f8110a68bba2,2025-11-05T04:15:33.703000 -CVE-2025-64456,0,1,9f0a1a9d6a42f5556a80868bf3bbdb766a88e8045edf61ee5db231db6ba40b7f,2025-11-20T19:56:27.110000 +CVE-2025-64456,0,0,9f0a1a9d6a42f5556a80868bf3bbdb766a88e8045edf61ee5db231db6ba40b7f,2025-11-20T19:56:27.110000 CVE-2025-64457,0,0,08437d1fe2a3563116e77f3de60eb447de2c0bfe248bc1258c5c3c052b1e2ff1,2025-11-11T13:15:45.183000 CVE-2025-64458,0,0,93f0deff87755d90f4fb4a57a71ece98ab382b1bb568ddf4419727602e7f2aae,2025-11-10T18:33:02.957000 CVE-2025-64459,0,0,3984a2cb3dd030fa97d86e4b0194627c28647a85de9df549c9258466955d583b,2025-11-10T18:25:59.883000 @@ -315700,7 +315710,7 @@ CVE-2025-6452,0,0,083940287f0c582bcbbebe584d67638d9b0c0f407a2a8fc444d58915e8359f CVE-2025-64521,0,0,589ca05775320a2be70e720795eb201395728c46495fb3c3385088b916443eed,2025-11-20T18:56:52.340000 CVE-2025-64522,0,0,00201ad8012520737d920e19a4b5203da539cdba43479cff6fb32a97f27be10b,2025-11-12T21:15:54.590000 CVE-2025-64523,0,0,b525e2e67d3fd9dcea586bd1f22b337e3a620e0bc8d3ca61cf916f0fb8fa901c,2025-11-14T16:42:03.187000 -CVE-2025-64524,0,1,1df8dcf1a0acb3e83673cbbfc98685b6cc3679c732dc7260433ca89277315252,2025-11-20T19:16:21.510000 +CVE-2025-64524,0,0,1df8dcf1a0acb3e83673cbbfc98685b6cc3679c732dc7260433ca89277315252,2025-11-20T19:16:21.510000 CVE-2025-64525,0,0,6bec5acb72dd24546503b3bbf07b02614625c2519b5d313db065fad2bf4a3fbe,2025-11-14T16:42:03.187000 CVE-2025-64529,0,0,98741f031e346adc77c9e752944e87a7e48eb544b832b7df126105e3fd1d1628,2025-11-12T16:19:59.103000 CVE-2025-6453,0,0,16c9c319d685cd7dc97f325776dd293b3af99f0eec1e18e5100177f7ae0bf3a4,2025-09-04T15:47:46.967000 @@ -315719,8 +315729,8 @@ CVE-2025-6465,0,0,29f39ce6567ad3ccb97a81a33d0b276b665c2f8e7643ca4501001f090d123d CVE-2025-6466,0,0,f58501ae1205e10a6d74f64cf38d04887e95106ca1c9773dee1bfb90181d1758,2025-08-26T12:31:21.130000 CVE-2025-6467,0,0,2111c66db0969d1c41fc8564ca68139c60962dcd1f7bb6c000aa2a277af3863e,2025-06-27T16:30:42.310000 CVE-2025-6468,0,0,b609e6c1f1cb2cca716729822e4b5563b8a9898d707e405d1e94b0c4142dd708,2025-06-27T16:37:25.340000 -CVE-2025-64681,0,1,18297657d9d948388af5a2814e5e509f20ce634f84dc4f46caa1e4b69725f765,2025-11-20T19:54:04.317000 -CVE-2025-64682,0,1,5e73a0703836c635f9a7667be187835404b502d2ad3279d14f84d655a558835a,2025-11-20T19:53:25.727000 +CVE-2025-64681,0,0,18297657d9d948388af5a2814e5e509f20ce634f84dc4f46caa1e4b69725f765,2025-11-20T19:54:04.317000 +CVE-2025-64682,0,0,5e73a0703836c635f9a7667be187835404b502d2ad3279d14f84d655a558835a,2025-11-20T19:53:25.727000 CVE-2025-64683,0,0,a4728d4e2f6e62bae488d2e7d7e64ff27fa4bc545a30cba185d567f6e704d300,2025-11-12T16:19:59.103000 CVE-2025-64684,0,0,62dde26bf67d2c27340e62a11c9f218b426dd4340cdb28abbb7288faa41f6a82,2025-11-12T16:19:59.103000 CVE-2025-64685,0,0,a61ea4c635791c7fb9eaee1fc2bf96b2acdce104651916f2cb07487890ef7019,2025-11-12T16:19:59.103000 @@ -315761,7 +315771,7 @@ CVE-2025-64748,0,0,e266e90264eecc4554288660a7fdbe0e9d06afd34ae3ae4c60dc613d91e21 CVE-2025-64749,0,0,7c3efefc1b8b04ae45f94f8832dc5735dbb2e461019552a9f9b09ac3f60a4d29,2025-11-14T16:42:03.187000 CVE-2025-6475,0,0,3f426cf1651995de981716ed0ce59ff04720b4c8d7d4d43d75adecd6f0735dbd,2025-06-27T17:20:59.637000 CVE-2025-64752,0,0,202d8bf2e54c262ffa83eeaccdf60c143ce59974efd36f9d28e654bdeb8542f3,2025-11-14T16:42:03.187000 -CVE-2025-64753,0,0,6bea306e9380d597e799aeea6d11d2d8308ae029159b3e05a9983ce22e1d0377,2025-11-14T16:42:03.187000 +CVE-2025-64753,0,1,d73223bebd4fc261113a6b24ab5f140b648ac93fe4f47806db446b65a0a3152f,2025-11-20T21:11:25.813000 CVE-2025-64754,0,0,480ab0fff69b440688104502609a41fc0c48b3ada8c6719a1b4db445a7f10930,2025-11-14T16:42:03.187000 CVE-2025-64756,0,0,c5dd9b29e54317ac076af0630470565ed479ea241e09b3ce79a8e06a82449063,2025-11-19T03:16:03.670000 CVE-2025-64757,0,0,38523a6f4714f2db82bdcd01ed4c6ccc98ee8494b8c775f5af33941529e3b920,2025-11-20T17:58:21.573000 @@ -315772,6 +315782,7 @@ CVE-2025-64764,0,0,0c8f9906cc83d2d6e8c082f3c29fb0bc924f59b665a15d813ccadf06dc85e CVE-2025-64765,0,0,85ff18578b4a786f081f0e620159484e494418579d2bf43080dbfb8450712389,2025-11-19T19:14:59.327000 CVE-2025-64766,0,0,869c63890b71c7d3612ddcb69d1600eee17abf3cbba677d2f8adf9672cd1bbc5,2025-11-18T14:06:29.817000 CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c33723313882d,2025-06-25T19:25:44.190000 +CVE-2025-64770,1,1,93c47fe5dfacaa804ac1c39cbfa11d43fdd9dc5bd724a808ccac2b7064de3558,2025-11-20T21:16:06.753000 CVE-2025-64773,0,0,97c229f7a23723e169ff363d489d50f6fbea8da69826e66c8d5748515e17f4ee,2025-11-12T16:19:34.210000 CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000 CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000 @@ -316245,7 +316256,7 @@ CVE-2025-6941,0,0,d7ff2114d170dc7e5bff5f40cdb7a06eded9f742c1abd7e043d25b1d0d4b1d CVE-2025-6942,0,0,ce17090e9af93141dbee0b9e4a07d73c52cfd336a45382f6ec1d10b523f6b0dd,2025-07-03T15:13:53.147000 CVE-2025-6943,0,0,9d5662bf5a97ef158e8578579ae7fb47da438572174bda0455cea7222adc555b,2025-10-10T15:31:36.950000 CVE-2025-6944,0,0,cd76b115fd7f359ccb790195d23f72b54c96a11e15da86773a169e7312518130,2025-07-08T16:18:53.607000 -CVE-2025-6945,0,0,7fbdc7fc544c572f49f8dbb066c61107f4217dac5cc234f0ce764b3d5226d64c,2025-11-18T14:06:55.963000 +CVE-2025-6945,0,1,1ec769ef03bc742db8d28691d437410bf5feccec0e664df2618f39774490ec04,2025-11-20T21:07:40.250000 CVE-2025-6947,0,0,cec3a1c0fbec7fdea8f722c826042355f13f1c82dbde37df28e8c1e43620b6a1,2025-09-16T12:49:16.060000 CVE-2025-6948,0,0,e074631eac837c6f6633f226d5c10aa078d8aacb82aa64d46ff3ec569d5a5338,2025-07-25T16:42:31.690000 CVE-2025-6949,0,0,3c31534551ea404e4d5dff32740e2d6f1992be5fe1ca54442aa1e2a5a324a225,2025-10-21T19:31:50.020000 @@ -316294,7 +316305,7 @@ CVE-2025-6996,0,0,389b5795c73c63dae649f42ab7815c8dbcec37793ecdb641765ba144a08d4e CVE-2025-6997,0,0,ef30c285c567b5ef817e31f1f8606816007f5424156995e271a8ccfddeae8f28,2025-08-11T19:13:21.383000 CVE-2025-6998,0,0,b2b570d330eb95ecf00eaecd1f0057e21dc6b18b2d8db9a94384530a6200d8c3,2025-07-25T15:29:19.837000 CVE-2025-6999,0,0,57f2f94e8174a2f5d6e026cc8ba66046203a702e201497da69417b6e38b050df,2025-09-16T12:49:16.060000 -CVE-2025-7000,0,0,1b47a60705ec5ab4797c69430fd7d140381f194a50417d7f549ebc9f97eff64d,2025-11-18T14:06:55.963000 +CVE-2025-7000,0,1,e2e9ca38ad6b0b4c2aa819a348dbbeb8cee15d9278e125cb429ba62009ab10f2,2025-11-20T21:03:40.703000 CVE-2025-7001,0,0,b65a71149d67562aefa02e66a87df5f05478e88e56059df140a4d9dc9fc4ec95,2025-07-28T14:36:43.487000 CVE-2025-7012,0,0,2ea0353a5f012d08772fe047c1121e5fd68afa7fc20c7e9aa387fbe5460e9165,2025-07-15T13:14:24.053000 CVE-2025-7020,0,0,3a7a1f0717237db96737c5536fb7e46132725cfc93ee918efca9d68522c9a7f9,2025-08-11T18:32:48.867000 @@ -316457,7 +316468,7 @@ CVE-2025-7191,0,0,e66a57537dc3bec64d2030738c1f287928d56f721c5c48933e32003ffaf932 CVE-2025-7192,0,0,89215e4d2d74f34e05fb14810bd206f01ccda23b16bbbf6a7d18705f98cb9bd8,2025-07-14T15:15:31.173000 CVE-2025-7193,0,0,0612dd7cbb9c4d3646c4956be623fd5db97964d82f158b31b993394eaba60885,2025-07-11T18:44:46.890000 CVE-2025-7194,0,0,bcdf6fccc12a491ad3fb89764dced636724a42f0d5b9ec94488439b9222d5c25,2025-07-14T15:14:48.423000 -CVE-2025-7195,0,0,c481ad1cdb34f25e3976e114978a8539a9b889cfff92a0c80fb7a3a19334640b,2025-11-13T23:15:50.197000 +CVE-2025-7195,0,1,e488523d7575c997c0adf9bbfdf5d21db698de852f3770023055e225fe9011e7,2025-11-20T21:16:07.237000 CVE-2025-7196,0,0,d07670cde94dbda892b97da526baa1c3f325e72b32e5cc5db0b6aa15ab60eca2,2025-07-11T17:13:32.047000 CVE-2025-7197,0,0,8f996f64f2ea4a36423f4bf75b38cf63125cf6f525fb3fef27949f7c024fbde6,2025-07-11T17:13:18.953000 CVE-2025-7198,0,0,95222239471552175ba03672adb5b10ce7ff890253a416e5632723e685aec6b4,2025-07-11T17:13:03.863000 @@ -316661,7 +316672,7 @@ CVE-2025-7421,0,0,443e31bae140e9adc5530a55ec2b5cfaf8b24bfc64f7066da0c11ff16dff83 CVE-2025-7422,0,0,dad031484495aab26a02f477ede70313cdcb4a62b7489bd8535e689eeb0bb508,2025-07-16T16:43:32.170000 CVE-2025-7423,0,0,ce4cd9bb58b2ec36480fad5a920bad411e5d61f7f8aa80ce31a295c080a0fd8d,2025-07-16T16:43:23.360000 CVE-2025-7424,0,0,7a3e6ea649d803cc7020e5d3e648931f0fd96d2be9fe4af71706e472d4c10976,2025-11-04T22:16:43.663000 -CVE-2025-7425,0,0,1e65117ba4fd3bdb8f7e5fed1a83d63e2c66e6711ba9a85f933efe76f010538e,2025-11-04T22:16:43.810000 +CVE-2025-7425,0,1,41f7af6c571cce2ba720c458e4650c98f0e8b29a4d2c23aebeebb7117b3f2e20,2025-11-20T21:16:07.453000 CVE-2025-7426,0,0,c83a090bc220f598b350ac3c7fc0231d587755fd211efc81fadd55fa0fd533c0,2025-08-25T20:24:45.327000 CVE-2025-7427,0,0,0ae45a8bde3272f0c9b2f827a1e7b8ce1b0f7bede1a429fa1a878505b05da367,2025-07-23T19:15:34.230000 CVE-2025-7429,0,0,51d188ec7a45cb95b703d6838dce3173c57abec5bc526cfd0122a39c6f9330d9,2025-11-12T16:19:34.210000 @@ -317095,9 +317106,9 @@ CVE-2025-7891,0,0,3a78eda696077ec709ab22c5cc47f7b361cf59c26b9414e642367668c7b2b7 CVE-2025-7892,0,0,8657b6f26829382efaa6c166855aa165db8834cf1b81871563e71a8cd646c1f2,2025-09-17T14:58:28.910000 CVE-2025-7893,0,0,d1fdaa7b53583ddad1e5799ba4b4089a08f980b2bb324cf107ca371e5d8fb5b4,2025-09-17T14:53:16.530000 CVE-2025-7894,0,0,26bf2e5b13121d7724d1e19ee450996eb342db3fa451e522c766be49f8c58122,2025-09-17T14:41:38.970000 -CVE-2025-7895,0,0,e3a41cc7e3443c59e75c7a652c74382fb5c8b282258d756bb56cb8a2cbba5528,2025-07-22T13:06:07.260000 -CVE-2025-7896,0,0,aa55c65606e552e3ccde14586c0c3456133db4a9703e438faf114cdb20cadd50,2025-07-22T13:06:07.260000 -CVE-2025-7897,0,0,bdf6b68cd8841930bab6353abbe72e34fb61c4e25ff46f5bf48a03b3464aad01,2025-07-22T13:06:07.260000 +CVE-2025-7895,0,1,bf3a9640c5c12877620a39168b99a0af3eed3eceab4a72c9bc369d4b0b872745,2025-11-20T21:25:14.680000 +CVE-2025-7896,0,1,d1ce5facf4313718da3dc5585004b081c836b52b8a032987b700343899c58672,2025-11-20T21:21:59.963000 +CVE-2025-7897,0,1,d9858dbf974ce77a21ac4a02484b545773faf10f0964b9aa4cd0be13fd95e035,2025-11-20T21:20:09.203000 CVE-2025-7898,0,0,2518a0c95e63a8d94f5910a5df48c101a3b112ac3fb284d58601df295ec716e9,2025-08-05T20:59:15.073000 CVE-2025-7899,0,0,cab921a673234878249ec0126f464ec0ee1edef5cf8cf267c912c3bf3d834b67,2025-07-22T13:05:40.573000 CVE-2025-7900,0,0,e903bd05872e1325098492684c3333ee03ad1fd65f3c168ce5a6755ce4c84bb5,2025-10-07T20:32:46.950000 @@ -318019,7 +318030,7 @@ CVE-2025-8937,0,0,384ae0b72c6a2db8247f6c3f11100d7451d1560cef23421535345058e10a00 CVE-2025-8938,0,0,147a49e54d3fe3156099165e28773ca5015808eead683683aa44637d91e69de9,2025-10-03T18:40:58.437000 CVE-2025-8939,0,0,5adc9c56ae47df76cb5be5dbefc2ea78319d726fa6c3a661d331c80929b47581,2025-08-19T18:35:22.420000 CVE-2025-8940,0,0,89d13362d11f7583e0a40f5d1c64bdbc1623d4d617435f03e507034d3b52e5b6,2025-08-19T18:42:24.900000 -CVE-2025-8941,0,0,ba8ec2e24357a07410c04e3676ac902b4ed3aae7c068ba1d60450e873accdf4d,2025-11-06T22:15:44.947000 +CVE-2025-8941,0,1,9e5d1710b01864d9b6df62f3746a3ba32d0e9df3f2ba09d67080085acc511579,2025-11-20T21:16:08.110000 CVE-2025-8942,0,0,37a00ad02dab2cd2558e0fcf5cc251c02bd64ea6aa1f6eca760aa0bb7ce32da7,2025-09-22T18:15:47.370000 CVE-2025-8943,0,0,70e0c8d4b89754f06940e5ed8f0d5ef4d10e018683440ae2a7a4b4d1a9e76e2b,2025-09-23T15:23:05.797000 CVE-2025-8944,0,0,9cfff69e3a02e284559aa1750bf8563639871f150bc30aff65fde87f12d05695,2025-09-05T17:47:10.303000