admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:20:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-10-24T18:00:11.277118+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-10-24 18:03:58 +00:00
1 parent 168cb07954
commit aee85668b5
65 files changed
+2299 -410
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2020/CVE-2020-16xx/CVE-2020-1631.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2020-1631",
"sourceIdentifier": "[email protected]",
"published": "2020-05-04T10:15:10.890",
"lastModified": "2025-10-22T00:17:02.853",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:39:59.647",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -1530,7 +1530,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1631",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2021/CVE-2021-437xx/CVE-2021-43768.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-43768",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T14:15:37.520",
"lastModified": "2025-10-24T14:15:37.520",
"lastModified": "2025-10-24T17:15:40.777",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://hackerone.com/reports/895316",
CVE-2022/CVE-2022-45xx/CVE-2022-4533.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-4533",
"sourceIdentifier": "[email protected]",
"published": "2024-09-19T04:15:05.860",
"lastModified": "2024-09-25T18:53:27.377",
"lastModified": "2025-10-24T17:30:50.877",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -70,9 +70,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:felixmoira:limit_login_attempts_plus:*:*:*:*:*:wordpress:*:*",
"criteria": "cpe:2.3:a:devfelixmoira:limit_login_attempts_plus:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.1.0",
"matchCriteriaId": "C319744C-DE20-4C80-A83A-086D96A8BAEE"
"matchCriteriaId": "D774B0B3-61FE-49CF-AF02-E228E497B6EE"
}
]
}
CVE-2023/CVE-2023-368xx/CVE-2023-36844.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-36844",
"sourceIdentifier": "[email protected]",
"published": "2023-08-17T20:15:10.267",
"lastModified": "2025-10-21T23:16:05.567",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:44:08.650",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -925,7 +925,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36844",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-368xx/CVE-2023-36845.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-36845",
"sourceIdentifier": "[email protected]",
"published": "2023-08-17T20:15:10.360",
"lastModified": "2025-10-21T23:16:05.743",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:43:55.083",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -743,7 +743,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36845",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-368xx/CVE-2023-36846.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-36846",
"sourceIdentifier": "[email protected]",
"published": "2023-08-17T20:15:10.457",
"lastModified": "2025-10-21T23:16:05.913",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:43:49.483",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -687,7 +687,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-368xx/CVE-2023-36847.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-36847",
"sourceIdentifier": "[email protected]",
"published": "2023-08-17T20:15:10.553",
"lastModified": "2025-10-21T23:16:06.067",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:43:45.763",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -862,7 +862,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36847",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-368xx/CVE-2023-36851.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-36851",
"sourceIdentifier": "[email protected]",
"published": "2023-09-27T15:18:54.877",
"lastModified": "2025-10-21T23:16:06.237",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:42:06.123",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -886,7 +886,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36851",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-498xx/CVE-2023-49897.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-49897",
"sourceIdentifier": "[email protected]",
"published": "2023-12-06T07:15:41.883",
"lastModified": "2025-10-21T23:16:14.460",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T17:01:03.800",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -208,7 +208,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-71xx/CVE-2023-7101.json
+14 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7101",
"sourceIdentifier": "[email protected]",
"published": "2023-12-24T22:15:07.983",
"lastModified": "2025-10-21T23:16:17.347",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:39:52.043",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -205,14 +205,16 @@
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/",
"source": "[email protected]",
"tags": [
"Mailing List"
"Mailing List",
"Broken Link"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/",
"source": "[email protected]",
"tags": [
"Mailing List"
"Mailing List",
"Broken Link"
]
},
{
@@ -288,14 +290,16 @@
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/IFEHKULQRVXHIV7XXK2RGD4VQN6Y4CV5/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
"Mailing List",
"Broken Link"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/M2FIWDHRYTAAQLGM6AFOZVM7AFZ4H2ZR/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
"Mailing List",
"Broken Link"
]
},
{
@@ -307,7 +311,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7101",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-119xx/CVE-2025-11905.json
+76 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11905",
"sourceIdentifier": "[email protected]",
"published": "2025-10-17T16:15:37.053",
"lastModified": "2025-10-21T19:31:50.020",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-24T17:15:50.447",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,76 @@
"value": "CWE-94"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:chancms:chancms:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.3.2",
"matchCriteriaId": "0B10CAA4-5D61-42E1-B3FF-BAC534A355B2"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#555",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#cmsgathergetarticle",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.328915",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.328915",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.671338",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12176.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-12176",
"sourceIdentifier": "a0340c66-c385-4f8b-991b-3d05f6fd5220",
"published": "2025-10-24T16:15:36.617",
"lastModified": "2025-10-24T16:15:36.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "a0340c66-c385-4f8b-991b-3d05f6fd5220",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "a0340c66-c385-4f8b-991b-3d05f6fd5220",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1242"
}
]
}
],
"references": [
{
"url": "https://azure-access.com/security-advisories",
"source": "a0340c66-c385-4f8b-991b-3d05f6fd5220"
}
]
}
CVE-2025/CVE-2025-215xx/CVE-2025-21590.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21590",
"sourceIdentifier": "[email protected]",
"published": "2025-03-12T14:15:15.447",
"lastModified": "2025-10-21T23:16:49.837",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T16:44:13.830",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -539,7 +539,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21590",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-425xx/CVE-2025-42599.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-42599",
"sourceIdentifier": "[email protected]",
"published": "2025-04-18T04:15:30.557",
"lastModified": "2025-10-21T23:17:03.057",
"vulnStatus": "Modified",
"lastModified": "2025-10-24T17:00:32.840",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -112,7 +112,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-42599",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-461xx/CVE-2025-46183.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46183",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T14:15:41.647",
"lastModified": "2025-10-24T14:15:41.647",
"lastModified": "2025-10-24T17:15:41.480",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources. If an attacker provides a specially crafted .ser file, deserialization may result in unintended code execution or other malicious behavior on the target system."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://github.com/hacktimepro/vulnerabilities/blob/main/Disclosure_CVE-2025-46183_pgcodekeeper.md",
CVE-2025/CVE-2025-461xx/CVE-2025-46185.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46185",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T14:15:42.193",
"lastModified": "2025-10-24T14:15:42.193",
"lastModified": "2025-10-24T17:15:41.623",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensitive information via the plaintext storage of passwords and usernames."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"references": [
{
"url": "https://github.com/hacktimepro/vulnerabilities/blob/main/Disclosure_CVE-2025-46185_pgcodekeeper.md",
CVE-2025/CVE-2025-478xx/CVE-2025-47818.json
+56 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-47818",
"sourceIdentifier": "[email protected]",
"published": "2025-06-27T02:15:23.570",
"lastModified": "2025-09-02T17:15:34.697",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:58:24.400",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.5,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
@@ -51,22 +71,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:flocksafety:gunshot_detection_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.3",
"matchCriteriaId": "DE010AD1-39FD-4932-9410-F5FE99688150"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/06/19/bird-hunting-season-security-research-on-flock-safety-anti-crime-systems/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/2025/06/19/plucked-and-rooted-device-1-debug-shell-on-flock-safetys-raven-gunshot-detection-system/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/06/flock-safety-researcher-summary.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/articles/gunshot-detection-and-license-plate-reader-security-alert",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-478xx/CVE-2025-47819.json
+56 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-47819",
"sourceIdentifier": "[email protected]",
"published": "2025-06-27T02:15:23.757",
"lastModified": "2025-09-02T17:15:34.863",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:53:47.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.9,
"impactScore": 5.9
}
]
},
@@ -51,22 +71,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:flocksafety:gunshot_detection_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.3",
"matchCriteriaId": "DE010AD1-39FD-4932-9410-F5FE99688150"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/06/19/bird-hunting-season-security-research-on-flock-safety-anti-crime-systems/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/2025/06/19/plucked-and-rooted-device-1-debug-shell-on-flock-safetys-raven-gunshot-detection-system/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/06/flock-safety-researcher-summary.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/articles/gunshot-detection-and-license-plate-reader-security-alert",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-478xx/CVE-2025-47820.json
+56 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-47820",
"sourceIdentifier": "[email protected]",
"published": "2025-06-27T02:15:23.920",
"lastModified": "2025-09-02T17:15:35.013",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:47:57.817",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.5,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 2.4,
"baseSeverity": "LOW",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
}
]
},
@@ -51,22 +71,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:flocksafety:gunshot_detection_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.3",
"matchCriteriaId": "DE010AD1-39FD-4932-9410-F5FE99688150"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/06/19/bird-hunting-season-security-research-on-flock-safety-anti-crime-systems/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/2025/06/19/plucked-and-rooted-device-1-debug-shell-on-flock-safetys-raven-gunshot-detection-system/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/06/flock-safety-researcher-summary.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/articles/gunshot-detection-and-license-plate-reader-security-alert",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-564xx/CVE-2025-56438.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-56438",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:39.137",
"lastModified": "2025-10-24T15:15:39.137",
"lastModified": "2025-10-24T16:15:45.670",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-345"
}
]
}
],
"references": [
{
"url": "http://nous.com",
CVE-2025/CVE-2025-579xx/CVE-2025-57923.json
+2 -6
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-57923",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T19:15:49.183",
"lastModified": "2025-10-24T04:15:54.060",
"lastModified": "2025-10-24T16:17:13.520",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An Insertion of Sensitive Information into Sent Data vulnerability in the Ideal Postcodes UK Address Postcode Validation WordPress plugin exposes the API key, allowing unauthorized third parties to retrieve and reuse the key across any domain. Since API keys are unrestricted by default, with the \u201cAllowed URLs\u201d field left empty upon creation of API key this can lead to unauthorized use and depletion of API credits.\n\nNote: the vulnerability is assessed based on the default configuration.\n\nThis issue affects UK Address Postcode Validation: from n/a through 3.9.2."
"value": "An Insertion of Sensitive Information into Sent Data vulnerability in the Ideal Postcodes UK Address Postcode Validation WordPress plugin exposes the API key, allowing unauthorized third parties to retrieve and reuse the key across any domain. Since API keys are unrestricted by default, with the \u201cAllowed URLs\u201d field left empty upon creation of API key this can lead to unauthorized use and depletion of API credits.Note: the vulnerability is assessed based on the default configuration.This issue affects UK Address Postcode Validation: from n/a through 3.9.2."
}
],
"metrics": {
@@ -51,10 +51,6 @@
{
"url": "https://patchstack.com/database/wordpress/plugin/uk-address-postcode-validation/vulnerability/wordpress-uk-address-postcode-validation-plugin-3-9-2-sensitive-data-exposure-vulnerability?_s_id=cve",
"source": "[email protected]"
},
{
"url": "https://web.archive.org/web/20250807222539/https://docs.ideal-postcodes.co.uk/docs/guides/api-key-secure",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-590xx/CVE-2025-59043.json
+36 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59043",
"sourceIdentifier": "[email protected]",
"published": "2025-10-17T16:15:38.763",
"lastModified": "2025-10-21T19:31:50.020",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-24T17:13:10.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,52 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:openbao:openbao:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.4.1",
"matchCriteriaId": "542C558D-BFC0-4CC6-B683-74E4DFB31A30"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/openbao/openbao/blob/788536bd3e10818a7b4fb00aac6affc23388e5a9/http/logical.go#L50",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/openbao/openbao/commit/d418f238bc99adc72c73109faf574cc2b672880c",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/openbao/openbao/pull/1756",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/openbao/openbao/security/advisories/GHSA-g46h-2rq9-gw5m",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59403.json
+37 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59403",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:05.530",
"lastModified": "2025-10-02T20:15:33.743",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:28:19.707",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:flocksafety:flock_safety:6.35.31:*:*:*:*:android:*:*",
"matchCriteriaId": "F724C2F3-8820-4EEA-9AB2-9CFA8AD32A35"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.flocksafety.com/products/license-plate-readers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59405.json
+37 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59405",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:06.243",
"lastModified": "2025-10-02T20:15:33.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:27:51.553",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:flocksafety:flock_safety:7.38.3:*:*:*:*:android:*:*",
"matchCriteriaId": "43976607-119F-4E37-8DB6-DF55D5C3F92C"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.flocksafety.com/products/license-plate-readers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59406.json
+37 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59406",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:06.880",
"lastModified": "2025-10-02T20:15:34.083",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:27:12.890",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:flocksafety:flock_safety:6.21.11:*:*:*:*:android:*:*",
"matchCriteriaId": "0CD8C06F-A79E-4CBE-80EF-7EB7CAB361C1"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.flocksafety.com/products/license-plate-readers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59407.json
+37 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59407",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:07.527",
"lastModified": "2025-10-02T20:15:34.257",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:26:24.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:flocksafety:flock_safety:6.35.33:*:*:*:*:android:*:*",
"matchCriteriaId": "B5389583-C52F-412F-9F56-B18C52486ABC"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.flocksafety.com/products/license-plate-readers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-594xx/CVE-2025-59409.json
+37 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59409",
"sourceIdentifier": "[email protected]",
"published": "2025-10-02T17:16:08.177",
"lastModified": "2025-10-02T20:15:34.427",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:23:36.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,22 +47,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:flocksafety:license_plate_reader_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19332436-F7BB-48C5-A7F2-C3BECD0D78FA"
}
]
}
]
}
],
"references": [
{
"url": "https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.flocksafety.com/products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.flocksafety.com/products/license-plate-readers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60547.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60547",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:17:17.367",
"lastModified": "2025-10-24T16:17:17.367",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/02-buffer%20overflow-formSetWAN_Wizard7.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60548.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60548",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:17:45.117",
"lastModified": "2025-10-24T16:17:45.117",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/01-buffer%20overflow-formLanSetupRouterSettings.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60549.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60549",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:18:13.877",
"lastModified": "2025-10-24T16:18:13.877",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/05-buffer%20overflow-formAutoDetecWAN_wizard4.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60550.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60550",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:18:41.953",
"lastModified": "2025-10-24T16:18:41.953",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/04-buffer%20overflow-formEasySetTimezone.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60551.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60551",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:19:09.983",
"lastModified": "2025-10-24T16:19:09.983",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/07-buffer%20overflow-formDeviceReboot.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60552.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60552",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:19:38.860",
"lastModified": "2025-10-24T16:19:38.860",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/06-buffer%20overflow-formTcpipSetup.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60553.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60553",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:20:07.420",
"lastModified": "2025-10-24T16:20:07.420",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/03-buffer%20overflow-formSetWAN_Wizard52.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60554.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60554",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:20:35.910",
"lastModified": "2025-10-24T16:20:35.910",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/08-buffer%20overflow-formSetEnableWizard.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60555.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60555",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:21:04.720",
"lastModified": "2025-10-24T16:21:04.720",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/10-buffer%20overflow-formSetWizardSelectMode.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60556.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60556",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:21:33.277",
"lastModified": "2025-10-24T16:21:33.277",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/09-buffer%20overflow-formSetWizard1.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60557.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60557",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:22:01.570",
"lastModified": "2025-10-24T16:22:01.570",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/13-buffer%20overflow-formSetEasy_Wizard.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60558.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60558",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:22:31.100",
"lastModified": "2025-10-24T16:22:31.100",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/16-buffer%20overflow-formVirtualServ.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60559.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60559",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:22:58.917",
"lastModified": "2025-10-24T16:22:58.917",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/19-buffer%20overflow-formSetDomainFilter.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60561.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60561",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:23:27.403",
"lastModified": "2025-10-24T16:23:27.403",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/12-buffer%20overflow-formSetEmail.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60562.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60562",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:23:55.680",
"lastModified": "2025-10-24T16:23:55.680",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/15-buffer%20overflow-formWlSiteSurvey.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60563.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60563",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:24:25.743",
"lastModified": "2025-10-24T16:24:25.743",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/18-buffer%20overflow-formSetPortTr.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60564.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60564",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:24:54.300",
"lastModified": "2025-10-24T16:24:54.300",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/14-buffer%20overflow-formSetLog.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60565.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60565",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:25:25.503",
"lastModified": "2025-10-24T17:15:41.770",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/17-buffer%20overflow-formSchedule.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60566.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-60566",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:25:49.253",
"lastModified": "2025-10-24T17:15:41.907",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/20-buffer%20overflow-formSetMACFilter.md",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-605xx/CVE-2025-60568.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60568",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:39.790",
"lastModified": "2025-10-24T15:15:39.790",
"lastModified": "2025-10-24T17:15:42.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/23-buffer%20overflow-formAdvFirewall.md",
CVE-2025/CVE-2025-605xx/CVE-2025-60569.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60569",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:39.933",
"lastModified": "2025-10-24T15:15:39.933",
"lastModified": "2025-10-24T17:15:42.193",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/25-buffer%20overflow-formSetRoute.md",
CVE-2025/CVE-2025-605xx/CVE-2025-60570.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60570",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.040",
"lastModified": "2025-10-24T15:15:40.040",
"lastModified": "2025-10-24T17:15:42.333",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/26-buffer%20overflow-formLogDnsquery.md",
CVE-2025/CVE-2025-605xx/CVE-2025-60571.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60571",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.187",
"lastModified": "2025-10-24T15:15:40.187",
"lastModified": "2025-10-24T17:15:42.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/24-buffer%20overflow-formSetQoS.md",
CVE-2025/CVE-2025-605xx/CVE-2025-60572.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60572",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.300",
"lastModified": "2025-10-24T15:15:40.300",
"lastModified": "2025-10-24T17:15:42.620",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/22-buffer%20overflow-formAdvNetwork.md",
CVE-2025/CVE-2025-608xx/CVE-2025-60801.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-60801",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:26:09.540",
"lastModified": "2025-10-24T16:26:09.540",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://fushuling.com/index.php/2025/08/17/%e7%bb%95%e8%bf%87%e8%a1%a5%e4%b8%81%ef%bc%8c%e5%86%8d%e6%ac%a1%e5%ae%9e%e7%8e%b0%e5%8d%8e%e5%a4%8ferp%e6%9c%aa%e6%8e%88%e6%9d%83rce%e5%b7%b2%e4%bf%ae%e5%a4%8d/",
"source": "[email protected]"
},
{
"url": "https://github.com/jishenghua/jshERP/issues/132",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-608xx/CVE-2025-60803.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-60803",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:26:38.883",
"lastModified": "2025-10-24T16:26:38.883",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the component /api/aaa;/../register."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Antabot/White-Jotter/issues/162",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-609xx/CVE-2025-60936.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60936",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.440",
"lastModified": "2025-10-24T15:15:40.440",
"lastModified": "2025-10-24T17:15:42.757",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicious JavaScript code that executes when administrators view the application logs."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/emoncms/emoncms/issues/1940",
CVE-2025/CVE-2025-609xx/CVE-2025-60938.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60938",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.577",
"lastModified": "2025-10-24T15:15:40.577",
"lastModified": "2025-10-24T16:26:59.470",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baud_rate, core, and autoreset within the /admin/upload-custom-firmware endpoint."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"references": [
{
"url": "https://github.com/emoncms/emoncms/issues/1941",
CVE-2025/CVE-2025-614xx/CVE-2025-61413.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-61413",
"sourceIdentifier": "[email protected]",
"published": "2025-10-23T18:16:23.683",
"lastModified": "2025-10-23T21:15:49.540",
"lastModified": "2025-10-24T16:27:22.563",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks."
"value": "A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks."
}
],
"metrics": {
CVE-2025/CVE-2025-614xx/CVE-2025-61430.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-61430",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T15:15:40.703",
"lastModified": "2025-10-24T15:15:40.703",
"lastModified": "2025-10-24T17:15:42.900",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed (len differs from actual packet len), and due to a concurrency/buffering issue, even when the lengths match. A length prefix that is smaller than the actual packet size increases information leakage. In summary, this vulnerability allows an attacker to see DNS queries of other clients."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-350"
}
]
}
],
"references": [
{
"url": "https://ma-personal.notion.site/simpledns-vuln?source=copy_link",
CVE-2025/CVE-2025-621xx/CVE-2025-62171.json
+56 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62171",
"sourceIdentifier": "[email protected]",
"published": "2025-10-17T17:15:49.197",
"lastModified": "2025-10-21T19:31:50.020",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-24T17:06:27.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -47,14 +67,46 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.13-32",
"matchCriteriaId": "EB78F6C2-7C33-4A0A-A093-6A26A8B9C3BF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.0.0-0",
"versionEndExcluding": "7.1.2-7",
"matchCriteriaId": "5F3152BE-0219-45B9-940F-86EED0E01510"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-624xx/CVE-2025-62419.json
+50 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62419",
"sourceIdentifier": "[email protected]",
"published": "2025-10-17T18:15:37.310",
"lastModified": "2025-10-21T19:31:50.020",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-24T16:56:36.127",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,14 +91,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.10.14",
"matchCriteriaId": "A61426A2-1A80-4988-BB10-6ACCC38166C6"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/dataease/dataease/security/advisories/GHSA-x4x9-mjcf-99r9",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-627xx/CVE-2025-62714.json
+98
View File
@@ -0,0 +1,98 @@
{
"id": "CVE-2025-62714",
"sourceIdentifier": "[email protected]",
"published": "2025-10-24T16:28:01.980",
"lastModified": "2025-10-24T16:28:01.980",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints (e.g., /api/v1/secret, /api/v1/service) did not enforce authentication, allowing unauthenticated users to access sensitive cluster information such as Secrets and Services directly. Although the web UI required a valid JWT for access, the API itself remained exposed to direct requests without any authentication checks. Any user or entity with network access to the Karmada Dashboard service could exploit this vulnerability to retrieve sensitive data."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://github.com/karmada-io/dashboard/commit/8457b8bb87725e2371a638ca5a255fd2895c70f1",
"source": "[email protected]"
},
{
"url": "https://github.com/karmada-io/dashboard/commit/d2d04909f25e96b4c20fa6b636c398bd1636ee06",
"source": "[email protected]"
},
{
"url": "https://github.com/karmada-io/dashboard/pull/271",
"source": "[email protected]"
},
{
"url": "https://github.com/karmada-io/dashboard/pull/280",
"source": "[email protected]"
},
{
"url": "https://github.com/karmada-io/dashboard/releases/tag/v0.2.0",
"source": "[email protected]"
},
{
"url": "https://github.com/karmada-io/dashboard/security/advisories/GHSA-5qjg-9mjh-4r92",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-78xx/CVE-2025-7850.json
+6 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-7850",
"sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630",
"published": "2025-10-21T01:15:37.193",
"lastModified": "2025-10-24T13:03:32.373",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-24T17:15:43.243",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -530,6 +530,10 @@
"Vendor Advisory"
]
},
{
"url": "https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630"
},
{
"url": "https://www.omadanetworks.com/us/business-networking/all-omada-router/",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630",
CVE-2025/CVE-2025-78xx/CVE-2025-7851.json
+6 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-7851",
"sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630",
"published": "2025-10-21T01:15:37.330",
"lastModified": "2025-10-24T13:03:27.567",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-24T17:15:43.390",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -530,6 +530,10 @@
"Vendor Advisory"
]
},
{
"url": "https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630"
},
{
"url": "https://www.omadanetworks.com/us/business-networking/all-omada-router/",
"source": "f23511db-6c3e-4e32-a477-6aa17d310630",
CVE-2025/CVE-2025-90xx/CVE-2025-9068.json
+7 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-9068",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T13:15:40.093",
"lastModified": "2025-10-20T20:11:50.123",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-24T17:27:13.030",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -62,19 +62,19 @@
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
README.md
+53 -47
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-24T16:00:11.130144+00:00
2025-10-24T18:00:11.277118+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-24T15:56:16.570000+00:00
2025-10-24T17:58:24.400000+00:00
```
### Last Data Feed Release
@@ -33,61 +33,67 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
315487
315510
```
### CVEs added in the last Commit
Recently added CVEs: `17`
Recently added CVEs: `23`
- [CVE-2021-43768](CVE-2021/CVE-2021-437xx/CVE-2021-43768.json) (`2025-10-24T14:15:37.520`)
- [CVE-2025-11145](CVE-2025/CVE-2025-111xx/CVE-2025-11145.json) (`2025-10-24T15:15:37.783`)
- [CVE-2025-43994](CVE-2025/CVE-2025-439xx/CVE-2025-43994.json) (`2025-10-24T15:15:38.187`)
- [CVE-2025-43995](CVE-2025/CVE-2025-439xx/CVE-2025-43995.json) (`2025-10-24T15:15:38.380`)
- [CVE-2025-46183](CVE-2025/CVE-2025-461xx/CVE-2025-46183.json) (`2025-10-24T14:15:41.647`)
- [CVE-2025-46185](CVE-2025/CVE-2025-461xx/CVE-2025-46185.json) (`2025-10-24T14:15:42.193`)
- [CVE-2025-46425](CVE-2025/CVE-2025-464xx/CVE-2025-46425.json) (`2025-10-24T14:15:42.337`)
- [CVE-2025-56438](CVE-2025/CVE-2025-564xx/CVE-2025-56438.json) (`2025-10-24T15:15:39.137`)
- [CVE-2025-60568](CVE-2025/CVE-2025-605xx/CVE-2025-60568.json) (`2025-10-24T15:15:39.790`)
- [CVE-2025-60569](CVE-2025/CVE-2025-605xx/CVE-2025-60569.json) (`2025-10-24T15:15:39.933`)
- [CVE-2025-60570](CVE-2025/CVE-2025-605xx/CVE-2025-60570.json) (`2025-10-24T15:15:40.040`)
- [CVE-2025-60571](CVE-2025/CVE-2025-605xx/CVE-2025-60571.json) (`2025-10-24T15:15:40.187`)
- [CVE-2025-60572](CVE-2025/CVE-2025-605xx/CVE-2025-60572.json) (`2025-10-24T15:15:40.300`)
- [CVE-2025-60936](CVE-2025/CVE-2025-609xx/CVE-2025-60936.json) (`2025-10-24T15:15:40.440`)
- [CVE-2025-60938](CVE-2025/CVE-2025-609xx/CVE-2025-60938.json) (`2025-10-24T15:15:40.577`)
- [CVE-2025-61430](CVE-2025/CVE-2025-614xx/CVE-2025-61430.json) (`2025-10-24T15:15:40.703`)
- [CVE-2025-8536](CVE-2025/CVE-2025-85xx/CVE-2025-8536.json) (`2025-10-24T15:15:41.410`)
- [CVE-2025-12176](CVE-2025/CVE-2025-121xx/CVE-2025-12176.json) (`2025-10-24T16:15:36.617`)
- [CVE-2025-60547](CVE-2025/CVE-2025-605xx/CVE-2025-60547.json) (`2025-10-24T16:17:17.367`)
- [CVE-2025-60548](CVE-2025/CVE-2025-605xx/CVE-2025-60548.json) (`2025-10-24T16:17:45.117`)
- [CVE-2025-60549](CVE-2025/CVE-2025-605xx/CVE-2025-60549.json) (`2025-10-24T16:18:13.877`)
- [CVE-2025-60550](CVE-2025/CVE-2025-605xx/CVE-2025-60550.json) (`2025-10-24T16:18:41.953`)
- [CVE-2025-60551](CVE-2025/CVE-2025-605xx/CVE-2025-60551.json) (`2025-10-24T16:19:09.983`)
- [CVE-2025-60552](CVE-2025/CVE-2025-605xx/CVE-2025-60552.json) (`2025-10-24T16:19:38.860`)
- [CVE-2025-60553](CVE-2025/CVE-2025-605xx/CVE-2025-60553.json) (`2025-10-24T16:20:07.420`)
- [CVE-2025-60554](CVE-2025/CVE-2025-605xx/CVE-2025-60554.json) (`2025-10-24T16:20:35.910`)
- [CVE-2025-60555](CVE-2025/CVE-2025-605xx/CVE-2025-60555.json) (`2025-10-24T16:21:04.720`)
- [CVE-2025-60556](CVE-2025/CVE-2025-605xx/CVE-2025-60556.json) (`2025-10-24T16:21:33.277`)
- [CVE-2025-60557](CVE-2025/CVE-2025-605xx/CVE-2025-60557.json) (`2025-10-24T16:22:01.570`)
- [CVE-2025-60558](CVE-2025/CVE-2025-605xx/CVE-2025-60558.json) (`2025-10-24T16:22:31.100`)
- [CVE-2025-60559](CVE-2025/CVE-2025-605xx/CVE-2025-60559.json) (`2025-10-24T16:22:58.917`)
- [CVE-2025-60561](CVE-2025/CVE-2025-605xx/CVE-2025-60561.json) (`2025-10-24T16:23:27.403`)
- [CVE-2025-60562](CVE-2025/CVE-2025-605xx/CVE-2025-60562.json) (`2025-10-24T16:23:55.680`)
- [CVE-2025-60563](CVE-2025/CVE-2025-605xx/CVE-2025-60563.json) (`2025-10-24T16:24:25.743`)
- [CVE-2025-60564](CVE-2025/CVE-2025-605xx/CVE-2025-60564.json) (`2025-10-24T16:24:54.300`)
- [CVE-2025-60565](CVE-2025/CVE-2025-605xx/CVE-2025-60565.json) (`2025-10-24T16:25:25.503`)
- [CVE-2025-60566](CVE-2025/CVE-2025-605xx/CVE-2025-60566.json) (`2025-10-24T16:25:49.253`)
- [CVE-2025-60801](CVE-2025/CVE-2025-608xx/CVE-2025-60801.json) (`2025-10-24T16:26:09.540`)
- [CVE-2025-60803](CVE-2025/CVE-2025-608xx/CVE-2025-60803.json) (`2025-10-24T16:26:38.883`)
- [CVE-2025-62714](CVE-2025/CVE-2025-627xx/CVE-2025-62714.json) (`2025-10-24T16:28:01.980`)
### CVEs modified in the last Commit
Recently modified CVEs: `168`
Recently modified CVEs: `40`
- [CVE-2025-55681](CVE-2025/CVE-2025-556xx/CVE-2025-55681.json) (`2025-10-24T15:07:56.483`)
- [CVE-2025-55682](CVE-2025/CVE-2025-556xx/CVE-2025-55682.json) (`2025-10-24T14:57:46.987`)
- [CVE-2025-58764](CVE-2025/CVE-2025-587xx/CVE-2025-58764.json) (`2025-10-24T14:46:37.453`)
- [CVE-2025-60336](CVE-2025/CVE-2025-603xx/CVE-2025-60336.json) (`2025-10-24T14:20:06.430`)
- [CVE-2025-60339](CVE-2025/CVE-2025-603xx/CVE-2025-60339.json) (`2025-10-24T14:19:58.727`)
- [CVE-2025-61749](CVE-2025/CVE-2025-617xx/CVE-2025-61749.json) (`2025-10-24T14:36:36.430`)
- [CVE-2025-61750](CVE-2025/CVE-2025-617xx/CVE-2025-61750.json) (`2025-10-24T14:36:30.973`)
- [CVE-2025-61751](CVE-2025/CVE-2025-617xx/CVE-2025-61751.json) (`2025-10-24T14:36:24.463`)
- [CVE-2025-61752](CVE-2025/CVE-2025-617xx/CVE-2025-61752.json) (`2025-10-24T14:36:08.693`)
- [CVE-2025-61753](CVE-2025/CVE-2025-617xx/CVE-2025-61753.json) (`2025-10-24T14:36:15.127`)
- [CVE-2025-61754](CVE-2025/CVE-2025-617xx/CVE-2025-61754.json) (`2025-10-24T14:36:01.160`)
- [CVE-2025-61757](CVE-2025/CVE-2025-617xx/CVE-2025-61757.json) (`2025-10-24T14:25:45.430`)
- [CVE-2025-61758](CVE-2025/CVE-2025-617xx/CVE-2025-61758.json) (`2025-10-24T14:25:51.313`)
- [CVE-2025-61761](CVE-2025/CVE-2025-617xx/CVE-2025-61761.json) (`2025-10-24T14:25:59.213`)
- [CVE-2025-61762](CVE-2025/CVE-2025-617xx/CVE-2025-61762.json) (`2025-10-24T14:27:22.487`)
- [CVE-2025-61763](CVE-2025/CVE-2025-617xx/CVE-2025-61763.json) (`2025-10-24T14:27:30.273`)
- [CVE-2025-61764](CVE-2025/CVE-2025-617xx/CVE-2025-61764.json) (`2025-10-24T14:27:36.910`)
- [CVE-2025-61881](CVE-2025/CVE-2025-618xx/CVE-2025-61881.json) (`2025-10-24T14:27:46.203`)
- [CVE-2025-62398](CVE-2025/CVE-2025-623xx/CVE-2025-62398.json) (`2025-10-24T15:15:41.027`)
- [CVE-2025-62420](CVE-2025/CVE-2025-624xx/CVE-2025-62420.json) (`2025-10-24T15:56:16.570`)
- [CVE-2025-62597](CVE-2025/CVE-2025-625xx/CVE-2025-62597.json) (`2025-10-24T15:43:55.920`)
- [CVE-2025-6554](CVE-2025/CVE-2025-65xx/CVE-2025-6554.json) (`2025-10-24T14:11:20.707`)
- [CVE-2025-6558](CVE-2025/CVE-2025-65xx/CVE-2025-6558.json) (`2025-10-24T14:11:13.250`)
- [CVE-2025-9339](CVE-2025/CVE-2025-93xx/CVE-2025-9339.json) (`2025-10-24T15:15:42.663`)
- [CVE-2025-9978](CVE-2025/CVE-2025-99xx/CVE-2025-9978.json) (`2025-10-24T14:15:55.823`)
- [CVE-2025-47818](CVE-2025/CVE-2025-478xx/CVE-2025-47818.json) (`2025-10-24T17:58:24.400`)
- [CVE-2025-47819](CVE-2025/CVE-2025-478xx/CVE-2025-47819.json) (`2025-10-24T17:53:47.230`)
- [CVE-2025-47820](CVE-2025/CVE-2025-478xx/CVE-2025-47820.json) (`2025-10-24T17:47:57.817`)
- [CVE-2025-56438](CVE-2025/CVE-2025-564xx/CVE-2025-56438.json) (`2025-10-24T16:15:45.670`)
- [CVE-2025-57923](CVE-2025/CVE-2025-579xx/CVE-2025-57923.json) (`2025-10-24T16:17:13.520`)
- [CVE-2025-59043](CVE-2025/CVE-2025-590xx/CVE-2025-59043.json) (`2025-10-24T17:13:10.880`)
- [CVE-2025-59403](CVE-2025/CVE-2025-594xx/CVE-2025-59403.json) (`2025-10-24T17:28:19.707`)
- [CVE-2025-59405](CVE-2025/CVE-2025-594xx/CVE-2025-59405.json) (`2025-10-24T17:27:51.553`)
- [CVE-2025-59406](CVE-2025/CVE-2025-594xx/CVE-2025-59406.json) (`2025-10-24T17:27:12.890`)
- [CVE-2025-59407](CVE-2025/CVE-2025-594xx/CVE-2025-59407.json) (`2025-10-24T17:26:24.580`)
- [CVE-2025-59409](CVE-2025/CVE-2025-594xx/CVE-2025-59409.json) (`2025-10-24T17:23:36.873`)
- [CVE-2025-60568](CVE-2025/CVE-2025-605xx/CVE-2025-60568.json) (`2025-10-24T17:15:42.053`)
- [CVE-2025-60569](CVE-2025/CVE-2025-605xx/CVE-2025-60569.json) (`2025-10-24T17:15:42.193`)
- [CVE-2025-60570](CVE-2025/CVE-2025-605xx/CVE-2025-60570.json) (`2025-10-24T17:15:42.333`)
- [CVE-2025-60571](CVE-2025/CVE-2025-605xx/CVE-2025-60571.json) (`2025-10-24T17:15:42.473`)
- [CVE-2025-60572](CVE-2025/CVE-2025-605xx/CVE-2025-60572.json) (`2025-10-24T17:15:42.620`)
- [CVE-2025-60936](CVE-2025/CVE-2025-609xx/CVE-2025-60936.json) (`2025-10-24T17:15:42.757`)
- [CVE-2025-60938](CVE-2025/CVE-2025-609xx/CVE-2025-60938.json) (`2025-10-24T16:26:59.470`)
- [CVE-2025-61413](CVE-2025/CVE-2025-614xx/CVE-2025-61413.json) (`2025-10-24T16:27:22.563`)
- [CVE-2025-61430](CVE-2025/CVE-2025-614xx/CVE-2025-61430.json) (`2025-10-24T17:15:42.900`)
- [CVE-2025-62171](CVE-2025/CVE-2025-621xx/CVE-2025-62171.json) (`2025-10-24T17:06:27.163`)
- [CVE-2025-62419](CVE-2025/CVE-2025-624xx/CVE-2025-62419.json) (`2025-10-24T16:56:36.127`)
- [CVE-2025-7850](CVE-2025/CVE-2025-78xx/CVE-2025-7850.json) (`2025-10-24T17:15:43.243`)
- [CVE-2025-7851](CVE-2025/CVE-2025-78xx/CVE-2025-7851.json) (`2025-10-24T17:15:43.390`)
- [CVE-2025-9068](CVE-2025/CVE-2025-90xx/CVE-2025-9068.json) (`2025-10-24T17:27:13.030`)
## Download and Usage
_state.csv
+236 -213
View File
File diff suppressed because it is too large. Load diff